Questions tagged [dig]
dig is a command-line client to make queries against DNS servers, the Internet name servers.
223
questions
0
votes
1
answer
87
views
How to make updates to BIND9 zone files to be visible for queries?
I am using BIND 9.18 for testing purpose. I create a zone which supports dynamic DNS, and I try to use nsupdate to update the domain's resource record. After 15 minutes the update is successfully ...
- 3
0
votes
2
answers
43
views
point CNAME Record to multiple wildcard A Records
I am trying to point my cname to my wildcard FQDN which has multiple A-Records.
Dig Output:
;; QUESTION SECTION:
;access.domain.intra. IN A
;; ANSWER SECTION:
access.domain.intra. 3600 IN ...
- 3
0
votes
1
answer
29
views
DNS hard to reach after reboot RHEL7
Two weeks ago, two of our four RHEL7 VMs running on same Openstack infrastructure rebooted unprompted and unnoticed. May be externally triggered.
Ever since, all services relying on DNS are unreliable ...
- 111
0
votes
1
answer
77
views
How to disable or fix OpenStack intercepting DNS PTR queries
I have several virtual machines with Debian/GNU Linux running on OpenStack. When resolving their internal IPv4 addresses I get some strange results:
# ip -c addr show dev eth0
2: eth0: <BROADCAST,...
- 106
2
votes
1
answer
184
views
detect if zone transfer with dig succeed or not via return code
I have script like this
CHARSET=ASCII dig domain.com AXFR > domain.com.zone
if [ "$?" = "0" ]; then
echo "OK"
else
echo "Something went wrong"
...
- 826
0
votes
0
answers
171
views
Gmail not detecting PTR record from vultr server
I have an SMTP server running on a vultr VM. I've set up the rDNS to point to my mail domain name mail.idimitrov.dev. The DNS setup points to that machine on ipv4 and ipv6 for mail.idimitrov.dev and ...
- 101
0
votes
3
answers
270
views
Google Public DNS always returning NXDOMAIN for certain SLDs
Problem: Google's Public DNS returns NXDOMAIN for certain SLDs.
Proof of problem:
dig vpn.example.com @8.8.8.8
; \<\<\>\> DiG 9.11.5-P4-5.1+deb10u8-Debian \<\<\>\> vpn....
0
votes
1
answer
57
views
Querying the nameserver for NS record of a domain results in a non-authoritative answer
I was wondering why name server record need to be in the zone file, because the delegation is already done by the parent zone. I came across this answer. That answer makes sense, I suppose. Then I ...
- 111
0
votes
1
answer
397
views
How does one query the resolver name of a DNS server?
The Shodan search tool, for some DNS servers, shows a Resolver name value for what it finds on UDP port 53. For example, 80.82.117.140 shows Resolver name: server402.xenserve.com and 103.81.27.118 ...
- 180
1
vote
2
answers
121
views
Can the bulk execution of "dig domain mx" on 5000 domains be considered an attack to the network?
I have a database containing a lot of invalid emails.
I want to remove all the emails whose domain does not have mx record.
So after I extracted the domain part I wrote a script to bulk check this for ...
- 155
0
votes
1
answer
304
views
Why if I run the dig command on an authoritary server I don't get an authoritary asnwer?
I ran dig debian.org ns to get a list of all authoritary servers for debian.org, and when I run dig @auth.server debian.org for some of authoritary servers I get an authorithary response and for ...
1
vote
1
answer
286
views
A/AAAA returns no answer when SRV record exists for hostname
I have encountered a problem where DNS A queries that would normally be answered by *.fqdn started returning NO ANSWER after I added SRV record for service residing on said hostname.
Example:
*....
- 11
13
votes
2
answers
2k
views
How is my DNSSEC enabled domain still serving a tiny number of NXDOMAIN response codes?
I enabled DNSSEC on my primary domain about a week ago. It's not a major website or anything -- just my personal domain name that I use for email and the like (TLD: com; DNSSEC algorithm 13; ...
- 165
0
votes
1
answer
54
views
BIND 9 DNS: NS/glue closest delegation used
I have the following example existing delegation:
iio.ne.co.uk NS dns1.iio.ne.co.uk, dns1.iio.ne.co.uk HOST 1.2.3.4
If I add a new delegation:
soho.iio.ne.co.uk NS sohodns.iio.co.uk, sohodns.iio.ne.co....
- 1
0
votes
0
answers
2k
views
Oracle Linux 8 can't resolve host names using DNS
EDIT: FIXED -- My Egress Rules were blocking TCP/UDP 53.
I have a stock Oracle Linux 8 server running on Oracle cloud (OCI) with Postfix installed that stopped resolving names through DNS after a ...
0
votes
2
answers
152
views
Why does wildcard dns entry resolve to a singular hostname?
