People who code: we want your input. Take the Survey

New answers tagged

1

Should I try deleting all the records from within my hosting, so it reverts to using everything from my registrars DNS for e-mail? I think you are mixing different stuff and hence creating confusion for yourself. Let us go back to basics: your domain has ONE registrar; this is the company that registered the domain following your actions and payment for it;...


0

Normally, if domain will have several MX records, one of which is intended as a "backup" - with a higher preference number so that it would not normally be picked as the target for email delivery. In the case of errors from the lower-numbered hosts, sending email servers will deliver to the "backup" host: Source For Exchange server, as ...


1

After a lot of help from serverfault.com :P and an encouragement boost from Michael Hampton, I finally solved the missed ack flags for DNS queries while everything else worked perfectly. The real problem was: -systemd-resolved somehow did not allow DNS queries from any other IPs except 127.0.0.1 after turning on UFW The solution is to mangle every output ...


0

I think the problem here is the configuration of Dell Optiplex 7040 thru your network drive. Did you try accessing the drive via \networkdriveip? i had one problem with other computers in my office. i had reformatted the client pc so it can communicate to the server


0

As you mentioned that no other computer in your network is having the stated issue, it seems, the problem lies with DNS client settings for your computer rather than DNS server settings. Please verify that TCP/IP configuration settings for your computer are correct, particularly those used for DNS name resolution. To verify a client IP configuration, use the ...


0

As your web server IP address (192.168.137.70) is constant, providing you with steps for static Domain Name System server.If you want to go with a Dynamic Domain Name System(DDNS) then refer to the detailed steps provided here . DDNS service automatically updates the IP address information that is assigned to your host (domain) name. To set static DNS ...


1

start.*.example.com DNS wildcards do not work like this, so you can not do that (as a wildcard) and hence "embedded wildcard" is not a thing in DNS world. It is not a problem of the record type (CNAME vs A vs anything else) or the DNS provider used, it is the fact that a wildcard HAS TO be a first label of * and then other labels. So *.example.com ...


0

Does this option need to be set to include every DNS server to have them take over DNS requests if the main server is to go down? Yes. DHCP Clients will only use the DNS servers assigned to them from the DHCP scope. Likewise, all of your static ip assigned devices should be configured to use more than one DNS server. I would test this myself but I cannot ...


0

On the General tab of the DNS server properties what is the replication type set to? If it's set to Active Directory-Integrated then that's why.


1

The normal behavior for a resolver server is to prime itself based on root hints (essentially a list of the nameservers for the root zone, including their IP addresses). BIND has built-in root hints which are used by default, but you can also specify the root hints explicitly in a root hint zone in the configuration. Based on the root hints, the resolver ...


0

If it is already joined to the domain, you can rename it from the computer and the name of the computer will update in AD.


0

I am guessing you are using the same domain name internally and externally and that the host name internally is the same as the host name externally. That is my first thought about how you would receive private and public IPs in response to an internal DNS query. If that is the case, I will use the following in my example: Internal domain name - example.com ...


1

Anycast services should be totally transparent to the user, unless the provider is doing it incorrectly. If your zone is not properly propagating, you may need to open a support ticket with the provider to get this moving again. Over the years I have seen several organizations do DNS very differently. Some have a proper 'primary/master' where all others get ...


1

This really seems like Akamai's equivalent of Cloudflare's CNAME Flattening. This is what Cloudflare says: To accomplish this, we extended our authoritative DNS infrastructure to, in certain cases, act as a kind of DNS resolver. What happens is that, if there's a CNAME at the root, rather than returning that record directly we recurse through the CNAME ...


1

A reverse DNS is associated with IP address, not subdomain. In principle, reverse DNS must exist, but that could be anything. In practice, remote servers often employ tighter security and they require the particular setting of reverse DNS RR. In case of email, the IP address in question is the IP address of server which originates mail. If you are owner or ...


1

Does "Gandi DNS" mean "Gandi's Live DNS"? While it does have support for NAPTR records, the web interface seems to support the obsolete specification from September 2000 in RFC 2915, and even that only partially. You may contact their support with your issue. Also, the LiveDNS API is a lot more flexible than the "DNS Records" ...


0

From an automation point of view, option 1 & 2 automate the same. Scaling in managed configuration can be done quite swiftly with the help of templates + variables. I would personally favour 1 over 2, since CNAME incur an extra step on domain resolution while adding no real benefit to the ease of configuration, provided (again) you use managed ...


