Cloudflare NS error record mx

Good morning
I tried to set up the new Cloudflare NS on my Aruba registry but it tells me that they are not valid. Look Nic Italy
If I check the NS on Nic Italy the mx are in an error state: The response must be authoritative and with return-code NOERROR
What could be the problem?
Thank you

Could you please let us know:

  • What is the domain?
  • Have you added the domain to your Cloudflare account?
  • Which name servers were you assigned?

Then it will be easier to help :slight_smile:

Immagine
The domain is attached because I cannot post links

The domain has been added to Cloudflare which is awaiting the change of NS
Thanks

Hello here is the domain, can someone help me?
alimentianimalionline it
Thank you

They do seem to be responding as expected with NOERROR.

 ~ % dig ns alimentianimalionline.it @rick.ns.cloudflare.com

; <<>> DiG 9.10.6 <<>> ns alimentianimalionline.it @rick.ns.cloudflare.com
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 20520
;; flags: qr aa rd; QUERY: 1, ANSWER: 2, AUTHORITY: 0, ADDITIONAL: 1
;; WARNING: recursion requested but not available

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 1232
;; QUESTION SECTION:
;alimentianimalionline.it.	IN	NS

;; ANSWER SECTION:
alimentianimalionline.it. 86400	IN	NS	rick.ns.cloudflare.com.
alimentianimalionline.it. 86400	IN	NS	sreeni.ns.cloudflare.com.

;; Query time: 24 msec
;; SERVER: 2a06:98c1:50::ac40:218b#53(2a06:98c1:50::ac40:218b)
;; WHEN: Mon Jun 20 12:13:34 BST 2022
;; MSG SIZE  rcvd: 110

 ~ % dig ns alimentianimalionline.it @sreeni.ns.cloudflare.com

; <<>> DiG 9.10.6 <<>> ns alimentianimalionline.it @sreeni.ns.cloudflare.com
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 58333
;; flags: qr aa rd; QUERY: 1, ANSWER: 2, AUTHORITY: 0, ADDITIONAL: 1
;; WARNING: recursion requested but not available

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 1232
;; QUESTION SECTION:
;alimentianimalionline.it.	IN	NS

;; ANSWER SECTION:
alimentianimalionline.it. 86400	IN	NS	rick.ns.cloudflare.com.
alimentianimalionline.it. 86400	IN	NS	sreeni.ns.cloudflare.com.

;; Query time: 15 msec
;; SERVER: 2a06:98c1:50::ac40:22b2#53(2a06:98c1:50::ac40:22b2)
;; WHEN: Mon Jun 20 12:13:44 BST 2022
;; MSG SIZE  rcvd: 110

Cloudflare is also not currently responding authoritatively on another nameserver pair so there should not be an issue there.

 ~ % dig ns alimentianimalionline.it @woz.ns.cloudflare.com

; <<>> DiG 9.10.6 <<>> ns alimentianimalionline.it @woz.ns.cloudflare.com
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: REFUSED, id: 30494
;; flags: qr rd; QUERY: 1, ANSWER: 0, AUTHORITY: 0, ADDITIONAL: 1
;; WARNING: recursion requested but not available

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 512
; OPT=15: 00 14 ("..")
;; QUESTION SECTION:
;alimentianimalionline.it.	IN	NS

;; Query time: 15 msec
;; SERVER: 2a06:98c1:50::ac40:2196#53(2a06:98c1:50::ac40:2196)
;; WHEN: Mon Jun 20 12:14:03 BST 2022
;; MSG SIZE  rcvd: 59

I’m not seeing any issue with Cloudflare here and it doesn’t look like the common issue with .it domains where there is another nameserver pair so I would recommend clarifying this with your Registrar.

Hello
the problem is not Aruba but the Italian authority of .it domains which is the nic that Aruba complies with.
When testing the new NS, the following textual error is returned:
“Check which nameservers answered the MX type queries. The answer must be authoritative and with NOERROR return code”
Below are some screenshots. If you need anything else, just ask, I hope to be able to solve the problem. Thank you

nic_it_3

They seem to be expecting the nameservers to have an MX record for your domain and this NXDOMAIN is causing the issue:

~ % dig mx alimentianimalionline.it @rick.ns.cloudflare.com

; <<>> DiG 9.10.6 <<>> mx alimentianimalionline.it @rick.ns.cloudflare.com
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 19336
;; flags: qr aa rd; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1
;; WARNING: recursion requested but not available

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 1232
;; QUESTION SECTION:
;alimentianimalionline.it.	IN	MX

;; AUTHORITY SECTION:
alimentianimalionline.it. 3600	IN	SOA	rick.ns.cloudflare.com. dns.cloudflare.com. 2281135080 10000 2400 604800 3600

;; Query time: 50 msec
;; SERVER: 2a06:98c1:50::ac40:218b#53(2a06:98c1:50::ac40:218b)
;; WHEN: Mon Jun 20 13:19:15 BST 2022
;; MSG SIZE  rcvd: 115

Your current nameservers do respond with an MX

~ % dig mx alimentianimalionline.it                       

; <<>> DiG 9.10.6 <<>> mx alimentianimalionline.it
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 61007
;; flags: qr rd ra; QUERY: 1, ANSWER: 1, AUTHORITY: 0, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;alimentianimalionline.it.	IN	MX

;; ANSWER SECTION:
alimentianimalionline.it. 4502	IN	MX	10 mx.alimentianimalionline.it.

;; Query time: 98 msec
;; SERVER: fe80::f8c3:ccff:fe52:9964%11#53(fe80::f8c3:ccff:fe52:9964%11)
;; WHEN: Mon Jun 20 13:26:16 BST 2022
;; MSG SIZE  rcvd: 72

I think if you add an MX record in your Cloudflare DNS then the checks will probably pass.

So?

The name should be @ or alimentianimalionline.it rather than mx.

This looks like it should be working now.

Modified.
Now everything is ok at nic_it.
Thanks, it’s very kind of you

This topic was automatically closed 3 days after the last reply. New replies are no longer allowed.