Questions tagged [dig]
dig is a command-line client to make queries against DNS servers, the Internet name servers.
0
votes
1answer
57 views
Why does ping to FQDN fails, but dig succeed?
When I try to ping a certain FQDN, I fail:
$ ping test-customer-1.clients.jsonar.com
ping: test-customer-1.clients.jsonar.com: Name or service not known
However, dig et al. succeeds:
$ dig test-...
0
votes
0answers
19 views
Dig +trace not working, while +notrace works
I am trying to troubleshoot some DNS issues and I am starting by trying to trace my DNS lookups using dig +trace. Im getting some weird results. If do a normal dig to my unbound resolver.
dig @192....
0
votes
1answer
17 views
Scrape subdomain IPs using PTR records
I'm looking for a solution to an obscure problem. For security policy reasons we have a workstation using PeerBlock with a block list that essentially blacklists the entire internet, and then an allow ...
0
votes
1answer
28 views
DIG: always get a status: FORMERR
I'm under ubuntu 18.04, having DNS issues, so I am using dig command to debug my DNS.
Thing is when I dig a site like redhat.com, or a well configured DNS of mine, I always get a FORMERR status, and ...
1
vote
0answers
24 views
Is there a way to force dig to query an authoritative server?
I often find myself doing:
dig www.example.com @$(dig NS example.com +short | head -n 1)
It's a bit like doing a dig +trace www.example.com but starting from the NS of example.com instead of ...
0
votes
0answers
68 views
Why is ADDITIONAL SECTION missing from my dig response?
I have a couple bind servers recently upgraded to Ubuntu 16.04 (from 14.04). Cron runs dig . ns once a day to grab an updated list of Root servers used in the bind configuration.
The script run by ...
0
votes
0answers
14 views
DNS Lookup Fails but Trace Shows Address
I'm having a DNS problem with a domain. I'm trying to get an SSL certificate for it, but Let's Encrypt comes back and says that when it does a DNS lookup, it fails -- does not exist.
When I do an ...
1
vote
1answer
21 views
Why does my website's locally retrieved name server appear different from one retrieved online?
My website is not resolving correctly, so I checked the name server via nslookup in PowerShell and see bodis.com. Then I checked online, hoping I checked the same name server, and see domaincontrol....
0
votes
1answer
37 views
DNS server with bind in Debian 9
I have a project to do for college. The project is a DNS server with client. I created the DNS server but when i want to see how it works i use the command dig myservername.
1. How can i proceed to ...
0
votes
2answers
81 views
dig - how return NS from authority only
How I can parse NS from authority - no from child NS servers? I need check NS servers from about 30 000 domains with different TLDs.
I can use
dig google.cz +trace
But output is long and I don't ...
1
vote
1answer
110 views
How to enable dig to show status codes?
With default options dig shows the return status for a DNS query in the comment ;; ->>HEADER<<- ... status: NXDOMAIN:
ubuntu:~$ dig hosted-by.myinternetservices.com.
; <<>> ...
1
vote
1answer
178 views
Why can't 1.1.1.1 resolve a certain name (SERVFAIL)?
I've noticed that the cloudflare nameserver can't resolve certain DNS-names and replies with a SERVFAIL. However, when I run the dig command, I still get a reply. Why is that?
$ dig sdo.gsfc.nasa.gov ...
-1
votes
1answer
59 views
Official BIND9 Windows binaries - host.exe, dig.exe - don't do anything
I have downloaded the official BIND 9 Windows binaries from ISC. They don't do anything:
$ .\host.exe google.com
$ (no output)
Same with dig. How do I make host, dig etc work on Windows?
0
votes
0answers
42 views
Strange double answer cname in dig
I want to host a web site with github.io, using www.nv-gr.fr
I have put an A on @ and another on www
My zone is :
@ 10800 IN SOA ns1.gandi.net. hostmaster.gandi.net. 1531775542 10800 3600 604800 ...
0
votes
1answer
88 views
Can't update DiG utility on Debian 8 (Jessie)
I am trying to get the latest version of DiG DNS utility (part of BIND 9) but I can't seem to be able to.
I am running Debian 8 (Jessie).
The current DiG version :
root@myMachine:~# dig -v
DiG 9.9....
0
votes
1answer
33 views
Why is it unable to make query directly from the country level DNS?
I tried to make a DNS trace request (taking Oxford's website www.ox.ac.uk as an example) starting from Google's DNS 8.8.8.8. I can successfully get the result and the route was via the country level ...
