@mediatemple other people (like AWS) disagree with your use of SERVFAIL for CNAME responses. Common DNS client implementation do, too.
