Questions tagged [dig]

dig is a command-line client to make queries against DNS servers, the Internet name servers.

Filter by
Sorted by
Tagged with
269 votes
12 answers
621k views

List all DNS records in a domain using dig?

My company runs an internal DNS for mycompany.example There is a machine on the network that I need to find, but I’ve forgotten its name. If I could see a list, it would probably jog my memory. ...
0 votes
0 answers
35 views

Show intermediate answer when querying DNS

My company has multiple layers of DNS before arriving at a specific node, for example: domain1.company.com CNAME domain2.company.com domain2.company.com CNAME ...
1 vote
0 answers
77 views

Forward DNS does not work. BIND and DIG find nothing

The company's DC is in the Oracle Cloud, and I connect it to the companies via IPSec, and foward the DNS via Domain Override in pfSense or Bind9. I recently picked up a Dream Machine from Ubiquiti to ...
1 vote
2 answers
450 views

Why isn't `nslookup` able to resolve an A record in route53, when I specifically use a nameserver from my hosted zone?

I'm trying to host a static website in s3. I have a domain registered with namecheap, and it is pointing at route53 nameservers. This part seems to be working correctly based on dig: dig getgargoyle....
1 vote
2 answers
5k views

How to enable dig to show status codes?

With default options dig shows the return status for a DNS query in the comment ;; ->>HEADER<<- ... status: NXDOMAIN: ubuntu:~$ dig hosted-by.myinternetservices.com. ; <<>> ...
0 votes
1 answer
710 views

How to make updates to BIND9 zone files to be visible for queries?

I am using BIND 9.18 for testing purpose. I create a zone which supports dynamic DNS, and I try to use nsupdate to update the domain's resource record. After 15 minutes the update is successfully ...
0 votes
1 answer
161 views

How to disable or fix OpenStack intercepting DNS PTR queries

I have several virtual machines with Debian/GNU Linux running on OpenStack. When resolving their internal IPv4 addresses I get some strange results: # ip -c addr show dev eth0 2: eth0: <BROADCAST,...
0 votes
1 answer
37 views

DNS hard to reach after reboot RHEL7

Two weeks ago, two of our four RHEL7 VMs running on same Openstack infrastructure rebooted unprompted and unnoticed. May be externally triggered. Ever since, all services relying on DNS are unreliable ...
0 votes
2 answers
110 views

point CNAME Record to multiple wildcard A Records

I am trying to point my cname to my wildcard FQDN which has multiple A-Records. Dig Output: ;; QUESTION SECTION: ;access.domain.intra. IN A ;; ANSWER SECTION: access.domain.intra. 3600 IN ...
43 votes
7 answers
35k views

Why can host and nslookup resolve a name but dig cannot?

Can anyone tell me why this is happening? I can resolve a hostname using host and/or nslookup but forward lookups do not work with dig; reverse lookups do: musashixxx@box:~$ host someserver ...
2 votes
1 answer
318 views

detect if zone transfer with dig succeed or not via return code

I have script like this CHARSET=ASCII dig domain.com AXFR > domain.com.zone if [ "$?" = "0" ]; then echo "OK" else echo "Something went wrong" ...
8 votes
4 answers
51k views

Combining dig +short command

This command will show the output of MX record: dig @ns1.myname.com myname.com +short MX and this will output A record: dig @ns1.myname.com myname.com +short A My question is how to output both A ...
0 votes
0 answers
257 views

Gmail not detecting PTR record from vultr server

I have an SMTP server running on a vultr VM. I've set up the rDNS to point to my mail domain name mail.idimitrov.dev. The DNS setup points to that machine on ipv4 and ipv6 for mail.idimitrov.dev and ...
0 votes
3 answers
377 views

Google Public DNS always returning NXDOMAIN for certain SLDs

Problem: Google's Public DNS returns NXDOMAIN for certain SLDs. Proof of problem: dig vpn.example.com @8.8.8.8 ; \<\<\>\> DiG 9.11.5-P4-5.1+deb10u8-Debian \<\<\>\> vpn....
0 votes
1 answer
861 views

How does one query the resolver name of a DNS server?

The Shodan search tool, for some DNS servers, shows a Resolver name value for what it finds on UDP port 53. For example, 80.82.117.140 shows Resolver name: server402.xenserve.com and 103.81.27.118 ...
0 votes
1 answer
97 views

Querying the nameserver for NS record of a domain results in a non-authoritative answer

I was wondering why name server record need to be in the zone file, because the delegation is already done by the parent zone. I came across this answer. That answer makes sense, I suppose. Then I ...
13 votes
3 answers
50k views

How to find what Authoritative Name Server provided the answer using dig?

