I'm having trouble with DNS configuration for a domain and do not know how to trace it properly. From trying to troubleshoot with nslookup, it seems as though the authoritative NS are never being contacted. But when I check the whois for the domain, they are correctly listed.

I've tried to enable the debug output for nslookup, but that does not particularly help. The Autority Records are listed as empty.

Is there a "trace" mode that I can use to see the full queries? I'd like to see the full steps that an nslookup is making. Ie: query against current NS server, NS server contact registrar for listed autoritative NS, then query against Authoritative NS.

I'm not entirely sure where my configuration hiccup is. I believe that the NS servers listed at the registrar are CNAMEs. Are NS listed in the registrar allowed to be CNAME records, or must they be A records?

  • 1
    Have a look here regarding CNAME as NS: serverfault.com/questions/222641/… The dig utility on Linux provides a +trace option. – fukawi2 Jul 12 '13 at 5:38
  • Thanks. Was what I was looking for. Changed my NS to be an A record, and seemed to make all the difference. If you repost as an answer, I can credit you properly. – Eric B. Jul 13 '13 at 3:16

Other questions on SF indicate that a CNAME as your NS record is invalid: serverfault.com/questions/222641/

And the dig utility on Linux provides a +trace option.

Your Answer

By clicking "Post Your Answer", you acknowledge that you have read our updated terms of service, privacy policy and cookie policy, and that your continued use of the website is subject to these policies.

Not the answer you're looking for? Browse other questions tagged or ask your own question.