DNS TXT record for verification with CNAME

Reindl Harald h.reindl at thelounge.net
Fri Dec 11 15:43:16 UTC 2015



Am 11.12.2015 um 16:34 schrieb Khuu, Linh Contractor:
> oig.ssa.gov.            36000   IN      CNAME
> dualstack.mc-1231-1799228220.us-east-1.elb.amazonaws.com.

the TXT records needs to be added at 
dualstack.mc-1231-1799228220.us-east-1.elb.amazonaws.com.

> Will there be an error or problem of adding TXT record for
> “oig.ssa.gov”?

you *can not* have CNAME and others for the same name

> Or TXT record for verification will have to be added on
> both sides?

you can't - the TXT record needs to be on teh right side of the CNAME 
because the CNAME is followed for *any* rcord type

so you have two choices:

* replace the CANME oig.ssa.gov with a A-record and add the TXT
* add the TXT for the CNAME destination

[harry at srv-rhsoft:~]$ dig TXT www.rhsoft.net
;; ANSWER SECTION:
www.rhsoft.net.         3600    IN      CNAME   proxy.thelounge.net.
proxy.thelounge.net.    3600    IN      TXT     "v=spf1 a 
ip4:10.0.0.0/24 ip4:95.129.202.170 -all"


-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 181 bytes
Desc: OpenPGP digital signature
URL: <https://lists.isc.org/pipermail/bind-users/attachments/20151211/6f581ad2/attachment.bin>


More information about the bind-users mailing list