I need to check the differences in records on master and slave when making changes. Is there some option for dig to show which Authoritative Name Server provided the answer? for example dig example....
25 votes
3 answers
24k views

What's the difference between `dig` and `host` when querying a specific name-server?

I was using this command to verify if I'd set things up correctly with a DNS provider: host hostname.example.com ns1.example-nameserver.com As far as I can tell, this asks ns1.example-nameserver.com ...
2 votes
1 answer
365 views

How to make dig to show IP addresses it is sending queries to?

By default when DNS servers do not respond dig does not show any information about the queries being sent. I can use the +qr option to see each query being sent: $ dig +qr archive.ubuntu.com ; <&...
0 votes
1 answer
3k views

Reverse PTR record lookup not working with dig

As mentioned here, having a Reverse PTR record is key for successful email sending and delivery from one's own server. In order to check if it's correctly set for my server, I tried: dig -x 111.111....
1 vote
2 answers
148 views

Can the bulk execution of "dig domain mx" on 5000 domains be considered an attack to the network?

I have a database containing a lot of invalid emails. I want to remove all the emails whose domain does not have mx record. So after I extracted the domain part I wrote a script to bulk check this for ...
0 votes
1 answer
454 views

Why if I run the dig command on an authoritary server I don't get an authoritary asnwer?

I ran dig debian.org ns to get a list of all authoritary servers for debian.org, and when I run dig @auth.server debian.org for some of authoritary servers I get an authorithary response and for ...
1 vote
1 answer
395 views

A/AAAA returns no answer when SRV record exists for hostname

I have encountered a problem where DNS A queries that would normally be answered by *.fqdn started returning NO ANSWER after I added SRV record for service residing on said hostname. Example: *....
0 votes
2 answers
192 views

Why does wildcard dns entry resolve to a singular hostname?

I'm trying to update my letsencrypt wildcard certificate with certbot, but I noticed it behaved strangly when I ran the command. It said it'd add a subdomain name and remove the wildcard as follows: ...
13 votes
2 answers
2k views

How is my DNSSEC enabled domain still serving a tiny number of NXDOMAIN response codes?

I enabled DNSSEC on my primary domain about a week ago. It's not a major website or anything -- just my personal domain name that I use for email and the like (TLD: com; DNSSEC algorithm 13; ...
0 votes
1 answer
56 views

BIND 9 DNS: NS/glue closest delegation used

I have the following example existing delegation: iio.ne.co.uk NS dns1.iio.ne.co.uk, dns1.iio.ne.co.uk HOST 1.2.3.4 If I add a new delegation: soho.iio.ne.co.uk NS sohodns.iio.co.uk, sohodns.iio.ne.co....
0 votes
0 answers
3k views

Oracle Linux 8 can't resolve host names using DNS

EDIT: FIXED -- My Egress Rules were blocking TCP/UDP 53. I have a stock Oracle Linux 8 server running on Oracle cloud (OCI) with Postfix installed that stopped resolving names through DNS after a ...
4 votes
2 answers
29k views

get NS record for domain using dig

I'm currently trying to write a script that validates, whether a given record attached to a name is available via all nameservers that are responsible for that name. E.g. I would like to check ...
0 votes
0 answers
316 views

dig not returning answer for domain registered with namecheap?

Running dig chimu.sh Results in the following: ; <<>> DiG 9.16.1-Ubuntu <<>> chimu.sh ;; global options: +cmd ;; Got answer: ;; ->>HEADER<<- opcode: QUERY, status: ...
0 votes
1 answer
604 views

Why does 'dig <domain.com> ANY' time out?

I've tried to query for 'any' records using dig, and I almost always get a timeout error. but when i google for why this is the case, there doesn't seem to be any answer at all. psmith@pop-os:~$ dig +...
0 votes
1 answer
126 views

If I want to use dig/nslookup to query about machines in a VLAN, how can I find which name server to use?

If I want to use dig/nslookup to query about machines in e.g., 38.102.145.0/24, how can I find the name server to use that could resolve machines in that VLAN?
0 votes
0 answers
1k views

DNS - dig query - NS not returning for sub domain from one location but does for another

I have DNS setup in x2 places and will be repointing NS shortly. Before I do that, I wanted to confirm DNS is correct at both locations. I'm using dig and passing in a file. When I query the NS of the ...
0 votes
1 answer
58 views

Suddenly dig +nocmd pop3.pauperis.org aaaa +noall +answer returns nothing

the command dig +nocmd pop3.pauperis.org aaaa +noall +answer returns the followingin my laptop: pop3.pauperis.org. 3111 IN CNAME pauperis.org. pauperis.org. 3111 IN AAAA 2001:41d0:...
3 votes
2 answers
10k views

Why does dig not show the authority section and how to make it show the authoritative name servers that hold the DNS query`s answer?

