DNS errors
My DNS seems to work between my master and slave and my local workstation.
But when I go to a remote website viewer, I get these errors:
DNS Records
Host www.buyorangecat.com not found: 2(SERVFAIL)
A Records
Host www.buyorangecat.com not found: 2(SERVFAIL)
CNAME Records
Host www.buyorangecat.com not found: 2(SERVFAIL)
MX Records
Host www.buyorangecat.com not found: 2(SERVFAIL)
TXT Records
Host www.buyorangecat.com not found: 2(SERVFAIL)
SOA Records
Host www.buyorangecat.com not found: 2(SERVFAIL)
When I perform a dig on my name server, it looks good to me:
dig @45.33.50.180 twocanes.us. SOA
; <<>> DiG 9.11.4-3ubuntu5-Ubuntu <<>> @45.33.50.180 twocanes.us. SOA
; (1 server found)
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 64919
;; flags: qr aa rd ra; QUERY: 1, ANSWER: 1, AUTHORITY: 2, ADDITIONAL: 3
;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
; COOKIE: e41f0d27314fb40d846f57155c3a3ec98f0ba92f6db01d91 (good)
;; QUESTION SECTION:
;twocanes.us. IN SOA
;; ANSWER SECTION:
twocanes.us. 3600 IN SOA twocanes.us. postmaster.twocanes.us. 2019011202 10800 3600 604800 300
;; AUTHORITY SECTION:
twocanes.us. 3600 IN NS ns2.twocanes.us.
twocanes.us. 3600 IN NS ns1.twocanes.us.
;; ADDITIONAL SECTION:
ns1.twocanes.us. 3600 IN A 45.33.50.180
ns2.twocanes.us. 3600 IN A 45.79.92.49
;; Query time: 1 msec
;; SERVER: 45.33.50.180#53(45.33.50.180)
;; WHEN: Sat Jan 12 11:23:53 PST 2019
;; MSG SIZE rcvd: 183
and
dig -x 45.33.50.180 (01-12 11:23:53)
; <<>> DiG 9.11.4-3ubuntu5-Ubuntu <<>> -x 45.33.50.180
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 20525
;; flags: qr rd ra; QUERY: 1, ANSWER: 1, AUTHORITY: 0, ADDITIONAL: 1
;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 512
;; QUESTION SECTION:
;180.50.33.45.in-addr.arpa. IN PTR
;; ANSWER SECTION:
180.50.33.45.in-addr.arpa. 21599 IN PTR www.buyorangecat.com.
;; Query time: 93 msec
;; SERVER: 8.8.8.8#53(8.8.8.8)
;; WHEN: Sat Jan 12 11:24:44 PST 2019
;; MSG SIZE rcvd: 88
If anybody can see an error, I'd love to know what it is. ;-)
-Kevin
2 Replies
Hello,
The nameservers that are authoritative for that domain aren't resolving:
$ nslookup NS1.TWOCANES.US
;; Got SERVFAIL reply from 8.8.8.8, trying next server
Server: 1.1.1.1
Address: 1.1.1.1#53
** server can't find NS1.TWOCANES.US: SERVFAIL
Hope that helps!
-Chris
I kinda surmised that, but why are the not resolving?
Here's my named.conf.options file (bind9):
options {
directory "/etc/bind";
// If there is a firewall between you and nameservers you want
// to talk to, you may need to fix the firewall to allow multiple
// ports to talk. See http://www.kb.cert.org/vuls/id/800113
// If your ISP provided one or more IP addresses for stable
// nameservers, you probably want to use them as forwarders.
// Uncomment the following block, and insert the addresses replacing
// the all-0's placeholder.
forwarders {
8.8.8.8;
50.116.53.5;
50.116.58.5;
50.116.61.5;
50.116.62.5;
66.175.211.5;
8.8.4.4;
};
//========================================================================
// If BIND logs error messages about the root key being expired,
// you will need to update your keys. See https://www.isc.org/bind-keys
//========================================================================
dnssec-validation auto;
//listen-on-v6 { any; };
};
I'm using the Linode DNS resolvers listed on the manager page for my nameserver, ns1.twocanes.us
-Kevin