Tag Info

New answers tagged

0

At netlogistics domain control panel, Register the custom nameservers like following: ns1.your_wordpress_website.com .....on IP address (191.239.189.13) ns2.your_wordpress_website.com .....on IP address (191.239.189.13) Add following nameservers in WHM: ns1.your_wordpress_website.com .....on IP address (191.239.189.13) ns2.your_wordpress_website.com ...


1

The first of the two diagrams in your question is incorrect. Root servers don't send queries to other servers. If the root servers did in fact forward queries like shown in that diagram the DNS system would be a lot more vulnerable to DoS attacks than it really is. The second diagram is mostly correct but too simplified to show you the recursive nature of ...


0

I'm trying to move from one old server to two new servers to add redundancy. So what I really should do is add AD DS and DNS to both the new ones? You should make both of the new servers domain controllers (the AD DS role) and DNS servers. Set up the new servers to be additional domain controllers as part of the same domain served by the existing old ...


0

Don't forget to transfer existing FSMO roles on your old server to the other servers before decommissioning.


7

As a best practice, you should be running AD DS and AD-Integrated DNS zones (ADI zones) on the same server. This is because the DNS records in ADI zones are replicated using AD DS replication and are stored in the directory, rather than using things like a zone transfer to get records across multiple DNS servers. If you want to use ADI zones for your ...


0

You're specifying a delegation. If you want corp.domain.com to resolve to something, you need (below the delegation): $ORIGIN corp.domain.com. IN A some.ip.add.ress ad IN A 192.168.0.5 and verify that the delegation (NS) is correct in the authoritative server for corp.domain.com EDIT: is @ 86400 IN SOA ns.provider.com. ...


0

I recommend using dnsmasq which will do all you want: Forward dns queries to one or more dns servers Pick up entries in hosts Cache the queries It works great and is very simple to configure, just install it using sudo apt-get install dnsmasq For what you want, you would just add the line server=8.8.8.8 and do sudo restart dnsmasq or sudo ...


2

You have to setup a TXT record for dkim._domainkey.gamerbasecamp.com, while you are doing test from dkim._domainkey.gamerbasecamp.info.


1

Resolution was to access the system logs of the machine which currently had that IP. It was an OSX machine and I was able to grep 'IP ADDRESS' /var/log/* /dev/null to find a log file which held historical IP information. I found that it was held in /var/log/daily.out and I was able to confirm the machine which currently held that IP had also had the same IP ...


3

You say the IP has changed, which sounds like you may be using DHCP to assign addresses? Check the DHCP log files C:\Windows\system32\dhcp. Use the time and the IP to find the MAC address, then use your inventory system to track down that asset. https://technet.microsoft.com/en-us/library/dd183591%28v=ws.10%29.aspx


0

Could be anything. If you can't contact the hoster support, move to your DNS zone to another DNS hoster. As it show they got bad configuration. My guess. A bad server that your dns entry is not there in there balancing, if they have a cluster. Already seen that in the past.


0

so I did some messing around and figured out that @ represents example.com and just added the following line to my A Addresses @ IN A 192.168.0.152 Worked liked a charm. Here's what the entire file looks like now: ; ; BIND data file for local loopback interface ; $TTL 1h @ IN SOA ns.example.com. root.example.com. ( ...


0

Please enter the command from your terminal system-config-network-tui This will allow you to configure the network settings manually but through a graphical interface. Please come back and comment if this works.


1

You can create a daisy-chain of rules with (potentially) limitless length. here's a 3 server layout: FQDN is mapped to a failover policy with Primary and Secondary where Primary is Server1 and secondary is another FQDN (FQDN2) this FQDN2 has a failover policy of its own with Primary pointing to Server2 and Secondary pointing to Server3. In total you'll ...


1

Connection Reset is a server response and is not likely a firewall issue. What is occurring is during the three way handshake a reset is being sent in response instead of a SYN ACK. This is notifying you and your browser that the web server application (IIS/apache etc.) is not accepting connections. This means there is an actual issue with the web server ...


1

Regarding the ping timeout, it looks like buycott.com is resolving just fine on my PC, and I can connect on port 80 via a web browser. As you've stated however, a ping times out. I would suggest this is more likely to be a firewall issue server side. You appear to be using AWS and the IP address appears to be dynamic (I've seen at least 3 different IP ...