I'm trying to update my letsencrypt wildcard certificate with certbot, but I noticed it behaved strangly when I ran the command. It said it'd add a subdomain name and remove the wildcard as follows:
...
- 65
0
votes
0
answers
225
views
dig not returning answer for domain registered with namecheap?
Running dig chimu.sh
Results in the following:
; <<>> DiG 9.16.1-Ubuntu <<>> chimu.sh
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: ...
- 115
0
votes
1
answer
440
views
Why does 'dig <domain.com> ANY' time out?
I've tried to query for 'any' records using dig, and I almost always get a timeout error.
but when i google for why this is the case, there doesn't seem to be any answer at all.
psmith@pop-os:~$ dig +...
- 101
0
votes
1
answer
109
views
If I want to use dig/nslookup to query about machines in a VLAN, how can I find which name server to use?
If I want to use dig/nslookup to query about machines in e.g., 38.102.145.0/24, how can I find the name server to use that could resolve machines in that VLAN?
- 949
2
votes
1
answer
269
views
How to make dig to show IP addresses it is sending queries to?
By default when DNS servers do not respond dig does not show any information about the queries being sent. I can use the +qr option to see each query being sent:
$ dig +qr archive.ubuntu.com
; <&...
0
votes
0
answers
815
views
DNS - dig query - NS not returning for sub domain from one location but does for another
I have DNS setup in x2 places and will be repointing NS shortly. Before I do that, I wanted to confirm DNS is correct at both locations.
I'm using dig and passing in a file.
When I query the NS of the ...
0
votes
1
answer
51
views
Suddenly dig +nocmd pop3.pauperis.org aaaa +noall +answer returns nothing
the command dig +nocmd pop3.pauperis.org aaaa +noall +answer returns the followingin my laptop:
pop3.pauperis.org. 3111 IN CNAME pauperis.org.
pauperis.org. 3111 IN AAAA 2001:41d0:...
- 508
3
votes
2
answers
6k
views
Why does dig not show the authority section and how to make it show the authoritative name servers that hold the DNS query`s answer?
I started recently to learn about DNS, and I got stuck when using dig command in Linux. More exactly, I'd like to see the authoritative name servers (their names or IP addresses) that hold the answers ...
- 53
2
votes
2
answers
928
views
Why can't I reach a specific host using a specific DNS?
I'm trying to send some info to www2.agenciatributaria.gob.es. I can do it from several hosts but one.
From this one I get the error Temporary failure in name resolution. However, from the same host I ...
- 161
0
votes
0
answers
284
views
Dig only able to do zone transfers when +nocookie flag is enabled
I am learning about DNS enumeration and I am working on a lab exercise at the moment. To do a zone transfer, I entered the following:
dig @10.83.185.5 example.com AXFR
the result is
;; global options:...
- 115
0
votes
1
answer
906
views
dig - get only hostnames
Could someone help me if there exists some way how to get from dig only hostnames if I want to get list of DNS zone? I work with this command:
dig @dns.example.com example.com axfr
output is:
...
- 3
0
votes
1
answer
4k
views
Listing all the IPs of a given domain name with dig
I wanted to check what's the full list of IPs of a given website (for instance, google.ch). Running dig consistently returns me the same IP:
dig google.ch
google.ch. 136 IN A ...
- 174
1
vote
1
answer
669
views
What is the difference between dig +tries=x and dig +retries=x?
I have been looking at the dig documentation and don't understand the difference between dig +tries=x and dig +retries=x. Can someone explain please?
0
votes
0
answers
373
views
Dnsperf dns caching
i installed dnsperf with unbound and i'm looking to cache a list of DNS records on my centos server
i use dnsperf to cache a list dns
[root@mail bin]# cat domains.txt
facebook.com. MX
google.com. MX
...
- 205
1
vote
0
answers
870
views
dig does not show the content of DS, DNSKEY or any DNSSEC related record, SERVFAIL
I want to see the content of records using dig but any RR related to DNSSEC comes up empty. This happens on two laptops of mine. I'm running Ubuntu 18.04. Is there any setting I can fix to stop ...
- 131
1
vote
2
answers
5k
views
dig all txt records
When I run the dig command, I only get one txt record:
adriano@vm ~ dig swisspass.ch txt ✔ 4501 14:25:36
; <&...
- 185
0
votes
0
answers
745
views
Is there a limit on length of CNAME chain in getaddrinfo lookup?
Update 1
I changed the nameserver in /etc/resolv.conf and that fixes the problem, but it will cause issues with internal name resolutions. So what does it mean? dig querying the same NS gets all 7 ...
- 101
1
vote
1
answer
418
views
Migrating domain from AWS Route S3 to Linode
I want to migrate 1 domain from AWS Route S3 to Linode; I've changed the NS recods to point to
ns1.linode.com
ns2.linode.com
ns3.linode.com
ns4.linode.com
ns5.linode.com
but on the DNS checket it ...
