DNS errors

My DNS seems to work between my master and slave and my local workstation.

But when I go to a remote website viewer, I get these errors:

DNS Records
Host www.buyorangecat.com not found: 2(SERVFAIL)
A Records
Host www.buyorangecat.com not found: 2(SERVFAIL)
CNAME Records
Host www.buyorangecat.com not found: 2(SERVFAIL)
MX Records
Host www.buyorangecat.com not found: 2(SERVFAIL)
TXT Records
Host www.buyorangecat.com not found: 2(SERVFAIL)
SOA Records
Host www.buyorangecat.com not found: 2(SERVFAIL)

When I perform a dig on my name server, it looks good to me:

dig @45.33.50.180 twocanes.us. SOA
; <<>> DiG 9.11.4-3ubuntu5-Ubuntu <<>> @45.33.50.180 twocanes.us. SOA
; (1 server found)
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 64919
;; flags: qr aa rd ra; QUERY: 1, ANSWER: 1, AUTHORITY: 2, ADDITIONAL: 3
;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
; COOKIE: e41f0d27314fb40d846f57155c3a3ec98f0ba92f6db01d91 (good)
;; QUESTION SECTION:
;twocanes.us. IN SOA
;; ANSWER SECTION:
twocanes.us. 3600 IN SOA twocanes.us. postmaster.twocanes.us. 2019011202 10800 3600 604800 300
;; AUTHORITY SECTION:
twocanes.us. 3600 IN NS ns2.twocanes.us.
twocanes.us. 3600 IN NS ns1.twocanes.us.
;; ADDITIONAL SECTION:
ns1.twocanes.us. 3600 IN A 45.33.50.180
ns2.twocanes.us. 3600 IN A 45.79.92.49
;; Query time: 1 msec
;; SERVER: 45.33.50.180#53(45.33.50.180)
;; WHEN: Sat Jan 12 11:23:53 PST 2019
;; MSG SIZE rcvd: 183

and

dig -x 45.33.50.180 (01-12 11:23:53)
; <<>> DiG 9.11.4-3ubuntu5-Ubuntu <<>> -x 45.33.50.180
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 20525
;; flags: qr rd ra; QUERY: 1, ANSWER: 1, AUTHORITY: 0, ADDITIONAL: 1
;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 512
;; QUESTION SECTION:
;180.50.33.45.in-addr.arpa. IN PTR
;; ANSWER SECTION:
180.50.33.45.in-addr.arpa. 21599 IN PTR www.buyorangecat.com.
;; Query time: 93 msec
;; SERVER: 8.8.8.8#53(8.8.8.8)
;; WHEN: Sat Jan 12 11:24:44 PST 2019
;; MSG SIZE rcvd: 88

If anybody can see an error, I'd love to know what it is. ;-)

-Kevin

2 Replies

Hello,

The nameservers that are authoritative for that domain aren't resolving:

$ nslookup NS1.TWOCANES.US
;; Got SERVFAIL reply from 8.8.8.8, trying next server
Server:        1.1.1.1
Address:    1.1.1.1#53

** server can't find NS1.TWOCANES.US: SERVFAIL

Hope that helps!
-Chris

I kinda surmised that, but why are the not resolving?

Here's my named.conf.options file (bind9):

options {
directory "/etc/bind";

// If there is a firewall between you and nameservers you want
// to talk to, you may need to fix the firewall to allow multiple
// ports to talk.  See http://www.kb.cert.org/vuls/id/800113

// If your ISP provided one or more IP addresses for stable 
// nameservers, you probably want to use them as forwarders.  
// Uncomment the following block, and insert the addresses replacing 
// the all-0's placeholder.

 forwarders {
    8.8.8.8;
    50.116.53.5;
    50.116.58.5;
    50.116.61.5;
    50.116.62.5;
    66.175.211.5;
    8.8.4.4;
 };
//========================================================================
// If BIND logs error messages about the root key being expired,
// you will need to update your keys.  See https://www.isc.org/bind-keys
//========================================================================
dnssec-validation auto;
//listen-on-v6 { any; };

};

I'm using the Linode DNS resolvers listed on the manager page for my nameserver, ns1.twocanes.us

-Kevin

Reply

Please enter an answer
Tips:

You can mention users to notify them: @username

You can use Markdown to format your question. For more examples see the Markdown Cheatsheet.

> I’m a blockquote.

I’m a blockquote.

[I'm a link] (https://www.google.com)

I'm a link

**I am bold** I am bold

*I am italicized* I am italicized

Community Code of Conduct