7

The delegation points to these nameservers: buycott.com. 172800 IN NS ns-178.awsdns-22.com. buycott.com. 172800 IN NS ns-591.awsdns-09.net. buycott.com. 172800 IN NS ns-1381.awsdns-44.org. buycott.com. 172800 IN NS ns-2015.awsdns-59.co.uk. But those servers claim that ...


1

Adding a forwarder at runtime does not automatically invalidate any queries that are currently sitting in cache for that domain. This includes negatively cached records that returned NXDOMAIN when queried. The more frequently the record is being requested, the higher the probability that the record has been cached recently. If it's critical that the ...


0

What you are looking for is a reverse proxy (try squid, or pound)- this will work for web traffic, at least (it's possible, but uncommon to rproxy other thpes of traffic). You can run the rproxy on the same box as dnsmasq, and port forward 80/443 to it. This will let you have all *.example.net point at your ISP's one IP (if it changes, use a dyndns ...


0

There is no "reverse lookup" for canonical names. That is: given an A record, there is no way to get a listing of what CNAME records point to it.


2

Follow these steps: You already have A record that says "mx.websolutions.com.ar" is "198.50.148.166", this is required for OVH VPS. So nothing to do here. This needs to be propagated well, so that OVH servers can see it that way (but you already have this, so just saying ...). Log in to your OVH manager Navigate to Web -> Platforms (left sidebar, in the ...


2

BIND uses SRTT as a variable to decide which DNS to use, so you can get access to it dumping the cache with the command rndc dumpdb will dump the cache in bind's directory (or the directory specified by the dump-file configuration directive). In that file named_dump.db you will be able to get the SRTT of each nameserver, just grep the file for srttp and you ...


1

You can log all queries by running these 2 commands: rndc querylog rndc trace 1 Logs will appear in named.run. You disable logging with rndc trace 0 I don't think it's possible to log queries for a single entry.


0

HA is a fairly broad subject in terms of the particular entities you want to enable HA for. For example, web server, network gears, databases, etc. The general idea is to avoid single-point-of-failures. In your case, you want to enable HA on a web server and there are two approaches I could think of at the moment: Active/Active and Active/Passive (These two ...


3

For me, one of the most obvious solutions to doing HA over more than two hosts is Load Balancing, even though the name does not suggest HA. What kind of LB is most suitable for your use-case really depends on the type of client and app, but the three most common options. L7 load balancing. You have a proxy that understands the protocol used. There are many ...


5

You are confusing DNS and High Availability. Repeat after me: DNS is not failover. DNS is not failover. DNS is not failover. If you want to do high availability and load balancing, you need a reverse proxy that specialises in this. The most well known one is haproxy.


0

Host have IP, this IP have (or can have) some hostname. FQDN isn't property of website, it's just property of any host


1

I shortened the config a bit. Problem was, that disabling DNS Sec was persistent on proxy. After keppen DNS Sec turned off for several minutes, the proxy recognized it. Thanks!


1

DNS congestion is pretty damn unlikely. Not only has it been around since the days of dial-up (read: serial port speeds), the /etc/resolv.conf defaults use a five second timeout cycle by default. There are a few knobs you can play with, but this is unlikely to be a real problem. Tune timeout and similar options in /etc/resolv.conf. (see man resolv.conf) ...


0

There's a simpler way to do it with NAT: ip nat inside source static udp 1.1.1.1 53 interface GigabitEthernet0/0 53 (With an 877 I guess your external interface would be Dialer0 or atm0.1 depending on if you use ppp, instead of Gi0/0 - whatever has "ip nat outside" on it) This should divert all incoming connections, but all connections going out from ...


2

You can have all the services resolve to a single IP, then use port forwarding to direct the traffic to the appropriate server. This is a commonly used solution. If you are running an email server you should either get a fixed IP address, or use your provider's relay for outgoing email. You wouldn't need a DDNS solution in this case. Many providers ...


1

IPv4 uses A records and IPv6 uses AAAA records so all you should have to do is delete the AAAA record in your DNS.


1

It sounds like your client is configured to use a different DNS search suffix. Check your DNS configuration when you are connected to the VPN and see what the DNS search suffix is (I realise you say you checked the DNS settings, but I don't know to what detail you checked them. Did you just check that the right DNS server was being queried, or did you check ...


