Questions tagged [domain-name-system]

The Domain Name System, usually referred to by the acronym DNS, is a hierarchical, distributed database where the keys are domain names. Questions involving publicly accessible domains should include the real, Fully Qualified Domain Name (FQDN)

1,980 questions with no upvoted or accepted answers
Filter by
Sorted by
Tagged with
8
votes
2answers
577 views

Cisco DNS doctoring or Hairpinning?

I've the following configuration: CISCO 881, IOS 15.2(4)M6. On WAN interface is configured the 86.34.156.48/29 subnet from our ISP. Behind the router is staying 2 webserver. NAT: 86.34.156.51 <> ...
8
votes
1answer
2k views

DNS and Active Directory configuration for a branch office

We've got a branch office with no on-site services at the moment, and we'd like to change that. The biggest goal is to setup some file servers but faster logins and DNS resolution will be welcome as ...
6
votes
0answers
935 views

Caching, forwarding Bind 9.9.4 server works for weeks, suddenly SERVFAIL on all queries (rebooting fixes it)

I have bind 9.9.5 running on two servers (CentOS 6 and 7), for caching and forwarding DNS queries for a mail server. The servers run fine for weeks, then suddenly respond to all queries with SERVFAIL. ...
5
votes
1answer
30k views

CentOS 7 Unable to Resolve Any Host Names

New to Linux and looking for friendly assistance. My company is re-configuring our network DNS infrastructure to point our internal DNS servers at two new CentOS 7 / BIND 9 machines in our DMZ ...
5
votes
0answers
2k views

Understanding (and partially disabling?) DNSSEC for an internal domain

I am setting up a new DNS infrastructure for our internal HPC cluster environment. This involves providing a migration path from our existing DNS authorities and domains. For sake of example, let's ...
5
votes
0answers
3k views

can't access sub-subdomain: DNS_PROBE_FINISHED_NXDOMAIN

I can't access to sub-subdomains. For example http://electricien.synerciel.fr is working. But, for sub-subdomains http://electricite-lemonnier.electricien.synerciel.fr/ returns ...
5
votes
1answer
1k views

Mac OSX Server 10.6 DNS Issues

The server was upgraded from 10.5 from 10.6, during the upgrade the Reverse Zones were lost so I tried to recreate these but found that it's best to delete all zones, definitions and start again. So ...
5
votes
1answer
12k views

curl and wget attempting an ipv6 connection

On my dedicated server (hosted by OVH), that is running a fresh install of Ubuntu 14.04, curl and wget take approximately 10 seconds to complete a simple request. $ curl -v google.com * Rebuilt URL ...
4
votes
0answers
90 views

Load balacing email servers: MX vs A/AAAA vs Anycast IP

I'm curious about what are the differences and considerations when implementing email server load balacing between these three methods: Multiple MX records with the same priority/preference number ...
4
votes
1answer
241 views

Internal DNS TTLs

Four-site company using Windows Domain and DNS servers. Minimum of one DC/DNS server per site. One site is HQ and hosts most companywide servers and services. DNS records for Windows servers are ...
4
votes
0answers
302 views

How to enable hostname resolution (dns) for lxd containers from the lxd host?

How to enable lxd hostname resolution from the lxd host? After creating the below container: >>> lxc launch ubuntu: container Creating container Starting container >>> lxc list +--...
4
votes
0answers
3k views

DNS IPv6 settings on Domain Controllers

Both in my lab testing and on real installation I saw that, after a dcpromo (done via "Server Manager" on Windows 2016), a loopback IPv6 address is automatically added on the interface DNS settings (...
4
votes
0answers
1k views

Getting to enforcing google safe search using CNAME with unbound and nsd?

I am trying to implement this using Unbound and Nsd: https://support.google.com/websearch/answer/186669?hl=en To force SafeSearch for your network, you’ll need to update your DNS. configuration. ...
4
votes
0answers
362 views

DHCP Server Listing Host as “BAD_ADDRESS” and not Registering DNS

Question Why is DHCP showing "BAD_ADDR", why does it think there is a Conflict, and why can't the host register its DNS name? Devices: DHCP Server = Server 2012 on bare metal. Also running DNS. ...
4
votes
0answers
647 views

Unable to Join domain, unable to resolve hostname

I'm having problems connecting a computer to the domain. I'll explain my setup (with hostnames). I have: Hyper-V Guest 1 (Imperium) - DC / DNS Server (Server 2016 Essentials) Hyper-V Guest 2 (Lima) ...
4
votes
0answers
242 views

Bind notifies on DNS views

I have configured two Cent OS based DNS servers one for master and one for slave with internal and external views for a domain. The problem is that i get notifies and automatic zone updates when i ...
4
votes
1answer
926 views

If both forwarders have answer, why does DNS server still timeout on request?

