Questions tagged [domain-name-system]
The Domain Name System, usually referred to by the acronym DNS, is a hierarchical, distributed database where the keys are domain names. Questions involving publicly accessible domains should include the real, Fully Qualified Domain Name (FQDN)
12,414
questions
4
votes
1
answer
10k
views
Unbound refuses requests from localhost even though `access-control: 127.0.0.1 allow_snoop`
This is my unbound.conf
server:
interface: 0.0.0.0
access-control: 10.0.0.0/8 allow_snoop
access-control: 127.0.0.1 allow_snoop
access-control: 192.168.0.0/16 allow_snoop
...
Reading the ...
CommunityBot
- 1
0
votes
1
answer
48
views
DNS Oddities with Microsoft Dynamics Finance and Operations
Question
Is it valid for a subdomain to use different nameservers to the parent domain without the parent domain's DNS servers providing NS records for the subdomain?
For example:
Running Resolve-...
- 11.4k
0
votes
1
answer
136
views
unbound local-zone and local-data: am I doing it right?
I'm playing with unbound to forward DNS queries to an authoritative DNS server, cache them, and also add additionals local informations.
My config is pretty straightforward:
/etc/unbound/unbound.conf:
...
- 11.4k
6
votes
6
answers
29k
views
hostname -f says "hostname: the specified hostname is invalid". Guess why?
hostname -f says "hostname: the specified hostname is invalid". The hostname (FQDN) specified in /etc/hostname is also listed in /etc/hosts and is pingable. No actual DNS server yet of the host knows. ...
- 21
3
votes
1
answer
6k
views
Dynamic DNS registration for VPN clients
I've got a VPN server set up in my Active Directory on a remote network. (VPN Server is a separate box from DNS/AD) When I dial into the network (the client machine is not a member of the AD) the ...
CommunityBot
- 1
0
votes
1
answer
37
views
DNS Migration from 2K12 dc to 2k22 dc
I am upgrading two domain controllers from Windows Server 2012 to Windows Server 2022.
I have created two Windows Server 2022 servers, and am migrating the roles. The old servers have AD DS and DNS ...
- 36.8k
46
votes
5
answers
77k
views
Find DKIM and DMARC Records?
Is there a method to find a domain's DKIM and DMARC records using dig or nslookup?
I have attempted to do the following:
dig somedomain.org any
returns many records, but not the known DKIM and ...
- 185
7
votes
4
answers
13k
views
Is it possible to find a list of all DKIM keys for a domain?
a DKIM-record is identified by its selector, which might be default, dkim or something else alltogether (and there might be multiple).
When making sure that an e-mail's content is valid, the DKIM ...
- 185
1
vote
1
answer
80
views
how to add a dns ro resolve wireguard endpoint when using wg setconfg instead of wg-quick
Following wireguard docs for ordinary-containerization it works with something similar to this configuration file:
# /etc/wireguard/wg0.conf
#
[Interface]
PrivateKey = ...
- 12.8k
0
votes
0
answers
10
views
Ajax not loading show server response issue
i'm using lightspeed server when i hit a page it taking to much time to load ajax request while first it was working fine when i change DNS it slow down and lihgtspeed cache not working for loggedin ...
-2
votes
0
answers
79
views
Domain SRV records in DNS
I am configuring an Active Directory domain in an air-gapped network on Windows Server 2016. I can ping my DC and I am in the same subnet, pulling DHCP from the router, while the DC IPv4 is static.
I ...
- 36.8k
1
vote
1
answer
40
views
In kubernetes DNS queries fail between nodes
I have an issue with kubernetes and coreDNS that I am not able to solve.
System information
1 master + 2 workers
Red Hat Enterprise Linux release 9.3 (Plow)
k8s: v1.28.7
flannel: v0.24.2
coreDNS: v1....
- 21
0
votes
0
answers
21
views
Virtual host on Apache2 for Mautic "This site can't be reached" on specified subdomain (but can be reached somewhere else)
I am configuring a brand new Mautic 5.0.3 instance on a Debian GNU/Linux 12 (bookworm) in AWS shared server with other 3 webs. Let's say (for security reasons) that its on aaaa.com.
I have configured ...
- 1
0
votes
0
answers
62
views
dns problems in self managed aws ec2 cluster with aws-vpc-cni
I'm new to k8s and I've been trying to learn it. I faced a problem with trying to setup aws-vpc-k8s-cni on my fresh k8s cluster with coredns. Here's the problem in detail.
Cluster & Network ...
- 101
0
votes
1
answer
44
views
DNS records at Azure and Google - do both need the entire set of records?
We are migrating from Azure to Google. Google is currently storing our DNS records. Simply put, do we need to put all the A records in both places? Or is DNS smart enough to loop through it's list ...
- 10.3k
7
votes
2
answers
12k
views
What's required for a nameserver to be registered?