1
vote
1
answer
2k
views
Dig +trace doesn't display the whole delegation chain
When I trace the DNS lookup of google.com for example, dig displays only the request to the root server and then goes straight to the 2nd level domain servers, skipping the top level domain. In other ...
- 11
8
votes
1
answer
11k
views
Why do dig, host and nslookup return different results?
It seems my default (router) DNS server returns different results depending on the tool used to query it.
Using dig:
$ dig @192.168.1.2 test.example.com
; <<>> DiG 9.16.8-Debian <<&...
- 621
0
votes
2
answers
63
views
Site not resolving uniformly
My site www.acurent.com is not resolving to its IP address 23.20.46.124 uniformly
Check on: https://www.whatsmydns.net/#A/acurent.com, it shows that its resolving for certain networks only. If you ...
- 1
0
votes
1
answer
438
views
Understanding TTL values in DNS query answers using dig
I'm querying google.com with dig and I'm having a hard time understanding why TTL values sometimes jump around instead of decrementing every second uniformly (which is my expectation). What am I ...
- 103
0
votes
0
answers
289
views
How to lookup DNS Record in specific zone
For example I have a zone example.com and someone created a dotted hostname app.subzone which resolves to app.subzone.example.com in it.
Now I create a new zone subzone.example.com and an record appin ...
-2
votes
1
answer
2k
views
dig shows SERVFAIL , while pointing at nameserver works fine
somewhat similar to this thread, I faced with a problem where dig blah.net (for the sake of simplicity let's call it blah.net) returns status: SERVFAIL
This DNS zone is hosted on route53, and I use ...
- 107
0
votes
1
answer
552
views
avahi-resolve resolves hostname that dig -p 5353 @224.0.0.251 does not?
I thought avahi-resolve and dig -p 5353 @224.0.0.251 did much the same thing.
However, I have a device where I can resolve its name using avahi-resolve but not using dig:
$ avahi-resolve --name ding-...
- 111
3
votes
1
answer
6k
views
What does OPT PSEUDOSECTION mean in `dig` response?
This is part of the response when I run dig in terminal:
;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 512
What does OPT mean? What does PSEUDOSECTION mean?
- 255
0
votes
1
answer
171
views
Command line dig tool doesn't get answer for SOA query, while https://toolbox.googleapps.com/apps/dig/#SOA/ DOES
While running in my windows 10 64bits machine this command: dig gmail-smtp-in.l.google.com ANY
I get this response
; <<>> DiG 9.16.2 <<>> gmail-smtp-in.l.google.com ANY
;; ...
-1
votes
2
answers
2k
views
Setting up my own nameserver on Freedom domain
I need to configure a DNS on a new domain registered on freenom.com as follows
Domain: mydomain.ga
My Server IP: 1.2.3.4
My need is to ask mydomain.ga (1.2.3.4) for a specific subdomain (for ...
- 1
1
vote
1
answer
783
views
Are horizontal referrals in DNS allowed?
I've been looking into DNS quite a bit lately and currently got the following error message with the DIG command:
BAD (HORIZONTAL) REFERRAL
From my understanding, this is caused due to delegating a ...
- 13
0
votes
1
answer
339
views
Rate-limiting of dig [closed]
I have a PHP script that calls the bash dig command through the exec function on Ubuntu to monitor hundreds of domains.
What the script does is to call dig to fetch some DNS records on each domain ...
- 55
0
votes
1
answer
1k
views
ping resolves hostname but dig does not [closed]
I'm attempting to set up FreeIPA on a Centos KVM guest and one of the prerequisites is to make sure static hostname is set and that the hostname resolves to guest's IP address. My /etc/hosts file is ...
0
votes
1
answer
3k
views
SRV Record not working GoDaddy HTTPS on separate port
I'm having trouble setting up an office with one public IP and multiple web services running on separate ports. One of the services is a media server and I'm trying to add an SRV record to godaddy in ...
- 197
-2
votes
1
answer
837
views
Intermittent DNS failures [closed]
We have intermittent DNS failures. Upon troubleshooting we found from our server, (where the domain is pointed to) gives connection timeout when queried against few TLD ns.
Ex: dig domain @tldns (...
0
votes
1
answer
770
views
How to verify which DNS server actually answered a request when it's forwarded?
ISC BIND has a tool named dig that allows us to send a DNS request to a DNS server set on parameter and see what that server answers.
I wanted to know if that DNS server answered based on its cache, ...
- 107
0
votes
1
answer
175
views
Different IP for same FQDN using different resolver
For my domain gobudgie.ml I get different IPs on different DNS resolver eg.:
[email protected] (Default):
jasmich.ml. 964 IN A 31.17.211.88
jas[email protected] (CloudFlare):
jasmich.ml. ...
