Questions tagged [dig]
dig is a command-line client to make queries against DNS servers, the Internet name servers.
228
questions
0
votes
0
answers
15
views
Why does systemd-resolved work via CoreDNS for cluster.local?
I have a query which I'm struggling to get a precise answer for. I'm aware I can workaround the question by providing a different route for systemd-resolved, however I'm specifically wanting to know ...
- 1
-1
votes
1
answer
109
views
Getting different ip addresses for the same hostname
Why do I get different ip addresses for (what seems like) the same host, when resolving a CNAME and its corresponding A records?
❯ host www.github.com
www.github.com is an alias for github.com.
** ...
0
votes
0
answers
51
views
Show intermediate answer when querying DNS
My company has multiple layers of DNS before arriving at a specific node, for example:
domain1.company.com CNAME domain2.company.com
domain2.company.com CNAME ...
- 101
1
vote
0
answers
105
views
Forward DNS does not work. BIND and DIG find nothing
The company's DC is in the Oracle Cloud, and I connect it to the companies via IPSec, and foward the DNS via Domain Override in pfSense or Bind9.
I recently picked up a Dream Machine from Ubiquiti to ...
2
votes
2
answers
1k
views
Why isn't `nslookup` able to resolve an A record in route53, when I specifically use a nameserver from my hosted zone?
I'm trying to host a static website in s3. I have a domain registered with namecheap, and it is pointing at route53 nameservers. This part seems to be working correctly based on dig:
dig getgargoyle....
- 21
0
votes
1
answer
2k
views
How to make updates to BIND9 zone files to be visible for queries?
I am using BIND 9.18 for testing purpose. I create a zone which supports dynamic DNS, and I try to use nsupdate to update the domain's resource record. After 15 minutes the update is successfully ...
- 3
0
votes
2
answers
154
views
point CNAME Record to multiple wildcard A Records
I am trying to point my cname to my wildcard FQDN which has multiple A-Records.
Dig Output:
;; QUESTION SECTION:
;access.domain.intra. IN A
;; ANSWER SECTION:
access.domain.intra. 3600 IN ...
- 3
0
votes
1
answer
45
views
DNS hard to reach after reboot RHEL7
Two weeks ago, two of our four RHEL7 VMs running on same Openstack infrastructure rebooted unprompted and unnoticed. May be externally triggered.
Ever since, all services relying on DNS are unreliable ...
- 111
0
votes
1
answer
268
views
How to disable or fix OpenStack intercepting DNS PTR queries
I have several virtual machines with Debian/GNU Linux running on OpenStack. When resolving their internal IPv4 addresses I get some strange results:
# ip -c addr show dev eth0
2: eth0: <BROADCAST,...
- 136
2
votes
1
answer
420
views
detect if zone transfer with dig succeed or not via return code
I have script like this
CHARSET=ASCII dig domain.com AXFR > domain.com.zone
if [ "$?" = "0" ]; then
echo "OK"
else
echo "Something went wrong"
...
- 882
0
votes
0
answers
293
views
Gmail not detecting PTR record from vultr server
I have an SMTP server running on a vultr VM. I've set up the rDNS to point to my mail domain name mail.idimitrov.dev. The DNS setup points to that machine on ipv4 and ipv6 for mail.idimitrov.dev and ...
- 101
0
votes
3
answers
454
views
Google Public DNS always returning NXDOMAIN for certain SLDs
Problem: Google's Public DNS returns NXDOMAIN for certain SLDs.
Proof of problem:
dig vpn.example.com @8.8.8.8
; \<\<\>\> DiG 9.11.5-P4-5.1+deb10u8-Debian \<\<\>\> vpn....
0
votes
1
answer
124
views
Querying the nameserver for NS record of a domain results in a non-authoritative answer
I was wondering why name server record need to be in the zone file, because the delegation is already done by the parent zone. I came across this answer. That answer makes sense, I suppose. Then I ...
- 111
0
votes
1
answer
2k
views
How does one query the resolver name of a DNS server?
The Shodan search tool, for some DNS servers, shows a Resolver name value for what it finds on UDP port 53. For example, 80.82.117.140 shows Resolver name: server402.xenserve.com and 103.81.27.118 ...
- 190
1
vote
2
answers
185
views
Can the bulk execution of "dig domain mx" on 5000 domains be considered an attack to the network?
I have a database containing a lot of invalid emails.
I want to remove all the emails whose domain does not have mx record.
So after I extracted the domain part I wrote a script to bulk check this for ...
- 155
0
votes
1
answer
548
views
Why if I run the dig command on an authoritary server I don't get an authoritary asnwer?
I ran dig debian.org ns to get a list of all authoritary servers for debian.org, and when I run dig @auth.server debian.org for some of authoritary servers I get an authorithary response and for ...
