Archived and Closed
This conversation is no longer open for comments or replies and is no longer visible to community members. The community moderator provided the following reason for archiving: Not an active conversation.
I have effectively changed my DNS nameservers and my website is now showing HTTPS. But my Cloudflare dashboard is giving me this warning message: An A, AAAA, CNAME, or MX record is pointed to your origin server exposing your origin IP address. Is this something that I need to fix? If so, what do I need to do?
-
240 Points
Posted 1 year ago
-
8,810 Points
Elyzabeth , Official Rep
-
44,918 Points
-
240 Points
Unfortunately, no. Cloudflare is trying, but I don't understand the information well enough to resolve the problem. Here is the most recent email they sent: "Sorry for the confusion! I would be happy to clarify. If you are pointing your mail records to the same IP as your hosting provider, this IP address will be exposed, and threatened. I'll provide some additional information below regarding Orange and Gray Clouding. Basically, an orange clouded record is being proxied by and protected by Cloudflare. A Gray Clouded record is not. If possible, we recommend pointing your MX records at an IP address other than your origin so that the IP of your origin is not at risk."
I don't even know what this means.On Cloudflare, I have 2 records that don't have any clouds (so I wouldn't know how to change them):
a) CNAM * (apparently it is some kind of wildcard record)
b) MX tracimuzikpianoinstruction is an alias of website 010.homestead.com
I think the MX record is the one she is referring to, but I don't know if my mail records point to the same IP as my hosting provider and I don't know how to find out or change it, if need be.
What should I do next?
I don't even know what this means.On Cloudflare, I have 2 records that don't have any clouds (so I wouldn't know how to change them):
a) CNAM * (apparently it is some kind of wildcard record)
b) MX tracimuzikpianoinstruction is an alias of website 010.homestead.com
I think the MX record is the one she is referring to, but I don't know if my mail records point to the same IP as my hosting provider and I don't know how to find out or change it, if need be.
What should I do next?
Elyzabeth , Official Rep
-
44,918 Points
Can you post a screen shot of the DNS page on Cloudflare and I'll let you know if anything needs to be corrected?
-
240 Points
-
240 Points
-
240 Points
Elyzabeth , Official Rep
-
44,794 Points
Ok, please change that first A record that points to your domain to 108.167.135.86
Please delete the CNAME for mail and smtp
Please change the MX record to mx.tracimuzikpianoinstruction.com
Also, please add these A records
mx.tracimuzikpianoinstruction.com 66.96.142.50
mx.tracimuzikpianoinstruction.com 66.96.142.51
mx.tracimuzikpianoinstruction.com 66.96.142.52
pop.tracimuzikpianoinstruction.com 66.96.135.134
imap.tracimuzikpianoinstruction.com 66.96.135.134
smtp.tracimuzikpianoinstruction.com 66.96.135.134
mail.tracimuzikpianoinstruction.com 66.96.135.134
webmail.tracimuzikpianoinstruction.com 66.96.135.48
email.tracimuzikpianoinstruction.com 66.96.135.48
This will be easiest if you are able to do it from a computer instead of a phone.
Please delete the CNAME for mail and smtp
Please change the MX record to mx.tracimuzikpianoinstruction.com
Also, please add these A records
mx.tracimuzikpianoinstruction.com 66.96.142.50
mx.tracimuzikpianoinstruction.com 66.96.142.51
mx.tracimuzikpianoinstruction.com 66.96.142.52
pop.tracimuzikpianoinstruction.com 66.96.135.134
imap.tracimuzikpianoinstruction.com 66.96.135.134
smtp.tracimuzikpianoinstruction.com 66.96.135.134
mail.tracimuzikpianoinstruction.com 66.96.135.134
webmail.tracimuzikpianoinstruction.com 66.96.135.48
email.tracimuzikpianoinstruction.com 66.96.135.48
This will be easiest if you are able to do it from a computer instead of a phone.