1

You could use your local router as a DNS, and make the router lookup on the remote DNS server, the important detail there is that the router will cache the result, so he will not always go to remote server for the resolution.


6

Yes, domains with more than 3 labels are common, this is most obvious in educational context, where URLs often look like https://me.institute.place.university.edu.cctld. (The term TLD is only used to refer to the (singular) topmost level, so this answer assumes the question is about properties of the entire suffix, not actually about multiple TLDs.) More ...


0

About the debugging problems in the answer provided by yourself. Stackdriver logs problem: This problem is already there in the open issues of gcp public issue tracker. You can track the status in the link below[1]. https://issuetracker.google.com/135496113 Composer monitoring panel problem: Problem you specified is generic. See if there are any open ...


2

Would it be possible for me to also get this info through dig or similar tools or is that out of my control? It is out of your control. You can probably "emulate" the feature, if you do a DNS query from multiple points on the Internet at the same time, and then consider the union of all results. It would still be very approximate. Why? Because the ...


2

The simple answer is that the domain is still pointed to namecheap DNS servers. If you wish to use Google Cloud DNS, make sure you create the domain in your Google Cloud Control Panel. When you do this, they will assign your domain to two Google Cloud DNS servers. You need to copy or write down those two DNS servers. Once you have those, goto your namecheap ...


0

Welcome to the community! The answer is short - resetting and then re-initializing the cluster is the fastest and simplest way to achieve it. I wasn't able to make it with different approaches. Changing only the hostname makes cluster to become not ready. Same way if workernode's hostname is changed, kubeadm reset is required. This is covered in good post on ...


0

After further investigations, what I found out is that all DNS services do not handle this case in the same way. On one hand, Amazon Route53 owns multiple name servers, so they can guarantee that two identical DNS zones created by different clients are never declared in the same name servers (as long as the zone is not declared by more clients than the ...


1

So what you could do is just create the Azure Private DNS Zone specifically for app.clientdomain.com. We had the exact same requirement - a public zone that also has records that exist internally. We overcame it with this setup. The Private DNS Zone would be authoritative to that subdomain only and everything else will resolve outside. Just point the root ...


0

https://www.mankier.com/1/dig +[no]search This option uses [or does not use] the search list defined by the searchlist or domain directive in resolv.conf, if any. The search list is not used by default. ndots from resolv.conf (default 1), which may be overridden by +ndots, determines whether the name is treated as relative and hence whether a ...


3

On Linux systems, the resolution is governed by /etc/nsswitch.conf that defines, for hostnames and other things, which sources of data to consult. A typical configuration has: hosts: files dns myhostname If you remove myhostname, your test does not work: (I have to remove dns as well because my local recursive nameserver has a zone for localhost and hence ...


1

You have created a private zone that matches a public zone. If a name does not resolve in the private zone, NXDOMAIN is returned. The DNS client or resolver will not try the public zone. Solution: choose a different zone name for the private zone so that both private and public names can be resolved.


0

It's the NS delegation you described above which protects you from abuse. If I am a DNS client and I want to lookup xxx.sub.example.com, then in principle I do something like this: I check my configured list of root name servers; I ask one of the root name servers for a name server for .com; I ask the .com server for a name server for example.com; I ask the ...


0

A complete Working Wildcard-zone (Live from my DNS) could look like $TTL 86400 @ IN SOA ns400.domain.it. ns-admin.domain.it. ( 2020051801 ; Serial 10800 ; Refresh 3600 ; Retry 604800 ; Expire 10800 ) ; Minimum ...


0

It was the same behavior like bind9 does not resolve dnssec correctly Because of a configuration error, I didn't realize it until today.


1

Edit the hosts file That is the most canonical way to force a desired IP address to resolve a DNS name. Of course, it works only on the same machine used to browse the website, e.g. this solution applies to final user, not web developer. Obviously, you must resolve the desired IP earlier, and you must make sure the IP does not exit the pool, which likely ...


0

When you are able to register the custom domain to point to the Loadbalancers in AWS Route53, you can actually make alias A (and AAAA) records that function similar to CNAME records. This prevents chaining CNAME records, but still allows you to migrate the Loadbalancer url if necessary. This is also explained in the AWS documentation, you can just repeat the ...