1
vote
1
answer
469
views
A/AAAA returns no answer when SRV record exists for hostname
I have encountered a problem where DNS A queries that would normally be answered by *.fqdn started returning NO ANSWER after I added SRV record for service residing on said hostname.
Example:
*....
- 11
13
votes
2
answers
2k
views
How is my DNSSEC enabled domain still serving a tiny number of NXDOMAIN response codes?
I enabled DNSSEC on my primary domain about a week ago. It's not a major website or anything -- just my personal domain name that I use for email and the like (TLD: com; DNSSEC algorithm 13; ...
- 165
0
votes
1
answer
58
views
BIND 9 DNS: NS/glue closest delegation used
I have the following example existing delegation:
iio.ne.co.uk NS dns1.iio.ne.co.uk, dns1.iio.ne.co.uk HOST 1.2.3.4
If I add a new delegation:
soho.iio.ne.co.uk NS sohodns.iio.co.uk, sohodns.iio.ne.co....
- 1
0
votes
0
answers
4k
views
Oracle Linux 8 can't resolve host names using DNS
EDIT: FIXED -- My Egress Rules were blocking TCP/UDP 53.
I have a stock Oracle Linux 8 server running on Oracle cloud (OCI) with Postfix installed that stopped resolving names through DNS after a ...
0
votes
2
answers
223
views
Why does wildcard dns entry resolve to a singular hostname?
I'm trying to update my letsencrypt wildcard certificate with certbot, but I noticed it behaved strangly when I ran the command. It said it'd add a subdomain name and remove the wildcard as follows:
...
- 65
0
votes
0
answers
376
views
dig not returning answer for domain registered with namecheap?
Running dig chimu.sh
Results in the following:
; <<>> DiG 9.16.1-Ubuntu <<>> chimu.sh
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: ...
- 115
1
vote
1
answer
774
views
Why does 'dig <domain.com> ANY' time out?
I've tried to query for 'any' records using dig, and I almost always get a timeout error.
but when i google for why this is the case, there doesn't seem to be any answer at all.
psmith@pop-os:~$ dig +...
- 111
0
votes
1
answer
158
views
If I want to use dig/nslookup to query about machines in a VLAN, how can I find which name server to use?
If I want to use dig/nslookup to query about machines in e.g., 38.102.145.0/24, how can I find the name server to use that could resolve machines in that VLAN?
- 1,019
2
votes
1
answer
475
views
How to make dig to show IP addresses it is sending queries to?
By default when DNS servers do not respond dig does not show any information about the queries being sent. I can use the +qr option to see each query being sent:
$ dig +qr archive.ubuntu.com
; <&...
0
votes
0
answers
2k
views
DNS - dig query - NS not returning for sub domain from one location but does for another
I have DNS setup in x2 places and will be repointing NS shortly. Before I do that, I wanted to confirm DNS is correct at both locations.
I'm using dig and passing in a file.
When I query the NS of the ...
0
votes
1
answer
63
views
Suddenly dig +nocmd pop3.pauperis.org aaaa +noall +answer returns nothing
the command dig +nocmd pop3.pauperis.org aaaa +noall +answer returns the followingin my laptop:
pop3.pauperis.org. 3111 IN CNAME pauperis.org.
pauperis.org. 3111 IN AAAA 2001:41d0:...
- 508
4
votes
2
answers
12k
views
Why does dig not show the authority section and how to make it show the authoritative name servers that hold the DNS query`s answer?
I started recently to learn about DNS, and I got stuck when using dig command in Linux. More exactly, I'd like to see the authoritative name servers (their names or IP addresses) that hold the answers ...
- 163
2
votes
2
answers
1k
views
Why can't I reach a specific host using a specific DNS?
I'm trying to send some info to www2.agenciatributaria.gob.es. I can do it from several hosts but one.
From this one I get the error Temporary failure in name resolution. However, from the same host I ...
- 161
0
votes
0
answers
507
views
Dig only able to do zone transfers when +nocookie flag is enabled
I am learning about DNS enumeration and I am working on a lab exercise at the moment. To do a zone transfer, I entered the following:
dig @10.83.185.5 example.com AXFR
the result is
;; global options:...
- 115
0
votes
1
answer
1k
views
dig - get only hostnames
Could someone help me if there exists some way how to get from dig only hostnames if I want to get list of DNS zone? I work with this command:
dig @dns.example.com example.com axfr
output is:
...
- 3
0
votes
1
answer
7k
views
Listing all the IPs of a given domain name with dig
I wanted to check what's the full list of IPs of a given website (for instance, google.ch). Running dig consistently returns me the same IP:
dig google.ch
google.ch. 136 IN A ...
- 175
1
vote
1
answer
1k
views
What is the difference between dig +tries=x and dig +retries=x?
I have been looking at the dig documentation and don't understand the difference between dig +tries=x and dig +retries=x. Can someone explain please?
