Questions tagged [dig]
dig is a command-line client to make queries against DNS servers, the Internet name servers.
210
questions
0
votes
0
answers
16
views
Oracle Linux 8 can't resolve host names using DNS
I have a stock Oracle Linux 8 server running on Oracle cloud (OCI) with Postfix installed that stopped resolving names through DNS after a reboot - it was working fine before the reboot and nothing ...
0
votes
0
answers
26
views
Dig behaving differently after OS change
After replacing a SLES12 SP5 server with a SLES15 SP3 server the dig command is behaving differently. I'm trying to determine if this is a bug or changeable as it breaking some code that would be ...
- 1
0
votes
1
answer
44
views
Why does wildcard dns entry resolve to a singular hostname?
I'm trying to update my letsencrypt wildcard certificate with certbot, but I noticed it behaved strangly when I ran the command. It said it'd add a subdomain name and remove the wildcard as follows:
...
- 65
0
votes
0
answers
26
views
dig not returning answer for domain registered with namecheap?
Running dig chimu.sh
Results in the following:
; <<>> DiG 9.16.1-Ubuntu <<>> chimu.sh
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: ...
- 115
0
votes
1
answer
48
views
Why does 'dig <domain.com> ANY' time out?
I've tried to query for 'any' records using dig, and I almost always get a timeout error.
but when i google for why this is the case, there doesn't seem to be any answer at all.
psmith@pop-os:~$ dig +...
- 101
0
votes
1
answer
33
views
If I want to use dig/nslookup to query about machines in a VLAN, how can I find which name server to use?
If I want to use dig/nslookup to query about machines in e.g., 38.102.145.0/24, how can I find the name server to use that could resolve machines in that VLAN?
- 879
0
votes
0
answers
27
views
How to make dig to show IP addresses it is sending queries to?
By default when DNS servers do not respond dig does not show any information about the queries being sent. I can use the +qr option to see each query being sent:
$ dig +qr archive.ubuntu.com
; <&...
0
votes
0
answers
48
views
DNS - dig query - NS not returning for sub domain from one location but does for another
I have DNS setup in x2 places and will be repointing NS shortly. Before I do that, I wanted to confirm DNS is correct at both locations.
I'm using dig and passing in a file.
When I query the NS of the ...
0
votes
1
answer
20
views
Suddenly dig +nocmd pop3.pauperis.org aaaa +noall +answer returns nothing
the command dig +nocmd pop3.pauperis.org aaaa +noall +answer returns the followingin my laptop:
pop3.pauperis.org. 3111 IN CNAME pauperis.org.
pauperis.org. 3111 IN AAAA 2001:41d0:...
- 488
1
vote
2
answers
898
views
Why does dig not show the authority section and how to make it show the authoritative name servers that hold the DNS query`s answer?
I started recently to learn about DNS, and I got stuck when using dig command in Linux. More exactly, I'd like to see the authoritative name servers (their names or IP addresses) that hold the answers ...
- 23
2
votes
2
answers
697
views
Why can't I reach a specific host using a specific DNS?
I'm trying to send some info to www2.agenciatributaria.gob.es. I can do it from several hosts but one.
From this one I get the error Temporary failure in name resolution. However, from the same host I ...
- 151
0
votes
0
answers
41
views
Dig only able to do zone transfers when +nocookie flag is enabled
I am learning about DNS enumeration and I am working on a lab exercise at the moment. To do a zone transfer, I entered the following:
dig @10.83.185.5 example.com AXFR
the result is
;; global options:...
- 105
0
votes
1
answer
168
views
dig - get only hostnames
Could someone help me if there exists some way how to get from dig only hostnames if I want to get list of DNS zone? I work with this command:
dig @dns.example.com example.com axfr
output is:
...
- 3
0
votes
1
answer
975
views
Listing all the IPs of a given domain name with dig
I wanted to check what's the full list of IPs of a given website (for instance, google.ch). Running dig consistently returns me the same IP:
dig google.ch
google.ch. 136 IN A ...
- 174
1
vote
1
answer
196
views
What is the difference between dig +tries=x and dig +retries=x?
I have been looking at the dig documentation and don't understand the difference between dig +tries=x and dig +retries=x. Can someone explain please?
0
votes
0
answers
130
views
Dnsperf dns caching
i installed dnsperf with unbound and i'm looking to cache a list of DNS records on my centos server
i use dnsperf to cache a list dns
[root@mail bin]# cat domains.txt
facebook.com. MX
google.com. MX
...
- 205
1
vote
0
answers
320
views
dig does not show the content of DS, DNSKEY or any DNSSEC related record, SERVFAIL
I want to see the content of records using dig but any RR related to DNSSEC comes up empty. This happens on two laptops of mine. I'm running Ubuntu 18.04. Is there any setting I can fix to stop ...
