Questions tagged [dns]
For questions pertaining to Domain Name System (DNS), a service that provides the resolution of host names to IP addresses. Use this tag when you are troubleshooting DNS issues, configuring a DNS resolver or server, or are trying to understand DNS's involvement in your situation.
1,573 questions
0
votes
0
answers
25
views
DNS resolution with reverse proxy connection after server migration
I got a small setup with two private servers ps1 and ps2 at home behind a NAT. One server s1 with public domain s1.com is a small rented vps where I set up as reverse proxy with caddy.
On ps1 I had a ...
0
votes
0
answers
15
views
Bind9 Queries Somtimes Fail
I migrated from a Windows DNS server to Bind9 this year. Both were configured as split DNS for local servers, and recursive for public servers (not forwarding). About once or twice a day now, I get ...
2
votes
1
answer
202
views
Replacing the domain string in the compiled binary file with an IP address
Just in theory: is it possible to replace the domain string in the compiled binary file with an IP address by editing a binary file in place with sed? (IP address belongs to a different domain, but ...
2
votes
1
answer
71
views
How to run DNS queries without bind package being installed
On one of my linux machines the BIND package is not installed. The Bind package provides a lot of terminal tools like host -v, nslookup, dig, etc. If I want to have shell tools or command-line tools ...
0
votes
1
answer
55
views
Public DNS Record local override using BIND9 CNAME
I have cPanel & WHM v130.0.14 STANDARD running in an EC2 instance. Trying to setup a reverse proxy with Apache2 by setting a CNAME some.example.com (not the real one) to forward the request to api....
0
votes
0
answers
96
views
Why would an alpine docker container resolve an IP with getent and not ping or in python?
I've run into a really weird issue while switching a docker build from a debian base image to an alpine base (FROM python:3.12-slim-bookwork, to FROM python:3.13-alpine). I suddenly get very weird DNS ...
0
votes
0
answers
43
views
Unbound Cache Stats Not Increasing - still Showing Same Hits/Misses After Days
We configured Unbound on a RHEL-based server ( RHEL 7.9 ) to provide DNS caching. Here’s the relevant part of our /etc/unbound/unbound.conf:
server:
chroot: ""
verbosity: 1
port: ...
-1
votes
1
answer
40
views
Linux AP and STA => managing bridge with custom DNS?
I have a SBC and I configured it to have 1 AP and 1 Station mode at the same time on my wifi module as below.
Hostapd creates the access point for the interface wlan0
Interface wlan0_sta is created ...
1
vote
1
answer
81
views
Unknown can't find t.qawqa.link Non-existent domain [closed]
Almost two weeks ago, I set A and NS records on Cloudflare.
A record: "tns" as the name and "IPV4 "as the content of the server.
NS record: "t" as name and for content &...
2
votes
1
answer
117
views
dhcpcd does not send hostname, reverse DNS does not work
I am using Debian Trixie on a server. I have installed it using ZFSBootMenu documentation, without a desktop environment. The installation is quite minimal in term of packages.
My motherboard has 2 ...
1
vote
1
answer
107
views
Dial tcp 10.10.34.35:443: connectex: No connection could be made because the target machine actively refused it
Following instructions, tried to circumvent network censorship.
In the instructions, it was said to add these records in the name's register configuration panel and set these:
A tns.example.com ...
1
vote
1
answer
37
views
How to allow local network dotless names using Network Manager in Linux Mint with DHCP?
I have two hosts, MintPC and AlpineVM. The VM is on a bridged network so it appears as its own device on the network with its own address. Both obtain addresses through DHCP provided by my router/...
0
votes
0
answers
86
views
ISC Bind9 with DNS over TLS (DOT) fails when strict tls auth is enabled
working I installed and setup Bind9 official package to test DNS forward zones based on source IP/subnets which unbound doesn't support
I properly set NAT forwards, changed listening ports on Bind9 ...
0
votes
0
answers
68
views
dnsmasq '--read-ethers' and '--address' interaction
I run dnsmasq on a server (specifically OpenWrt) to act as both DHCP and DNS.
OpenWrt DHCP configuration /etc/config/dhcp:
option readethers '1'
list address '/my-phone.lan/172.28.79.133'
Which is ...
0
votes
0
answers
268
views
LXC Container on Proxmox Can’t Resolve DNS — Outbound UDP Works, But No Replies
I'm trying to configure a reverse proxy on an LXC Container in proxmox, however the container is not able to resolve DNS. The proxmox node has no issue with DNS, and both the node and the container ...
4
votes
2
answers
1k
views
Ubuntu 25.04 not using DHCP DNS server
A strange issue with split DNS that's been annoying me for ages, DHCP dns points to my adguard (primary) and my home router (secondary). Both have DNS rewrites for my local home domain servers to the ...
