Questions tagged [dig]

dig is a command-line client to make queries against DNS servers, the Internet name servers.

Filter by
Sorted by
Tagged with
0 votes
0 answers
16 views

Oracle Linux 8 can't resolve host names using DNS

I have a stock Oracle Linux 8 server running on Oracle cloud (OCI) with Postfix installed that stopped resolving names through DNS after a reboot - it was working fine before the reboot and nothing ...
user avatar
0 votes
0 answers
26 views

Dig behaving differently after OS change

After replacing a SLES12 SP5 server with a SLES15 SP3 server the dig command is behaving differently. I'm trying to determine if this is a bug or changeable as it breaking some code that would be ...
user avatar
  • 1
0 votes
1 answer
44 views

Why does wildcard dns entry resolve to a singular hostname?

I'm trying to update my letsencrypt wildcard certificate with certbot, but I noticed it behaved strangly when I ran the command. It said it'd add a subdomain name and remove the wildcard as follows: ...
user avatar
0 votes
0 answers
26 views

dig not returning answer for domain registered with namecheap?

Running dig chimu.sh Results in the following: ; <<>> DiG 9.16.1-Ubuntu <<>> chimu.sh ;; global options: +cmd ;; Got answer: ;; ->>HEADER<<- opcode: QUERY, status: ...
user avatar
  • 115
0 votes
1 answer
48 views

Why does 'dig <domain.com> ANY' time out?

I've tried to query for 'any' records using dig, and I almost always get a timeout error. but when i google for why this is the case, there doesn't seem to be any answer at all. psmith@pop-os:~$ dig +...
user avatar
0 votes
1 answer
33 views

If I want to use dig/nslookup to query about machines in a VLAN, how can I find which name server to use?

If I want to use dig/nslookup to query about machines in e.g., 38.102.145.0/24, how can I find the name server to use that could resolve machines in that VLAN?
user avatar
0 votes
0 answers
27 views

How to make dig to show IP addresses it is sending queries to?

By default when DNS servers do not respond dig does not show any information about the queries being sent. I can use the +qr option to see each query being sent: $ dig +qr archive.ubuntu.com ; <&...
user avatar
0 votes
0 answers
48 views

DNS - dig query - NS not returning for sub domain from one location but does for another

I have DNS setup in x2 places and will be repointing NS shortly. Before I do that, I wanted to confirm DNS is correct at both locations. I'm using dig and passing in a file. When I query the NS of the ...
user avatar
0 votes
1 answer
20 views

Suddenly dig +nocmd pop3.pauperis.org aaaa +noall +answer returns nothing

the command dig +nocmd pop3.pauperis.org aaaa +noall +answer returns the followingin my laptop: pop3.pauperis.org. 3111 IN CNAME pauperis.org. pauperis.org. 3111 IN AAAA 2001:41d0:...
user avatar
  • 488
1 vote
2 answers
898 views

Why does dig not show the authority section and how to make it show the authoritative name servers that hold the DNS query`s answer?

I started recently to learn about DNS, and I got stuck when using dig command in Linux. More exactly, I'd like to see the authoritative name servers (their names or IP addresses) that hold the answers ...
user avatar
2 votes
2 answers
697 views

Why can't I reach a specific host using a specific DNS?

I'm trying to send some info to www2.agenciatributaria.gob.es. I can do it from several hosts but one. From this one I get the error Temporary failure in name resolution. However, from the same host I ...
user avatar
  • 151
0 votes
0 answers
41 views

Dig only able to do zone transfers when +nocookie flag is enabled

I am learning about DNS enumeration and I am working on a lab exercise at the moment. To do a zone transfer, I entered the following: dig @10.83.185.5 example.com AXFR the result is ;; global options:...
user avatar
0 votes
1 answer
168 views

dig - get only hostnames

Could someone help me if there exists some way how to get from dig only hostnames if I want to get list of DNS zone? I work with this command: dig @dns.example.com example.com axfr output is: ...
user avatar
0 votes
1 answer
975 views

Listing all the IPs of a given domain name with dig

I wanted to check what's the full list of IPs of a given website (for instance, google.ch). Running dig consistently returns me the same IP: dig google.ch google.ch. 136 IN A ...
user avatar
1 vote
1 answer
196 views

What is the difference between dig +tries=x and dig +retries=x?

I have been looking at the dig documentation and don't understand the difference between dig +tries=x and dig +retries=x. Can someone explain please?
user avatar
0 votes
0 answers
130 views

Dnsperf dns caching

i installed dnsperf with unbound and i'm looking to cache a list of DNS records on my centos server i use dnsperf to cache a list dns [root@mail bin]# cat domains.txt facebook.com. MX google.com. MX ...
user avatar
1 vote
0 answers
320 views

dig does not show the content of DS, DNSKEY or any DNSSEC related record, SERVFAIL

I want to see the content of records using dig but any RR related to DNSSEC comes up empty. This happens on two laptops of mine. I'm running Ubuntu 18.04. Is there any setting I can fix to stop ...
user avatar
  • 127
0 votes
2 answers
1k views

dig all txt records

When I run the dig command, I only get one txt record: adriano@vm ~ dig swisspass.ch txt  ✔  4501  14:25:36 ; <&...
user avatar
  • 155
0 votes
0 answers
310 views

Is there a limit on length of CNAME chain in getaddrinfo lookup?