0
votes
0answers
62 views
Why dig cannot get my DNS records immediately?
I'm working with a online development server and I need to change quite frequently the bind9 configuration, but I can't see the changes from my working computer.
What I'm doing is something like this ...
0
votes
1answer
685 views
How to resolve a list of hostnames to ip addresses while querying dig or using getent
I need to resolve all "A" records for a domain to ip addresses if they exist while creating a bash script.
I've looked to see if there was a dig command to retrieve all a records for a domain but ...
0
votes
2answers
480 views
Dig DNS vs Whois
I have a client that has their name services done through some third part. The domain was registered through Godaddy (yet a different third party). The name service provider had their domain names ...
0
votes
2answers
89 views
dig and host command return different SOA
So I found another post saying that host and dig are essentially the same except host is a more user friendly. For the most part this seems to be true however I came across this when trying to find ...
0
votes
1answer
126 views
DNS forward zone will not resolve new records
I have a master DNS server (BIND9, IP 172.23.129.24) configured to point a forwarding zone to another master server that is configured for DDNS services. This directive is in the /etc/named.conf file.
...
0
votes
0answers
35 views
DNS server check from domain list
I have a list of domains we host.
I need to check which domains still use old DNS servers.
I'm hoping there is a way that I can use something like "dig "domainlist.txt" |grep old-dns-server"
0
votes
1answer
302 views
How to delegate DNS for sub-domain to domain with separate hosted zones
TL;DR: When the primary hosted zone contains two NS records, containing the name servers for the primary hosted zone (example.com) and the subdomain hosted zone (sub.example.com) would that be ...
0
votes
1answer
265 views
Server switch: Check DNS TTL values
Can somebody let me know if from the below results from using dig https://toolbox.googleapps.com/apps/dig/#ANY/
What is the correct TTL value? as I see 2 different ones:
id 10958
opcode QUERY
rcode ...
0
votes
1answer
366 views
Why does this dnsmasq configuration work in one office but not another?
We have two remote offices which both use the same VOIP provider. During the sign up for this provider, they advised us to change our DNS setup so that the phones use their DNS server for VOIP calls. ...
1
vote
3answers
1k views
How to know if reverse PTR record is correct for emailing purposes
I send emails for test@example.com with my own server. When using dig -x xxx.xxx.xxx.xxx with the IP of my server, I get:
;; QUESTION SECTION:
;xxx.xxx.xxx.xxx.in-addr.arpa. IN PTR
;; ...
0
votes
1answer
458 views
Reverse PTR record lookup not working with dig
As mentioned here, having a Reverse PTR record is key for successful email sending and delivery from one's own server. In order to check if it's correctly set for my server, I tried:
dig -x 111.111....
0
votes
3answers
180 views
Command to Ping All a Host's NICs
We have numerous laptops here which have two adjacent DHCP reservations, one for the wired interface, and the next for the wireless. This allows simpler firewall rules by using (e.g.) /28 subnets for ...
0
votes
5answers
878 views
How long it takes for domain registrar to update TLD name servers
We accidentally changed the nameserver settings for our example.be.
The changes were rolled back within minutes. So nameservers were set to the previous ones, provided by One.com. After 16 hours, our ...
1
vote
1answer
499 views
How can I do a zone transfer with dig when using bind views
I have a bind cluster with private/public records stored in (2) views and configured with TSIG. Standard slave operation works but I'd like to use dig to transfer the zones for troubleshooting/...
7
votes
1answer
675 views
Understanding the Difference Between DNS Resolvers
Intro
In the attempt to debug a networking issue local to our intranet, it became apparent that curl host nslookup and dig behave differently. Where dig and host returns the IP address of the URL in ...
2
votes
1answer
396 views
What's the magic incantation to force DNS queries over TCP on an Amazon/AMI image?
It looks as though the resolv.conf option use-vc is being ignored on an Amazon AMI (latest 2016.09 version). Consider the following:
[hadoop@ip-172-20-40-202 ~]$ cat /etc/resolv.conf
search default....
1
vote
2answers
149 views
Strange DNS host name response
I've recently experienced an XML-RPC attack vs wordpress from a pair of machines for which dig -x returns a very very odd looking result:
;; ANSWER SECTION:
54.249.96.191.in-addr.arpa. 60 IN PTR ...
