Linode Forum
Linode Community Forums
 FAQFAQ    SearchSearch    MembersMembers      Register Register 
 LoginLogin [ Anonymous ] 
Post new topic  Reply to topic
Author Message
 Post subject: DNS cname limitation?
PostPosted: Sat May 22, 2010 2:33 am 
Offline
Junior Member

Joined: Wed Aug 11, 2004 4:24 pm
Posts: 31
Website: http://www.greenfabric.com/
Yahoo Messenger: umdenken
Location: Spokane, WA
I have a weird problem. I'm using the DNS Manager to create a cname for Google Apps configuration. Here are the last few lines from the rendered weblaws.org record:

Code:
api    CNAME   weblaws.org.
cite   CNAME   weblaws.org.
gmail  CNAME   ghs.google.com.


The first two cname's resolve just fine. The last one, added per Google's instructions, does not; queries return NXDOMAIN.

Does the Linode DNS server implement some kind of CNAME restriction against pointers to domains not under one's control? Is there a way around this?

Thanks!


Top
   
 Post subject:
PostPosted: Sat May 22, 2010 3:35 am 
Offline
Senior Member
User avatar

Joined: Sun Jan 18, 2009 2:41 pm
Posts: 830
Hmm, looks good from here:
Code:
$ dig gmail.weblaws.org

; <<>> DiG 9.3.2 <<>> gmail.weblaws.org
;; global options:  printcmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 3392
;; flags: qr rd ra; QUERY: 1, ANSWER: 3, AUTHORITY: 0, ADDITIONAL: 0

;; QUESTION SECTION:
;gmail.weblaws.org.             IN      A

;; ANSWER SECTION:
gmail.weblaws.org.      86341   IN      CNAME   ghs.google.com.
ghs.google.com.         86341   IN      CNAME   ghs.l.google.com.
ghs.l.google.com.       241     IN      A       74.125.95.121

;; Query time: 170 msec
;; SERVER: 205.133.7.2#53(205.133.7.2)
;; WHEN: Sat May 22 03:34:12 2010
;; MSG SIZE  rcvd: 99


Top
   
 Post subject:
PostPosted: Sat May 22, 2010 3:38 am 
Offline
Junior Member

Joined: Wed Aug 11, 2004 4:24 pm
Posts: 31
Website: http://www.greenfabric.com/
Yahoo Messenger: umdenken
Location: Spokane, WA
Thanks a lot! It's probably TTLs of the SOA records, or something like that on my end.


Top
   
 Post subject:
PostPosted: Mon May 24, 2010 11:50 am 
Offline
Senior Member

Joined: Sat Mar 28, 2009 4:23 pm
Posts: 415
Website: http://jedsmith.org/
Location: Out of his depth and job-hopping without a clue about network security fundamentals
When you're dealing with resolvers in the wild not seeing domain changes, dig +trace is my favorite tool for the job. With it, you can see if we're serving what you expect by asking directly.

Code:
11:49 jsmith@upsidedown$ dig +short @ns1.linode.com cname gmail.weblaws.org
ghs.google.com.

_________________
Disclaimer: I am no longer employed by Linode; opinions are my own alone.


Top
   
Display posts from previous:  Sort by  
Post new topic  Reply to topic


Who is online

Users browsing this forum: No registered users and 3 guests


You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum

Search for:
Jump to:  
RSS

Powered by phpBB® Forum Software © phpBB Group