64 votes
Accepted

Can someone using the same DNS server as me hijack my domains?

Never you mind the comments section below, and never you mind the previous answers in the edit history. After about an hour of some conversation with friends (thank you @joeQwerty, @Iain, and @...
Wesley's user avatar
  • 32.8k
32 votes

Can someone using the same DNS server as me hijack my domains?

In addition to Wesley's excellent answer, I'd like to add that there is already a solution to prevent this. It's called DNSSEC. The basics are this: You register your domain (I'll go with the ...
Jenny D's user avatar
  • 28.1k
24 votes

How to run own gTLD on my DNS server?

Håkan is basically correct. The approval process for your gTLD included extensive technical testing of the platform serving it, both for conformance to DNS specifications (both RFCs and gTLD-...
Calle Dybedahl's user avatar
16 votes
Accepted

Is it possible to combine DNS name servers?

DNS records are a hierarchy. Anything at the same level (v1.example.com, v2.example.com, etc) will all be resolved by the NS records set for that level (example.com) You can have different ...
Tim Brigham's user avatar
  • 15.6k
15 votes
Accepted

Why send authoritative nameserver in DNS?

Traditionally name servers don't send a short response to a query but an RFC 1034-1035 compliant full response which includes the authority section that contains Resource Records that point toward ...
HBruijn's user avatar
  • 80k
14 votes

Google Cloud DNS vs. Google Domains DNS

Google Domains is a registrar which also offers a DNS service; Google Cloud DNS is a pure cloud-based DNS service, which doesn't handle domain registration but offers higher control and more features ...
Massimo's user avatar
  • 71.1k
13 votes

What does “error: token mismatch” mean?

For whatsmydns.net the Token Mismatch error is related to a timeout of a token generated by the website that allows you to use their search/lookup system. Normally you can refresh the whatsmydns.net ...
Jason R.'s user avatar
  • 131
13 votes
Accepted

How do I protect random people pointing their domain to my server?

There is nothing you can do to forcibly stop other people from pointing their domains at your server. It may not be malicious; it may be that they have simply made a typo in their zone file, or that ...
Jenny D's user avatar
  • 28.1k
12 votes
Accepted

Is there a standard time duration before DNS caches are cleared?

You'll be happy to know that most (if not all) DNS server software has protection against this scenario. For example: Microsoft DNS server has a MaxCacheTTL setting, which defaults to 86400. So ...
Michael Hampton's user avatar
11 votes

How to run own gTLD on my DNS server?

I don't have personal experience with the operation of a New gTLD but the answer surely must be that it is possible for you to operate your own nameservers (and other services). I think the question ...
Håkan Lindqvist's user avatar
10 votes
Accepted

Is DNS redirection scenario possible?

You can't make that redirect conditional, but as also the Let's Encrypt documentation explains here, you can use DNS CNAME records or NS records to delegate specific records (and answering the DNS-01 ...
HBruijn's user avatar
  • 80k
9 votes

Google Cloud DNS vs. Google Domains DNS

UPDATE: from Google Domains Help: Google Domains pricing and supported TLDs: One important thing to note in default features lists among others: Features included at no additional cost ...
Diamond's user avatar
  • 9,121
8 votes
Accepted

Multiple, replicated DNS providers with Route 53

Route 53 does not support zone transfers. DNS Zone Transfers (AXFR/IXFR) support for Route53 is a hotly asked for feature, and is one that we will consider adding in the future. https://forums....
Michael - sqlbot's user avatar
8 votes
Accepted

Exposure of hidden-master stealth DNS server on public-facing authoritative slave

Zone files on slave DNS servers often do not (and should not) have information to this hidden master DNS server. They can have A records in their zone files to point to this hidden DNS master server. ...
Tommiie's user avatar
  • 5,657
7 votes

Can someone using the same DNS server as me hijack my domains?

