Questions tagged [dns-zone]
"A DNS zone is a portion of a domain name space using the Domain Name System (DNS) for which administrative responsibility has been delegated." (From Wikipedia, the free encyclopedia)
772
questions
50
votes
4
answers
11k
views
Can someone using the same DNS server as me hijack my domains?
When I register a new domain, I send it to my hosting provider by assigning it its domain name servers in the registar's settings. For example, with Digital Ocean, I input the following:
ns1....
30
votes
3
answers
44k
views
Do I need a separate SSL certificate for a DNS redirect?
I am implementing a multi-tenant application where my application hosts and serves technical documentation for a tenant's product.
Now, the approach that I was considering was - I host the ...
25
votes
2
answers
9k
views
Clarification of why DNS zone files require NS records
This question was originally asked here:
Why do DNS zone files require NS records?
To summarise:
"When I go to my registrar and purchase example.com , I will tell my registrar that my nameservers are ...
21
votes
4
answers
64k
views
Find out which DNS server answered your query
I have a seemingly simple question but couldn't find the answer to precisely that question after some search:
I know that, if I want to look up the IP address of some domain name, I type, for example: ...
14
votes
2
answers
2k
views
Should engineering have its own DNS zone, delegate, or subdomain?
We have our organization's primary domain (with AD) example.com. In the past, previous admins have created several other zones - such as dmn.com, lab.example.com, dmn-geo.com etc - as well as ...
12
votes
2
answers
1k
views
Does a multi-level hostname makes a practical difference?
The A record for hello.world.example.com can be registered
as the hello entry in the domain world.example.com
or as the hello.world entry in the domain example.com
Is there a practical difference, ...
11
votes
2
answers
518
views
Changing A record and CNAME records
Currently I'm using a LAMP configuration for both my landing page page, for the web app, and for the APIs. Now I'd like to split these things across multiple Virtual Servers (VS). I'm unsure of the ...
11
votes
2
answers
2k
views
Why send authoritative nameserver in DNS?
Out of curiosity, I'm checking the Wireshark DNS packets. I can see that there's a DNS query from the host, and then DNS response from the DNS server. Everything is just as expected.
However, if you ...
11
votes
4
answers
1k
views
How can I manage all of my domains with minimal configuration?
This is a Canonical Question about DNS server administration.
I have one hundred or so domains. All of these domains need to be configured identically, but it seems like a huge waste of time to have ...
10
votes
9
answers
24k
views
Automatically sync all zones between BIND 9
Is there a way to automatically synchronize all zones between BIND (9) servers so that I don't have to add zones to the slave when I add them to the master?
10
votes
2
answers
6k
views
BIND/DNS Zone meaning of "IN"
I have been reading http://www.centos.org/docs/5/html/Deployment_Guide-en-US/s1-bind-zone.html but the document raised a question. What is the meaning of IN? Is it just a class which is optional or ...
10
votes
3
answers
32k
views
Bind zone transfer refused
UPDATE:
BIND Version:
[[email protected]] $ named -v
BIND 9.3.6-P1-RedHat-9.3.6-16.P1.el5
Operating System:
CentOS release 5.6 (Final)
After running [[email protected]] $ dig @10.224.45.130 ...
9
votes
2
answers
31k
views
Missing nameservers reported by parent and your nameservers
I've been going at this for a few days now and neither previous hosting company nor current one seem to be able to help me sort this out. I am migrating an opencart-based online shop between two ...
9
votes
1
answer
5k
views
What these strange TXT records in my default OVH DNS config mean
Can somebody tell me please, what this TXT records means?
www IN TXT "l|pt"
www IN TXT "3|welcome"
these 2 TXT records appears when i reset my DNS ...
8
votes
1
answer
37k
views
How to set SOA Expire Value? [closed]
I ran my domain through intoDNS and the report returned a warning saying
Your SOA EXPIRE number is: 3600000. That is NOT OK
So I've been looking to change the value ever since. You wouldn't believe ...
7
votes
6
answers
13k
views
How do I change reverse DNS on Google Cloud Compute?
How do I change reverse DNS on Google Cloud Compute?
I want to add reverse DNS to Google Cloud Compute and can't figure out howto do it.
I want to map 11.97.196.104.bc.googleusercontent.com to ns1....
7
votes
4
answers
2k
views
Moving many sites to new server - whats the quickest way to update their DNS records?