I'm trying to change nameservers for some of my domains at GoDaddy, but I occasionally run into "Nameserver not registered" problems, and then I'm not allowed to set the nameservers. Here are the ...
- 245
7
votes
3
answers
5k
views
Domain Controller DNS Best Practice/Practical Considerations for Domain Controllers in Child Domains
I'm setting up several child domains in an existing Active Directory forest and I'm looking for some conventional wisdom/best practice guidance for configuring both DNS client settings on the child ...
1
vote
1
answer
4k
views
Nginx, second subdomain not working
I used the CNAME wild card DNS entry like:
@ IN A ip.add.re.ss
www IN CNAME @
* IN CNAME @
My root domain.com and sub1.domain.com are accessible (on the same digitalocean droplet)....
- 109
-1
votes
1
answer
41
views
DNS setting up an incoming A record
An external location has an external DNS that needs to connect to our server to access a website from on our server. Their client email and DNS are all not on our server.
Our server hosts their ...
- 1,826
0
votes
0
answers
49
views
Install SSL Certificate for Docker Container on EC2
We are running an NGINX Server on a Docker Container which is hosted on an EC2 instance.
Our Domain is registered with Amazon Route 53 but it seems like, there is missing an SSL Certificate on Docker ...
-1
votes
1
answer
27
views
DNS Not Update from Last 7days
I Update my DNS in Network solution domain providers but my nameserver not updated yet from last 7days i checked dns many time but not update
my website still not pointing hosting www.itcrew.in
- 1,826
0
votes
1
answer
48
views
bind9 conditional forwarding not working as expected
Need your experience advice, We have a BIND9 DNS server that operates both privately and publicly for the domain xyz.com. I use the private DNS for certain secure nodes on our local network. I want ...
- 94
90
votes
3
answers
108k
views
Multiple TXT fields for same subdomain
I would like to understand if multiple TXT records for the same subdomain are ok or could lead to issues. In particular, we have the requirement for one SPF record and one Google Domain Verification ...
- 113
0
votes
3
answers
86
views
New Server 2022 DNS server replicated from soon to be old DNS - clients have to use fqdn for one zone
I recently replaced the existing domain controllers with two new ones that also function as DNS servers. After testing that the replication was working, I renamed the new DNS IP with the old DNS IP, ...
- 2,020
0
votes
1
answer
49
views
Can I delete parent DNS zone of AD domain
We currently have a single AD domain internal.mycompany.com
There are currently 2 independent authoritative copies of the parent DNS zone mycompany.com. One copy is managed by the domain controller, ...
1
vote
1
answer
41
views
How to delegate subdomain to samba DC?
I set up a samba server and I'd like all the clients on my network to use the same DNS server.
Diagram
I have configured the servers (ubuntu/bind9:9.18-22.04_beta) as below.
I don't quite understand ...
- 11
0
votes
0
answers
68
views
getting NXDOMAIN, but more-verbose host lookups are working
i could not log into a server via SSH:
ssh: Could not resolve hostname apex.swiftinit.org: Name or service not known
i get the same error with dig:
$ dig +tcp apex.swiftinit.org CNAME
; <<>&...
- 11
0
votes
3
answers
6k
views
Windows DNS won't start on reboot
Last night a Windows Server 2008 R2 machine I maintain automatically rebooted after installing updates, without starting the DNS service. Since the machine is the network's DNS server, I got a call in ...
CommunityBot
- 1
23
votes
5
answers
90k
views
iptables rules to allow HTTP traffic to one domain only
I need to configure my machine as to allow HTTP traffic to/from serverfault.com only. All other websites, services ports are not accessible. I came up with these iptables rules:
#drop everything
...
- 103
-1
votes
1
answer
60
views
No DNS record or entry in Host file, but can still access IIS site?
We have a VM in azure (with no Public IP), that has a bunch of sites inside the IIS. These sites are only accessible from inside the VM or whilst being connected to our OpenVPN. There is no DNS record ...
1
vote
0
answers
76
views
If a name server is down for a while, does the registrar change DNS of my domain because arent working
I have an infrastructure with my own nameservers, and these servers were offline for a week. On the server, there are many websites managed through WHM/CPANEL. After recovering the infrastructure, ...
- 36.8k
0
votes
1
answer
52
views
Domain name resolves to IP address
I wanted to get clarity on this issue (instead of the usual try-stuff-till-it's-fixed approach). As a developer and curious person I really want to understand what's going on here so I can ...
- 11.4k
0
votes
1
answer
10
views
Wrong IP address returned for pfSense host name on a router with multiple LANs when using DNS Forwarder/Resolver
Question moved from StackOverflow:
Running pfSense 2.4.4 (first saw the problem in 2.0.3) using DNS Forwarder or DNS Resolver for Split-DNS with multiple LANs. LAN1 is 10.10.10.0/24 and LAN2 is 192....
