# Help: DNS Providers

**URL:** https://community.getzonerails.com/c/help-dns-providers/7.md

[Latest](https://community.getzonerails.com/latest.md) · [Categories](https://community.getzonerails.com/categories.md) · [Tags](https://community.getzonerails.com/tags.md)

---

## [About the Help: DNS Providers category](https://community.getzonerails.com/t/about-the-help-dns-providers-category/9)

<div class="topic-metadata">

**Author:** [@LanPow](https://community.getzonerails.com/u/LanPow)\
**Replies:** 0\
**Last updated:** [October 10, 2026, 7:02pm UTC](https://community.getzonerails.com/t/about-the-help-dns-providers-category/9 "2026-10-10T19:02:57Z")

</div>

Problems with a DNS provider connection: Cloudflare, Active Directory DNS, BIND and others. Tag the provider.

---

## [Load Balancing tab is missing](https://community.getzonerails.com/t/load-balancing-tab-is-missing/28)

<div class="topic-metadata">

**Author:** [@LanPow](https://community.getzonerails.com/u/LanPow)\
**Replies:** 1\
**Last updated:** [October 10, 2026, 9:41pm UTC](https://community.getzonerails.com/t/load-balancing-tab-is-missing/28 "2026-10-10T21:41:52Z")

</div>

I registered for Pro and my Cloudflare token has the load balancing permissions, but one of my users still doesn’t see the 03 // LOAD BALANCING tab. Admins see it fine. The user has a custom role we created a while ago.

---

## [AD DNS: SPF TXT record split up, and TXT with a backslash refused](https://community.getzonerails.com/t/ad-dns-spf-txt-record-split-up-and-txt-with-a-backslash-refused/25)

<div class="topic-metadata">

**Author:** [@LanPow](https://community.getzonerails.com/u/LanPow)\
**Replies:** 1\
**Last updated:** [October 10, 2026, 9:41pm UTC](https://community.getzonerails.com/t/ad-dns-spf-txt-record-split-up-and-txt-with-a-backslash-refused/25 "2026-10-10T21:41:51Z")

</div>

Our SPF TXT record on AD DNS was saved split into pieces at the spaces. On 1.7.0 the split is gone, but a different TXT value containing a backslash is now refused outright. Why can’t I save it?

---

## [AD DNS: deleted records come back, and edits leave the old MX value behind](https://community.getzonerails.com/t/ad-dns-deleted-records-come-back-and-edits-leave-the-old-mx-value-behind/24)

<div class="topic-metadata">

**Author:** [@LanPow](https://community.getzonerails.com/u/LanPow)\
**Replies:** 1\
**Last updated:** [October 10, 2026, 9:41pm UTC](https://community.getzonerails.com/t/ad-dns-deleted-records-come-back-and-edits-leave-the-old-mx-value-behind/24 "2026-10-10T21:41:51Z")

</div>

On AD DNS, deleting a CNAME shows success but the record is still on the DC. Editing an MX record added the new value and kept the old one. The Activity Log also shows changes as done that Windows clearly rejected. Is th…

---

## [Setting up an Active Directory DNS connection (WinRM, 401, CIM access denied)](https://community.getzonerails.com/t/setting-up-an-active-directory-dns-connection-winrm-401-cim-access-denied/23)

<div class="topic-metadata">

**Author:** [@LanPow](https://community.getzonerails.com/u/LanPow)\
**Replies:** 1\
**Last updated:** [October 10, 2026, 9:41pm UTC](https://community.getzonerails.com/t/setting-up-an-active-directory-dns-connection-winrm-401-cim-access-denied/23 "2026-10-10T21:41:51Z")

</div>

Adding our domain controller as an AD DNS connection. The test fails with a 401 for one account, and for a read-only audit account it says “Cannot connect to CIM server. Access denied”. What does the account actually nee…

---

## [Getting 502 CLOUDFLARE\_REFUSED after upgrading to 1.7.0](https://community.getzonerails.com/t/getting-502-cloudflare-refused-after-upgrading-to-1-7-0/22)

<div class="topic-metadata">

**Author:** [@LanPow](https://community.getzonerails.com/u/LanPow)\
**Replies:** 1\
**Last updated:** [October 10, 2026, 9:41pm UTC](https://community.getzonerails.com/t/getting-502-cloudflare-refused-after-upgrading-to-1-7-0/22 "2026-10-10T21:41:50Z")

</div>

Since moving to 1.7.0, one of our Cloudflare connections fails with a 502 and the code CLOUDFLARE\_REFUSED. Before the upgrade I think the same thing showed as a 403 and we assumed it was a role problem in ZoneRails. What…

---

## [Which permissions does the Cloudflare API token need?](https://community.getzonerails.com/t/which-permissions-does-the-cloudflare-api-token-need/21)

<div class="topic-metadata">

**Author:** [@LanPow](https://community.getzonerails.com/u/LanPow)\
**Replies:** 1\
**Last updated:** [October 10, 2026, 9:41pm UTC](https://community.getzonerails.com/t/which-permissions-does-the-cloudflare-api-token-need/21 "2026-10-10T21:41:50Z")

</div>

Creating a Cloudflare API token for ZoneRails. Which permissions should I tick? I’d rather not use the Global API Key. Right now DNS works but the Load Balancing and Connectors tabs say I’m missing permission groups.
