Reputation
5,236
Next privilege 10,000 Rep.
Access moderator tools
Badges
1 5 24
Newest
 Nice Answer
Impact
~93k people reached

15h
comment DNS MX vs CNAME entries
@CraigWatson Could you elaborate on what you think is missing? While not elaborating on specific ways of how the address records should be set up, this is a somewhat basic but accurate answer which IMO doesn't deserve downvotes. Possibilities if there's no static address: have the zone apex address record(s) point elsewhere and do http redirects there (example.com) to www.example.com (you should have no problem with having your CNAME for www), or use a dns service which can synthesize A/AAAA records on the fly based on a provided name (eg alias feature in Route53)?
15h
comment DNS MX vs CNAME entries
CNAME records are not allowed to coexist with other records. A name cannot both be defined to be an alias and also have data of its own.
15h
comment DNS MX vs CNAME entries
@EricRenouf The conflict specifically comes from how CNAME makes one name an alias of another name, it's not specific to address records (A/AAAA) or any record type at all. That's why you are not allowed to have a CNAME record side by side with other records. (Also see the answer by @GAURAVKANSAL)
May
25
comment Cannot add conditional forwarder without root zone
@AndrewB I tried to reproduce this on both 2012 and 2012R2 but failed. The initial validation error is shown (and I can see the strange query for . IN SOA) but clicking "OK" appears to work (no further errors are shown). Maybe the second error message you get is unrelated to the strange validation behavior? Does Add-DnsServerConditionalForwarderZone (powershell) either work or produce a more helpful error message?
May
25
answered What is wrong with this BIND config?
May
24
comment SFP + Gmail = Emails delivered to spam box
Considering that it seems to consider both to have passed the SPF check, it would make more sense if the different actions came down to something else than SPF (email contents, maybe?).
May
24
comment Why is FileZilla SFTP file transfer max capped at 1.3MiB/sec instead of saturating available bandwidth? rsync and WinSCP are even slower
1.3 MB/s is not a whole lot, you'd have to either already be under load for other reasons or be on the extreme low end for CPU to be a limiting factor already with that little throughput. Without knowing all the details, I think BDP seems like the most likely candidate.
May
22
answered How to technically retrieve the full list of all domain names for a particular TLD?
May
21
answered WARNING: One or more of your nameservers did not return any of your NS records
May
20
answered Bind9: Master->Slave Notify IPv6 with fallback to IPv4
May
19
answered Unable to use builtin CA bundle to verify GoDaddy SHA2 SSL certificate
May
18
comment Wildcard DNS to NOT resolve a specific entry
@ThatGraemeGuy Yes, as Andy said the wildcard rules are based on the existence of names, not on specific record types. The proposed solution will work.
May
18
comment BIND slave doesn't sync up with master until it is restarted
I would suggest in-view if a zone is supposed to be identical across views.
May
18
comment Host name alias resolves to different computer in network
Am I correct to assume that this is about active directory rather than dns per se?
May
18
comment Wildcard DNS to NOT resolve a specific entry
I don't think that will fail if they match any existing record is the best way to describe expected wildcard behavior (it seems suggest both that they actually matched and that something failed), wildcards are simply defined such that they do not match any branches that exist.
May
17
answered Why are there many domain names resolving to IP like 8.8.8.8 and many other?
May
17
awarded  Nice Answer
May
17
comment When is it cost effective to become a DNS registrar?
I'll just note that the costs listed here are specific to becoming an ICANN-accredited registrar. You will need additional agreements with the specific registry for each gTLD. As for ccTLDs, they will have their own policies (ICANN accreditation may not be relevant but generally there will be similar requirements). My point being that the fees, deposits, agreements, etc do not end with an ICANN accreditation.
May
16
answered How to set “server preference” for tls cipher suites?
May
16
comment When is it cost effective to become a DNS registrar?
I don't have a direct answer to your question but one thing that is really worth noting is that you will have to deal with each registry separately. I think it speaks volumes how some big players like Amazon (AWS) choose to go the reseller route.