- 101
0
votes
1
answer
92
views
Users cant nslookup my windows server 2019 domain
when i ipconfig /all in my server i see this:
IPv6 Address. : 2804:7f0:6880:a506:463a:e968:cf0e:177d(Preferred)
IPv6 Address. : 2804:7f0:6880:e6d7:1e98:ecff:fe2c:2398(Preferred)
the first one is the ...
- 9,190
-1
votes
1
answer
137
views
Linux Bind9 DNS server, configuration throwing errors
I am having problem with DNS configuration in Linux. I am using isc-dhcp-server as DHCP server and bind9 as DNS server, but I it returning me errors.
This is my Setup
Internet <--enp0s3 interface--&...
- 157
1
vote
1
answer
118
views
Blocked IP on CloudFlare keeps connecting and attacking server
I have a NodeJS server with HTTPS and certificates. The DNS is on CloudFlare.
The host receives a connection every day at 3:32am from 3.8.236.120, an AWS host in the UK. The crawler launches requests ...
- 269
4
votes
1
answer
6k
views
request has invalid signature: TSIG rndc-test-key: tsig verify failure (BADKEY)
I am pretty much new to bind DNS and during nsupdate , i am getting BADKEY error.I have /root/named/chroot/etc/rndc.key as below :-
key "rndc-test-...
CommunityBot
- 1
0
votes
1
answer
5k
views
OpenVPN client pings, but will not resolve DNS
long-time lurker, first time poster. I have read almost every post regarding open-vpn on this site, but I cannot get this issue fixed.
I can connect without issue to openvpn server and can ping ...
CommunityBot
- 1
25
votes
2
answers
8k
views
Clarification of why DNS zone files require NS records
This question was originally asked here:
Why do DNS zone files require NS records?
To summarise:
"When I go to my registrar and purchase example.com , I will tell my registrar that my nameservers are ...
-1
votes
2
answers
87
views
Make the changing of IP not disconnect Remote Desktop
I have an EC2 on AWS with Windows server. I would like to be able to change its IP very often. At the moment, I create several Elastic IPs and am able to associate one by one to the instance.
I got a ...
- 12.6k
0
votes
1
answer
204
views
Resolve issues with DNSBLOG and b.barracudacentral.org
I am using postfix with DNSBLOG to prevent spam. The postfix main.cf is configured like:
postscreen_dnsbl_sites =
zen.spamhaus.org=127.0.0.[2..11]*3
b.barracudacentral.org=127.0.0.2*2
DNSBLOG is ...
- 680
4
votes
1
answer
705
views
Windows 2016 DNS server returns SERVFAIL for non-existing domain
I have two DNS resolvers in /etc/resolv.conf file. The top one is Windows DNS server, and the bottom one is my wi-fi router. Please see below.
nameserver 192.168.1.126
nameserver 192.168.1.1
In ...
- 645
0
votes
1
answer
70
views
nslookup error : Non-authoritative answer name
i have DNS Server for local user. when PC user nslookup error name server like this
error name
how to solved this error. my DNS running on Ubuntu 22.04
thanks
- 680
2
votes
1
answer
167
views
Bind9 extremely slow upstream resolving
I have a bind9 docker container serving DNS for my home lab. It provides a .lan domain for local devices, and a private domain name for my internal services. However, resolving any external DNS entry ...
- 2,020
0
votes
0
answers
64
views
Unable to logon using RDP after domain migration
We have issues after migrating a DC to a new DC.
When we attempt to RDP to some of our VMs using the DNS name, it fails. Using the IP address works.
This issue only occurs on some VMs.
It seems to be ...
- 36.8k
1
vote
1
answer
107
views
Bind rpz only gives max TTL of 5 seconds
When I configure BIND with response policy zone so I can override DNS for LAN network I have noticed that TTL returned by this DNS servers max out at 5 seconds. I can lower TTL to 1-4 seconds but ...
- 71
0
votes
0
answers
110
views
Bind9 on Docker can't resolve on host
I have a PC on my local network that will run services that I want to access with URL's instead of IP's.
I have followed many guides and articles on how to use Bind9 (and dnsmasq) but always get stuck....
- 36.8k
0
votes
1
answer
90
views
Public DNS for a domain on Route 53 and would like to use Azure Private DNS for internal resolution
We are in the process of migrating on premises / datacenter service from colocation to Microsoft Azure. We have several domains, let's call one myapp.com. The myapp.com web server is available to the ...
- 2,594
0
votes
0
answers
58
views
DKIM settings with Amazon SES not finding primary domain
I'm attempting to send email via Amazon SES with a custom domain. I have one domain that works and the DKIM headers that come to my gmail account look like:
Authentication-Results: mx.google.com;
...
- 186
2
votes
1
answer
232
views
The pod's /etc/resolv.conf does not reflect the changes on the host
When my pod's dnsPolicy is set to Default it picks up the DNS servers from the host's /run/systemd/resolve/resolv.conf (as configured by the resolvConf flag in Kubernetes) and stores them in /etc/...
- 159