3

With Network Solutions you need to register the name server before it can be used with a domain. The process is fairly straight forward however it can take up to 72 hours for the newly registered name server to be 'active' and usable. Log in to your account. ... In the My Products & Services tab under the My Domain Names section, click Edit DNS. On the ...


1

Provider independent space. Talk to your local internet registry. However, IPv4 PI may not be available. IPv6 will be. Perhaps work on PI in parallel with requesting actual static addressing from your ISP. As Patrick Mevzek mentioned in comments, you can have customers delegate DNS to you for the zone in question. However, this is a change from how things ...


1

Credits to vidarlo and Esa Jokinen comments for the answer: com can delegate example.com, and example.com can delegate sub.example.com, but example.com can't delegate example.com. You must change the name servers at the registrar, not in your current DNS zone. Amazon Route53's relevant documentation can be found here. The original hosted zone should be ...


0

So, you seem to have a DNS issue. One side of the VPN doesn't know about the other side. From what we've seen, the side A of your connection doesn't have access to your DNS server. What you need to do is check if port 53 udp/tcp is open in that direction.


0

The name of the key in the allow-update statement is rndc.key, but the name of the key that you show and that you use on the client side is rndc-key? Does rndc.key (as in the name of a key, not the file) even exist? If not, does the configuration even load cleanly? Regardless which, the key name as well as the secret must match, so this would appear to be ...


0

There's really no "right" answer here as it depends on what you're trying to do. If for example, you have the "www" entry: domain: allows to establish a default domain that will be added to the end of the short name. An example would be: domain sandyam.com first it will search for the name www.sandyam.com, and if it does not exist, ...


4

Both solutions that you link to suggest that for a mail server (a service that will generally be doing lots of DNS lookups), it's probably better to run your own local resolver server rather than rely on one provided by your ISP or similar (which might either be overloaded or have rate limits). Note that they don't claim that you necessarily have a local ...


4

The implied suggestion is to run your own resolver (caching name server) and then configure your system to use that. Just setting /etc/resolv.conf to localhost without running your own name server will break resolving.


0

If you are using a Google Managed SSL Certificates then wild cards will not be supported. You can use wildcards to map subdomains at any level, starting at third-level subdomains. Kindly refer to the below link for: Mapping custom Domains : https://cloud.google.com/appengine/docs/standard/python/mapping-custom-domains#wildcards Securing Custom Domains with ...


1

If you really want to have the graphql URL reachable via another port, you need to have a separate server block: server { listen 8080 ssl; ... ssl options ... location /graphql/ { proxy_pass http://127.0.0.1:8000; } }


0

Uncomment these lines and use Google's DNS instead of 172.31.1.30 . type forward; forwarders { 172.31.1.30; }; then restart dns service. service bind restart


1

First of all, this is more of a marketing term used to describe/differentiate various service offerings. The term is largely self-explanatory regarding what the service does more than just plain DNS (it also protects against something), but there is no technical definition of what exactly a service must do in order to qualify. I have only ever seen this term ...


0

All you need to edit on the second machine is /etc/resolv.conf which should contain: nameserver x.x.x.x Where x.x.x.x is the IP address of prime. No need to edit /etc/hosts or install dnsmasq on the second machine.


0

The glue records must appear in the parent zone (.com) simultaneously with change of delegation records. This is ususally the case; these TLDs usually get updates in batches and all your updates will be in a single batch. You must configure new servers in advance, and let old servers to continue the service after the update was done at least the until the ...


3

The "hostmaster" address and other such addresses (like postmaster, webmaster, etc) are purely convention-based (and codified as part of RFC2142). As such, there is no way to redefine these addresses in themselves, you would rather have to set up your mail server to deliver these to appropriate mailboxes. The reason why such names are the options ...


8

First off, the title asks "why are there multiple authoritative nameservers?", while the question body clearly assumes that "of course there will have to be multiple authoritative name servers for redundancy" (indeed the answer to the question posed by the title), and instead asks "why are there multiple NS records?". With this ...


9

In the early days of internet, registrars required you to have two DNS servers at different physical locations before they would register your domain. I don't know what today's requirements are, but I'm sure that historical tradition has carried on past the point where it was strictly necessary to provide redundancy. And a lot of the ones you see are ...


Top 50 recent answers are included