You'll be fine so long as you claim ownership of the domain at DigitalOcean (i.e. associate it with your account) before you tell the registrar to use their name servers. If someone has associated ...
mc0e's user avatar
  • 5,921
7 votes
Accepted

Recover Live.com Custom Domain MX Records

This took many, many, many hours of Google-Fu (about 18 hours, give or take). You have to first log in to your Outlook.com account that you're missing your records on. This must be done on a browser ...
jparnell8839's user avatar
7 votes
Accepted

CNAME as different domain name

Two issues collide here. The first is can a CNAME point to a different domain, to which the answer is yes, that is perfectly acceptable. The second, though, is that in the case of your example, you ...
MadHatter's user avatar
  • 80.4k
7 votes

Single IP address assigned to multiple servers?

The relevant technology is called anycast routing. Anycast essentially makes clever use of the inherent behavior of the BGP routing protocol. A network prefix which contains the relevant address(es) ...
Håkan Lindqvist's user avatar
6 votes

Glibc bug mitigation for getaddrinfo()

While A firewall that drops UDP DNS packets > 512 bytes. mitigates the exploit (over UDP specifically, TCP can still be an attack vector) it's also not correct behaviour and breaks other functionality ...
Håkan Lindqvist's user avatar
6 votes
Accepted

How are DNS timeouts supposed to work?

The empty response that you're looking at is a synthetic state known as NODATA. NODATA and NXDOMAIN both indicate that the name does not exist, but NXDOMAIN applies to all names beneath the indicated ...
Andrew B's user avatar
  • 32.9k
6 votes
Accepted

No DNS propagation for government subdomain

This being a 'government domain name' is not a factor. It works just like other domains. The mpwt.gov.la zone is not delegated to ns101.ovh.net but rather as seen below: mpwt.gov.la. 3600 ...
Håkan Lindqvist's user avatar
6 votes

Setting different NS records as authoritative on authoritative DNS

There are really two questions being asked here, and they directly contradict each other: how do I instruct DNS servers to continue their query on to Amazon as its authoritative for the domain, ...
Andrew B's user avatar
  • 32.9k
6 votes
Accepted

Hover experienced a DDoS recently, rendering my services unavailable. What steps can I take to mitigate this risk in the future?

Google Public DNS As Gaurav Kansal said Google public DNS is a caching(recursive) DNS and wouldn't be much of your help. Amazon Route 53 You can go for it and many others, But I would like to ...
Anirudh Malhotra's user avatar
6 votes
Accepted

What advantages does it have to use Google's Cloud DNS on a domain purchased on other domain sellers?

So I wonder whether people have any chance to use Google's Cloud DNS on a domain purchased in another domain seller, which I assume is the standard in current web hosting. Yes, this is a very ...
EEAA's user avatar
  • 110k
6 votes
Accepted

Secondary Nameserver DNSSEC

As has been noted, the quoted statement is one service provider noting a limitation in their own service, it's not a universal truth. All that is really needed to make what you ask for work is this: ...
Håkan Lindqvist's user avatar
6 votes
Accepted

Moving DNS hosting for Active site to Route 53 - with G Suite MX TTL of 1 week

As long as you create the MX record exactly the same in Route53 as it currently is in GoDaddy you don't need to change its TTL. Likewise with all the other records - A, CNAME, etc. Only NS records ...
MLu's user avatar
  • 25.3k
5 votes

Can a CNAME DNS record point from subdirectory to domain name

Nope. DNS translates CNAMES to the IP address pointed to my their target A record.
user9517's user avatar
  • 116k
5 votes
Accepted

Does a catch all DNS record is a good practice to reduce queries?

It is never a good practice to point your DNS records to somebody else's IP addresses without having some sort of agreement with the owner of those addresses. Moreover having a * record is often not a ...
kasperd's user avatar
  • 30.7k
5 votes

Why send authoritative nameserver in DNS?

The server doesn't know whether the request is coming from an end client, or is a recursive request from another nameserver. If it's another nameserver, it can cache the Authority Section and query ...
Barmar's user avatar
  • 374
5 votes

How to redirect multiple domain to same ip but different port?

Achieving what you want to do via DNS Records cannot be done as far as I know. Apache Apache, through Name Base Virtual Host blocks and configuring Apache to listen on the required ports. # Listens ...
Admiral Noisy Bottom's user avatar

Only top scored, non community-wiki answers of a minimum length are eligible