I started recently to learn about DNS, and I got stuck when using dig command in Linux. More exactly, I'd like to see the authoritative name servers (their names or IP addresses) that hold the answers ...
4 votes
2 answers
2k views

linux: shorter 'host' command output

I'm using dns to manage my virtual hosts. In order to do so I query my nameserver with the host command for certain values I need. For example: > host -t txt mycl1.vz mycl1.vz.myserver.de ...
2 votes
2 answers
1k views

Why can't I reach a specific host using a specific DNS?

I'm trying to send some info to www2.agenciatributaria.gob.es. I can do it from several hosts but one. From this one I get the error Temporary failure in name resolution. However, from the same host I ...
0 votes
0 answers
396 views

Dig only able to do zone transfers when +nocookie flag is enabled

I am learning about DNS enumeration and I am working on a lab exercise at the moment. To do a zone transfer, I entered the following: dig @10.83.185.5 example.com AXFR the result is ;; global options:...
0 votes
1 answer
1k views

dig - get only hostnames

Could someone help me if there exists some way how to get from dig only hostnames if I want to get list of DNS zone? I work with this command: dig @dns.example.com example.com axfr output is: ...
12 votes
4 answers
50k views

DNS searching with wildcards?

Anything like nslookup or dig offer the ability to search based on something contained in the name ... like a wildcard search or something? I'm trying to make a little script with a GUI wrapper for ...
0 votes
1 answer
6k views

Listing all the IPs of a given domain name with dig

I wanted to check what's the full list of IPs of a given website (for instance, google.ch). Running dig consistently returns me the same IP: dig google.ch google.ch. 136 IN A ...
8 votes
1 answer
12k views

Why do dig, host and nslookup return different results?

It seems my default (router) DNS server returns different results depending on the tool used to query it. Using dig: $ dig @192.168.1.2 test.example.com ; <<>> DiG 9.16.8-Debian <<&...
1 vote
1 answer
898 views

What is the difference between dig +tries=x and dig +retries=x?

I have been looking at the dig documentation and don't understand the difference between dig +tries=x and dig +retries=x. Can someone explain please?
5 votes
4 answers
16k views

Determine if DNS server is master or slave with DiG

Is there a way to use DiG or nslookup to determine if a server is set to Master or Slave? And if a server is slave, return the Master's IP address?
0 votes
0 answers
492 views

Dnsperf dns caching

i installed dnsperf with unbound and i'm looking to cache a list of DNS records on my centos server i use dnsperf to cache a list dns [root@mail bin]# cat domains.txt facebook.com. MX google.com. MX ...
2 votes
2 answers
2k views

DNS queries fail from local machine running dnsmasq

I have a "sandbox" web server setup for my developers to work on. Each one has their own IP, with all the "production" hostnames configured, and a DNSmasq configuration to answer for those production ...
17 votes
2 answers
3k views

DNS Server Responses and Timeouts

We're experiencing a frustrating problem on our LAN. Periodically, DNS queries to our ISP nameservers timeout forcing a 5 second delay. Even if I bypass /etc/resolv.conf by using a direct dig to one ...
1 vote
0 answers
1k views

dig does not show the content of DS, DNSKEY or any DNSSEC related record, SERVFAIL

I want to see the content of records using dig but any RR related to DNSSEC comes up empty. This happens on two laptops of mine. I'm running Ubuntu 18.04. Is there any setting I can fix to stop ...
1 vote
2 answers
6k views

dig all txt records

When I run the dig command, I only get one txt record: adriano@vm ~ dig swisspass.ch txt  ✔  4501  14:25:36 ; <&...
0 votes
0 answers
880 views

Is there a limit on length of CNAME chain in getaddrinfo lookup?

Update 1 I changed the nameserver in /etc/resolv.conf and that fixes the problem, but it will cause issues with internal name resolutions. So what does it mean? dig querying the same NS gets all 7 ...
169 votes
5 answers
231k views

Force dig to resolve without using cache

I'm wondering if there is a way to query a DNS server and bypass caching (with dig). Often I change a zone on the DNS server and I want to check if it resolves correctly from my workstation. But since ...

1
2 3 4 5