1289100 - Use hosting NS servers for mozilla.cz domain

Status: RESOLVED FIXED

(Infrastructure & Operations :: DNS and Domain Registration, task)

Description

[Michal Stanke (Mozilla.cz) [:mstanke][:MikkCZ]]

To be able to use some hosting features, like DKIM, automatic DNS management and Let's Encrypt once it's possible to get HTTPS certs for Mozilla owned domains, we need to change the current NSSET from "MM1828015" (https://www.nic.cz/whois/nsset/MM1828015/) to "NSS:HOSTINGLINE001:1" (https://www.nic.cz/whois/nsset/NSS:HOSTINGLINE001:1/).

Before the actual change, I would like to make sure all DNS records are set correctly in the new place. I am currently aware of:
- A/AAAA records for (www.)mozilla.cz, forum.mozilla.cz, jasnapakablog.mozilla.cz, start.mozilla.cz
- CNAME for firefox.mozilla.cz, thunderbird.mozilla.cz
- MX and SPF (TXT) for mozilla.cz
Are there any extra records I have missed? If not, feel free to proceed with the change immediately.

Comment 1

[Brian Hourigan [:digi]]

:MikkCZ,

I can confirm that you've gotten all of the records configured at your new dns provider. I've updated the DNS servers at MarkMonitor to:

nserver:      ns1.thinline.cz
nserver:      ns2.thinline.cz
nserver:      ns3.cesky-hosting.eu

I'll leave this bug open until tomorrow, as I'll want to clean up and remove mozilla.cz from inventory/Akamai before closing the bug.

Please let us know if you need anything else until then.

Comment 2

[Michal Stanke (Mozilla.cz) [:mstanke][:MikkCZ]]

Thank you :digi. Is it possible to set NSS:HOSTINGLINE001:1 directly? I do not see any issue in having the list of nameservers managed by the same entity as the DNS records in them? If not, nothing bad should happen.

Comment 3

[Brian Hourigan [:digi]]

(In reply to Michal Stanke (Mozilla.cz) [:MikkCZ] from comment #2)
> Thank you :digi. Is it possible to set NSS:HOSTINGLINE001:1 directly? I do
> not see any issue in having the list of nameservers managed by the same
> entity as the DNS records in them? If not, nothing bad should happen.

I can only configure nameservers individually. MarkMonitor does not support nsset profiles from nic.cz.

Comment 4

[Michal Stanke (Mozilla.cz) [:mstanke][:MikkCZ]]

That's OK, NSSETs are something special for .cz domains and there should be no need to use the one provided by the hosting until it is used for the same domain as one of the NS servers is.

I have verified the website works as expected and the DNS requests are resolved by the new servers for me. Also the automated hosting features dependent on DNS are available. Feel free to mark as RESOLVED/VERIFIED once the cleanup is done.

Comment 5

[Brian Hourigan [:digi]]

> I have verified the website works as expected and the DNS requests are
> resolved by the new servers for me. Also the automated hosting features
> dependent on DNS are available. Feel free to mark as RESOLVED/VERIFIED once
> the cleanup is done.

Thank you; I've removed mozilla.cz from inventory and Akamai.