Manual Workaround for BIND file/DNS Import to Enhance?

lcs

Hello,

Does anyone have a manual but still somewhat automated way to import BIND files into Enhance? If we use the Cloudflare integration, whatever is in Enhance overwrites what's in Cloudflare. So I'm thinking, could I create a site, and let Enhance create all of it's default stuff, and then via the file manager or SSH edit the Enhance DNS file (assuming it's not in a database) and overwrite it with the export from Cloudflare? Restart the DNS service, and refresh the Enhance CP, and see the changes there? Then turn on the Cloudflare integration for that domain?

xyzulu

I haven’t got around to it, but the only way to do this is via the api. I've poked around with a coding bot.. this seems fairly easy to create a cli app (probably just a bash script) to do this.. if I do come up with something I am comfortable with I will share it. I've been sharing all the Enhance related commands/scripts here: https://github.com/xyzulu/enhance-related-commands/wiki

xyzulu

Ok, I have something working now, see: https://github.com/xyzulu/enhance-related-commands/blob/main/import_dns_zone.sh

I've pondered retrieving the website ID and domain ID but worry that it might make the script more dangerous without multiple checks.. which I am not particularly invested in creating for $$0 😉

python was much better at parsing the zone file, I wasted time trying to do it with just shell tools.

Hope it helps even one person.. improvements welcome.. ie you can contribute if you want.. feature requests.. not really welcome, sorry 😃

lcs

Wow, I just tried this and it works great. This will help bridge the gap to get us onboarded to Enhance until they allow Cloudflare API Importing, etc. Thanks for the work.

Also, I don't think anyone is looking for anything for free, at least not me. Would always be happy to donate to things like this.

Aren't there coding bounty things where people can pledge and pay for enhancements and if the bounty gets worth their time they can accept, post a POC, and get paid? Maybe we need this here! 🙂

xyzulu

lcs Maybe we need this here!

I tried to float such an idea here: https://community.enhance.com/d/2527-building-apps-using-the-enhance-api-to-enhance-enhance
.. didn't seem like too many were interested.

Potentially, though we will hit limits.. it would be possible to build an Enhance app that could add the features Enhance have not yet added to the UI but have added API endpoints for. It's potentially a big task, and when Enhance change things without any explanation or notification the whole system may have issues.

.. anyway.. that is a side point

lcs Lastly, the _dmarc record came in, but the TXT content isn't in quotes, so the CF Dashboard has a warning.

Enhance doesn't usually show the quote in the UI.. perhaps they are removing them but they are actually in the .json of the zones. This would be easy to fix in the script, but I fear the more I get into it the more frustrating I will get with finding things like this.

Edit: I tested this.. Enhance does just that.. add a TXT record in the UI with quotes.. save.. and then you will see the quotes are removed in the UI (but added to the zone). I can fix this up when I have time.. and I will .. but I am beginning to hate finding out things that have been coded without any documentation like this.

Summary: Enhance DNS manager strips the "'s (quotes) from TXT record values in the UI. There is no indication as to whether the DNS zone contains them or not in the UI. Adding via the API has a different result.

lcs

Might have spoken too soon. So I imported the DNS, looks great in Enhance CP. Update @ A, and www records to enhance server IP. Enabled CF integration, successful. Check CF DNS Dashboard and it has only 4 records.

The @A record was changed to domain.com instead of @. Correct IP.
The www record was correctly updated to the new IP.
Selector2 (Selector1 is gone) of the DKIM record.
autodiscover.outlook.com remains/is correct.

In all, 5 records including the MX, _dmarc, other selector1 for DKIM, SPF txt record, and a CNAME for www to domain.com.

There's got to be a rhyme or reason, but seems more like a bug in the CF API.

For testing, I deleted everything from the CF DNS, and toggled the CP API connection for the domain, and we got more this time 6 records in total, but still missing SPF record, DKIM Selector1 Record.. I think the CNAME of www to domain.com is redundant.

Lastly, the _dmarc record came in, but the TXT content isn't in quotes, so the CF Dashboard has a warning. It was in quotes before we started this exercise. TXT records are not in double quotes in the Enhance CP, so I'm guessing that would need to be added to the CF Integration.

xyzulu

My workflow was not to have the domain connected to CF.. import the records.. check.. then enable the CF integration for the domain.

lcs

xyzulu Yep. That's what I did. Once enabling CF, it should overwrite all of the records in CF with whatever is in Enhance, but that's not happening.

xyzulu

lcs I can't see how this script would affect that.. but I will test it when I next need to use it.

xyzulu

Ok, I have updated the script @lcs feel free to test.. I haven't had a chance yet, but I think it's safe enough. TXT records should be encapsulated in " " now.

Edit: I've tested, it appears to work well.