Questions tagged [domain-name-system]

The Domain Name System, usually referred to by the acronym DNS, is a hierarchical, distributed database where the keys are domain names. Questions involving publicly accessible domains should include the real, Fully Qualified Domain Name (FQDN)

Filter by
Sorted by
Tagged with
-1
votes
0answers
30 views

NGINX IP working but not Subdomain

subdomain.mysite.com is pointed to an IP address, but it does not work when I visit that URL and I am greeted with a "took too long to respond" error. Here is my conf file for subdomain....
0
votes
1answer
35 views

Does DANE allow for trustable self-signed certificates?

DANE has 4 modes of operation indexed 0-3 with mode 3 i.e. Domain issued certificate allowing for self-signed certificates. Can this mode be used in a trustable manner? and if so does that mean that ...
-1
votes
0answers
33 views

Primary Name Server Not Listed At Parent

I have a hosted zone created in Route53 and updated the NS records under the namespaces of the purchased domain. Unfortunately the DNS check does not return or point to the new NS records instead gets ...
0
votes
1answer
27 views

How to mitigate peacecorps.gov DOS attack on bind9 DNS Server?

I newly configured bind9 on my ubuntu server and set allow-query to { any; } as I want my DNS server to be accessible for anywhere. However, I am now facing DOS attack using peacecorps.gov domain with ...
0
votes
2answers
42 views

Dig returns incorrect DNS record, but only on specific network. What's wrong?

I was trying to SSH into my server at https://myrtlelime.com, but I noticed that I couldn't (despite being able to visit it on Chrome). On my local computer, I get this output when running it: $dig @...
-1
votes
0answers
38 views

How to let a DNS server point a domain to itself or a LAN IP? [closed]

My situation: I bought a domain example.com from a lousy hosting company that only allows me to change example.com's name servers. My final goal is to example.com point to my home router, which have a ...
0
votes
0answers
29 views

Manage DNS server on Server 2019 from Server 2012

I have a non-AD Windows Server 2012 machine (192.168.200.10) that has the DNS Server role installed, and it is the primary server for a number of zones. Unfortunately, I'm stuck with this server being ...
0
votes
1answer
32 views

Errors setting up DNSSEC automatic signing with bind

I followed the exact tutorial from here https://ftp.isc.org/isc/dnssec-guide/html/dnssec-guide.html#easy-start-guide-for-authoritative-servers to set up DNSSEC on my domain domain.example.com. When I ...
1
vote
1answer
25 views

Error adding DS records for my subdomain to the zone file of parent domain - using bind

I have domain example.company.com which is DNSSEC secured and has sent its DS records to the parent company.com. I want to create 2 other subdomains, both DNSSEC secured, sub1.example.company.com and ...
0
votes
1answer
22 views

Bind9 - How to allow DNS lookup from any machine

My goal is to have a DNS server and allow others to make a DNS lookup using my DNS server IP address. I installed bind9 and modified the named.conf.options file as below. However from a remote machine ...
0
votes
0answers
14 views

does manually resigning a changed zone file with the same keys break the DNSSEC support from the upstream parent zone?

I send the ds set of example.company.com to my company.com provider. I also manage a couple of subdomains which are subject to change eventually: subdomain1.example.company.com and subdomain2.example....
0
votes
1answer
15 views

custom domain resolves through google but not company servers

I just set up a domain and when asking for the A records using the @8.8.8.8 server I get the correct record in no time. When I run +trace I see the company servers along the pathway, but when I run ...
0
votes
1answer
21 views

On AWS during DS record creation I get an error, DS record with DNS name ex.com not permitted in zone ex.com. Why might this be?

Environment: AWS, DNSSEC When I attempt to create a DS record to establish a chain of trust I get an error that I don't understand. My full error. Error occurred Bad request. (InvalidChangeBatch 400: ...
-2
votes
0answers
34 views

Azure cannot create cert to second-level domain, correct A record exist

We received a message "A record doesn't exist" but we have correct A record in our DNS zone. When we try to create cert to subdomain - everything is ok. How can we create a cert to second-...
1
vote
1answer
35 views

Squid HTTP Transparent Proxy for Spoofed DNS Requests

I'm working on a security project which requires a remotely-accessible transparent proxy. I have set up an Azure VM running Ubuntu 18.04 with squid running as a transparent proxy. I'm only concerned ...
0
votes
1answer
24 views

Can I reuse the DNS name of an old Azure classic VM?

