22 votes
Accepted

Can host aliases be assigned to deployments in Kubernetes? If so, how?

Yes this is possible. All you need to do is follow the same advice you were for a pod specification, but rather than applying it to a YAML file for pods, you apply it to a YAML file for a deployment. ...
  • 947
17 votes

Difference between /etc/hosts and /etc/resolv.conf

/etc/resolv.conf: Lists nameservers that are used by your host for DNS resolution. If you are using DHCP, this file is automatically populated with DNS record issued by DHCP server. /etc/hosts/: It is ...
16 votes
Accepted

unbound/nsd returning SERVFAIL resolving local LAN DNS. nsd alone works fine

This line from the log indicates the problem: Jun 15 06:12:39 pizza.yoderdev.com unbound[1947]: [1947:0] debug: skip addr on the donotquery list ip4 127.0.0.1 port 53530 (len 1 Unbound by default ...
  • 366
15 votes

Bind dnsmasq DNS to just localhost (127.0.0.1)

I had to add "bind-interfaces" to the config file, so that interface and listen-address had the desired effect. E.g.: listen-address=127.0.0.1 interface=lo bind-interfaces This will have the desired ...
14 votes
Accepted

SSL Server name mismatch how to bypass ie11

If you have access to create your certificates for that server I suggest you create a certificate that includes alternate names that the server may be known as. In that way the browser will ...
  • 447
11 votes
Accepted

Multiple reverse DNS record internal DNS

We see from your output that IP address was changed from 12.43.168.248 to 12.43.168.105. This is not a big problem if you use DHCP. But this is very uncommon behavior if you use DHCP on Windows Server ...
  • 226
10 votes
Accepted

What are the practical risks of enabling the unsecure DNS updates on Windows?

You should basically never, ever allow non-secure updates. Personally I don't even like that the DNS server even allows you to turn off secure updates. This allows anyone on your network (like a ...
  • 55.2k
10 votes

Internal DNS points to internal server, yet site resolves to public site?

In the world of DNS website.test.company.com and www.website.test.company.com are two completely different URLs. Whether you are running Windows or Linux and your webserver you need to make you sure ...
10 votes

Multiple reverse DNS record internal DNS

I think most likely a DHCP issue. Possibly you have multiple servers/devices with DHCP role leasing IP's with same network range (Maybe a Router has DHCP role as well as Windows Server), your servers/...
9 votes
Accepted

Can Windows 2008 DNS assign 2 host names to one IP address

Here is a partly-redacted screen capture of two A records on one of our Windows Server 2008 DNS servers: As you can see, there are two different names in two different A records with the same IP ...
  • 2,831
8 votes
Accepted

Why dig NS returns nothing for a domain while it can find an A record for that domain?

It works as expected. The incorrect assumption here is that all names should have NS records. Instead, the set of nameservers is defined on a per zone basis, with NS records at the zone apex only. ...
8 votes
Accepted

Exposure of hidden-master stealth DNS server on public-facing authoritative slave

Zone files on slave DNS servers often do not (and should not) have information to this hidden master DNS server. They can have A records in their zone files to point to this hidden DNS master server. ...
  • 5,607
7 votes
Accepted

Valid SSL certificate for domain/subdomain pointed at a private IP address

There is no difference between private (RFC1918) and public IP addresses except that the former are not routable on the Internet and the latter are. Your DNS zones can point to both these private and ...
  • 5,607
6 votes

Can BIND setup with only A names and fully qualified host names work properly?

It's perfectly valid to have multiple A records pointing to the same IP. Reverse lookup has nothing to do with it; as that would a) be in a separate zone and b) would be using PTR records. ...
  • 4,691
6 votes

How to resolve sub-domains in bind9?

For the purposes of discussion, let's call your company's domain example.com which is fictitious, as opposed to company.com which really does exist. TL;DR Debug DNS problems from the top down, until ...
  • 655
5 votes

How do I determine what my DHCP server is?