Update 1 I changed the nameserver in /etc/resolv.conf and that fixes the problem, but it will cause issues with internal name resolutions. So what does it mean? dig querying the same NS gets all 7 ...
user avatar
1 vote
1 answer
228 views

Migrating domain from AWS Route S3 to Linode

I want to migrate 1 domain from AWS Route S3 to Linode; I've changed the NS recods to point to ns1.linode.com ns2.linode.com ns3.linode.com ns4.linode.com ns5.linode.com but on the DNS checket it ...
user avatar
0 votes
1 answer
606 views

Dig +trace doesn't display the whole delegation chain

When I trace the DNS lookup of google.com for example, dig displays only the request to the root server and then goes straight to the 2nd level domain servers, skipping the top level domain. In other ...
user avatar
7 votes
1 answer
7k views

Why do dig, host and nslookup return different results?

It seems my default (router) DNS server returns different results depending on the tool used to query it. Using dig: $ dig @192.168.1.2 test.example.com ; <<>> DiG 9.16.8-Debian <<&...
user avatar
0 votes
2 answers
47 views

Site not resolving uniformly

My site www.acurent.com is not resolving to its IP address 23.20.46.124 uniformly Check on: https://www.whatsmydns.net/#A/acurent.com, it shows that its resolving for certain networks only. If you ...
user avatar
  • 1
0 votes
1 answer
219 views

Understanding TTL values in DNS query answers using dig

I'm querying google.com with dig and I'm having a hard time understanding why TTL values sometimes jump around instead of decrementing every second uniformly (which is my expectation). What am I ...
user avatar
0 votes
0 answers
167 views

How to lookup DNS Record in specific zone

For example I have a zone example.com and someone created a dotted hostname app.subzone which resolves to app.subzone.example.com in it. Now I create a new zone subzone.example.com and an record appin ...
user avatar
-2 votes
1 answer
575 views

dig shows SERVFAIL , while pointing at nameserver works fine

somewhat similar to this thread, I faced with a problem where dig blah.net (for the sake of simplicity let's call it blah.net) returns status: SERVFAIL This DNS zone is hosted on route53, and I use ...
user avatar
  • 107
0 votes
1 answer
297 views

avahi-resolve resolves hostname that dig -p 5353 @224.0.0.251 does not?

I thought avahi-resolve and dig -p 5353 @224.0.0.251 did much the same thing. However, I have a device where I can resolve its name using avahi-resolve but not using dig: $ avahi-resolve --name ding-...
user avatar
1 vote
1 answer
3k views

What does OPT PSEUDOSECTION mean in `dig` response?

This is part of the response when I run dig in terminal: ;; OPT PSEUDOSECTION: ; EDNS: version: 0, flags:; udp: 512 What does OPT mean? What does PSEUDOSECTION mean?
user avatar
0 votes
1 answer
115 views

Command line dig tool doesn't get answer for SOA query, while https://toolbox.googleapps.com/apps/dig/#SOA/ DOES

While running in my windows 10 64bits machine this command: dig gmail-smtp-in.l.google.com ANY I get this response ; <<>> DiG 9.16.2 <<>> gmail-smtp-in.l.google.com ANY ;; ...
user avatar
-1 votes
2 answers
2k views

Setting up my own nameserver on Freedom domain

I need to configure a DNS on a new domain registered on freenom.com as follows Domain: mydomain.ga My Server IP: 1.2.3.4 My need is to ask mydomain.ga (1.2.3.4) for a specific subdomain (for ...
user avatar
  • 1
1 vote
1 answer
493 views

Are horizontal referrals in DNS allowed?

I've been looking into DNS quite a bit lately and currently got the following error message with the DIG command: BAD (HORIZONTAL) REFERRAL From my understanding, this is caused due to delegating a ...
user avatar
  • 13
0 votes
1 answer
191 views

Rate-limiting of dig [closed]

I have a PHP script that calls the bash dig command through the exec function on Ubuntu to monitor hundreds of domains. What the script does is to call dig to fetch some DNS records on each domain ...
user avatar
0 votes
1 answer
407 views

ping resolves hostname but dig does not [closed]

I'm attempting to set up FreeIPA on a Centos KVM guest and one of the prerequisites is to make sure static hostname is set and that the hostname resolves to guest's IP address. My /etc/hosts file is ...
user avatar
0 votes
1 answer
2k views

SRV Record not working GoDaddy HTTPS on separate port

I'm having trouble setting up an office with one public IP and multiple web services running on separate ports. One of the services is a media server and I'm trying to add an SRV record to godaddy in ...
user avatar
  • 248
-2 votes
1 answer
572 views

Intermittent DNS failures [closed]

We have intermittent DNS failures. Upon troubleshooting we found from our server, (where the domain is pointed to) gives connection timeout when queried against few TLD ns. Ex: dig domain @tldns (...
user avatar
0 votes
1 answer
401 views

How to verify which DNS server actually answered a request when it's forwarded?

