/r/dns

Photograph via snooOG

/r/dns

14,949 Subscribers

3

AppleTV DNS server on LAN

I was surprised to find all of my AppleTV units are responding to DNS queries from my LAN on port 53.

They seem to be pulling through my pihole per DHCP settings, so I don't see this as an obvious security bypass, but it certainly seems odd. My MacOS and IOS devices on the same net do not seem to have this service open to the LAN. I don't allow uPnP devices to setup any port forwarding, so I am not worried about my units creating an open DNS on the WAN. I am not sure how safe this is in general, and would like to hear what DNS experts think.

5 Comments
2025/02/03
23:00 UTC

4

Difference in SPF records for parent and sud-domain

Let's say I have a domain : example.com I also have a sub-domain : test.example.com

If I have IPv4 values in the SPF record for the parent domain but don't have any IPv4 values in the SPF record for the sub-domain, will it cause any potential issues?

3 Comments
2025/02/03
08:09 UTC

0

Very Confused about CName

I am using Domain.com and I am trying to connect my shopify to this. However when I go into my DNS I cannot seem to find it. I try to manually add it but it says it already excists. I can only see A's. Thank you in advance.

8 Comments
2025/02/03
02:06 UTC

4

Started to study DNS in depth; what should be the learning outcomes?

All I know at present is dns resolves name->IP address. I want to learn to configure it etc. Can you share what labs can I do?

9 Comments
2025/02/03
01:52 UTC

0

Should I move Email DNS records from Bluehost to Namecheap?

I created a WP website which is being hosted on Bluehost. I now want to create a Google Workspace gmail for it. Bluehost is currently the nameserver for the entire site, so it holds all the DNS records for the website and email domains. 

My question is this: who is better at handing the email DNS records, Bluehost or Namecheap? Is it recommended to keep my email DNS records with Bluehost or move the email DNS records back to Namecheap where I originally purchased the domain (but keep the web domain with Bluehost)? What do you recommend I do?

3 Comments
2025/02/02
21:49 UTC

1

Novice IT trying to set up a content filter

2 Comments
2025/02/02
19:26 UTC

0

[ Australian ] - [ Ad-Block ] DNS - 163.47.117.122

Gday guys it's dan here. I've through up a ad blocking dns server in Adelaide feels free to jump on the server and enjoy fast ad free browsing experience 😀 dns ip 163.47.117.122

9 Comments
2025/02/02
12:13 UTC

0

When you switch DNS and suddenly your internet feels like its 2008 again

You know the moment you switch your DNS to "improve speed" and suddenly the internet goes from lightning-fast to a dial-up sound effect? It's like DNS said, "You want fast? Here's the nostalgia of waiting for a page to load!" We, the chosen ones, deserve faster speeds, not internet time travel. Anyone else feel personally attacked by their own DNS?

7 Comments
2025/02/02
03:13 UTC

3

What do you call it when you control subdomains but not the corporate domain?

I’m at workdomain.com. I have no idea who controls workdomain.com nor do I think they’ll work with me if I asked. I want to have internal only dns for site{1,2,3}.workdomain.com. I don’t care about mail or any machine.workdomain.com hosts at this point, just get machine.site1.workdomain.com = 10.x.x.x

  • what’s this called?
  • I assume I’m not alone anyone know of a tutorial for bind9?

Thanks!

11 Comments
2025/02/01
02:32 UTC

2

What does it do to activate DNSSEC on my personal server ?

It is used to rebound to NextDNS, I use it in a VPN to deliver it to my phone.

3 Comments
2025/01/31
16:46 UTC

1

Email not working with SmarterAsp.net

The support team basically said to do this

MX Record Address: igw19.site4now.net

CNAME :: mail :: mail5019.site4now.net

https://preview.redd.it/vpgbl2ybu5ge1.png?width=807&format=png&auto=webp&s=f2cb4b6794225425de1ef302b2e52a2ee935b6cb

Is this what they want me to do?

2 Comments
2025/01/30
16:46 UTC

5

best dns service

HI,

what is your dns adblocker system on your network, I tried many things on my router, and android phone, but it is hard to obtain 100% on adblocker test.

thanks

9 Comments
2025/01/29
18:06 UTC

2

Windows program that can block using local lists

I need a Windows program that can block DNS requests using blocklists stored locally on my machine. I'm NOT looking for DNS servers / DoT / DoH etc. Something like YogaDNS is not what I'm looking for.

Ones I've tried so far:

  • Hosts file (C:\Windows\System32\drivers\etc)

Your internet will slow to a crawl if you have many entries – so it isn't an option.

  • Portmaster

Works (can block based on local lists); but requires you to input a custom DNS (and not use your default VPN / ISP DNS) in order to function (poor coding from what I hear.)

  • (Simple)DNSCrypt

As far as I can tell; this isn't gonna work solely for just local DNS blocking so I gave up on it pretty quickly.


I've heard about Pi-hole and all kinds of NETWORK level solutions, but I need something that I can simply run as a program on my PC and achieve a similar result. Why is this not a thing??

10 Comments
2025/01/29
07:59 UTC

3

DNS, VLANs and Reverse Lookup Zones? One per? A single RLZ for all VLANs?

I'm dumb when it comes to DNS and even dumber when it comes to concepts such as Reverse Lookup Zones. I've got a bunch of VLANs in a DMZ network with each VLAN having a different type of web service on it (e.g. web services; app services; report services; ftp; active directory/dns; file; etc). A Firewall manages what services can talk to what services across those VLANs (that's a topic for another day). Somebody has added a Reverse Lookup Zone in DNS for each individual VLAN. Is there any benefit to doing it this way? Or should I just add one reverse lookup zone for the entire network.

