63
votes
Accepted
Can someone using the same DNS server as me hijack my domains?
Never you mind the comments section below, and never you mind the previous answers in the edit history. After about an hour of some conversation with friends (thank you @joeQwerty, @Iain, and @...
- 32.5k
32
votes
Can someone using the same DNS server as me hijack my domains?
In addition to Wesley's excellent answer, I'd like to add that there is already a solution to prevent this. It's called DNSSEC.
The basics are this:
You register your domain (I'll go with the ...
- 27.6k
24
votes
How to run own gTLD on my DNS server?
Håkan is basically correct. The approval process for your gTLD included extensive technical testing of the platform serving it, both for conformance to DNS specifications (both RFCs and gTLD-...
- 2,123
16
votes
Accepted
Is it possible to combine DNS name servers?
DNS records are a hierarchy. Anything at the same level (v1.example.com, v2.example.com, etc) will all be resolved by the NS records set for that level (example.com)
You can have different ...
- 15.5k
15
votes
Accepted
Why send authoritative nameserver in DNS?
Traditionally name servers don't send a short response to a query but an RFC 1034-1035 compliant full response which includes the authority section that contains Resource Records that point toward ...
- 74.1k
14
votes
Accepted
Some visitors cannot access my website
If I'm not mistaken, the problem is that your registrar has published DS records for your domain - that is, DNSSEC signing keys:
[me@risby player]$ dig ds ultreyatours.com
[...]
;; ANSWER SECTION:
...
- 79.2k
14
votes
Google Cloud DNS vs. Google Domains DNS
Google Domains is a registrar which also offers a DNS service; Google Cloud DNS is a pure cloud-based DNS service, which doesn't handle domain registration but offers higher control and more features ...
- 69.5k
13
votes
What does “error: token mismatch” mean?
For whatsmydns.net the Token Mismatch error is related to a timeout of a token generated by the website that allows you to use their search/lookup system. Normally you can refresh the whatsmydns.net ...
- 131
13
votes
Accepted
How do I protect random people pointing their domain to my server?
There is nothing you can do to forcibly stop other people from pointing their domains at your server. It may not be malicious; it may be that they have simply made a typo in their zone file, or that ...
- 27.6k
12
votes
Accepted
Is there a standard time duration before DNS caches are cleared?
You'll be happy to know that most (if not all) DNS server software has protection against this scenario.
For example:
Microsoft DNS server has a MaxCacheTTL setting, which defaults to 86400. So ...
- 241k
11
votes
Accepted
Why is my dns server being queried for domains that I don't host?
If you are running a public accessible DNS server then other clients may be start using you.
Maybe to use you as a public resolver or maybe to abuse your service for an DNS amplification attack.
If ...
- 17.4k
11
votes
How to run own gTLD on my DNS server?
I don't have personal experience with the operation of a New gTLD but the answer surely must be that it is possible for you to operate your own nameservers (and other services). I think the question ...
- 34.4k
10
votes
Accepted
Is DNS redirection scenario possible?
You can't make that redirect conditional, but as also the Let's Encrypt documentation explains here, you can use DNS CNAME records or NS records to delegate specific records (and answering the DNS-01 ...
- 74.1k
9
votes
Google Cloud DNS vs. Google Domains DNS
UPDATE: from Google Domains Help: Google Domains pricing and supported TLDs: One important thing to note in default features lists among others:
Features included at no additional cost
...
- 8,941
8
votes
Accepted
Multiple, replicated DNS providers with Route 53
Route 53 does not support zone transfers.
DNS Zone Transfers (AXFR/IXFR) support for Route53 is a hotly asked for feature, and is one that we will consider adding in the future.
https://forums....
- 22.4k
8
votes
Accepted
Exposure of hidden-master stealth DNS server on public-facing authoritative slave
Zone files on slave DNS servers often do not (and should not) have information to this hidden master DNS server.
They can have A records in their zone files to point to this hidden DNS master server. ...
- 5,607
7
votes
Can someone using the same DNS server as me hijack my domains?
You'll be fine so long as you claim ownership of the domain at DigitalOcean (i.e. associate it with your account) before you tell the registrar to use their name servers.
If someone has associated ...
