Cname records can not found with nslookup

this is my configuration
when i execute nslookup vi.c.xxx get the response in below

Server:		100.100.2.136
Address:	100.100.2.136#53

Non-authoritative answer:
Name:	vi.c.pic.itoon.org
Address: 104.16.130.248
Name:	vi.c.pic.itoon.org
Address: 104.16.131.248
Name:	vi.c.pic.itoon.org
Address: 2606:4700::6810:83f8
Name:	vi.c.pic.itoon.org
Address: 2606:4700::6810:82f8

i can’t get the cname info, why ?

I can see you have set it to “DNS only” in your screenshot, is it still set that way or have you changed it to proxied?

我的情况和你一样,目前我已经提交了票据,有结果互相回复一下

I don’t need proxy, only want use the dns

请求配置的地址是没问题的,我怀疑cloudfare中间给我做了一层代理所以nslookup看不到实际配置的cname了


This is my configuration, but when i execute the command

dig vi.c.pic.itoon.xxxx

; <<>> DiG 9.11.4-P2-RedHat-9.11.4-26.P2.el7_9.10 <<>> vi.c.pic.itoon.org
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 42928
;; flags: qr rd ra; QUERY: 1, ANSWER: 2, AUTHORITY: 0, ADDITIONAL: 0

;; QUESTION SECTION:
;vi.c.pic.itoon.org.		IN	A

;; ANSWER SECTION:
vi.c.pic.itoon.org.	10	IN	A	104.16.131.248
vi.c.pic.itoon.org.	10	IN	A	104.16.130.248

;; Query time: 3 msec
;; SERVER: 100.100.2.136#53(100.100.2.136)
;; WHEN: 三 12月 27 16:18:41 CST 2023
;; MSG SIZE  rcvd: 68

We can find that the cname records change to the A record. How can i resove the problem?

你有结果了吗?

Right now it appears to be proxied, hence why the CNAME entry resolves as A entry.

Are you sure you are configuring the correct Cloudflare account? Which nameservers are mentioned for that domain in that account? If that’s not lex and april, you are in the wrong account.

Was that hostname earlier active with some other Cloudflare-integrated service? If so, their settings could still apply. Make sure you drop the hostname from any other such service.

vi.c.pic.itoon.org seems to have these nameservers…

dig +short vi.c.pic.itoon.org ns
nico.ns.cloudflare.com.
opal.ns.cloudflare.com.

but nameservers for the domain are…

dig +short itoon.org ns
april.ns.cloudflare.com.
lex.ns.cloudflare.com.

If vi.c.pic.itoon.org is supposed to have delegated nameservers, they aren’t showing up from the root…

dig +trace +nodnssec -4 vi.c.pic.itoon.org

; <<>> DiG 9.18.18-0ubuntu0.22.04.1-Ubuntu <<>> +trace +nodnssec -4 vi.c.pic.itoon.org
;; global options: +cmd
.			7156	IN	NS	l.root-servers.net.
.			7156	IN	NS	f.root-servers.net.
.			7156	IN	NS	d.root-servers.net.
.			7156	IN	NS	k.root-servers.net.
.			7156	IN	NS	i.root-servers.net.
.			7156	IN	NS	a.root-servers.net.
.			7156	IN	NS	g.root-servers.net.
.			7156	IN	NS	j.root-servers.net.
.			7156	IN	NS	c.root-servers.net.
.			7156	IN	NS	e.root-servers.net.
.			7156	IN	NS	m.root-servers.net.
.			7156	IN	NS	h.root-servers.net.
.			7156	IN	NS	b.root-servers.net.
;; Received 239 bytes from 127.0.0.53#53(127.0.0.53) in 0 ms

org.			172800	IN	NS	b0.org.afilias-nst.org.
org.			172800	IN	NS	d0.org.afilias-nst.org.
org.			172800	IN	NS	a0.org.afilias-nst.info.
org.			172800	IN	NS	a2.org.afilias-nst.info.
org.			172800	IN	NS	c0.org.afilias-nst.info.
org.			172800	IN	NS	b2.org.afilias-nst.org.
;; Received 483 bytes from 192.112.36.4#53(g.root-servers.net) in 60 ms

itoon.org.		3600	IN	NS	lex.ns.cloudflare.com.
itoon.org.		3600	IN	NS	april.ns.cloudflare.com.
;; Received 102 bytes from 199.19.57.1#53(d0.org.afilias-nst.org) in 260 ms

vi.c.pic.itoon.org.	300	IN	A	104.16.130.248
vi.c.pic.itoon.org.	300	IN	A	104.16.131.248
;; Received 79 bytes from 172.64.33.196#53(lex.ns.cloudflare.com) in 8 ms

Not sure if that’s the cause of the problem, but doesn’t seem right.
https://cf.sjr.org.uk/tools/check?57049462bdc143c8b22a6e01ec3b7b8e

That’s a good point and the question is if @gyq5319920 simply added two NS entries for vi.c.pic.itoon.org or if he actually has a Partial setup for that domain.

Considering that he does not only have the NS entries, but also an A entry, that would suggest he actually delegated it to another account (whether correctly configured or not is a different subject) and is most likely configuring this - as mentioned earlier - with the nico account instead of the lex one.

@gyq5319920, I believe you need to elaborate on your setup and why vi.c.pic.itoon.org might be sub-delegated. Is this an actual domain and you have it managed via a different Cloudflare account or did you just add mentioned NS entries?

In any case, you need to set the proxy status in the correct account, either lex or opal.

Interesting, similar one here for the other poster…

Same delegated-but-not-delegated nameservers (nico and opal) at about the same time…
https://cf.sjr.org.uk/tools/check?1b3f3e8300784776b1a1a18a980f7bbc#dns

I guess this requires some insight which only the OP or Cloudflare could provide :man_shrugging:t2:.

This topic was automatically closed 3 days after the last reply. New replies are no longer allowed.