I have couple of Hetzner 'root servers' (as they call it - dedicated co-located linux machines) and all of them experience the same problem (which i simply do not fully understand).
The domain www.dnsblchile.org does not want to resolve to an IP (servers are installed from Hetzner own Debian Jessie images). All other domains of course resolve properly (i did not experience any problems before with any other domains resolving - or i did not spot it before).
When i test
nslookup -type=A www.dnsblchile.org i get:
;; Got SERVFAIL reply from 22.214.171.124, trying next server ;; Got SERVFAIL reply from 126.96.36.199, trying next server Server: 188.8.131.52 Address: 184.108.40.206#53 ** server can't find www.dnsblchile.org: SERVFAIL
so NO proper answer here, but when i try using 220.127.116.11 (google) as nameserver like
nslookup -type=A www.dnsblchile.org 18.104.22.168 i get:
Server: 22.214.171.124 Address: 126.96.36.199#53 Non-authoritative answer: Name: www.dnsblchile.org Address: 188.8.131.52
so everything is OK here and i get proper IP.
The contents of `/etc/resolv.conf' (default after installation) is:
### Hetzner Online GmbH installimage # nameserver config nameserver 184.108.40.206 nameserver 220.127.116.11 nameserver 18.104.22.168
If i add the 22.214.171.124 as a new entry to
/etc/resolv.conf all is working just fine as well.
Now - is it something wrong on Hetzner nameservers configuration side or shall i just use 126.96.36.199 nameserver instead (as a good practice)?
I'm talking to Hetzner support for two days already but have no common ground here - hearing that their nameservers are all perfectly fine.
Shall their own nameservers as well properly resolve the www.dnsblchile.org domain?
update from support:
..but as the domain are using nameservers which are not allowing requests from our resolvers the domain can not be resolved. If you want to resolve the domain you have to use other resolvers or maybe own resolvers, which are allowed to request the nameservers of the domain
Now - may their nameservers be 'blocked' like they say (i'm not an expert here)?
As well - is it a common practice (as the answer below suggests) to use e.g. google name server and just skip Hetzner nameservers setup?
Would i just add the google name server to the list (at top or bottom of
/etc/resolv.conf file) and shall i remove the Hetzner nameservers (or leave them)?