In what circumstances would a DNS server request timeout when the forwarders already have the answer? For example, there appears to be a domain that I assume is having DNS issues at the moment us.army....
4
votes
0answers
744 views

How do I set up openshift’s bind correctly

I have set up an instance of redhat’s Openshift origin and am sometimes having troubles resolving the individual apps’ domains from the outside. I have two physical machines running, both with their ...
4
votes
0answers
512 views

Does AWS Elastic Beanstalk Swap Environment Url swaps environments for git push?

I have read the docs for zero downtime on aws but cant seem to understand what happens in this scenario? I have a environment running in production called 'red' I duplicate the environment as 'blue' ...
4
votes
0answers
3k views

vmware DNS in host-only configuration

I want to connect a Linux VM running in VMWare on a Windows 7 laptop to an enterprise network using host-only configuration. I was able to setup bidirectional routing between "host-only" VMWare ...
4
votes
2answers
791 views

Windows Server 2008 R2 DNS - Syncronizing changes to TTL

I apologize if this has been asked. My searches have not been successful. If I have 2 DNS servers in my Domain and add an A record to 1 server, that record is successfully propagated to the second ...
4
votes
1answer
684 views

Zone transfer Windows Server DNS from NSD

I have a NSD server being primary server for a zone and want a Windows Server (2008 and 2012 RC) box to be secondary for that zone. Everything is configured and working EXCEPT: When Windows receives ...
4
votes
0answers
864 views

Ubuntu SOCKS proxy setup with two interfaces - how to pass DNS

I setup a SOCKSv5 server (Dante) on Ubuntu with two ethernet interfaces: eth0 is connected to my WAN with a static routable IP eth1 is connected to my LAN with a private IP I have a client ...
4
votes
2answers
736 views

DNS delegation on same server with DDNS and second slave server

I have two servers running BIND, the first is setup as the master of two zones and the second as a slave for those zones. The zones are example.com and ddns.example.com. I have DDNS running and ...
4
votes
4answers
3k views

Providing DNS redirection to honeypot server for known bad domains

Currently running BIND on RHEL 5.4 and am looking for a more efficient manner of providing DNS redirection to a honeypot server for a large (30,000+) list of forbidden domains. Our current solution ...
3
votes
0answers
75 views

How to add/change NAPTR records to a specific ZoneScope in Windows DNS using PowersShell

I'm using DNS Policies in Windows DNS for split-horizon. I need to add NAPTR records which resolve differently based on the subnet of where the request came from. I've got almost all of it figured out,...
3
votes
0answers
272 views

DNSSEC for private internal sub zones of an external domain

Consider the following scenario: example.com is hosted on CloudFlare and it's signed by CloudFlare DNSSEC. Everything works as expected for example.com. Inside the company we have some internal ...
3
votes
0answers
3k views

Server can't find domain: SERVFAIL

I have VPS and CentOS7 installed on it. Also I have httpd Apache2, nginx, named and iptables services working there. First, when I just bought this server, I had hostname maindomain1.com and made my ...
3
votes
0answers
32 views

How should private network services be exposed to users using DNS over HTTPS?

As DNS over HTTPS becomes more widely deployed, I am starting to hear reports that users are failing to access services from internal networks when DNS over HTTPS is turned on. Fair enough, DNS over ...
3
votes
0answers
162 views

Keeping DNSSEC KSKs offline with BIND9

I am looking to move the private part of the KSK for my domains off my main nameserver. I've tried this with a test domain and get errors like this: dns_dnssec_keylistfromrdataset: error reading /etc/...
3
votes
0answers
206 views

Different nslookup answers on different clients in local network with local DNS

Situation: I have a few clients in a local network. I have a server named amp003 with IP address 192.168.4.13 I have two DNS servers (each one on relative DC server). On client 1 I did following: ...
3
votes
0answers
2k views

BIND: DNS failover and high availability with dynamic updates

I am trying to design a system with 2 servers that act as both DHCP and DNS servers with dynamic updates. I am using ISC DHCP and BIND9. It looks like this. Server1 - DHCP primary and DNS master. IP ...
3
votes
0answers
2k views

Windows 10 DHCP Client and RFC 3397 (a.k.a. DHCP option 119, Domain Search Option)

Using DHCP option 119, Domain Search Option as documented in RFC 3397 would make my life a lot easier. All the Linux-Machines on my network have supported this option for quite a while, but ...
3
votes
1answer
308 views

Is it possible to change sendmail behavior on “Host unknown” errors?