I'm planning on migrating a large-ish amount of websites (approx 100) to a new server and I'm in the migration planning process.
A typical DNS zone for each website has two A records pointing to the ...
7
votes
3
answers
25k
views
No SOA record -- what are the implications?
I was investigating a bunch of spam domains, and none of them have an SOA record. I have never seen this before -- I didn't even know it was possible.
How can DNS work without an SOA record? If it ...
7
votes
1
answer
470
views
Is there a standard time duration before DNS caches are cleared?
Is there a standard time duration before DNS caches are cleared, so that if a distracted operator or stuck key turns a TTL of 86400 into 864000000 you don't end up with an authoritative resource ...
7
votes
0
answers
3k
views
Registrar nameservers vs. NS records for bare domain?
OK, I'm a bit new to DNS, but I'm having some trouble finding the answer to this. I have a domain registered at google domains. As with other registrars, you have access to their free DNS, and ...
6
votes
3
answers
18k
views
What RFC encourages DNS servers to reply REFUSED to queries for unknown domains?
This question is very very similar to RFC that requires DNS servers to respond to unknown domain requests but I figured I ought to ask it as a new question.
It appears that it is standard practice for ...
6
votes
2
answers
3k
views
Is it possible to combine DNS name servers?
Question: Is it possible to combine DNS name servers?
For this example lets say that I lease the domain example.com through a service (godaddy, name.com, etc)
I have the option of pointing this ...
6
votes
3
answers
16k
views
why bind9 gives connection refused for permission denied error when it is 777
These questions didn't help:
https://askubuntu.com/questions/172030/how-to-allow-bind-in-app-armor
Cannot start BIND9
I wanted to start bind9 and saw that it gives permission denied in syslog as ...
6
votes
1
answer
8k
views
DNS errors after changing nameservers for Cloudflare
I don't know if this is the right place for my question, but I have a problem with my DNS/nameservers after changing the nameservers. I'm not sure if it is a problem at my side or at my webhost.
I ...
6
votes
1
answer
5k
views
What is the syntax of email address with a dot behind it? in DNS zone file, SOA rr
How i can use a email address with a dot in behind.
For example at bellow, email address is [email protected], How to use [email protected] ?
example.com. IN SOA ns.example.com. ...
6
votes
1
answer
1k
views
DNS synonyms: multiple zones, one zone file
I have a site with a bunch of synonym domains. The site itself accepts all the different domains, and redirects to the correct domain name.
Is there any reason not to configure zones.conf like so:
...
6
votes
1
answer
2k
views
Route 53 - cross account delegation of APEX record
We're implementing an AWS serverless stack with multiple environments. Trying to follow best practices, we created multiple accounts for different purposes.
There's a DNS account, which is supposed to ...
5
votes
1
answer
1k
views
Setting sub domain DNS to route default port 80 to custom port
I have a subdomain let say work.example.com
also I have a server with a public IP let say 192.0.2.4.
I have an application on my server that running on Ubuntu 16.04 LTS on port 8088, so this is ...
5
votes
3
answers
53k
views
Delegating subzone to other DNS server not working
I'm in the process of migrating from a workgroup served by a BIND9 DNS server, to a AD Domain based on Windows Server 2008 R2, and I'd like to keep using the BIND server until the AD infrastructure is ...
5
votes
1
answer
7k
views
Global zones visible in all views
I have a BIND 9 server running, currently serving several domains. For one of these domains I would like to differentiate the answers depending of the asking IP address.
I know this can be done by ...
5
votes
7
answers
4k
views
Managing zone files
We host our very own DNS server (BIND) for various reasons, including the fact that we deploy and kill machines very often and that we sometimes need to load balance via DNS very quickly.
However, ...
5
votes
2
answers
10k
views
Why do I need to escape ; with \ in a DNS DKIM record?
I'm setting up Email Authentication on our domain to allow authentication with our Email Service Provider.
My understanding is that the DNS record needs to have any ; escaped, e.g., \;
I just want ...
5
votes
2
answers
4k
views
Setting different NS records as authoritative on authoritative DNS
I have DNS servers for a domain set to one set of authoritative DNS servers on the registrar. However, those DNS servers zone file for the domain have a different set of NS records for it. Some DNS ...
5
votes
2
answers
5k
views
Slave DNS server (bind) zone files transffered but data is unreadable
I've set up a slave DNS server on Linux using bind. On starting the named service the zone files transffered to slaves/ but the information in the files looks like its in strange computer symbols (i'm ...
