If I have a wildcard domain, is it possible to list specific subdomains that override the wildcard one?

For example:

*.domain.com. 3600 IN A
foo.domain.com. 3600 IN A

Yes, this works.

  • 2
    Absolutely. The * record is only consulted if there are no more specific records that match the query. – David Mackintosh Jun 2 '09 at 19:27

Yes, like Zoredache says, "this works".

There are some caveats though with wildcards that it's worth knowing:

  1. The wildcard matches one or more labels, so in your case foo.bar.domain.com will be matched by the wildcard, but bar.foo.domain.com will return NXDOMAIN because the presence of foo prevents any sub-domains of foo from matching

  2. The wildcard match is RRtype specific. However If the wildcard and override records don't have the same RRtype then the over-riding records will still "hide" the wildcard, but you get NODATA (i.e. no answer, rcode == NOERROR).


$ORIGIN example.com.
*     IN A
foo   IN TXT "foo"

% dig @localhost foo.example.com. A
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 36960
;; flags: qr aa rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
  • 1
    Sorry but this is a bit cryptic for me to understand. – Unknown Jun 3 '09 at 8:02
  • Does a definition of *.foo.domain.com. work to avoid NXDOMAIN for bar.foo.domain.com ? – Steve Schnepp Jun 3 '09 at 9:25
  • @Steve - I believe so, yes. (I haven't tested it though) – Alnitak Jun 3 '09 at 15:06

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Not the answer you're looking for? Browse other questions tagged or ask your own question.