CloudFlare external DNS

[m4rcs]

Has anyone tried to setup their miab with cloudflare?

[aspdye]

Hi m4rcs,

You are able to use CloudFlares Free DNS Service with your Mail in a Box. But this is not recommended.
CloudFlare does not support DNSSEC and DANE TLSA

But if you want to setup it with CloudFlare, just add your domain to your CloudFlare Account, and type in the records standing in the “External DNS” Section of your MiaB-Instance This will work fine

[m4rcs]

Ehm DNSSEC is supported, so that why i’m asking.

[aspdye]

Hi m4rcs,

Thank you for this information. That was new to me
I will test their implementation, but that sounds great!

[aspdye]

So… I have tested it. It is right that you can use DNSSEC with CloudFlare now. But this is not working with MiaB.
These are the reasons, why not:

• The DNSSEC Implementation of CloudFlare does only allow to use Keys generated by themself You cannot import the one generated by MiaB. (…and in my opinion you cannot import the key from CloudFlare to your MiaB because CloudFlare does not tell you the private part of the key ;))
• Creating TLSA Records (for DANE TLS) is not supported (yet) by the DNS Editor of CloudFlare.

But you can still use CloudFlares DNS without DNSSEC or DANE TLS.

[JoshData]

@aspdye

You cannot import the one generated by MiaB.

That’s fine. I don’t think it matters whose keys you use, as long as the ones that are actually in use correspond to the DS record that you set at your registrar. You’ll just have to ignore the box’s status checks about the DS record being incorrect configured.