5
votes
1
answer
6k
views
DNS referral / delegation: which DNS is responsible; How to delegate the right way?
Introduction
I bought the domain earechnung.at with Hetzner and am using my webspace at All-Inkl. I want to use the nameservers of my webhost (All-Inkl).
Zonefiles and Nameservers
As I registered ...
5
votes
1
answer
30k
views
Reverse DNS/bind named-checkzone "zone NS has no address records (A or AAAA) error"
This is my reverse dns file.
$TTL 1D
@ IN SOA dns.prv.server.co.uk. root.prv.server.co.uk. (
2014090402 ; serial
...
5
votes
1
answer
14k
views
no current owner name error when running named-checkzone on both forward and reverse
I'm trying to learn dns and bind on centos 7 at digital ocean. When I run named-checkzone I get the same errors. When I change around the white space I stop that error only to replace it with a 0 SOA ...
5
votes
1
answer
20k
views
how to find out who is managing my DNS records?
I have a following situation:
a website is registered with registrar X, hosted on server Y and about to move to server Z.
The both servers Y and Z do not manage the domain DNS as according to them “...
5
votes
3
answers
2k
views
Is it possible to define a block in a zone file as constant in Dynamic DNS (using bind)?
bind mangles my zone file every time a DNS update is done. If defining a block as constant isn't possible, is it possible to have 2 or more zone files describing one domain? The intent being one zone ...
5
votes
1
answer
993
views
How to setup redundant ejabberd servers?
I currently have an ejabberd server running at domain A. It has a bunch of users with accounts like xyz@A. I want to setup alternative servers so that if A is down, clients can transparently use ...
5
votes
2
answers
6k
views
How to fully disable Dynamic DNS on Windows Server?
so we're a University campus, and in DNS Manager, all the students phones, tables, etc, are registering their A records in DNS. We don't want them to. Ideally, we'd just have domain joined devices ...
5
votes
1
answer
1k
views
Large AXFR through dnsmasq causes dig to hang with partial results
I'm attempting to set up dnsmasq as a local cache for consul. While this seems to work fine for normal digs, dnsmasq seems to only allow partial zone transfers.
My resolv.conf:
search x.domain.com y....
4
votes
2
answers
1k
views
Remote domain: DNS record A exists when NS does not
I have encountered a domain for which I can sucessfully retrieve a DNS A record. At the same time, however, any public DNS server seems to return empty NS record. The domain in question is bluedriving....
4
votes
3
answers
13k
views
BIND: one forward, multiple reverse?
How do I deal with the case where a domain has addresses in more than one subnet?
EG: (bob.com)
joe.bob.com A 14400 10.20.0.10
jim.bob.com A 14400 10.20.0.11
mary.bob.com A 14400 ...
4
votes
2
answers
2k
views
How to check for the existence of deep subdomains even if the intermediate ones don't exist?
Suppose that test.example.com don't exists and gives NXDOMAIN when runnning dig on it , but i know that subdomain.test.example.com exists and gives NOERROR when doing the same, is there a way to check ...
4
votes
2
answers
13k
views
dig: "Transfer failed."
INPUT:
dig +multiline google.com axfr
OUTPUT:
; <<>> DiG 9.7.3-RedHat-9.7.3-1.fc14 <<>> +multiline google.com axfr
;; global options: +cmd
; Transfer failed.
What am I ...
4
votes
1
answer
211
views
Seamless transition from internet to local network
I'm setting up a NAS server for my company. From the outside it is accessible through mydomain.dyn.com, from the local network it can be accessed through its local IP address. The problem is that I ...
4
votes
1
answer
83
views
Can the dns' domain be in its own spf record?
I'm finally fixing up my dns zone files in Gandi, which has a handy feature that lets me use the same zone file for several domains. So I can keep 1 zone file for a single domain and all its tld's.
...
4
votes
2
answers
32k
views
Getting no servers could be reached when using host, nslookup and dig
I'm following this answer How do I get the mx records for a domain from *nix command line? but every time I get an error:
;; connection timed out; no servers could be reached
Error Image
Can ...
4
votes
1
answer
22k
views
With DNS, what is the difference between Delegation, Forwarding, Conditional Forwarding, and Stub zones? [closed]
I am surprised at how many different ways I have read answers to this question and I still don't know the fine differences of the answer.
For each of these similar DNS concepts:
Delegation
...