I currently have a "classic" virtual machine running on Azure at foobar.cloudapp.net. I'm intending to replace this VM with a newly created VM on azure. When I try to configure the new VM's ...
0
votes
1answer
33 views

Correctly writing a Zone File for a nameserver

I need to write a zone file for a new company domain. Let's say the company owns company.com and I need to write a zone file for 2 domains play1.playground.company.com and play2.playground.company.com ...
0
votes
0answers
30 views

How can you audit (7x24) which process is performing a given DNS query?

The inner router in my home network (an Asuswrt based router), the one most of my home devices are connected to, has Suricata installed. Among other things, it checks DNS queries and flags those that ...
0
votes
0answers
15 views

DKIM verification for emails sent from another domain using main domain

Say, I have two domains. maildomain.com and vhost.com. Both are hosted in different server thus have separate IP. Both have their own DKIM, SPF and DMARC records set up properly. Now, if I send ...
0
votes
0answers
14 views

302 redirect - Why is this happening?

When requesting https://www.example.com, TWO redirects occur: https://www.example.com -> 302 -> http://example.com -> 301 -> https://example.com I am trying to make this just a single 301 ...
2
votes
0answers
24 views

Need help configuring BIND on Pfsense as an authoritative DNS Server

For a few weeks now I've tried configuring BIND Server on my Pfsense Router as an authoritative DNS Server. I own a domain bought from RoTLD, I've set my nameservers to my external static ip, and they ...
0
votes
1answer
27 views

Is it possible to know/resolve multiple DNS names to IP “wildcard like”?

Is it possible to know/resolve multiple DNS names to IP "wildcard like"? For example: *.telemetry.microsoft.com Maybe it is a two step process, first get the DNS names are matching, then ...
0
votes
1answer
49 views

Create subdomains under a single IP/domain in an Nginx Reverse Proxy?

I'd like to be able to create a subdomain in Nginx Reverse proxy. As it stands right now, I have a properly configured and usable reverse proxy that resolves properly. The problem arises when I try to ...
0
votes
0answers
17 views

Bogus DNS timestamp after enabling scavenge

I just enabled scavenge on a Win2019 DC (it is a very small domain, with a single domain controller). Before enabling scavenge, the root record for the zone was the following: (same as parent folder) ...
1
vote
1answer
60 views

Add CNAME record to DNS when A-record exists?

We are administering the DNS zone for our customer, and they are in the process of making some change to.. whatever, doesn't matter. The consultant company doing the change for our client sent a ...
-2
votes
0answers
30 views

How do I make the output of a virtual machine available over the web? [closed]

Forgive the super newbie question. I run a home Windows 2016 IIS server from home. I'm successfully serving websites from it. I've started looking into virtual machines. I've successfully set up a VM ...
0
votes
2answers
68 views

Is there a way to have a PC to resolve IP for a local server while on the LAN/VPN but an external IP when not?

I have a Nextcloud server on my LAN (with an external port forward for outside access) that I am setting up WebDav connections on for a collection of Windows 10 PCs and I want the users to make their ...
0
votes
1answer
27 views

How to not propagate private IP address?

I have 2 MS 2016 DNS servers that are only used as Public Name Servers. I cannot seem to figure out how to not propagate their private IP address. I've been told to use Microsoft DNS Policy Filtering,...
0
votes
0answers
10 views

Prevent Stormshield from update default DNS

Our Stormshield firewall regularly send DNS requests in ordrer to update some system URL: cloudurl1-sns.stormshieldcs.eu, webupdate.stormshield.eu, etc. These requests generate unwanted logs in our ...
1
vote
2answers
91 views

What causes a computer/phone/device to do a DNS lookup for its own hostname?

The two main things I'm wondering are: What causes a computer/phone/device to do a DNS lookup for its own hostname/FQDN How long after a device leaves a network will it retain the "settings"...
0
votes
1answer
42 views

Webpage always takes 5 seconds to load the first time using Nginx

I've deployed a webserver using Nginx. The webserver is under a virtual machine using Virtualbox. Everything seems to work properly. Connections are carried out on a local network context. The problem ...
0
votes
1answer
17 views

MX record for domain and subdomain

Is it possible to setup a MX record for example.com and a.example.com on the same DNS server in the same zone and is this a good practice? Some like this: example.com. IN A 10.24.233.214 a....
0
votes
1answer
172 views

CentOS webmail setup using Windows Server DNS

I'm having problems configuring CentOS7 to host as a mail server using Windows Server as a DNS, and cannot figure out where the problem is. The mail server and windows server are connected to a centOS ...
0
votes
0answers
41 views

Setting up MX records for two servers with same hostname

In my DNS records, I have 5 MX records with my hostname being the main domain name of my site example.com. These 5 records are aspmx.google.com, alt1.aspmx.google.com, alt2.aspmx.google.com, alt3....
0
votes
0answers
13 views

How do I update DNS entries on a Weblogic cluster?

