# CloudFlare external DNS

**URL:** <https://discourse.mailinabox.email/t/cloudflare-external-dns/928>\
**Category:** Help with Setup/Upgrade\
**Created:** [November 13, 2015, 7:19am UTC](https://discourse.mailinabox.email/t/cloudflare-external-dns/928 "2015-11-13T07:19:08Z")\
**Posts on this page:** 7\
**Page:** 1

<div class="post-metadata">

**Author:** ![m4rcs](https://discourse.mailinabox.email/user_avatar/discourse.mailinabox.email/m4rcs/32/55_2.png) [@m4rcs](https://discourse.mailinabox.email/u/m4rcs)\
**Post date:** [November 13, 2015, 7:19am UTC](https://discourse.mailinabox.email/t/cloudflare-external-dns/928/1 "2015-11-13T07:19:08Z")

</div>

Has anyone tried to setup their miab with cloudflare?

---

<div class="post-metadata">

**Author:** ![aspdye](https://discourse.mailinabox.email/user_avatar/discourse.mailinabox.email/aspdye/32/230_2.png) [@aspdye](https://discourse.mailinabox.email/u/aspdye)\
**Post date:** [November 14, 2015, 12:08pm UTC](https://discourse.mailinabox.email/t/cloudflare-external-dns/928/2 "2015-11-14T12:08:42Z")

</div>

Hi m4rcs,

You are able to use CloudFlares Free DNS Service with your Mail in a Box. But this is **not** recommended.  
CloudFlare does not support DNSSEC and DANE TLSA 😉

But if you want to setup it with CloudFlare, just add your domain to your CloudFlare Account, and type in the records standing in the “External DNS” Section of your MiaB-Instance 😉 This will work fine 🙂

---

<div class="post-metadata">

**Author:** ![m4rcs](https://discourse.mailinabox.email/user_avatar/discourse.mailinabox.email/m4rcs/32/55_2.png) [@m4rcs](https://discourse.mailinabox.email/u/m4rcs)\
**Post date:** [November 14, 2015, 5:33pm UTC](https://discourse.mailinabox.email/t/cloudflare-external-dns/928/3 "2015-11-14T17:33:52Z")

</div>

Ehm [DNSSEC is supported](https://blog.cloudflare.com/introducing-universal-dnssec/), so that why i’m asking.

---

<div class="post-metadata">

**Author:** ![aspdye](https://discourse.mailinabox.email/user_avatar/discourse.mailinabox.email/aspdye/32/230_2.png) [@aspdye](https://discourse.mailinabox.email/u/aspdye)\
**Post date:** [November 14, 2015, 5:41pm UTC](https://discourse.mailinabox.email/t/cloudflare-external-dns/928/4 "2015-11-14T17:41:49Z")

</div>

Hi m4rcs,

Thank you for this information. That was new to me 😄  
I will test their implementation, but that sounds great!

---

<div class="post-metadata">

**Author:** ![aspdye](https://discourse.mailinabox.email/user_avatar/discourse.mailinabox.email/aspdye/32/230_2.png) [@aspdye](https://discourse.mailinabox.email/u/aspdye)\
**Post date:** [November 14, 2015, 7:01pm UTC](https://discourse.mailinabox.email/t/cloudflare-external-dns/928/5 "2015-11-14T19:01:01Z")

</div>

So… I have tested it. It is right that you can use DNSSEC with CloudFlare now. But this is not working with MiaB.  
These are the reasons, why not:

- The DNSSEC Implementation of CloudFlare does only allow to use Keys generated by themself 😉 You cannot import the one generated by MiaB. (…and in my opinion you cannot import the key from CloudFlare to your MiaB because CloudFlare does not tell you the private part of the key ;))
- Creating TLSA Records (for DANE TLS) is not supported (yet) by the DNS Editor of CloudFlare.

But you can still use CloudFlares DNS without DNSSEC or DANE TLS.

---

<div class="post-metadata">

**Author:** ![JoshData](https://discourse.mailinabox.email/user_avatar/discourse.mailinabox.email/joshdata/32/2153_2.png) [@JoshData](https://discourse.mailinabox.email/u/JoshData)\
**Post date:** [November 16, 2015, 4:42pm UTC](https://discourse.mailinabox.email/t/cloudflare-external-dns/928/6 "2015-11-16T16:42:25Z")

</div>

> [@aspdye](#):
>
> You cannot import the one generated by MiaB.

That’s fine. I don’t think it matters whose keys you use, as long as the ones that are actually in use correspond to the DS record that you set at your registrar. You’ll just have to ignore the box’s status checks about the DS record being incorrect configured.

---

<div class="post-metadata">

**Author:** ![system](https://discourse.mailinabox.email/uploads/default/original/2X/4/4d0933d13c456b7e57f296aa6cc344525b6f0c70.png) [@system](https://discourse.mailinabox.email/u/system)\
**Post date:** [November 23, 2015, 4:42pm UTC](https://discourse.mailinabox.email/t/cloudflare-external-dns/928/7 "2015-11-23T16:42:33Z")

</div>

This topic was automatically closed 7 days after the last reply. New replies are no longer allowed.