Questions tagged [dig]
dig is a command-line client to make queries against DNS servers, the Internet name servers.
226
questions
269
votes
12
answers
621k
views
List all DNS records in a domain using dig?
My company runs an internal DNS for mycompany.example
There is a machine on the network that I need to find, but I’ve forgotten its name. If I could see a list, it would probably jog my memory.
...
0
votes
0
answers
35
views
Show intermediate answer when querying DNS
My company has multiple layers of DNS before arriving at a specific node, for example:
domain1.company.com CNAME domain2.company.com
domain2.company.com CNAME ...
1
vote
0
answers
77
views
Forward DNS does not work. BIND and DIG find nothing
The company's DC is in the Oracle Cloud, and I connect it to the companies via IPSec, and foward the DNS via Domain Override in pfSense or Bind9.
I recently picked up a Dream Machine from Ubiquiti to ...
1
vote
2
answers
450
views
Why isn't `nslookup` able to resolve an A record in route53, when I specifically use a nameserver from my hosted zone?
I'm trying to host a static website in s3. I have a domain registered with namecheap, and it is pointing at route53 nameservers. This part seems to be working correctly based on dig:
dig getgargoyle....
1
vote
2
answers
5k
views
How to enable dig to show status codes?
With default options dig shows the return status for a DNS query in the comment ;; ->>HEADER<<- ... status: NXDOMAIN:
ubuntu:~$ dig hosted-by.myinternetservices.com.
; <<>> ...
0
votes
1
answer
710
views
How to make updates to BIND9 zone files to be visible for queries?
I am using BIND 9.18 for testing purpose. I create a zone which supports dynamic DNS, and I try to use nsupdate to update the domain's resource record. After 15 minutes the update is successfully ...
0
votes
1
answer
161
views
How to disable or fix OpenStack intercepting DNS PTR queries
I have several virtual machines with Debian/GNU Linux running on OpenStack. When resolving their internal IPv4 addresses I get some strange results:
# ip -c addr show dev eth0
2: eth0: <BROADCAST,...
0
votes
1
answer
37
views
DNS hard to reach after reboot RHEL7
Two weeks ago, two of our four RHEL7 VMs running on same Openstack infrastructure rebooted unprompted and unnoticed. May be externally triggered.
Ever since, all services relying on DNS are unreliable ...
0
votes
2
answers
110
views
point CNAME Record to multiple wildcard A Records
I am trying to point my cname to my wildcard FQDN which has multiple A-Records.
Dig Output:
;; QUESTION SECTION:
;access.domain.intra. IN A
;; ANSWER SECTION:
access.domain.intra. 3600 IN ...
43
votes
7
answers
35k
views
Why can host and nslookup resolve a name but dig cannot?
Can anyone tell me why this is happening? I can resolve a hostname using host and/or nslookup but forward lookups do not work with dig; reverse lookups do:
musashixxx@box:~$ host someserver
...
2
votes
1
answer
318
views
detect if zone transfer with dig succeed or not via return code
I have script like this
CHARSET=ASCII dig domain.com AXFR > domain.com.zone
if [ "$?" = "0" ]; then
echo "OK"
else
echo "Something went wrong"
...
8
votes
4
answers
51k
views
Combining dig +short command
This command will show the output of MX record:
dig @ns1.myname.com myname.com +short MX
and this will output A record:
dig @ns1.myname.com myname.com +short A
My question is how to output both A ...
0
votes
0
answers
257
views
Gmail not detecting PTR record from vultr server
I have an SMTP server running on a vultr VM. I've set up the rDNS to point to my mail domain name mail.idimitrov.dev. The DNS setup points to that machine on ipv4 and ipv6 for mail.idimitrov.dev and ...
0
votes
3
answers
377
views
Google Public DNS always returning NXDOMAIN for certain SLDs
Problem: Google's Public DNS returns NXDOMAIN for certain SLDs.
Proof of problem:
dig vpn.example.com @8.8.8.8
; \<\<\>\> DiG 9.11.5-P4-5.1+deb10u8-Debian \<\<\>\> vpn....
0
votes
1
answer
861
views
How does one query the resolver name of a DNS server?
The Shodan search tool, for some DNS servers, shows a Resolver name value for what it finds on UDP port 53. For example, 80.82.117.140 shows Resolver name: server402.xenserve.com and 103.81.27.118 ...
0
votes
1
answer
97
views
Querying the nameserver for NS record of a domain results in a non-authoritative answer
I was wondering why name server record need to be in the zone file, because the delegation is already done by the parent zone. I came across this answer. That answer makes sense, I suppose. Then I ...