0
votes
2answers
395 views
dig (and other tools) only returning A records
I've been trying to work out why the PHP getmxrr() and checkdnsrr() methods do not return successfully for working domains in a number of vagrant VMs that I use.
When looking into this further I ...
0
votes
0answers
75 views
DNS server responding OK with dig but timing out in browser
I just set up a DNS server today, and it is responding to a remote dig (Off network) with NOERROR yet my browser from the same machine it timing out: ERR_CONNECTION_TIMED_OUT
## EDIT ## I think it is ...
-1
votes
2answers
2k views
dns dig - no ANSWER unless ANY option set
So wired issue.
Ubuntu 16.04 - I receive no ANSWER of the dig command (for specific domain), unless ANY is set in the dig command
Of course regular dns queries does not work too :/
; <<>>...
0
votes
1answer
1k views
how to add subdomain using route53 and godaddy
background
I've already added a zone for an S3 bucket to host my static site (pointing to lobolabshq.com), now I wanted to do the same for mattermost.lobolabshq.com)
I followed the instructions here ...
0
votes
1answer
2k views
get NS record for domain using dig
I'm currently trying to write a script that validates, whether a given record attached to a name is available via all nameservers that are responsible for that name.
E.g. I would like to check ...
0
votes
1answer
209 views
dig gets answer from bind9, but host, nslookup and postfix don't
I have just upgraded my working email server from Ubuntu 14.04 to 16.04, which caused many issues.
One of the issues I couldn't resolve is this:
I run a caching bind9 DNS with a pretty standard ...
1
vote
1answer
83 views
Perform authoritative DNS A record lookup with single command?
To get the authoritative A record for the apex of a domain I'm using:
$ nslookup -q=ns example.com
Server: 194.168.4.100
Address: 194.168.4.100#53
Non-authoritative answer:
example.com ...
2
votes
2answers
743 views
Server 2012 DNS server not resolving all forward lookup zones
Name resolution is failing for a handful of zones at only one site. It had been working fine, but stopped at one site recently.
We are using DNS to restrict access to Youtube (see here) so we have a ...
2
votes
1answer
3k views
BIND/DNS - dig +trace = Bad Referral and Bad Horizontal Referral
I have an interesting problem. I started noticing that when I do a dig +trace against one of the domains we are authoritative for, we get errors from our nameservers for "Bad Referral" and you can see ...
1
vote
0answers
245 views
Why is DNS lookup slow to specific domains only?
We're running Windows DNS servers, but they are not authoritative. So we point to caching servers as forwarders.
That said, for the following two domains we get a rather long delay in DNS lookup IF ...
0
votes
1answer
273 views
Maradns almost working, but can't get it to dig
I have setup the vanilla maradns service and almost got it working but i am missing one thing i think, plz take a look.
/var/log/messages:
Sep 2 06:32:13 localhost /usr/local/sbin/maradns: ...
0
votes
2answers
221 views
How to make DIG honour TTLs / use the local OS cache?
When I run dig example.com the response comes back with SERVER: 192.168.0.1, even on subsequent runs. That implies DIG is always making a network call to resolve the DNS record.
I (rather ignorantly) ...
2
votes
1answer
81 views
DIG domain ns couldn't be reached
I installed Powerdns with Debian Jessie and i added NS record and other DNS records in PowerAdmin when i test the record added with dig it gives no servers could be reached, i added both name servers ...
0
votes
2answers
289 views
Obtain instance IPs behind ELB in order to add to iptables
What:
We're using iptables and have our server rather locked down to only specific ports and IPs. Recently we have a requirement to open traffic to a third party service.
However, the third party ...
-1
votes
1answer
74 views
Backup DNS servers for a domain name - optimal configuration and troublehooting
Let's say we have these name servers for 1 domain.
ns.1.com
ns.2.com
ns.3.com
ns.4.com
backup-ns.1.com
backup-ns.2.com
How can I know which NS responded to this specific query, for example using dig?...
1
vote
2answers
87 views
How to return only empty or “problematic” DNS records for bulk queries
When doing a bulk input of records, I want to verify that I put each in its correct location by doing a bulk query with dig. Dig will spit out all positive results with:
dig +noall +answer
or
dig +...
-7
votes
1answer
57 views
How to use dig to send DNS queries to servers of interest directly? (not through my local DNS resolver) [closed]
How can I use dig to send a dns query to servers directly? (not through local DNS resolver).
