Linode Forum
https://forum.linode.com/

howto export dns for cloudflare
https://forum.linode.com/viewtopic.php?f=19&t=11888
Page 1 of 1

Author:  ingber [ Tue Jun 02, 2015 7:59 pm ]
Post subject:  howto export dns for cloudflare

How do I export all my Linode DNS records in BIND format for importing into CloudFlare? (I have several shortcuts to Google services.)

Author:  thedave [ Tue Jun 02, 2015 8:07 pm ]
Post subject:  Re: howto export dns for cloudflare

ingber wrote:
How do I export all my Linode DNS records in BIND format for importing into CloudFlare? (I have several shortcuts to Google services.)


Go to the Linode DNS manager at https://manager.linode.com/dns and click the "Zone File" button, you should be able to copy the zone file and paste it into the matching form in CloudFlare. Once it's done, you can start to switch your nameserver records over with your DNS registrar, as appropriate.

Author:  ingber [ Wed Jun 03, 2015 10:10 am ]
Post subject:  Re: howto export dns for cloudflare

I noticed that the page brought up under the Zone File tab had quotes ("") around the TXT fields. CF already had one of my 3 TXT fields entered without quotes (as they appear on my dns page), so I did not use any quotes on the other 2. Is that OK?

Thanks for the info.

Author:  sleddog [ Wed Jun 03, 2015 3:22 pm ]
Post subject:  Re: howto export dns for cloudflare

ingber wrote:
I noticed that the page brought up under the Zone File tab had quotes ("") around the TXT fields. CF already had one of my 3 TXT fields entered without quotes (as they appear on my dns page), so I did not use any quotes on the other 2. Is that OK?

Thanks for the info.


You'll probably find that Cloudflare adds the quotes. Use dig to query the Cloudflare nameserver directly to see.

Something like

dig @XXX.ns.cloudflare.com mydomain.com TXT

Where XXX is one of your assigned Cloudflare nameservers.

Author:  thedave [ Wed Jun 03, 2015 5:03 pm ]
Post subject:  Re: howto export dns for cloudflare

Strictly speaking, the quotes are required in the zonefile (and CloudFlare should import from a zone file properly), but record-level UI editors often take care of quoting for you. I'm about 85% sure that CloudFlare does import the zone properly if you copy/paste the entire zone file, but it's been a few months since I helped a client move to CloudFlare.

Author:  ingber [ Thu Jun 04, 2015 11:09 am ]
Post subject:  Re: howto export dns for cloudflare

It seems you just have to delete the Linode NS entries from the Zone File before importing into CloudFlare, as these are given by CF.

Author:  thedave [ Thu Jun 04, 2015 11:28 am ]
Post subject:  Re: howto export dns for cloudflare

My recollection is that CloudFlare does (or did do) that automatically. Maybe it changed?

Author:  ingber [ Thu Jun 04, 2015 2:20 pm ]
Post subject:  Re: howto export dns for cloudflare

Hi. No, I first did the simple import and had to delete those Linode NS records by hand. I then read that these are ignored anyway, so I just imported the full Zone File (without the header).

Author:  thedave [ Thu Jun 04, 2015 3:19 pm ]
Post subject:  Re: howto export dns for cloudflare

Right... The "Are ignore anyway" part means you didn't have to delete anything by hand -- Or am I misreading?

(I'm not just being pedantic: There was no reason to do it when I generated documentation for my clients in the past, if that has changed, I want to update my documentation)

Author:  ingber [ Sat Jun 06, 2015 5:01 am ]
Post subject:  Re: howto export dns for cloudflare

Yes, that is correct. "Ignore" means nothing has to be deleted from the Zone File to import into CF.

I have noted that some IPs still get through CF. I have seen some similar posts on other boards.

(1)
the request goes to
http[s]://MyIPaddress/...
instead of to
http[s]://MyDomainName/...

(2)
the request goes with a
"GET http"
(not "GET / HTTP")

I do not see anyway of addressing these concerns in any tabs in my CF Dashboard.

To address (1), I have put into my .httaccess
RewriteEngine On
RewriteBase /
RewriteCond %{HTTP_HOST} ^MyIPAaddress
RewriteRule ^(.*)$ http://MyDomainName/$1 [L,R=301]

To address (2), I have added a filter to my fail2ban jail.local
[Definition]
failregex = ^<HOST> .*GET http
ignoreregex =

There still are some leaks/strays into my access.log and ssl_access.log.


Thanks.

Page 1 of 1 All times are UTC-04:00
Powered by phpBB® Forum Software © phpBB Group
http://www.phpbb.com/