ISC BIND has a tool named dig that allows us to send a DNS request to a DNS server set on parameter and see what that server answers. I wanted to know if that DNS server answered based on its cache, ...
user avatar
  • 107
0 votes
1 answer
143 views

Different IP for same FQDN using different resolver

For my domain gobudgie.ml I get different IPs on different DNS resolver eg.: jasmich.ml@8.8.4.4 (Default): jasmich.ml. 964 IN A 31.17.211.88 jasmich.ml@1.1.1.1 (CloudFlare): jasmich.ml. ...
user avatar
0 votes
1 answer
56 views

Unable to make NS queries against bind with catchall configuration

I've configured bind to catch all domains and return the same ip (A record) for them. This is for a domain parking service where there might be thousands of domains involved. After pointing the ...
user avatar
  • 101
0 votes
1 answer
34 views

Nameserver response has no authoritative bit set

I know that the authoritative name servers for google.com are ns1-4.google.com. Now, I do this: dig google.com @ns1.google.com And the response is: ; <<>> DiG 9.11.3-1ubuntu1.8-Ubuntu &...
user avatar
-2 votes
2 answers
1k views

Can I get all the virtual IP addresses given the CNAME

Is there a way to find all the aliases of the host? $ nslookup x x is an alias for y y is an alias for z z has address 192.0.2.45 So if I have z, is there a way of using nslookup/host/dig commands ...
user avatar
  • 1
2 votes
1 answer
501 views

Windows dig shows no answer section

I downloaded BIND from https://www.isc.org/download/ and installed it following https://nil.uniza.sk/how-install-dig-dns-tool-windows-7. When I run dig it does not show any answer section. For example:...
user avatar
  • 153
0 votes
0 answers
195 views

dns NXDOMAIN error with external view

we are trying to configure a bind9 server. We have two different views, one for the internal zone (dmz) and another for external users who want to access to the dmz web. The problem is that we may be ...
user avatar
12 votes
2 answers
16k views

How do I ask "dig" to only return the IP from a CNAME record?

The dig +short command (such as described in "dig show only answer") is great for batch processing names into IP addresses. It does a simple job and does it well. Unfortunately when there's a CNAME ...
user avatar
2 votes
1 answer
10k views

dig output missing answer section

I recently got a new domain (lets call it testdomain.extample) from Route53 on Amazon. I further have a classic load balancer from AWS that I want requests to be forwarded to when somebody visits www....
user avatar
0 votes
1 answer
625 views

Why does ping to FQDN fails, but dig succeed?

When I try to ping a certain FQDN, I fail: $ ping test-customer-1.clients.jsonar.com ping: test-customer-1.clients.jsonar.com: Name or service not known However, dig et al. succeeds: $ dig test-...
user avatar
1 vote
0 answers
4k views

Dig +trace not working, while +notrace works

I am trying to troubleshoot some DNS issues and I am starting by trying to trace my DNS lookups using dig +trace. Im getting some weird results. If do a normal dig to my unbound resolver. dig @192....
user avatar
0 votes
2 answers
164 views

Scrape subdomain IPs using PTR records

I'm looking for a solution to an obscure problem. For security policy reasons we have a workstation using PeerBlock with a block list that essentially blacklists the entire internet, and then an allow ...
user avatar
  • 3
2 votes
1 answer
5k views

DIG: always get a status: FORMERR

I'm under ubuntu 18.04, having DNS issues, so I am using dig command to debug my DNS. Thing is when I dig a site like redhat.com, or a well configured DNS of mine, I always get a FORMERR status, and ...
user avatar
  • 111
1 vote
0 answers
370 views

Is there a way to force dig to query an authoritative server?

I often find myself doing: dig www.example.com @$(dig NS example.com +short | head -n 1) It's a bit like doing a dig +trace www.example.com but starting from the NS of example.com instead of ...
user avatar
  • 241
1 vote
0 answers
3k views

Why is ADDITIONAL SECTION missing from my dig response?

I have a couple bind servers recently upgraded to Ubuntu 16.04 (from 14.04). Cron runs dig . ns once a day to grab an updated list of Root servers used in the bind configuration. The script run by ...
user avatar
  • 3,434

1
2 3 4 5