I'm trying to understand why one given DNS server is not resolving our domain correctly.

When I look up www.example.com from this name server a CNAME example.bar.cc is correctly returned, but there's no attached A record and the response status is NXDOMAIN. I understand that this could happen if the DNS server can not resolve the alias example.bar.cc. However, if I use the same DNS server and look up example.bar.cc directly, I always get the correct A record.

When using any other DNS servers I've tested (different ISPs, Google DNS, Open DNS) our domain resolves correctly.

Given this situation, is there some possible problem in our DNS that could cause this? Does it seem like this given DNS server is to blame? The DNS server in question is used by a lot of people and it seems more likely that the problem is caused by us, but I don't see how. Any clues?

  • 1
    The actual DNS record at issue would help, so we can examine the situation directly.
    – womble
    Aug 22, 2012 at 9:59
  • The record we're looking up is en.greatfire.org
    – Martin
    Aug 22, 2012 at 10:11
  • Might also help if you tell us what DNS server you're getting this result from... Aug 23, 2012 at 17:47
  • Good point - the DNS server in question is ns1.sonic.net
    – Martin
    Aug 24, 2012 at 17:08
  • I did a bit of testing on this and it looks like a DNS server situation. Could be ns1.sonic.net or it could be the authoritative name servers for your domain, dns.24680.info and dns1.24680.info. I don't have enough data to say which it is that goes awry. When I do a straight request to ns1.sonic.net several times in a row I get different responses. Sometimes it's fine and returns everything, sometimes it doesn't give the A record and is NXDOMAIN. Either the zone file is messed up or one of these name servers are configured wrong.
    – Peter
    Oct 16, 2012 at 21:34

1 Answer 1


Although this DNS configuration is terribly slow and error prone, there's no DNS to blame, and your record is working correctly.

Here's what happens. When you query ns1.sonic.net about en.greatfire.org, this server is configured to answer for greatfire.org, but it does not have a record for en.greatfire.org and returns a default CNAME en.greatfire.org.24680.info.

This CNAME now is NOT in the zone of ns1.sonic.net: it belongs to zone 24680.info. So if you attempt to resolve it through ns1.sonic.net, you'll get an error. Instead, this name must be resolved starting from scratch from the root, down through the .info authorities.

The other DNS services you mention will respond for the CNAME because they are not DNS servers, they are DNS resolvers, so they will perform the entire procedure for you and return only the result.

Use dig +trace or the Delegation Lab to figure out who's authoritative for those zones and who you are supposed to query instead:

You must log in to answer this question.

Not the answer you're looking for? Browse other questions tagged .