Back story The network team in my environment is trying to retire an old DNS server. They actually did it assuming nobody was using it at the time. Two of my applications, both running on Weblogic/...
3
votes
1answer
56 views

DNS SOA record - MNAME is empty (just a zero byte)

Short Question Is an empty MNAME valid at all? Can it ultimately impact clients, like Windows PCs or smartphones? My situation I'm debugging an issue where resolving a host name in an Android app ...
0
votes
0answers
39 views

dig does not show the content of DS, DNSKEY or any DNSSEC related record, SERVFAIL

I want to see the content of records using dig but any RR related to DNSSEC comes up empty. This happens on two laptops of mine. I'm running Ubuntu 18.04. Is there any setting I can fix to stop ...
1
vote
1answer
27 views

Hosting an Azure App Service on an apex/naked domain

I have created an Azure App Service site which is moving to production. I am having some problems with the fact that Azure can only handle SSL/TLS for subdomains. My subdomain www.abc123.com is ...
1
vote
0answers
20 views

How to delete IPv6 DNS Servers via command line?

I can successfully delete IPv4 DNS Servers via command line on a Windows Server 2019 with the following command: netsh interface ipv4 delete dnsserver "My Ethernet" all After this command I ...
0
votes
1answer
38 views

Unable to add forward map SERVFAIL/REFUSED DDNS

I am using bind9 on a primary dns server with two secondary dns servers in a master/slave relationship. I am attempting to implement DDNS but seem to be running into a problem when it comes to adding ...
-1
votes
0answers
30 views

Best practise: DNS for 1 domain with many subdomains on 2 servers?

Right now Server A has about 3k subdomains. A-Record example.com IN A 192.0.2.0 * example.com IN A 192.0.2.0 Subdomains are managed by apache web server with virtual hosts. Now I want to ...
0
votes
0answers
19 views

Google App Engine based Node Js server does not work on Reliance Jio network in India

Requests to my node server deployed on GAE ends in DNS_PROBE_FINISHED_NXDOMAIN on a particular ISP (Reliance JIO in India). The same app works fine on any other network . If deployed on Heroku or on ...
0
votes
1answer
46 views

BIND plus Google Cloud DNS

I am relatively new in DNS management and I want to ask what is the best way to go about this. We currently have our own Name Server as Authoritative ns1.ourcompany.com There are 5 other Name Servers ...
0
votes
2answers
40 views

dig all txt records

When I run the dig command, I only get one txt record: adriano@vm ~ dig swisspass.ch txt  ✔  4501  14:25:36 ; <&...
0
votes
0answers
44 views

Failed to start Berkeley Internet Name Domain (DNS)

I am on VPS using CentOS7 with CyberPanel. Today after updating the Custom Nameserver details; I have got an error when I am trying to restart/reload BINDS. Here is the error message: [root@scandalous-...
0
votes
0answers
20 views

What is impact of Azure Firewall update from default to custom DNS on AKS and VM deployed in other VNets which route to Firewall?

I have 4 Azure Vnets, One Prod(VMs and AKS), 2nd Dev(VMs and AKS), 3rd(Domain Controllers), 4th Azure Firewall and Application gateway. External traffic is only come from 4th Vnet resources. Vnets ...
1
vote
0answers
13 views

Pointing domain to DigitalOcean App Platoform without changing MX records

I am using the newly created App Platform from Digital Ocean. I am trying to point my domain to the server that I created within Digital Ocean. I am told I need to add a CNAME to my domain (since DO ...
-4
votes
1answer
22 views

local server on dynamic IP accessible via FQDN? [closed]

I have a local Minecraft server that I am thinking of exposing via some domain name to other people. The only challenge is that I am on dynamic IP. How can I expose my local server to external world ...
0
votes
1answer
24 views

Configure DNS for email forwarding plus remote web hosting

I have a domain name with a registrar that does not offer hosting. So far I've just been using ImprovMX to forward emails to a gmail account. I would like to continue doing this, but now I would also ...
0
votes
1answer
21 views

Connectivity aws → sqlserver AG global listener with dynamic ip

Having an app in aws with subnetworks mapped to onprem sqlserver single instance by ip; After sqlserver migration to 2 nodes AG I need to create rule for aws to access AG global listener which is ...

1
2 3 4 5
227