One can also list all of the authorized DHCP servers in the domain by issuing the command, e.g. if you need to have it inventoried via script: netsh dhcp show server There is also a way to view all ...
5 votes
Accepted

dnsmasq: failed to create listening socket for port 53: Address already in use

You can do this: netstat -tupln you will get result like this: tcp 0 0 :::80 :::* LISTEN 713/httpd take the pid for the process that listening on th port 53 and kill it with this ...
5 votes

subdomain on route53 private hosted Zone

Creating a private hosted zone in Route 53 essentially applies a "hook" in the DNS resolver for your VPC so that queries for that domain are routed directly to the assigned Route 53 nameservers ...
5 votes
Accepted

Resolve Dynamic DNS to internal IP

The simplest way forward would be to use mDNS to do "ad-hoc" DNS resolution amongst the machines in the same subnet. This is, basically, as simple as installing avahi-daemon and libnss-mdns (Debian ...
  • 95.5k
5 votes
Accepted

How to do DNS redirect without DNS server?

How to do DNS redirect without DNS server? (I'm assuming you mean CNAMEs, because DNS doesn't redirect) By definition, you can't. Unless you use hosts file hackery. Also note that while you can CNAME ...
  • 32.4k
5 votes

Let's Encrypt: use Subject Alternative Name for internal domain

The problem You don't own the domain name mynas.local, so of course Let's Encrypt won't sign a certificate saying that you own that domain. If they signed such certificates, browsers would very soon ...
  • 30.1k
5 votes
Accepted

Can a local DNS cache be configured to use stale records when upstream fails?

I know similar feature in unbound DNS. From unbound docs: serve-expired: <yes or no> If enabled, unbound attempts to serve old responses from cache with a TTL of 0 ...
  • 166
5 votes
Accepted

Let a BIND DNS server query to a second one

Thanks @joeqwerty. It was necessary to edit named.conf on the DNS server in network A. zone "network-b.mycompany.com" { type forward; forward only; forwarders { 10.17.0.1; }; // The DNS ...
  • 553
5 votes
Accepted

DNS - Use public domain name for internal use

Why not setup forwarding for the zone for domain.com and create a new zone for a subdomain of domain.com for which the local name server is authoritative? My example uses example.com instead of ...
  • 302
5 votes
Accepted

In-house DNS Records not caching or propogating

Short answer: Query the actual authoritative nameservers, follow the chain of delegations. (dig +trace +add ... etc). Long answer: The delegation for godrej.com is a mess. The nameservers for the ...
5 votes

DNS issues with different internal domain and external domain

Create an internal DNS zone named helpdesk.bigcompany.com with a single A record at the root of the zone for the ip address of your helpdesk system. The internal DNS server will be authoritative only ...
  • 109k
5 votes
Accepted

BIND, RPZ and Forwarding priorities

This can be accomplished with qname-wait-recurse. Here is the documentation from the BIND 9.10 ARM regarding the usage of this feature: No DNS records are needed for a QNAME or Client-IP trigger. ...
  • 32.1k
5 votes

Should our small office have internal DNS servers?

Reading from your comments... I would 100% keep DNS. I would also extend your LDAP implementation to AD. 50 people is definitely large enough; I would implement DNS for >10 users if they are at all ...
5 votes

Should our small office have internal DNS servers?

Keep the internal DNS, if necessary make it redundant. SplitBrain DNS is a mess, but usually you have (a lot) more internal records than external. Plus you can split your traffic: internal uses ...
  • 4,557
5 votes

Windows 10 Always On VPN, Split DNS, NRPT, and how to configure which DNS server is used?

A potential workaround you could try is standing up a Server 2016 DNS server and implementing a DNS policy to do split-dns with geolocation awareness. This would allow you to tell DNS queries from the ...
  • 1,142

Only top scored, non community-wiki answers of a minimum length are eligible