Sendmail 8.14.4 I had DNS issues resulting in a DNS server thinking that a hostname wasn't available (when in fact, it was available). That resulted in the following delivery log entry in sendmail: ...
3
votes
0answers
4k views

Unbound refuses requests from localhost even though `access-control: 127.0.0.1 allow_snoop`

This is my unbound.conf server: interface: 0.0.0.0 access-control: 10.0.0.0/8 allow_snoop access-control: 127.0.0.1 allow_snoop access-control: 192.168.0.0/16 allow_snoop ... Reading the ...
3
votes
0answers
3k views

Mailgun emails are rejected everywhere but on Gmail

My problem and Mailgun logs I've "setup and verified" (see context) my sending domain with Mailgun, so I could use it to deliver my contact/order forms via Mailgun API: https://github.com/...
3
votes
1answer
3k views

request has invalid signature: TSIG rndc-test-key: tsig verify failure (BADKEY)

I am pretty much new to bind DNS and during nsupdate , i am getting BADKEY error.I have /root/named/chroot/etc/rndc.key as below :- key "rndc-test-...
3
votes
2answers
1k views

Windows server ignoring DNS resolution on private interface

I have a Windows 2012 server with two interfaces - public internet facing, and private. The private interface uses our internal DNS servers. This interface has no gateway. Static IP - not DHCP. I ...
3
votes
1answer
571 views

Search option in resolv.conf getting overwritten by prepend statement in dhclient.conf

I have setup a DNS server for my department which is running FreeBSD 10.2. It is currently connected to the campus internet and receiving its address via dhcp, so /etc/resolv.conf looks like this: #...
3
votes
1answer
810 views

failed loading zone from 'myzone.local.zone': no ttl

I run the following command for dnssec on debian 8. But I get error: # dnssec-signzone -A -3 $(head -c 1000 /dev/random | sha1sum | cut -b 1-16) -N INCREMENT -o myzone.local -t myzone.local.zone ...
3
votes
1answer
1k views

Error using dnssec-signzone in chroot'd bind 9.8 when a zone file includes other files

Using bind 9.8.2 on RHEL 6.5, running chroot'd. I have a zone file that includes other files (it's a zone with a large number of servers in different datacenters, and there's one included file per ...
3
votes
0answers
2k views

Registrar nameservers vs. NS records for bare domain?

OK, I'm a bit new to DNS, but I'm having some trouble finding the answer to this. I have a domain registered at google domains. As with other registrars, you have access to their free DNS, and ...
3
votes
0answers
654 views

How to disable IPv4 use on OSX (Or disable Happy Eyeballs)

I have a OSX El Capitain (10.11.2) host that has only IPv6 connectivity. The network uses NAT64 and DNS64 to provide access to legacy IPv4 hosts on the internet. The problem is that when looking up a ...
3
votes
1answer
1k views

How to use nsupdate to update a wildcard dns record

So for our dev environment we have a wildcard A record for each of our developers. Having different needs (vpn vs office, etc) we allow update on the dns via nsupdate. That works pretty well but I ...
3
votes
2answers
780 views

Why is sendmail calling dns_getcanonname for domains of non-recipients in the To: header?

We've noticed an occasional repeatable problem in our sendmail config. The scenario is we receive a message from the internet with one of our users in the To: list, and one of the other users in the ...
3
votes
0answers
5k views

DNS Failure From Cisco AnyConnect SSL VPN Subnet

We have three Windows Domain Controllers (2012 R2 and 2008 R2 mix), all DNS servers. Split-zone DNS scenario. DNS resolution is working for all internal subnets except over User VPN. All network ...
3
votes
0answers
1k views

No RRSIGs found

I had a dnssec expiration and since redoing everything, I get the following error No RRSIGs found from verisign debugging These are the exact steps I use to produce the key and signatures. What ...
3
votes
4answers
2k views

Multiple domains (with & without www prefix) on same server, running the same code

We've inherited the following website setup: one main website and around 130 secondary websites, which all point to the main website domain (through a CNAME DNS setup); Website is hosted on an IIS 6 ...
3
votes
0answers
2k views

Network Layer 7 Deep Packet Inspection linux solution that isn't a all-in-one distro?

Overview: I have software that has our Edge/DNS servers hardcoded into them, DNS queries returned from DNS servers are not being masked properly. I need the DNS entries that are returned from BIND ...
3
votes
1answer
4k views

Proxmox vps container connection problems

I have Proxmox on my node server which have ip:5.189.190.* and I created openvz container on an ip : 213.136.87.* and installed centos 6 on it The problem: Cann't connect to container ssh directly ...

1
2 3 4 5
40