SERVFAIL by resolving DNS-names on 1.1.1.1

Hello,

we have some reports, that it is not possible to resolve telekom.de FQDNs with Cloudflare

dig shopseite .telekom. de @1.1.1.1

;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: SERVFAIL, id: 36299

dig shopseite. telekom. de @8.8.8.8
;; Got answer:
;; flags: qr rd ra;
;; ANSWER SECTION:
shopseite .telekom. de. 21317 IN CNAME shopseite .telekom. de. yext-cdn. com.

cloudflare. sitescdn. net. cdn. cloudflare .net. 20 IN A 104.18.116.52

several other names are affected, while www.telekom.de works, although it is provided by same auth server.

Additional info:
nslookup -vc -class=chaos -type=txt id. server 1.1.1.1
Server: 1.1.1.1
Address: 1.1.1.1#53

Non-authoritative answer:
id. server text = “FRA”

Make sure you’re not making DNS queries to 1.1.1.1 from broken Cisco Wireless LAN setup.
More details here: https://blog.cloudflare.com/fixing-reachability-to-1-1-1-1-globally/

As you can see, the 1.1.1.1 does send a reply, but it is unable to resolve the hostname.

Reported as #2005013