- 5,826
7
votes
Accepted
Recover Live.com Custom Domain MX Records
This took many, many, many hours of Google-Fu (about 18 hours, give or take).
You have to first log in to your Outlook.com account that you're missing your records on. This must be done on a browser ...
- 187
7
votes
Accepted
CNAME as different domain name
Two issues collide here. The first is can a CNAME point to a different domain, to which the answer is yes, that is perfectly acceptable.
The second, though, is that in the case of your example, you ...
- 79.2k
6
votes
Accepted
Why is my NS record ns.mysite.com.mysite.com?
These lines are your problem:
MYSITE.com. IN NS ns.MYSITE.com
MYSITE.com. IN NS ns2.MYSITE.com
You need to canonicalise them to stop the domain being reappended:
MYSITE.com. IN NS ns.MYSITE.com.
...
- 79.2k
6
votes
Accepted
Is there any way to tell the TTL on root name server DNS records?
On this basis, I've concluded that the NS records within the zone file are irrelevant to the migration, and that only the name servers records at the TLD level are important.
This is an incorrect ...
- 32.2k
6
votes
Accepted
No DNS propagation for government subdomain
This being a 'government domain name' is not a factor. It works just like other domains.
The mpwt.gov.la zone is not delegated to ns101.ovh.net but rather as seen below:
mpwt.gov.la. 3600 ...
- 34.4k
6
votes
Accepted
How are DNS timeouts supposed to work?
The empty response that you're looking at is a synthetic state known as NODATA. NODATA and NXDOMAIN both indicate that the name does not exist, but NXDOMAIN applies to all names beneath the indicated ...
- 32.2k
6
votes
Glibc bug mitigation for getaddrinfo()
While A firewall that drops UDP DNS packets > 512 bytes. mitigates the exploit (over UDP specifically, TCP can still be an attack vector) it's also not correct behaviour and breaks other functionality ...
- 34.4k
6
votes
Setting different NS records as authoritative on authoritative DNS
There are really two questions being asked here, and they directly contradict each other:
how do I instruct DNS servers to continue their query on to Amazon as its authoritative for the domain, ...
- 32.2k
6
votes
Accepted
Hover experienced a DDoS recently, rendering my services unavailable. What steps can I take to mitigate this risk in the future?
Google Public DNS
As Gaurav Kansal said Google public DNS is a caching(recursive) DNS and wouldn't be much of your help.
Amazon Route 53
You can go for it and many others, But I would like to ...
- 1,290
6
votes
Accepted
What advantages does it have to use Google's Cloud DNS on a domain purchased on other domain sellers?
So I wonder whether people have any chance to use Google's Cloud DNS
on a domain purchased in another domain seller, which I assume is the
standard in current web hosting.
Yes, this is a very ...
- 109k
6
votes
Accepted
Secondary Nameserver DNSSEC
As has been noted, the quoted statement is one service provider noting a limitation in their own service, it's not a universal truth.
All that is really needed to make what you ask for work is this:
...
- 34.4k
6
votes
Single IP address assigned to multiple servers?
The relevant technology is called anycast routing.
Anycast essentially makes clever use of the inherent behavior of the BGP routing protocol. A network prefix which contains the relevant address(es) ...
- 34.4k
6
votes
Accepted
Moving DNS hosting for Active site to Route 53 - with G Suite MX TTL of 1 week
As long as you create the MX record exactly the same in Route53 as it currently is in GoDaddy you don't need to change its TTL. Likewise with all the other records - A, CNAME, etc.
Only NS records ...
- 24.3k
Only top scored, non community-wiki answers of a minimum length are eligible
Related Tags
dns-hosting × 519domain-name-system × 334
dns-zone × 81
bind × 57
nameserver × 40
internal-dns × 36
web-hosting × 29
domain × 18
amazon-route53 × 18
linux × 16
reverse-dns × 16
amazon-web-services × 15
mx-record × 14
domain-name × 14
subdomain × 13
hosting × 13
cloudflare × 13
google-cloud-platform × 12 cname-record × 12
dnsmasq × 10
a-record × 10
dnssec × 10
windows-server-2012-r2 × 9
dyndns × 9
email × 8