It's not possible to have a wildcard like this, is it? - Cloudflare Developers

© 2026 Hedgehog Software, LLC

More

Communities Docs About Terms Privacy

Erisa

E

Erisa•7/6/23, 2:33 PM

I believe not

Walshy

W

Walshy•7/6/23, 2:34 PM

It is not

dave

D

daveOP•7/6/23, 2:37 PM

dang

dave

D

daveOP•7/6/23, 2:37 PM

wish we had Workers for DNS replies

dave

Ddave It's not possible to have a wildcard like this, is it?

digitalpoint

D

digitalpoint•7/6/23, 3:53 PM

FWIW, something.*.example.comsomething.*.example.com would never be a valid wildcard in any DNS system. A wildcard needs to be the leftmost part of the record:

https://en.m.wikipedia.org/wiki/Wildcard_DNS_record

Wildcard DNS record

A wildcard DNS record is a record in a DNS zone that will match requests for non-existent domain names. A wildcard DNS record is specified by using a * as the leftmost label (part) of a domain name, e.g. *.example.com. The exact rules for when a wildcard will match are specified in RFC 1034, but the rules are neither intuitive nor clearly specif...

Unsmart

U

Unsmart•7/6/23, 3:56 PM

It would be valid on bunny since they have scriptable dns LUL

LUL

Unsmart

U

Unsmart•7/6/23, 3:57 PM

scriptable dns is interesting not sure how many people would actually benefit from it

Unsmart

UUnsmart scriptable dns is interesting not sure how many people would actually benefit fr...

Hello, I’m Allie!

H

Hello, I’m Allie!•7/6/23, 4:07 PM

DNS load balancing would be a quick-and-dirty use for it.

Hello, I’m Allie!

H

Hello, I’m Allie!•7/6/23, 4:07 PM

Would be cool if you could define an origin without adding a DNS record.

digitalpoint

Ddigitalpoint FWIW, `something.*.example.com` would never be a valid wildcard in any DNS syste...

sathoro

S

sathoro•7/6/23, 4:08 PM

why not? you'd just need the DNS server to handle it properly

Chaika

C

Chaika•7/6/23, 4:13 PM

I think the spec/rfc itself says that is how wildcards work, cf's blog on it and that article imply that, would have to read to be 100% sure

Chaika

C

Chaika•7/6/23, 4:14 PM

you could make your own non-spec complaint wildcards if you wanted, but probably not likely a dns server would do that for you

Chaika

C

Chaika•7/6/23, 4:15 PM

don't think you could make a certificate match that though without issuing one per somethingsomething

Unsmart

U

Unsmart•7/6/23, 4:20 PM

total tls go brrr stonks

stonks

Erisa

E

Erisa•7/6/23, 5:11 PM

sadly certificates dont accept *.*.*.*.

dave

D

daveOP•7/6/23, 5:12 PM

curl -kcurl -k to the rescue!

Erisa

E

Erisa•7/6/23, 5:34 PM

probably deep inside the SSL/TLS spec

Erisa

E

Erisa•7/6/23, 5:34 PM

which is not one i want to explore today

dave

D

daveOP•7/6/23, 5:46 PM

I love RFCs.

dave

D

daveOP•7/6/23, 5:47 PM

I read through RFC8460 and RFC8461 over coffee this morning to start my day on a fun note.

dave

D

daveOP•7/6/23, 6:02 PM

  (debug) Error: could not send email: Unknown error: transient error (421): 4.7.28 [104.30.12.101      15] Our system has detected an unusual rate of4.7.28 unsolicited mail originating from your IP address. To protect our4.7.28 users from spam, mail sent from your IP address has been temporarily4.7.28 rate limited. Please visit4.7.28  https://support.google.com/mail/?p=UnsolicitedRateLimitError to4.7.28 review our Bulk Email Senders Guidelines. t19-20020a63dd13000000b005348464b81fsi1882477pgg.371 - gsmtp

  (debug) Error: could not send email: Unknown error: transient error (421): 4.7.28 [104.30.12.101      15] Our system has detected an unusual rate of4.7.28 unsolicited mail originating from your IP address. To protect our4.7.28 users from spam, mail sent from your IP address has been temporarily4.7.28 rate limited. Please visit4.7.28  https://support.google.com/mail/?p=UnsolicitedRateLimitError to4.7.28 review our Bulk Email Senders Guidelines. t19-20020a63dd13000000b005348464b81fsi1882477pgg.371 - gsmtp

Yikes

dave

Ddave tbh I usually get a faster correct solution from Erisa here on Discord compared ...

Advany

A

Advany•7/7/23, 7:32 AM

awesome!

HelixEvo

H

HelixEvo•7/7/23, 12:01 PM

How does Cloudflare pages.dev update from GitHub? Does it pull from git every certain amount of seconds to check for changes?

