DNS Warnings, Website not loading
Hello! I've got two issues:
1. I have three ⚠️ warning symbols on my Cloudflare DNS records page for my site. Two of them are on A records (screenshot 1), and one is on the single SRV record (screenshot 2), all related to email. All my DNS records were simply copied over from DreamHost's list of existing records. For the error shown in screenshot 1, I clicked on the Learn more link, and it brought me to a page about TLS certificates. I checked in the DreamHost Security panel for my site, and it does have a TLS certificate, called "Let's Encrypt Certificate".
2. My site isn't loading. I'm not sure if this is Cloudflare or DreamHost or WordPress, but I thought it would be worth asking y'all smart people. My site is giving a too many redirects error (screenshot 3) when I try to load it. It was fully functional before I added the new DNS records related to email. Note: The records above were not the only ones I added for email.
Thanks :)
2 Replies
I have three ⚠️ warning symbols on my Cloudflare DNS records page for my site. Two of them are on A records (screenshot 1), and one is on the single SRV record (screenshot 2), all related to email. All my DNS records were simply copied over from DreamHost's list of existing records. For the error shown in screenshot 1, I clicked on the Learn more link, and it brought me to a page about TLS certificates. I checked in the DreamHost Security panel for my site, and it does have a TLS certificate, called "Let's Encrypt Certificate".Wildcard Certs (
*
) only cover the specific level, ex: *.example.com
would cover webmail.example.com
but not www.webmail.example.com
because www
is on another level deeper. Even assuming your origin has a valid tls certificate covering that, Cloudflare's free Universal SSL certificate doesn't (because it's just a simple wildcard on the first level)
Probably doesn't matter though as I doubt you use www
webmail or mailboxes unless it redirects you there. The srv record warning is just saying you have another record on your domain autoconfig
proxied pointing at autoconfig.dreamhost.com
. Since it's proxied, CF hides the origin IP. Then you have the SRV record which also points to autoconfig.dreamhost.com
which can't be proxied, revealing the origin's IP. Another thing that doesn't matter too much, espec not for your setup where that's Dreamhost's IP/servers anyway
My site isn't loading. I'm not sure if this is Cloudflare or DreamHost or WordPress, but I thought it would be worth asking y'all smart people. My site is giving a too many redirects error (screenshot 3) when I try to load it. It was fully functional before I added the new DNS records related to email. Note: The records above were not the only ones I added for email.under SSL/TLS -> Overview, change the SSL Encryption mode to "Full (Strict)" from Flexible Magic link: https://dash.cloudflare.com/?to=/:account/:zone/ssl-tls
Thank you very much! My site's back up.