[nsd-users] CNAME from another zone
Mohammad H. Al Shami
mshami at tagorg.com
Tue Mar 10 18:39:40 UTC 2009
The file I sent was the zone with the A record for lists.tagorg.com replaced with a CNAME record. I admit I overlooked that when I did the testing. But I'm also facing this issue in a different place, which basically got me to email the list. We have about 40 domains pointing to the same web server as tagorg.com. A zone file like the one below won't work.
@ IN SOA ns1.tagidomains.com. mail.tagidomains.com. (
2008081100 ; Serial YYYYMMDDnn
16384 ; Refresh
2048 ; Retry
1048576 ; Expire
2560) ; Minimum
3600 IN CNAME tagorg.com.
It is really annoying to have to edit all of those when we relocate our sites (which surprisingly, happened very recently when we changed our ISP)
If I use "www 3600 IN CNAME tagorg.com." it works properly.
From: Niall Donegan [niall at moybella.net]
Sent: Tuesday, March 10, 2009 6:28 PM
To: Mohammad H. Al Shami
Cc: Ondřej Surý; nsd-users at nlnetlabs.nl
Subject: Re: [nsd-users] CNAME from another zone
-----BEGIN PGP SIGNED MESSAGE-----
Have a look at http://www.faqs.org/rfcs/rfc1912.html Section 2.4. A
CNAME can't co-exist with other data. So if you take out the MX record
for lists.tag-legal.com. you should be good to go.
The resolver will then see that lists.tag-legal.com. is pointing at
lists.tagorg.com. and check the MX records on lists.tagorg.com.
Mohammad H. Al Shami wrote:
> Thanks for you prompt response.
> Well I wasn't being cryptic, I just wrote an example from my mind. DNS as you know is a public database :). Anyways, here is a complete zone file.
> $TTL 86400
> @ IN SOA ns1.tagidomains.com. mail.tagidomains.com. (
> 2009031001 ; Serial YYYYMMDDnn
> 16384 ; Refresh
> 2048 ; Retry
> 1048576 ; Expire
> 2560) ; Minimum
> autodiscover.tag-legal.com. 3600 IN A 184.108.40.206
> www.tag-legal.com. 3600 IN A 220.127.116.11
> demo.tag-legal.com. 3600 IN A 18.104.22.168
> tag-legal.com. 3600 IN A 22.214.171.124
> lists.tag-legal.com. 3600 IN CNAME lists.tagorg.com.
> lists.tag-legal.com. 3600 IN MX 10 mx1.tagorg.com.
> lists.tag-legal.com. 3600 IN MX 10 mx2.tagorg.com.
> lists.tag-legal.com. 3600 IN MX 20 mx3.tagorg.com.
> tag-legal.com. 3600 IN MX 10 mx2.tagorg.com.
> lists.tag-legal.com. 3600 IN MX 20 mx4.tagorg.com.
> tag-legal.com. 3600 IN MX 10 mx1.tagorg.com.
> tag-legal.com. 3600 IN MX 20 mx4.tagorg.com.
> tag-legal.com. 3600 IN MX 20 mx3.tagorg.com.
> tag-legal.com. 3600 IN NS ns3.tagidomains.com.
> tag-legal.com. 3600 IN NS ns1.tagidomains.com.
> tag-legal.com. 3600 IN NS ns2.tagidomains.com.
> Where lists.tagorg.com is the primary hostname of my mailman server.
> The system consists of a patched version of VegaDNS running on MySQL with a perl backend that generates all the zone files, then checks them with zonec and compiles the NSD database.
> Thanks again,
> From: Ondřej Surý [ondrej at sury.org]
> Sent: Tuesday, March 10, 2009 6:06 PM
> To: Mohammad H. Al Shami
> Cc: nsd-users at nlnetlabs.nl
> Subject: Re: [nsd-users] CNAME from another zone
> On Tue, Mar 10, 2009 at 16:31, Mohammad H. Al-Shami <mshami at tagorg.com> wrote:
>> Hi guys,
>> I've been using NSD for about a year now and I love it. But I've been facing something strange for a while now and thought I should share.
>> I have a mailman server hosting around 40 mailing lists using different domain names. The thing is, I'd like to use an A record for the primary host name and use CNAME records for the other domains. Lets say my server was lists.domain.tld, and I want to have another host name lists.domain2.tld. Having
>> lists.domain2.tld. 3600 IN CNAME lists.domain.tld.
>> Will generate the following error:
>> CNAME and other data at the same name
>> I've googled for this error but to no avail. any ideas? BTW both domain.tld and domain2.tld are hosted on my server.
> You have other RR (including double CNAME) with same owner (ie. name
> lists) in the zone file for domain2.tld
> But being crypting and trying to hide real names doesn't really help
> debugging your problem
> Ondřej Surý <ondrej at sury.org>
> nsd-users mailing list
> nsd-users at NLnetLabs.nl
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.9 (GNU/Linux)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org
-----END PGP SIGNATURE-----
More information about the nsd-users