Server Fault is a question and answer site for system and network administrators. It's 100% free, no registration required.

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

I setup a DNS configuration for, but when I perform a "dig", I get a SERVFAIL, which leads me to believe I made a mistake in my configuration. I think I may have specified that the nameserver for is, so a circular dependency is created whereby a user must resolve in order to resolve (can someone confirm?).

To my great surprise, if I perform "dig", the DNS server responds with a CNAME record (ie. somehow, dig was able to get an answer from my iodine server).

I'm 99.8% sure it is NOT due to a cache somewhere, since I can reproduce using entirely new/unique hostnames for the iodine server that were not in any cache. I was thinking maybe the DNS server was providing some glue records, but as far as I can tell, the additional data sections are all empty.

I'm trying to understand what's going on here / how this works. If dig is unable to resolve to an ip address, how is dig able to resolve for which is a nameserver? What am I missing here?


share|improve this question
That is interesting. Now I am even more confused. If I dig, I get, which appears to be reserved as private network space, so I don't understand how this address could be valid. Certainly not an address I setup. All I did is setup an A record (iodine-> and an NS record (iodine-> At the address, I have a DNS server that responds to where XX is a number. I don't understand where the came from, nor do I understand how zXX appears to be served from there. – Diana Fong Apr 2 '13 at 5:17
I am starting to think that NameCheap (my registrar) is doing fancy things with the host records. I am thinking that is owned by them, and when I add my NS record, they are having their name server consult my name server. Does this make any sense, or am I completely off base? I am also still very confused as to why/how their nameserver has a 10.x.x.x address. – Diana Fong Apr 2 '13 at 5:46

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Browse other questions tagged or ask your own question.