Questions tagged [dig]

dig is a command-line client to make queries against DNS servers, the Internet name servers.

dig is a command-line client that allows you to make queries against DNS servers, which are servers that provide the Internet name service. While querying DNS servers is part of most Internet based applications (like web browsers, chat clients, email tools and so forth), those queries are done by the clients in the background, and without any user intervention. dig allows you to make such queries explicitly from the command-line. This is usually interesting for people that maintain DNS servers and want to test them, or network administrators that want to inspect name resolution in a particular network.

dig is part of the BIND software package, which runs on POSIX platforms, but ports to the Windows platform exist. An alternative tool is nslookup, but dig is usually preferred for its better configurability and scriptability.

This tag should be added to questions that explicitly refer to the dig tool and its workings. Related tags are dns, nslooup, domain-name and bind.

Further information:

223 questions
0
votes
1 answer

How to verify which DNS server actually answered a request when it's forwarded?

ISC BIND has a tool named dig that allows us to send a DNS request to a DNS server set on parameter and see what that server answers. I wanted to know if that DNS server answered based on its cache, on its zones, or if it forwarded the request. And,…
Hikari
  • 107
  • 3
  • 12
0
votes
1 answer

Different IP for same FQDN using different resolver

For my domain gobudgie.ml I get different IPs on different DNS resolver eg.: jasmich.ml@8.8.4.4 (Default): jasmich.ml. 964 IN A 31.17.211.88 jasmich.ml@1.1.1.1 (CloudFlare): jasmich.ml. 966 IN A …
0
votes
1 answer

Unable to make NS queries against bind with catchall configuration

I've configured bind to catch all domains and return the same ip (A record) for them. This is for a domain parking service where there might be thousands of domains involved. After pointing the nameservers for example.com to my nameservers, I…
Harley
  • 101
  • 1
0
votes
1 answer

Nameserver response has no authoritative bit set

I know that the authoritative name servers for google.com are ns1-4.google.com. Now, I do this: dig google.com @ns1.google.com And the response is: ; <<>> DiG 9.11.3-1ubuntu1.8-Ubuntu <<>> google.com @ns1.google.com ;; global options: +cmd ;; Got…
pathfinder
  • 25
  • 1
  • 4
0
votes
0 answers

dns NXDOMAIN error with external view

we are trying to configure a bind9 server. We have two different views, one for the internal zone (dmz) and another for external users who want to access to the dmz web. The problem is that we may be lacking any configuration option because the…
0
votes
1 answer

Why does ping to FQDN fails, but dig succeed?

When I try to ping a certain FQDN, I fail: $ ping test-customer-1.clients.jsonar.com ping: test-customer-1.clients.jsonar.com: Name or service not known However, dig et al. succeeds: $ dig test-customer-1.clients.jsonar.com ; <<>> DiG…
boardrider
  • 949
  • 2
  • 18
  • 29
0
votes
2 answers

Scrape subdomain IPs using PTR records

I'm looking for a solution to an obscure problem. For security policy reasons we have a workstation using PeerBlock with a block list that essentially blacklists the entire internet, and then an allow list for a handful of IPs we deem ok. This…
raicho
  • 103
  • 3
0
votes
1 answer

DNS server with bind in Debian 9

I have a project to do for college. The project is a DNS server with client. I created the DNS server but when I want to see how it works I use the command dig myservername. How can I proceed to see the authority, answer when I use the dig…
El Amo
  • 1
0
votes
2 answers

dig - how return NS from authority only

How I can parse NS from authority - no from child NS servers? I need check NS servers from about 30 000 domains with different TLDs. I can use dig google.cz +trace But output is long and I don't know how I parse only records from TLD…
Pavel
  • 417
  • 1
  • 7
  • 17
0
votes
0 answers

Strange double answer cname in dig

I want to host a web site with github.io, using www.nv-gr.fr I have put an A on @ and another on www My zone is : @ 10800 IN SOA ns1.gandi.net. hostmaster.gandi.net. 1531775542 10800 3600 604800 10800 @ 1800 IN A 185.199.108.153 @ 1800 IN A…
0
votes
1 answer

Can't update DiG utility on Debian 8 (Jessie)

I am trying to get the latest version of DiG DNS utility (part of BIND 9) but I can't seem to be able to. I am running Debian 8 (Jessie). The current DiG version : root@myMachine:~# dig -v DiG 9.9.5-9+deb8u14-Debian I want to get the version that…
0
votes
1 answer

Why is it unable to make query directly from the country level DNS?

I tried to make a DNS trace request (taking Oxford's website www.ox.ac.uk as an example) starting from Google's DNS 8.8.8.8. I can successfully get the result and the route was via the country level DNS nsa.nic.uk. However, when I tried to ask…
H42
  • 103
  • 2
0
votes
0 answers

Why dig cannot get my DNS records immediately?

I'm working with a online development server and I need to change quite frequently the bind9 configuration, but I can't see the changes from my working computer. What I'm doing is something like this in my server: root@myserver.com# vi…
Ivan
  • 192
  • 2
  • 11
0
votes
1 answer

How to resolve a list of hostnames to ip addresses while querying dig or using getent

I need to resolve all "A" records for a domain to ip addresses if they exist while creating a bash script. I've looked to see if there was a dig command to retrieve all a records for a domain but could not find any, so I am using the hostnames that…
Vituvo
  • 337
  • 2
  • 5
  • 16
0
votes
2 answers

dig and host command return different SOA

So I found another post saying that host and dig are essentially the same except host is a more user friendly. For the most part this seems to be true however I came across this when trying to find the SOA for one of my…