- 127
0
votes
2
answers
1k
views
dig all txt records
When I run the dig command, I only get one txt record:
adriano@vm ~ dig swisspass.ch txt ✔ 4501 14:25:36
; <&...
- 155
0
votes
0
answers
310
views
Is there a limit on length of CNAME chain in getaddrinfo lookup?
Update 1
I changed the nameserver in /etc/resolv.conf and that fixes the problem, but it will cause issues with internal name resolutions. So what does it mean? dig querying the same NS gets all 7 ...
- 101
1
vote
1
answer
228
views
Migrating domain from AWS Route S3 to Linode
I want to migrate 1 domain from AWS Route S3 to Linode; I've changed the NS recods to point to
ns1.linode.com
ns2.linode.com
ns3.linode.com
ns4.linode.com
ns5.linode.com
but on the DNS checket it ...
0
votes
1
answer
606
views
Dig +trace doesn't display the whole delegation chain
When I trace the DNS lookup of google.com for example, dig displays only the request to the root server and then goes straight to the 2nd level domain servers, skipping the top level domain. In other ...
7
votes
1
answer
7k
views
Why do dig, host and nslookup return different results?
It seems my default (router) DNS server returns different results depending on the tool used to query it.
Using dig:
$ dig @192.168.1.2 test.example.com
; <<>> DiG 9.16.8-Debian <<&...
- 551
0
votes
2
answers
47
views
Site not resolving uniformly
My site www.acurent.com is not resolving to its IP address 23.20.46.124 uniformly
Check on: https://www.whatsmydns.net/#A/acurent.com, it shows that its resolving for certain networks only. If you ...
- 1
0
votes
1
answer
219
views
Understanding TTL values in DNS query answers using dig
I'm querying google.com with dig and I'm having a hard time understanding why TTL values sometimes jump around instead of decrementing every second uniformly (which is my expectation). What am I ...
- 103
0
votes
0
answers
167
views
How to lookup DNS Record in specific zone
For example I have a zone example.com and someone created a dotted hostname app.subzone which resolves to app.subzone.example.com in it.
Now I create a new zone subzone.example.com and an record appin ...
-2
votes
1
answer
575
views
dig shows SERVFAIL , while pointing at nameserver works fine
somewhat similar to this thread, I faced with a problem where dig blah.net (for the sake of simplicity let's call it blah.net) returns status: SERVFAIL
This DNS zone is hosted on route53, and I use ...
- 107
0
votes
1
answer
297
views
avahi-resolve resolves hostname that dig -p 5353 @224.0.0.251 does not?
I thought avahi-resolve and dig -p 5353 @224.0.0.251 did much the same thing.
However, I have a device where I can resolve its name using avahi-resolve but not using dig:
$ avahi-resolve --name ding-...
- 111
1
vote
1
answer
3k
views
What does OPT PSEUDOSECTION mean in `dig` response?
This is part of the response when I run dig in terminal:
;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 512
What does OPT mean? What does PSEUDOSECTION mean?
- 225
0
votes
1
answer
115
views
Command line dig tool doesn't get answer for SOA query, while https://toolbox.googleapps.com/apps/dig/#SOA/ DOES
While running in my windows 10 64bits machine this command: dig gmail-smtp-in.l.google.com ANY
I get this response
; <<>> DiG 9.16.2 <<>> gmail-smtp-in.l.google.com ANY
;; ...
-1
votes
2
answers
2k
views
Setting up my own nameserver on Freedom domain
I need to configure a DNS on a new domain registered on freenom.com as follows
Domain: mydomain.ga
My Server IP: 1.2.3.4
My need is to ask mydomain.ga (1.2.3.4) for a specific subdomain (for ...
- 1
1
vote
1
answer
493
views
Are horizontal referrals in DNS allowed?
I've been looking into DNS quite a bit lately and currently got the following error message with the DIG command:
BAD (HORIZONTAL) REFERRAL
From my understanding, this is caused due to delegating a ...
- 13
0
votes
1
answer
191
views
Rate-limiting of dig [closed]
I have a PHP script that calls the bash dig command through the exec function on Ubuntu to monitor hundreds of domains.
What the script does is to call dig to fetch some DNS records on each domain ...
- 55
0
votes
1
answer
407
views
ping resolves hostname but dig does not [closed]
I'm attempting to set up FreeIPA on a Centos KVM guest and one of the prerequisites is to make sure static hostname is set and that the hostname resolves to guest's IP address. My /etc/hosts file is ...