0

The solution was, based on @CraigWatson answer, the next configuration on GoDaddy DNS Zone File of the danigarcia-dev.com domain: Create a CNAME record with: www as the Host ec2-52-26-205-227.us-west-2.compute.amazonaws.com as the Points to A forwarding to the www.danigarcia-dev.com web address


1

Once the new dcs are installed and functioning and they contain the same dns information they can be used for dns resolution. To change servers to use them you have 3 options. 1) manually remote desktop to each server and enter them in the adapter properties. 2) if the servers are getting their ip from a dhcp server you can just update the scope ...


1

Since what you're specifically asking about isn't totally clear, I'll just give the entire process for replacing Windows domain controllers, and I'll assume you must change the IP spaces. I'll also assume you have a way for the two IP spaces to communicate (a router or something). Make sure the two new servers can ping the old domain controllers and have ...


0

If your error message is " Ping request cound not find host domain.ro. Please check the name and try again " the error does not lie with your apache configuration. The nameservers hosting your domain is not reporting any A-record for your domain (assuming the DNS-client you are trying to ping from is working correctly). Start by looking if a nslookup for ...


1

Perhaps you could contract the DNS out to a third party if you are not comfortable doing it yourself. Then you would get an SLA, which you wouldn't get through Google or OpenDNS


5

I'm one of the network operations leads for an ISP and one of our business customers is complaining his emails won't work due to our lack of a DNS server Some clarification of the problem would be helpful. Saying that your customer is having problems because of your lack of DNS doesn't really tell us much about the nature of the problem, although we can ...


0

You most likely have set your domain up for web forwarding rather than DNS redirection. To get redirection without URL rewriting, you'll need to point your domain apex to your EC2 instance using a CNAME record. So, using the GoDaddy documentation, create a CNAME record with @ as the Host, and ec2-52-26-205-227.us-west-2.compute.amazonaws.com as the Points ...


4

Please note that nginx 1.1.19 is a development version that went out 3+ years ago. As a good sysadmin, nothing of this kind should go live in your business. Let's focus on your actual question now. As explained by the documentation : About the usage of a domain name as a server entry : A domain name that resolves to several IP addresses defines ...


15

If you're an ISP, you really ought to have authoritative DNS servers that handle the reverse DNS for your networks. Not having them is somewhat akin to operator suicide; your biggest business customers are going to expect it, and if you don't have a contingency for this they're going to pack up their bags and move elsewhere. This isn't to say that you're ...


0

ping and curl are trying to get an actual IP address but the answer to the resolution jenkins-deb-builder.service.search.km is a CNAME ( mailtest-4.dev.search.km ) and that canonical name doesn't resolve to an IP address, that's why those tools cannot get an IP address. If Consul is able to resolve mailtest-4.dev.search.km then maybe you should modify your ...


0

If you add DNS server role to your Windows 2012 server (Server Manager -> Local Server -> vpravo menu Manage -> Add roles and features -> Server roles -> DNS Server) and do not configure it at all, it will behave as cache DNS server - i.e. will get all unknown DNS info from the default machine's DNS server (e.g. 8.8.8.8). The only two things you need to care ...


0

You've not clearly stated your goals, so providing a specific recommendation is difficult. However, for ease of management and security, using one domain for public facing services and another for internal services is beneficial while not technically required. For example, you could place all public facing services on one domain. Then use a DNS service ...


0

The browser passes the name its user is requesting in the http-header, regardless of what IP/CNAME the DNS returns to send the request to. It does not care what type of DNS record was used to resolve the name to an ip address. The CNAME does magically turn the browser into a http-forward-agent that changes its user's requested string into something else. So ...


2

If you're not the administrator for the hosting company's nameservers, you can't without their permission. If you're not the administrator for the hosting company's nameserver and you can get zone transfers for all available domains, then you need to hire a drifter to kill everyone associated with the company.


0

For other readers who come here while using boot2docker, here is how I fixed. In fact, the answer above pointed me to the right direction. Basically, for some reason containers inside boot2docker couldn't resolve hostnames. So I just restarted boot2docker and started the containers. Now hostnames can resolve properly again. I suppose the problem was ...


1

CNAMEs from root to a subdomain are not good, but the reverse seems harmless. You can create a CNAME for www as you described and DNS should be ok. But now I can hit your site as example.com or www.example.com. This may not be as neat as your client desires. A better solution would be to create an A record for www which points at a redirect server which ...


1

Reverse DNS for private IP space that is company unique should live on DNS servers that are likewise reachable by all internally facing production DNS servers, to maximize unique ownership. Given the security policies that should be in place for your AD infra, it's unlikely that this central authority will be your AD servers without adequate planning and ...



Top 50 recent answers are included