<div dir="ltr"><div dir="ltr">Thanks for the explanation!</div><div>This setup is part of a configuration wizard by Flowfact (realestate management software).</div><div>The CNAME is one of the settings that have to be set according to their tool - it also validates successfully.</div><div><br></div><div>The problem is, their tool raises an "unknown error" and the helpdesk tells me, they don't support this part of their software (wtf?).</div><div><br></div><div>I thought this might be something obvious but as Thomas pointed out, a CNAME to TXT should be fine (which I never tried or thought would work).</div><div>My assumption that CNAME must return an IP address simply was wrong.</div><div><br></div><div>This makes me more confident, my side is actually working correctly and there is something broken at Flowfact.</div><div><br></div><div>Thanks again!</div><div><br></div><div>Kind regards</div><div>Kevin</div><div dir="ltr"><br></div><br><div class="gmail_quote"><div dir="ltr" class="gmail_attr">Am Do., 26. Sept. 2019 um 12:27 Uhr schrieb frank+pdns--- via Pdns-users <<a href="mailto:pdns-users@mailman.powerdns.com">pdns-users@mailman.powerdns.com</a>>:<br></div><blockquote class="gmail_quote" style="margin:0px 0px 0px 0.8ex;border-left:1px solid rgb(204,204,204);padding-left:1ex"><div style="overflow-wrap: break-word;">Hi Kevin,<div><br></div><div><div><blockquote type="cite"><div><div dir="ltr"><div>===========>%
===========</div><div>C:\Users\kolbrich>nslookup -q=CNAME _<a href="http://91867ab3c77f152ba4ab0cceeabb3666.expose.graf-borstar.de/" target="_blank">91867ab3c77f152ba4ab0cceeabb3666.expose.graf-borstar.de</a>. 8.8.8.8<br>Server: <a href="http://dns.google" target="_blank">dns.google</a><br>Address: 8.8.8.8<br><br>Nicht autorisierende Antwort:<br>_<a href="http://91867ab3c77f152ba4ab0cceeabb3666.expose.graf-borstar.de/" target="_blank">91867ab3c77f152ba4ab0cceeabb3666.expose.graf-borstar.de</a> canonical name = _c09668a36b3b6665549a795863f30b9b.olprtlswtu.acm-validations.aws<br></div><div><br></div></div></div></blockquote><br><blockquote type="cite"><div><div dir="ltr"><div>My NS has a catch-all zone using "." including SOA to be authoritative for all new domains that do not yet have a zone (async processing).</div><div>This allows us to be responsive for zones we actually did not yet create or have not been replicated.</div></div></div></blockquote><div><br></div><br><blockquote type="cite"><div><div dir="ltr"><div><br></div><div>It's seems, that AWS uses the same authoritative NS to resolv it's own CNAME (which does not resolve at all in public):</div></div></div></blockquote><div><br></div><div>I doubt that’s the problem (and note that acm-validations.aws is a valid domain name and points to AWS).</div><div><br></div><div>I believe the problem might be here:</div><div><br></div><div><div>~ ❯❯❯ dig SOA <a href="http://expose.graf-borstar.de" target="_blank">expose.graf-borstar.de</a></div><div><br></div><div>; <<>> DiG 9.10.6 <<>> SOA <a href="http://expose.graf-borstar.de" target="_blank">expose.graf-borstar.de</a></div><div>;; global options: +cmd</div><div>;; Got answer:</div><div>;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 58518</div><div>;; flags: qr rd ra; QUERY: 1, ANSWER: 1, AUTHORITY: 1, ADDITIONAL: 1</div><div><br></div><div>;; OPT PSEUDOSECTION:</div><div>; EDNS: version: 0, flags:; udp: 1280</div><div>;; QUESTION SECTION:</div><div>;<a href="http://expose.graf-borstar.de" target="_blank">expose.graf-borstar.de</a>.