[Pdns-dev] Problem with out of bailiwick cname and mx records

[Maik Zumstrull]

On Mon, Apr 25, 2011 at 22:27, Zane Thomas <zane.thomas at gmail.com> wrote:
>
> I'm writing a backend to interface with a custom database.
> The database has a domain (we'll call it foobar here) and in response to
>
> dig @127.0.0.1 foobar.com mx
>
> The backend is returning the following (and some nameservers not shown) in
> response to pdns's ANY lookup
>
> Apr 25 13:02:49 returning foobar.com ghs.google.com. CNAME

> Upon return the code in packethandler.cc notes the CNAME and asks the
> backend about ghs.google.com.

> Is that correct? Am I doing something wrong? Do I have wrong expectations?

Yes, yes, and yes. A CNAME must be the only record on its owner name
(other than DNSsec signatures for this CNAME). This implies that you
cannot have a CNAME at the apex of a zone.

Specifically for Google Apps, put ghs CNAMEs only on subdomains like
calendar.foobar.com, mail.foobar.com etc.