1
vote
1
answer
154
views
Which IPv6 address should I use for LAN name resolution?
I set up an opnsense firewall that runs a DHCP server for IPv4 assignment in my LAN. Furthermore, as my ISP provides me with IPv6 too, my LAN clients also configure a SLAAC address with IPv6 prefix ...
0
votes
1
answer
155
views
BIND9 on Debian refusing to bind to a localhost address
This is on a Debian 12.10 lxc machine.
I'm trying to get bind9/named to listen on a second localhost IP:
/etc/bind/named.conf.options:
options { ...
1
vote
1
answer
197
views
Caching-only bind9, connecting exclusively by tcp outward
On various, mostly security and privacy related reasons, I would be more happy if my caching-only bind9 would only use TCP to make outward connections.
Of course, it should be able to accept and ...
1
vote
1
answer
364
views
BIND9 refusing DNS queries
I cannot for the life of me work out why BIND9 is refusing queries. I have followed so many tutorials and watched so many configuration setup videos, both using Webmin and in the CLI, following them ...
1
vote
0
answers
81
views
unable to access internet from exported vm machine either on nat or bridged [closed]
Problem:
I’m unable to access the internet in my Red Hat 9.5 Enterprise VM, despite the VM having an IP address and being configured in VMware Workstation with NAT mode. The VM's network interface is ...
0
votes
1
answer
63
views
nslookup times out when type is set to MX
In order to send 2FA emails from a PHP web site to myself, I set up an MX record override and created a firewall rule that allows access to the mail server for the destination domain, but when I ...
0
votes
1
answer
148
views
How can I determine which software is sending TCP packets on port 53 with undefined local IP addresses?
I'm seeing a ton of the following two lines in my dmesg logs¹:
[602956.308844] [iptables] (10): IN=eno1 OUT=eno2 MAC=xx:yy:..:zz SRC=10.174.26.245 DST=192.168.22.59 LEN=60 TOS=0x00 PREC=0x00 TTL=63 ID=...
0
votes
3
answers
1k
views
Arch Linux systemd-resolve not resolving dns
Hi I have a small desktop/home network that local applications aren't able to resolve dns on.
For example:
dig reddit.com
;; communications error to ::1#53: connection refused
;; communications error ...
1
vote
0
answers
41
views
DNS Problem with local Zone
Following Situation:
an authoritive DNS Server for zone intranet.local wirh 192.168.0.30
a Client 192.168.0.106
dns cache only server 192.168.0.33 with /etc/bind/named.conf.local:
zone "...
0
votes
2
answers
101
views
Any real use cases that we are NOT prioritise Local Files Over DNS in `nsswitch.conf` [closed]
Background
Recently, I learned that there is a name Service Switch configuration file - nsswitch.conf in some Unix-like operating systems. We can change the domain name resolution order using nsswitch....
-1
votes
1
answer
170
views
How to setup certificate for duckdns
Running
user@nextcloudpi:/$ `sudo certbot -d downwind.duckdns.org --manual --preferred-challenges dns certonly~`
returned:
- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -...
0
votes
1
answer
45
views
Route DNS query to my tunnel
I have the following system:
root@debian:~# dpkg -l systemd-resolved
Desired=Unknown/Install/Remove/Purge/Hold
| Status=Not/Inst/Conf-files/Unpacked/halF-conf/Half-inst/trig-aWait/Trig-pend
|/ Err?=(...
0
votes
2
answers
104
views
Can a linux bridge have a DNS different from the host?
I am using Kind on my workstation, Kind creates a network bridge for itself and uses it to provide network functionality to its Kubernetes [container] nodes
You can see it here:
ip route show
172.18....
2
votes
3
answers
325
views
Replacing a string in a file with GAWK issue
I have a program that will run a set of commands against new server installs and I need to change an entry in a file for each install. We need to change the default DNS from 127.0.0.X (which it ...
0
votes
0
answers
43
views
Configure bind9 to use Dnsmasq for local LAN names
I have a dnsmasq server (10.0.0.1) with knowledge of a hostnames and IP addresses for couple of local networks, say a Guest Wireless and Wired Networks.
I also have a bind9 DNS running on a separate ...
1
vote
1
answer
725
views
Force ssh LocalForward to use IPv4 when resolving the hostname
I have the following problem. I need to send report emails for one of our
customers to his customers. Our customer provided an SMTP endpoint for that and
added the IPv4 Address of our server to his ...
1
vote
4
answers
718
views
Bypass Pi-hole to Override DNS in Debian 12
I am running Pi-hole on a Debian server, and need to override the DNS for the network to 1.1.1.1 (so it bypasses Pi-hole).
