TLSA record breaks DNS server

Community Support DNS
1

Hi!

I have started using HestiaCP’s DNS server. When I add a TLSA record for the mail server, for some reason the name server stops responding. Deleting the TLSA record makes the DNS server reachable again. Bind9 stays on normally. I didn’t find anything out of the ordinary in the HestiaCP log, but can I try to look for the problem somewhere else? I tried it and it doesn’t seem to be affected by whether or not DNS Cluster is setup.

2

Hi @geffa3,

Because Hestia is enclosing the value in double quotes and TLSA record doesn’t allow it.

1.- Remove the TLSA record.

2.- Execute this sed command as root:

sed -i.backup 's/DS" \]; then/DS" \] \&\& \[ "\$rtype" != "TLSA" \]; then/' /usr/local/hestia/bin/v-add-dns-record

Now create a new TLSA record and check whether it works.

1 Like
3

Thank you! This command helped and now TLSA works perfectly.

2 Likes
4

Please create a PR for it …

1 Like
5

Done.

3 Likes
6

Merged

2 Likes