13
votes
3
answers
50k
views
How to find what Authoritative Name Server provided the answer using dig?
I need to check the differences in records on master and slave when making changes.
Is there some option for dig to show which Authoritative Name Server provided the answer?
for example
dig example....
25
votes
3
answers
24k
views
What's the difference between `dig` and `host` when querying a specific name-server?
I was using this command to verify if I'd set things up correctly with a DNS provider:
host hostname.example.com ns1.example-nameserver.com
As far as I can tell, this asks ns1.example-nameserver.com ...
2
votes
1
answer
365
views
How to make dig to show IP addresses it is sending queries to?
By default when DNS servers do not respond dig does not show any information about the queries being sent. I can use the +qr option to see each query being sent:
$ dig +qr archive.ubuntu.com
; <&...
0
votes
1
answer
3k
views
Reverse PTR record lookup not working with dig
As mentioned here, having a Reverse PTR record is key for successful email sending and delivery from one's own server. In order to check if it's correctly set for my server, I tried:
dig -x 111.111....
1
vote
2
answers
148
views
Can the bulk execution of "dig domain mx" on 5000 domains be considered an attack to the network?
I have a database containing a lot of invalid emails.
I want to remove all the emails whose domain does not have mx record.
So after I extracted the domain part I wrote a script to bulk check this for ...
0
votes
1
answer
454
views
Why if I run the dig command on an authoritary server I don't get an authoritary asnwer?
I ran dig debian.org ns to get a list of all authoritary servers for debian.org, and when I run dig @auth.server debian.org for some of authoritary servers I get an authorithary response and for ...
1
vote
1
answer
395
views
A/AAAA returns no answer when SRV record exists for hostname
I have encountered a problem where DNS A queries that would normally be answered by *.fqdn started returning NO ANSWER after I added SRV record for service residing on said hostname.
Example:
*....
0
votes
2
answers
192
views
Why does wildcard dns entry resolve to a singular hostname?
I'm trying to update my letsencrypt wildcard certificate with certbot, but I noticed it behaved strangly when I ran the command. It said it'd add a subdomain name and remove the wildcard as follows:
...
13
votes
2
answers
2k
views
How is my DNSSEC enabled domain still serving a tiny number of NXDOMAIN response codes?
I enabled DNSSEC on my primary domain about a week ago. It's not a major website or anything -- just my personal domain name that I use for email and the like (TLD: com; DNSSEC algorithm 13; ...
0
votes
1
answer
56
views
BIND 9 DNS: NS/glue closest delegation used
I have the following example existing delegation:
iio.ne.co.uk NS dns1.iio.ne.co.uk, dns1.iio.ne.co.uk HOST 1.2.3.4
If I add a new delegation:
soho.iio.ne.co.uk NS sohodns.iio.co.uk, sohodns.iio.ne.co....
0
votes
0
answers
3k
views
Oracle Linux 8 can't resolve host names using DNS
EDIT: FIXED -- My Egress Rules were blocking TCP/UDP 53.
I have a stock Oracle Linux 8 server running on Oracle cloud (OCI) with Postfix installed that stopped resolving names through DNS after a ...
4
votes
2
answers
29k
views
get NS record for domain using dig
I'm currently trying to write a script that validates, whether a given record attached to a name is available via all nameservers that are responsible for that name.
E.g. I would like to check ...
0
votes
0
answers
316
views
dig not returning answer for domain registered with namecheap?
Running dig chimu.sh
Results in the following:
; <<>> DiG 9.16.1-Ubuntu <<>> chimu.sh
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: ...
0
votes
1
answer
604
views
Why does 'dig <domain.com> ANY' time out?
I've tried to query for 'any' records using dig, and I almost always get a timeout error.
but when i google for why this is the case, there doesn't seem to be any answer at all.
psmith@pop-os:~$ dig +...
0
votes
1
answer
126
views
If I want to use dig/nslookup to query about machines in a VLAN, how can I find which name server to use?
If I want to use dig/nslookup to query about machines in e.g., 38.102.145.0/24, how can I find the name server to use that could resolve machines in that VLAN?
0
votes
0
answers
1k
views
DNS - dig query - NS not returning for sub domain from one location but does for another
I have DNS setup in x2 places and will be repointing NS shortly. Before I do that, I wanted to confirm DNS is correct at both locations.
I'm using dig and passing in a file.
When I query the NS of the ...