<span class="gmail-m_7243485725870912110Apple-tab-span" style="white-space:pre-wrap"> </span>IN<span class="gmail-m_7243485725870912110Apple-tab-span" style="white-space:pre-wrap"> </span>SOA</div><div><br></div><div>;; ANSWER SECTION:</div><div><a href="http://expose.graf-borstar.de" target="_blank">expose.graf-borstar.de</a>.<span class="gmail-m_7243485725870912110Apple-tab-span" style="white-space:pre-wrap"> </span>3593<span class="gmail-m_7243485725870912110Apple-tab-span" style="white-space:pre-wrap"> </span>IN<span class="gmail-m_7243485725870912110Apple-tab-span" style="white-space:pre-wrap"> </span>CNAME<span class="gmail-m_7243485725870912110Apple-tab-span" style="white-space:pre-wrap"> </span><a href="http://fae31f3b-08a0-4b3c-8767-7f1b1baec2af.iexendpoints.de" target="_blank">fae31f3b-08a0-4b3c-8767-7f1b1baec2af.iexendpoints.de</a>.</div><div><br></div><div>;; AUTHORITY SECTION:</div><div><a href="http://iexendpoints.de" target="_blank">iexendpoints.de</a>.<span class="gmail-m_7243485725870912110Apple-tab-span" style="white-space:pre-wrap"> </span>293<span class="gmail-m_7243485725870912110Apple-tab-span" style="white-space:pre-wrap"> </span>IN<span class="gmail-m_7243485725870912110Apple-tab-span" style="white-space:pre-wrap"> </span>SOA<span class="gmail-m_7243485725870912110Apple-tab-span" style="white-space:pre-wrap"> </span><a href="http://ns-660.awsdns-18.net" target="_blank">ns-660.awsdns-18.net</a>. <a href="http://awsdns-hostmaster.amazon.com" target="_blank">awsdns-hostmaster.amazon.com</a>. 1 7200 900 1209600 86400</div><div><br></div><div>;; Query time: 19 msec</div><div>;; SERVER: 192.168.2.1#53(192.168.2.1)</div><div>;; WHEN: Thu Sep 26 12:20:56 CEST 2019</div><div>;; MSG SIZE rcvd: 199</div><div><br></div><div><br></div><div>You have a CNAME in place for <a href="http://expose.graf-borstar.de" target="_blank">expose.graf-borstar.de</a>. Does that belong there? This might cause issues.</div><div><br></div><div>Could you also clarify the problem you are having? It’s not 100% clear to me at this point. </div><div><br></div><div>Kind Regards,</div><div><br></div><div>Frank</div></div></div></div><div><div dir="auto" style="overflow-wrap: break-word;"><div style="color:rgb(0,0,0);font-family:"Avenir Next";font-size:13px;font-style:normal;font-variant-caps:normal;font-weight:normal;letter-spacing:normal;text-align:start;text-indent:0px;text-transform:none;white-space:normal;word-spacing:0px;text-decoration:none">Frank Louwers<br>PowerDNS Certified Consultant @ <a href="http://Kiwazo.be" target="_blank">Kiwazo.be</a><br><br></div><div style="color:rgb(0,0,0);font-family:"Avenir Next";font-size:13px;font-style:normal;font-variant-caps:normal;font-weight:normal;letter-spacing:normal;text-align:start;text-indent:0px;text-transform:none;white-space:normal;word-spacing:0px;text-decoration:none"><br></div><br class="gmail-m_7243485725870912110Apple-interchange-newline"></div><br class="gmail-m_7243485725870912110Apple-interchange-newline"></div></div>_______________________________________________<br>
Pdns-users mailing list<br>
<a href="mailto:Pdns-users@mailman.powerdns.com" target="_blank">Pdns-users@mailman.powerdns.com</a><br>
<a href="https://mailman.powerdns.com/mailman/listinfo/pdns-users" rel="noreferrer" target="_blank">https://mailman.powerdns.com/mailman/listinfo/pdns-users</a><br>
</blockquote></div></div>