0
votes
0
answers
558
views
Dnsperf dns caching
i installed dnsperf with unbound and i'm looking to cache a list of DNS records on my centos server
i use dnsperf to cache a list dns
[root@mail bin]# cat domains.txt
facebook.com. MX
google.com. MX
...
- 205
1
vote
0
answers
1k
views
dig does not show the content of DS, DNSKEY or any DNSSEC related record, SERVFAIL
I want to see the content of records using dig but any RR related to DNSSEC comes up empty. This happens on two laptops of mine. I'm running Ubuntu 18.04. Is there any setting I can fix to stop ...
- 131
1
vote
2
answers
7k
views
dig all txt records
When I run the dig command, I only get one txt record:
adriano@vm ~ dig swisspass.ch txt ✔ 4501 14:25:36
; <&...
- 205
0
votes
0
answers
958
views
Is there a limit on length of CNAME chain in getaddrinfo lookup?
Update 1
I changed the nameserver in /etc/resolv.conf and that fixes the problem, but it will cause issues with internal name resolutions. So what does it mean? dig querying the same NS gets all 7 ...
- 101
1
vote
1
answer
482
views
Migrating domain from AWS Route S3 to Linode
I want to migrate 1 domain from AWS Route S3 to Linode; I've changed the NS recods to point to
ns1.linode.com
ns2.linode.com
ns3.linode.com
ns4.linode.com
ns5.linode.com
but on the DNS checket it ...
1
vote
1
answer
2k
views
Dig +trace doesn't display the whole delegation chain
When I trace the DNS lookup of google.com for example, dig displays only the request to the root server and then goes straight to the 2nd level domain servers, skipping the top level domain. In other ...
- 11
8
votes
1
answer
12k
views
Why do dig, host and nslookup return different results?
It seems my default (router) DNS server returns different results depending on the tool used to query it.
Using dig:
$ dig @192.168.1.2 test.example.com
; <<>> DiG 9.16.8-Debian <<&...
- 651
0
votes
2
answers
67
views
Site not resolving uniformly
My site www.acurent.com is not resolving to its IP address 23.20.46.124 uniformly
Check on: https://www.whatsmydns.net/#A/acurent.com, it shows that its resolving for certain networks only. If you ...
- 1
0
votes
1
answer
685
views
Understanding TTL values in DNS query answers using dig
I'm querying google.com with dig and I'm having a hard time understanding why TTL values sometimes jump around instead of decrementing every second uniformly (which is my expectation). What am I ...
- 103
0
votes
0
answers
457
views
How to lookup DNS Record in specific zone
For example I have a zone example.com and someone created a dotted hostname app.subzone which resolves to app.subzone.example.com in it.
Now I create a new zone subzone.example.com and an record appin ...
-2
votes
1
answer
3k
views
dig shows SERVFAIL , while pointing at nameserver works fine
somewhat similar to this thread, I faced with a problem where dig blah.net (for the sake of simplicity let's call it blah.net) returns status: SERVFAIL
This DNS zone is hosted on route53, and I use ...
- 107
0
votes
1
answer
771
views
avahi-resolve resolves hostname that dig -p 5353 @224.0.0.251 does not?
I thought avahi-resolve and dig -p 5353 @224.0.0.251 did much the same thing.
However, I have a device where I can resolve its name using avahi-resolve but not using dig:
$ avahi-resolve --name ding-...
- 111
6
votes
1
answer
8k
views
What does OPT PSEUDOSECTION mean in `dig` response?
This is part of the response when I run dig in terminal:
;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 512
What does OPT mean? What does PSEUDOSECTION mean?
- 295
0
votes
1
answer
196
views
Command line dig tool doesn't get answer for SOA query, while https://toolbox.googleapps.com/apps/dig/#SOA/ DOES
While running in my windows 10 64bits machine this command: dig gmail-smtp-in.l.google.com ANY
I get this response
; <<>> DiG 9.16.2 <<>> gmail-smtp-in.l.google.com ANY
;; ...
-1
votes
2
answers
3k
views
Setting up my own nameserver on Freedom domain
I need to configure a DNS on a new domain registered on freenom.com as follows
Domain: mydomain.ga
My Server IP: 1.2.3.4
My need is to ask mydomain.ga (1.2.3.4) for a specific subdomain (for ...
- 1
0
votes
1
answer
918
views
Are horizontal referrals in DNS allowed?
I've been looking into DNS quite a bit lately and currently got the following error message with the DIG command:
BAD (HORIZONTAL) REFERRAL
From my understanding, this is caused due to delegating a ...
- 11
0
votes
1
answer
488
views
Rate-limiting of dig [closed]
I have a PHP script that calls the bash dig command through the exec function on Ubuntu to monitor hundreds of domains.
What the script does is to call dig to fetch some DNS records on each domain ...
- 55