0
votes
1
answer
2k
views
SRV Record not working GoDaddy HTTPS on separate port
I'm having trouble setting up an office with one public IP and multiple web services running on separate ports. One of the services is a media server and I'm trying to add an SRV record to godaddy in ...
- 248
-2
votes
1
answer
572
views
Intermittent DNS failures [closed]
We have intermittent DNS failures. Upon troubleshooting we found from our server, (where the domain is pointed to) gives connection timeout when queried against few TLD ns.
Ex: dig domain @tldns (...
0
votes
1
answer
401
views
How to verify which DNS server actually answered a request when it's forwarded?
ISC BIND has a tool named dig that allows us to send a DNS request to a DNS server set on parameter and see what that server answers.
I wanted to know if that DNS server answered based on its cache, ...
- 107
0
votes
1
answer
143
views
Different IP for same FQDN using different resolver
For my domain gobudgie.ml I get different IPs on different DNS resolver eg.:
jasmich.ml@8.8.4.4 (Default):
jasmich.ml. 964 IN A 31.17.211.88
jasmich.ml@1.1.1.1 (CloudFlare):
jasmich.ml. ...
0
votes
1
answer
56
views
Unable to make NS queries against bind with catchall configuration
I've configured bind to catch all domains and return the same ip (A record) for them. This is for a domain parking service where there might be thousands of domains involved.
After pointing the ...
- 101
0
votes
1
answer
34
views
Nameserver response has no authoritative bit set
I know that the authoritative name servers for google.com are ns1-4.google.com.
Now, I do this:
dig google.com @ns1.google.com
And the response is:
; <<>> DiG 9.11.3-1ubuntu1.8-Ubuntu &...
- 25
-2
votes
2
answers
1k
views
Can I get all the virtual IP addresses given the CNAME
Is there a way to find all the aliases of the host?
$ nslookup x
x is an alias for y
y is an alias for z
z has address 192.0.2.45
So if I have z, is there a way of using nslookup/host/dig commands ...
- 1
2
votes
1
answer
501
views
Windows dig shows no answer section
I downloaded BIND from https://www.isc.org/download/ and installed it following https://nil.uniza.sk/how-install-dig-dns-tool-windows-7. When I run dig it does not show any answer section. For example:...
- 153
0
votes
0
answers
195
views
dns NXDOMAIN error with external view
we are trying to configure a bind9 server. We have two different views, one for the internal zone (dmz) and another for external users who want to access to the dmz web.
The problem is that we may be ...
12
votes
2
answers
16k
views
How do I ask "dig" to only return the IP from a CNAME record?
The dig +short command (such as described in "dig show only answer") is great for batch processing names into IP addresses. It does a simple job and does it well.
Unfortunately when there's a CNAME ...
- 834
2
votes
1
answer
10k
views
dig output missing answer section
I recently got a new domain (lets call it testdomain.extample) from Route53 on Amazon. I further have a classic load balancer from AWS that I want requests to be forwarded to when somebody visits www....
- 129
0
votes
1
answer
625
views
Why does ping to FQDN fails, but dig succeed?
When I try to ping a certain FQDN, I fail:
$ ping test-customer-1.clients.jsonar.com
ping: test-customer-1.clients.jsonar.com: Name or service not known
However, dig et al. succeeds:
$ dig test-...
- 879
1
vote
0
answers
4k
views
Dig +trace not working, while +notrace works
I am trying to troubleshoot some DNS issues and I am starting by trying to trace my DNS lookups using dig +trace. Im getting some weird results. If do a normal dig to my unbound resolver.
dig @192....
- 11
0
votes
2
answers
164
views
Scrape subdomain IPs using PTR records
I'm looking for a solution to an obscure problem. For security policy reasons we have a workstation using PeerBlock with a block list that essentially blacklists the entire internet, and then an allow ...
- 3
2
votes
1
answer
5k
views
DIG: always get a status: FORMERR
I'm under ubuntu 18.04, having DNS issues, so I am using dig command to debug my DNS.
Thing is when I dig a site like redhat.com, or a well configured DNS of mine, I always get a FORMERR status, and ...
- 111
1
vote
0
answers
370
views
Is there a way to force dig to query an authoritative server?
I often find myself doing:
dig www.example.com @$(dig NS example.com +short | head -n 1)
It's a bit like doing a dig +trace www.example.com but starting from the NS of example.com instead of ...
- 241
1
vote
0
answers
3k
views
Why is ADDITIONAL SECTION missing from my dig response?
I have a couple bind servers recently upgraded to Ubuntu 16.04 (from 14.04). Cron runs dig . ns once a day to grab an updated list of Root servers used in the bind configuration.
The script run by ...
- 3,434