-
240 Points
-
240 Points
I did my best to follow your directions. Cloudflare would not let me include "tracimuzikpianoinstruction.com" with the names of the A records. Now I have additional warnings. Here are current screenshots of my DNS:
Elyzabeth , Official Rep
-
44,782 Points
Ah, try an @ symbol instead of your domain
Also, everything looks good except the MX record. Just replace the part that says inbound.*** to mx.tracimuzikpianoinstruction.com
Also, everything looks good except the MX record. Just replace the part that says inbound.*** to mx.tracimuzikpianoinstruction.com
(Edited)
-
240 Points
-
240 Points
-
240 Points
-
240 Points
-
240 Points
Do you mean (for example):
email@tracimuzikpianoinstruction.com instead of email.tracimuzikpianoinstruction.com?
@ instead of "."
email@tracimuzikpianoinstruction.com instead of email.tracimuzikpianoinstruction.com?
@ instead of "."
Elyzabeth , Official Rep
-
44,722 Points
Sorry, disregard that part of my message, I was looking at the wrong thing. The only thing that I can see needs to be updated is the MX record.
Elyzabeth , Official Rep
-
44,722 Points
They are probably putting your domain name in those records automatically.
-
240 Points
okay. That make sense. Please clarify how I should update the mx record. If I include mx in the name,as you instructed, I get the additional warning: "An MX record was not found for your root domain. An mx record is required for mail to reach @tracimuzikpianoinstruction.com addresses." Am I supposed to point the mx record somewhere else?
Elyzabeth , Official Rep
-
44,722 Points
This record. See how it says inbound....something. (I can't see the rest) please delete the inbound.*** part and replace it with mx.tracimuzikpianoinstruction.com
-
240 Points
okay. It originally said: "Inbound.homesteadmail.com"
I changed it to: "mx.tracimuzikpianoinstruction.com" and it gave this warning: "This record is exposing your origin server's IP address, potentially exposing it to denial of service. I tried: "imbound.mx.tracimuzikpianoinstruction.com" that removes the warning I just mentioned but the original warning: "An A, AAAA, CNAME, or MX record is pointed to your origin server exposing your origin IP address" is still there (nothing I have done has removed that original warning? Any suggestions? Did I misunderstand something?
I changed it to: "mx.tracimuzikpianoinstruction.com" and it gave this warning: "This record is exposing your origin server's IP address, potentially exposing it to denial of service. I tried: "imbound.mx.tracimuzikpianoinstruction.com" that removes the warning I just mentioned but the original warning: "An A, AAAA, CNAME, or MX record is pointed to your origin server exposing your origin IP address" is still there (nothing I have done has removed that original warning? Any suggestions? Did I misunderstand something?
(Edited)
-
240 Points
I'm sorry for being so needy. This is WAY over my head.
Elyzabeth , Official Rep
-
44,722 Points
No it's ok, you aren't being needy! Go ahead and change it back to mx.tracimuzikpianoinstruction.com. I just asked a higher tech and apparently that error is not an issue. It is basically just saying that you are pointing to Homestead.
-
240 Points
Okay. So I now have the mx record pointing to: mx.tracimuzikpianoinstruction.com
So then I still have the original warning: "An A, AAAA, CNAME, or MX record is pointed to your origin server exposing your origin IP address" and the new warning:
"This record is exposing your origin server's IP address, potentially exposing it to denial of service." So it doesn't seem that anything was resolved. Is this correct?
So then I still have the original warning: "An A, AAAA, CNAME, or MX record is pointed to your origin server exposing your origin IP address" and the new warning:
"This record is exposing your origin server's IP address, potentially exposing it to denial of service." So it doesn't seem that anything was resolved. Is this correct?
Elyzabeth , Official Rep
-
44,722 Points
Yes that is correct. Like I said, I asked a higher tech and they informed me that error is not an issue. Basically don't worry about it, it isn't anything bad. Go ahead and continue with the rest of the instructions.
-
240 Points
Okay! Thank You!
Traci9580