Earlier this year the CA/Browser Forum voted to make Certificate Authority Authorization (CAA) mandatory for all Certificate Authorities. What this means that domains will need to assert via DNS records (the CAA DNS RRType) which CA’s are permitted to issue certificates for your domains. Think of it as “sort of like SPF, but for SSL/TLS certs”.
Update: 6:10PM EST Situation Resolved
The situation has been resolved, we have temporarily shutdown access to web servers and SMTP while our systems sync up and reset, we should be back to full functionality within 10 to 20 minutes.
Thank you all for your patience and understanding, we’re very sorry this occurred and we’ll be posting an RFO on the main blog in the near future.
easyDNS is experiencing an outage affecting the main easydns website, the control panel and easyMail.
The impact on easyMail is that inbound mail is being deferred and will be queued remotely by originating servers pending a retry. No email will be lost or bounced.
DNS is unaffected.
The reason why is a database issue, we are not under a DDOS.. Ops are in the process of rectifying this right now.
Why are we posting this here on Zoneedit?
We recently updated our website front end and made the decision to move the blog (including the status channel) from blog.easydns.org to www.easydns.com/blog (regretting that at the moment), as such, the status blog is contained within the affected systems.
We will post any updates in this space, ideally the next update will be a resolution, followed by a post-incident RFO to the main blog.
Please hang in there, we know email unavailability is one of the most painful outages to undergo (especially on a Monday!), ours is affected too.
Your patience is highly valued.
We would like to announce that we have implemented the Sender Rewrite Scheme, or SRS, on our mail forwarding services. This is designed to remedy the increasingly prevelant problem with SPF enforcement breaking email forwarding services from any provider, including ourselves.
The SPF protocol allows domain administrators to specify which mailservers are authorised to send email from addresses within that domain name, this helps reduce spam in general and the problem of spammers pretending they are sending from domains they have no connection to. The problem arises when a domain with SPF records in place sends email to an address which is in turn forwarded to an address which enforces SPF. The receiving server looks at the domain in the return_path header from the email and compares the IP of the mailserver it is receiving the email from, which is the forwarding server, with the list of allowed mailservers for that domain. Naturally the sender does not have any connection to the provider forwarding the mail and the forwarding mailservers IP is not on the list of authorised servers, and the receiving server bounces the email.
SRS rewrites the return_path header to maintain a record of the original sender information but ending in a domain name controlled by the forwarding provider, in our case srszone.org, which has an SPF record which includes the forwarding server and so passes the recipient SPF check, preventing the forwarding mail from bouncing.
For anyone who for any reason does not want their domain’s mail forwarding to make use of SRS we are shortly rolling out the ability to disable this through your domains email settings, for the time being you can send us a request to exempt your domain through the Get Support link at the top left of your account.
Over the last few days users have intermittently encountered problems when trying to access the Zoneedit contol panel at https://cp.zoneedit.com.
Error encountered is:
We are experiencing technical difficulties (ca).
This is sometimes occurring because the number of database connections from the control panel to the database backend has maxed out. In other words, it’s a capacity issue on the DB.
We have provisioned new hardware and will be rebuilding the DB backend this coming week (Oct 17th, 2016) and will be bringing the new DB online by end-of-week.
In the meantime, if this occurs please know we are aware of the problem and will get the immediate situation under control when it happens while we execute the upgrade.
Thanks for understanding.
We will be performing emergency maintenance on dynamic.zoneedit.com, our dynamic DNS update server, today between 2:00 PM and 4:00 PM EDT. Customer impact is expected to be minimal, but domains using dynamic dns may experience delayed updates during this period.
We apologize for the short notice.
At approximately 11:50 am ET the primary link to our Markham datacenter failed. Our datacenter facility has a backup link with another provider, however our BGP advertisements were not accepted via the new data route.
Services impacted included access to the Zoneedit control panel. DNS resolution, email and URL forwarding were NOT impacted.
As we worked with our data centre provider connectivity was intermittent until full restoration occurred at approximately 1:30pm ET
We have commenced a course of action to secure additional redundancy in addition to that provided by our datacenter vendor.
Zoneedit apologizes for the downtime.
At the moment when you login you will see “no domains in account”, we are rectifying this and will restore normal services shortly.
We had an issue this morning where the following servers were timing out rather than resolving domains. The pointing of those hostnames has been changed to get them working again and we are investigating the cause of the initial problem. If you still see problems with them then once the changes propagate you should see them working again.
Here is a quick walkthrough the new ZoneEdit control panel, including a look at the dynamic DNS setup. You can also watch it in a larger resolution on Youtube.
You may now move your domain registration over to ZoneEdit and consolidate management of both the domain registry and your DNS.
Things to Know:
- Domain transfers cost $12 and add 1 year of time, you don’t lose anything if you still have time left with your old registrar – it functions as if it’s an “early renewal”
- FREE DOMAIN PRIVACY on the first 5,000 domains transferred to ZoneEdit (valid for .com, .net, .org, .biz and .info domains) – (a $9.95/year value)
- FYI: Your Registrar of record will show up as “easyDNS” (ZoneEdit’s parent company), with ZoneEdit as the “Reseller”.
- All transferred domains qualify for Premium Support.
Just log in, manage your domains and click on the Switch Registrar link: