我一直在尝试使用Amazon SES设置DKIM CNAME签名我的子域之一,由于某些原因,CNAME的行为很奇怪:
例如。
下列:
dig @4.2.2.4 pznfjjljalcr5ocdaxrjia27nbf7cial._domainkey.support.formsdotstar.com
有时回报:
; <<>> DiG 9.8.3-P1 <<>> @4.2.2.4 pznfjjljalcr5ocdaxrjia27nbf7cial._domainkey.support.formsdotstar.com ; (1 server found) ;; global options: +cmd ;; Got answer: ;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 10537 ;; flags: qr rd ra; QUERY: 1, ANSWER: 2, AUTHORITY: 0, ADDITIONAL: 0 ;; QUESTION SECTION: ;pznfjjljalcr5ocdaxrjia27nbf7cial._domainkey.support.formsdotstar.com. IN A ;; ANSWER SECTION: pznfjjljalcr5ocdaxrjia27nbf7cial._domainkey.support.formsdotstar.com. 170 IN CNAME support.formsdotstar.com. support.formsdotstar.com. 170 IN A 23.239.84.67 ;; Query time: 223 msec ;; SERVER: 4.2.2.4#53(4.2.2.4) ;; WHEN: Wed May 11 22:56:02 2016 ;; MSG SIZE rcvd: 116
并在其他时间返回:
; <<>> DiG 9.8.3-P1 <<>> @4.2.2.4 pznfjjljalcr5ocdaxrjia27nbf7cial._domainkey.support.formsdotstar.com ; (1 server found) ;; global options: +cmd ;; Got answer: ;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 31484 ;; flags: qr rd ra; QUERY: 1, ANSWER: 1, AUTHORITY: 1, ADDITIONAL: 0 ;; QUESTION SECTION: ;pznfjjljalcr5ocdaxrjia27nbf7cial._domainkey.support.formsdotstar.com. IN A ;; ANSWER SECTION: pznfjjljalcr5ocdaxrjia27nbf7cial._domainkey.support.formsdotstar.com. 174 IN CNAME pznfjjljalcr5ocdaxrjia27nbf7cial.dkim.amazonses.com. ;; AUTHORITY SECTION: dkim.amazonses.com. 774 IN SOA ns-386.awsdns-48.com. awsdns-hostmaster.amazon.com. 1 7200 900 1209600 86400 ;; Query time: 232 msec ;; SERVER: 4.2.2.4#53(4.2.2.4) ;; WHEN: Wed May 11 22:56:01 2016 ;; MSG SIZE rcvd: 226
最初我以为这是一个传播问题,但它出现在相同的DNS服务器。
什么可能是错的?
formsdotstar.com的四个名称服务器返回不同的答案:
$ dig @ns1bqx.name.com pznfjjljalcr5ocdaxrjia27nbf7cial._domainkey.support.formsdotstar.com ;; ANSWER SECTION: pznfjjljalcr5ocdaxrjia27nbf7cial._domainkey.support.formsdotstar.com. 300 IN CNAME pznfjjljalcr5ocdaxrjia27nbf7cial.dkim.amazonses.com. dig @ns2dfg.name.com pznfjjljalcr5ocdaxrjia27nbf7cial._domainkey.support.formsdotstar.com ;; ANSWER SECTION: pznfjjljalcr5ocdaxrjia27nbf7cial._domainkey.support.formsdotstar.com. 300 IN CNAME support.formsdotstar.com. support.formsdotstar.com. 300 IN A 23.239.84.67 $ dig @ns3dkz.name.com pznfjjljalcr5ocdaxrjia27nbf7cial._domainkey.support.formsdotstar.com ;; ANSWER SECTION: pznfjjljalcr5ocdaxrjia27nbf7cial._domainkey.support.formsdotstar.com. 300 IN CNAME pznfjjljalcr5ocdaxrjia27nbf7cial.dkim.amazonses.com. $ dig @ns4ghm.name.com pznfjjljalcr5ocdaxrjia27nbf7cial._domainkey.support.formsdotstar.com ;; ANSWER SECTION: pznfjjljalcr5ocdaxrjia27nbf7cial._domainkey.support.formsdotstar.com. 300 IN CNAME support.formsdotstar.com. support.formsdotstar.com. 300 IN A 23.239.84.67