Server Fault is a question and answer site for system and network administrators. It's 100% free, no registration required.

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

I performed an SOA nslookup on a domain and I am little confused by the exact meaning of the output (see below...names have been changed to protect the innocent):


MYDOMAIN.COM. 10800 IN SOA dns23429.dizinc.COM. 2010072201 86400 7200 3600000 86400

So I understand that "" is the authoritative DNS server but what is the meaning of the entry after that ("")? Is that another authoritative DNS server? I didn't think you could have two authoritative servers. In addition, why would it be on a machine at in the "" domain? That seems kind of strange doesn't it?

share|improve this question
up vote 4 down vote accepted

The SOA start of authority record has several values.

From rfc1035


MNAME  The <domain-name> of the name server that was the
  original or primary source of data for this zone.

RNAME  A <domain-name> which specifies the mailbox of the
  person responsible for this zone.

SERIAL  The unsigned 32 bit version number of the original copy
  of the zone. Zone transfers preserve this value. This
  value wraps and should be compared using sequence space

REFRESH  A 32 bit time interval before the zone should be

RETRY  A 32 bit time interval that should elapse before a
  failed refresh should be retried.

EXPIRE  A 32 bit time value that specifies the upper limit on
  the time interval that can elapse before the zone is no
  longer authoritative.

So for that record.

MYDOMAIN.COM. 10800 IN SOA dns23429.dizinc.COM. 2010072201 86400 7200 3600000 86400
  • MYDOMAIN.COM. - the name that the rest of the details apply to.
  • 10800 - TTL for this specific record if the question was to an authoritative server.
  • IN - the class of records (IN = Internet)
  • SOA - the type of the record (SOA = start of authority)
  • dns23429.dizinc.COM - is the primary source of the zone
  • - is the email address ( of someone responsible for the zone
  • 2010072201 - is the serial number
  • 86400 - is the refresh value (how often secondaries will try and reload the zone if no notifies are sent)
  • 7200 - is the retry time (how long a secondary will wait between retries after a transfer failure)
  • 3600000 - is the expiration time (how long a secondary will keep a copy of the zone if it cannot contact the primary server)
  • 86400 - the default time to live for records. That is the maximum value a record should be cached by any other DNS servers.
share|improve this answer
MINTTL doesn't mean that any more, it's now the negative caching time. See RFC 2308. – Alnitak Sep 12 '10 at 7:12

"" is actually "somename@hotmail.COM" as the email contact.

share|improve this answer

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.