Server Fault is a question and answer site for system and network administrators. Join them; it only takes a minute:

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

We have an issue resolving the alias record from our internal Windows 2008 DNS servers that are using hints - the result is non-existent domain (NXDOMAIN). It looks up fine when using a BIND server. I've also tried this from - the results look the same as what I'm getting from Windows.

The record in question is a CNAME to (education added to the domain). The Windows server does resolve this A record correctly.

The name server for returns an NXDOMAIN result with an authority record of itself. And it is not one of the DNS servers for Based on the info here: it seems it should not be returning itself as an authority record, not return an authority record at all, or it should return the authority record for or even return the A record from

A really strange thing is that I can manage to get it to resolve if I run an nslookup 'set q=any' and then lookup But then if I clear the forward cache and start nslookup over, it will fail again without the q=any.

Also, after clearning the cache, if I run nslookup set q=any - the result does not include the internet addresses of the ns1(primary) & ns2 nameservers, but it does return the internet addresses for the other nameservers.

I'm trying to figure out if this is an issue at or if it's something on my end (MS DNS).

Thank you

share|improve this question
up vote 1 down vote accepted

It's not you. DNSstuff is reporting the same thing you are, in addition to a few other problems.

share|improve this answer
I found and did a domain health check for Problems reported that may be relevant: Your nameserver do not include A records when asked for your NS records, I have detected 6 stealth nameservers: . These are listed in your nameservers but are missing in the parent zone nameservers. I don't have acess to DNSstuff but I have to agree with you. Thanks! – Jay Aug 24 '11 at 14:32
Glad to help... – joeqwerty Aug 25 '11 at 0:38

Everything appears to be working correctly when I look at the records. This is via a Windows DNS server. Maybe the hint is screwing up the lookup?


Non-authoritative answer:     canonical name =   internet address =

Non-authoritative answer:   internet address =
share|improve this answer
The root hints appear to be working - all of their DNS server names resolve just fine. And FWIW, they have other cname records like teacher that do not involve their own DNS servers that do resolve. Thanks for responding! – Jay Aug 23 '11 at 22:27

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.