HelixEvo

H

HelixEvo•7/7/23, 12:01 PM

Ahh I see

Walshy

W

Walshy•7/7/23, 2:18 PM

please don't ping employees

Erisa

E

Erisa•7/7/23, 2:18 PM

@xbdm I removed that image because it contained a private link - please don't ping employees individually for questions, you can verify the email is valid by checking its domain AND whether it passes SPF and DKIM at your mail provider.
You can also opt to email abusereply@cloudflare.comabusereply@cloudflare.com yourself to inquire further

Erisa

E

Erisa•7/7/23, 2:18 PM

There was a private Stripe Verify link in the screenshot

Erisa

E

Erisa•7/7/23, 2:22 PM

You can reply to the email or, if you dont trust it, send a separate email to abusereply@cloudflare.comabusereply@cloudflare.com for these kind of questions - the community or Support can't help with Trust & Safety issues

aaaaaaaaaaaaaaaaa

A

aaaaaaaaaaaaaaaaa•7/7/23, 3:06 PM

It should be. Remember though that Cloudflare perform CNAME flattening. It might not be possible to CNAME the root of a domain with other providers

aaaaaaaaaaaaaaaaa

A

aaaaaaaaaaaaaaaaa•7/7/23, 3:07 PM

https://developers.cloudflare.com/dns/cname-flattening/set-up-cname-flattening/

Set up CNAME flattening · Cloudflare DNS docs

CNAME flattening occurs by default for all plans when your domain uses a CNAME record for its root domain (example.com).

colossalchicken

Ccolossalchicken is it possible to point a CNAME record from a domain not managed by cloudflare t...

Erisa

E

Erisa•7/8/23, 12:34 PM

If you create a matching Custom Hostname on the target, it will work

chientrm.com

C

chientrm.com•7/8/23, 12:42 PM

What about worker plugins?
Like, instead of waiting for new worker api, just let people make plugins and expose worker client id to the plugin provider. MeowHeartCloudflare

MeowHeartCloudflare

chientrm.com

C

chientrm.com•7/8/23, 12:50 PM

That would make worker api marketplace a booming

Original message was deleted

chientrm.com

C

chientrm.com•7/8/23, 1:08 PM

Installing and using a library, the user gotta wire the api token manually

chientrm.com

C

chientrm.com•7/8/23, 1:09 PM

Using plugin, the worker and the plugin provider do the auth internally.

lokiwind

L

lokiwind•7/8/23, 5:55 PM

Hello everyone, when I add a website to cloudflare, if this website has been added before, these settings appear

lokiwind

L

lokiwind•7/8/23, 5:55 PM

Is there any way to reset these settings that I have preset

DvidPi

DDvidPi I think I figured it out, sorry!

Cyb3r-Jak3

C

Cyb3r-Jak3•7/8/23, 6:50 PM

You want HostnameHostname not URI full.

Cyb3r-Jak3

C

Cyb3r-Jak3•7/8/23, 6:51 PM

URI Full wants the exact path. So https://map.xxxx/test.txthttps://map.xxxx/test.txt would not be screened

amorfati

A

amorfati•7/9/23, 6:31 AM

whoevever worked on the new cloudflare.com site good job. Looks amazing! I like the change

bkyerv

B

bkyerv•7/9/23, 7:33 AM

I am trying to implement email sending functionality that is described in this blog https://blog.cloudflare.com/sending-email-from-workers-with-mailchannels/. I have used the code snippet illustrated in the blog. I have also set the txt record for the domain I want to send email from as per https://community.cloudflare.com/t/introducing-mailchannels-domain-lockdown/523913. Now when I deploy the worker and test it both using browser and api testing tools (postman, rapidapi) I don't see emails delivered to the addresses I have used (mostly gmail). Can someone please help to understand what could be a potential cause?

The Cloudflare Blog

Send email using Workers with MailChannels

MailChannels has created an email sending service specifically for Cloudflare Workers that removes all the friction associated with sending emails

lokiwind

L

lokiwind•7/9/23, 10:37 AM

I can create a custom rule using the following api link

lokiwind

L

lokiwind•7/9/23, 10:38 AM

https://prnt.sc/ox4lyjt792O7

Lightshot

Captured with Lightshot

Erisa

E

Erisa•7/9/23, 10:38 AM

the firewall rule API is currently a compatability layer that creates Custom Rules, the firewall rule API will be removed on 2024-05-01

  (debug) Error: could not send email: Unknown error: transient error (421): 4.7.28 [104.30.12.101      15] Our system has detected an unusual rate of4.7.28 unsolicited mail originating from your IP address. To protect our4.7.28 users from spam, mail sent from your IP address has been temporarily4.7.28 rate limited. Please visit4.7.28  https://support.google.com/mail/?p=UnsolicitedRateLimitError to4.7.28 review our Bulk Email Senders Guidelines. t19-20020a63dd13000000b005348464b81fsi1882477pgg.371 - gsmtp

  (debug) Error: could not send email: Unknown error: transient error (421): 4.7.28 [104.30.12.101      15] Our system has detected an unusual rate of4.7.28 unsolicited mail originating from your IP address. To protect our4.7.28 users from spam, mail sent from your IP address has been temporarily4.7.28 rate limited. Please visit4.7.28  https://support.google.com/mail/?p=UnsolicitedRateLimitError to4.7.28 review our Bulk Email Senders Guidelines. t19-20020a63dd13000000b005348464b81fsi1882477pgg.371 - gsmtp