0
votes
1
answer
58
views
Suddenly dig +nocmd pop3.pauperis.org aaaa +noall +answer returns nothing
the command dig +nocmd pop3.pauperis.org aaaa +noall +answer returns the followingin my laptop:
pop3.pauperis.org. 3111 IN CNAME pauperis.org.
pauperis.org. 3111 IN AAAA 2001:41d0:...
3
votes
2
answers
10k
views
Why does dig not show the authority section and how to make it show the authoritative name servers that hold the DNS query`s answer?
I started recently to learn about DNS, and I got stuck when using dig command in Linux. More exactly, I'd like to see the authoritative name servers (their names or IP addresses) that hold the answers ...
4
votes
2
answers
2k
views
linux: shorter 'host' command output
I'm using dns to manage my virtual hosts. In order to do so I query my nameserver with the host command for certain values I need. For example:
> host -t txt mycl1.vz
mycl1.vz.myserver.de ...
2
votes
2
answers
1k
views
Why can't I reach a specific host using a specific DNS?
I'm trying to send some info to www2.agenciatributaria.gob.es. I can do it from several hosts but one.
From this one I get the error Temporary failure in name resolution. However, from the same host I ...
0
votes
0
answers
396
views
Dig only able to do zone transfers when +nocookie flag is enabled
I am learning about DNS enumeration and I am working on a lab exercise at the moment. To do a zone transfer, I entered the following:
dig @10.83.185.5 example.com AXFR
the result is
;; global options:...
0
votes
1
answer
1k
views
dig - get only hostnames
Could someone help me if there exists some way how to get from dig only hostnames if I want to get list of DNS zone? I work with this command:
dig @dns.example.com example.com axfr
output is:
...
12
votes
4
answers
50k
views
DNS searching with wildcards?
Anything like nslookup or dig offer the ability to search based on something contained in the name ... like a wildcard search or something?
I'm trying to make a little script with a GUI wrapper for ...
0
votes
1
answer
6k
views
Listing all the IPs of a given domain name with dig
I wanted to check what's the full list of IPs of a given website (for instance, google.ch). Running dig consistently returns me the same IP:
dig google.ch
google.ch. 136 IN A ...
8
votes
1
answer
12k
views
Why do dig, host and nslookup return different results?
It seems my default (router) DNS server returns different results depending on the tool used to query it.
Using dig:
$ dig @192.168.1.2 test.example.com
; <<>> DiG 9.16.8-Debian <<&...
1
vote
1
answer
898
views
What is the difference between dig +tries=x and dig +retries=x?
I have been looking at the dig documentation and don't understand the difference between dig +tries=x and dig +retries=x. Can someone explain please?
5
votes
4
answers
16k
views
Determine if DNS server is master or slave with DiG
Is there a way to use DiG or nslookup to determine if a server is set to Master or Slave? And if a server is slave, return the Master's IP address?
0
votes
0
answers
492
views
Dnsperf dns caching
i installed dnsperf with unbound and i'm looking to cache a list of DNS records on my centos server
i use dnsperf to cache a list dns
[root@mail bin]# cat domains.txt
facebook.com. MX
google.com. MX
...
2
votes
2
answers
2k
views
DNS queries fail from local machine running dnsmasq
I have a "sandbox" web server setup for my developers to work on. Each one has their own IP, with all the "production" hostnames configured, and a DNSmasq configuration to answer for those production ...
17
votes
2
answers
3k
views
DNS Server Responses and Timeouts
We're experiencing a frustrating problem on our LAN. Periodically, DNS queries to our ISP nameservers timeout forcing a 5 second delay. Even if I bypass /etc/resolv.conf by using a direct dig to one ...
1
vote
0
answers
1k
views
dig does not show the content of DS, DNSKEY or any DNSSEC related record, SERVFAIL
I want to see the content of records using dig but any RR related to DNSSEC comes up empty. This happens on two laptops of mine. I'm running Ubuntu 18.04. Is there any setting I can fix to stop ...
1
vote
2
answers
6k
views
dig all txt records
When I run the dig command, I only get one txt record:
adriano@vm ~ dig swisspass.ch txt ✔ 4501 14:25:36
; <&...
0
votes
0
answers
880
views
Is there a limit on length of CNAME chain in getaddrinfo lookup?
Update 1
I changed the nameserver in /etc/resolv.conf and that fixes the problem, but it will cause issues with internal name resolutions. So what does it mean? dig querying the same NS gets all 7 ...
169
votes
5
answers
231k
views
Force dig to resolve without using cache
I'm wondering if there is a way to query a DNS server and bypass caching (with dig). Often I change a zone on the DNS server and I want to check if it resolves correctly from my workstation. But since ...