What is the proper way to do this on Debian 12?
Adding the DNS to /etc/resolv....
0
votes
1
answer
1k
views
Got SERVFAIL reply from 127.0.0.53
My Mastodon instance is not showing previews of images from remote servers. I have tried to run
RAILS_ENV=production /home/mastodon/live/bin/tootctl media refresh --days 0.2
And get a lot of errors ...
1
vote
1
answer
154
views
How to bypass Pi-hole DNS on Debian
I have setup Pi-hole and some other things on a Debian server, using docker.
The pi-hole is acting as a DNS for my entire network (I have added the server's IP in my router DNS config).
Problem is ...
1
vote
2
answers
276
views
Linux DNS Query Time
I'm on Arch with KDE. I can't understand my DNS search result latency testing result. My first DNS request always takes much longer than subsequent ones (it's not bad, I'd just like to understand it)...
0
votes
2
answers
130
views
Why would DNS stop working after a while in non-systemd MX Linux?
I am using MX Linux, without systemd. Sometimes after a while, and every time after sleep or hibernation, domain name resolution stops working, that is ping 8.8.8.8 works, but ping google.com does not....
0
votes
1
answer
226
views
Docker container has no internet unless using --network=host (Manjaro, Debian image)
I'm running a Debian container on my Manjaro host. Until recently, apt update worked fine, but now it only works if I set the network mode to host. Otherwise, the command hangs at "Connecting to ...
0
votes
1
answer
145
views
Container name resolution not working with custom DNS server
I have a small home server which is running Ubuntu server 24.10 where I would like to host an own DNS server. Systemd has its own resolve daemon which binds to port 53 which I have disabled by editing ...
0
votes
1
answer
126
views
My local DNS server doesn't resolve
I have a laptop that I'm working on, a FreshTomato-based router, and a Raspberry Pi running NixOS, on which I have installed Blocky to try to use it as my DNS server.
However, requests from my laptop ...
0
votes
1
answer
105
views
What does /etc/resolve.conf actually contain - does it contain the server's own IP or does it contain the upstream delegator?
I have looked at various resolve.conf questions on here and other documentation but they're talking about DNS as an external thing, which doesn't help me distinguish in this case.
I have a server. ...
0
votes
1
answer
52
views
How can avahi daemon backward resolution be working while forward is not?
After a reboot of my server, I noticed the hostname wasn't resolving. I checked the firewall-cmd to see if mdns/5353/udp was open, which it was.
Then, I went to check if Avahi daemon was running, ...
-1
votes
1
answer
346
views
Ubuntu 24.04 + Docker + AGH. Very slow download if specifying DNS in Linux
I'll preface this by saying that my experience level in Linux is very low, I have plenty of experience with PCs, elementary level network experience, and haven't dabbled with Linux much in the past 15+...
0
votes
1
answer
95
views
mDNS hostname from other device gets assigned local
I have a weird issue. I have an ESP32 embedded device running an mDNS server which I assign a hostname to. For the record, i've included this code for the ESP32 device below.
When I ping this hostname ...
1
vote
1
answer
101
views
how to have vpn traffic routed to pihole
i have a pihole server running in docker compose on my Debian Linux server. i also host a wireguard vpn (also in docker compose) running on the same server. by using the tcpdump command i have ...
2
votes
1
answer
1k
views
Unable to ping mDNS hostname
I have an application which has an mDNS server running on an ESP32 device. Its hostname is esp32-mdns.local. I can ping this hostname from Windows. However, it is not possible from my Ubuntu 22.04 ...
0
votes
1
answer
200
views
Return different DNS results depending on client
I have bind9 running for local LAN DNS. I also have an APT caching server. So, I set up an RPZ file to poison certain domain names and have them resolve to my internal caching server instead. Running ...
0
votes
0
answers
147
views
How can I transfer only A records from one DNS zone to another without using scripts, full zone transfers?
I have two DNS servers for different zones:
subdomain.example.com (subdomain)
example.com (main domain)
The goal is to dynamically transfer A records from subdomain.example.com to example.com without ...
1
vote
0
answers
38
views
Name servers from tld-servers
Let us take google.com.
If I run:
host -t ns com.
I get a list of servers that are name servers for .com. E.g. c.gtld-servers.net.
I had expected that if I run:
host -t ns google.com c.gtld-servers....
1
vote
1
answer
84
views
How to ensure WireGuard traffic is confined to a Linux network namespace without internet access on the host?
I’m trying to configure WireGuard (WG) inside a Linux network namespace (mynamespace) in such a way that all WireGuard traffic is limited to the network namespace and does not affect the host system’s ...