For example, we have a 192.168.0.0/16 subnet in our DMZ, with multiple VLANs including 192,168.10.0/24, 192.168.11.0.24, 192.168.14.0/24, 192.168.40.0/24, and 192.168.254.0/24. Someone has created one reverse lookup zone (RLZ) per VLAN, so we've got dozens of them to keep up with (and to modify anytime our DNS servers change). For example, 10.168.192.in-addr.arpa, 11.168.192.in-addr.arpa, etc.

Would it be better if I replaced all those individual VLAN RLZs with one big RLZ named 168.192.in-addr.arpa? What is the upside of the individual RLZs, if any? Any downside to the one big RLZ? the upside is obviously maintenance and simplicity. Maybe performance takes a small hit?

4 Comments
2025/01/29
00:15 UTC

3

DNS Nameserver Migration

https://preview.redd.it/d5o3v41ulsfe1.png?width=871&format=png&auto=webp&s=056d9e0dad9470fee7ebf1474fd0b18fbcb7143d

DNS nameserver migration is the most intimidating to me.

How easy is a DNS nameserver migration from a WHM/cPanel Managed VPS to an unmanaged VPS? Are there any caveats or tips you can share with a person doing it for the first time?

The goal is to migrate a LAMP server to an unmanaged VPS.

For example:

  • Linux-Apache-MySQL-PHP (LAMP) stack
  • Control Panel but want to try a free control panel.
  • Git
  • DNS Bind Nameserver
  • Exim Email server
  • PhpMyAdmin
  • FTP
  • WordPress
  • SSH

This year, my goal is to try to setup unmanaged VPS as a LAMP stack except not use WHM/cPanel control panel. Still trying to figure out which control panel to use. The VPS is a low end one with 1 core and 1 GB RAM.

This unmanaged VPS will be just like WHM/cPanel one except it will use a free and open-source control panel instead of WHM/cPanel.

Any clues appreciated. Thank you.

2 Comments
2025/01/28
20:14 UTC

3

is this a good idea for mini-project ?

hi there

My teemmate and I are working on a mini-project for our networking course , and we have about 3 months to complete it. We're thinking of building a DNS server that filters pornographic and unwanted websites. The idea is to use AI-based filtering to decide whether to block or allow a domain based on its content or metadata.
Is this realistic for a small team and timeframe? Any advice or suggestions for tools/approaches?

Thanks!

3 Comments
2025/01/27
15:39 UTC

0

I subscribed to Control D and encountered issues after three days. They kept requesting logs from me and constantly delayed the process. After the refund guarantee period had passed, they finally told me they wouldn't make any changes and wouldn't refund me any money.

4 Comments
2025/01/27
05:56 UTC

0

Problema DNS Client Event 1014 - Timeout risoluzione nomi per "wpad"

Ciao a tutti,

sto riscontrando un problema con il mio sistema Windows 10 che mi fa cadere la connessione in modo casuale, e mi servirebbe aiuto per risolverlo. Ogni tanto appare l'errore DNS Client Event 1014 con il seguente messaggio:

"Timeout della risoluzione dei nomi per il nome wpad. Nessun server DNS configurato ha risposto."

Ho già provato a fare alcune verifiche, ma il problema persiste:

  1. Ho controllato le impostazioni del DNS, settando quelli manualmente.
  2. Ho provato a disabilitare ipv6.
  3. Ho provato ad aggiornare la scheda di rete.
  4. Ho provato anche ad aggiornare il BIOS (pensavo potesse risolvere qualcosa)

Qualcuno ha già affrontato questo tipo di problema? Avete suggerimenti su come risolverlo o ulteriori verifiche da fare?

3 Comments
2025/01/26
17:27 UTC

4

Can a DNS server that received an iterative request cache the response it gives the client?

8 Comments
2025/01/26
00:39 UTC

2

Best practices for DNS migration

Hello everyone,

I’m currently using Expiry.com as my domain registrar and managing my DNS records through their default nameservers. I’m planning to migrate my website to Hostinger and intend to change the nameservers to those provided by Hostinger. My current DNS setup includes various records (A, MX, CNAME, TXT, etc.) configured for different services (Outlook, etc)

My main concerns are:

  1. Preserving Existing DNS Records: When I switch to Hostinger’s nameservers, will I need to manually recreate all my existing DNS records in Hostinger’s DNS management panel to ensure uninterrupted service?
  2. Best Practices for Migration: What are the recommended steps to safely transition my DNS management to Hostinger without causing downtime or service disruptions?
  3. Potential Pitfalls: Are there common issues or challenges I should be aware of during this migration process?

I would greatly appreciate any advice or experiences you can share regarding this type of DNS migration. Thank you in advance for your assistance!

11 Comments
2025/01/25
19:01 UTC

4

DNS for Japanese content

I am Japanese and living in Europe. I would like to improve my connection to Japansese websites by setting up a DNS. Is there a recommendation which DNS to connect ?

9 Comments
2025/01/25
09:01 UTC

1

Private DNS services PING? NextDNS, AdGuardDNS, ControlD, Mullvad, RethinkDNS - connection slow?

2 Comments
2025/01/25
07:16 UTC

2

DNS, Route53(aws) experts freelancer

experts, i am looking for someone who is experienced in DNS in general and well aware of route53 different features, worked on aws and hybrid dns setups , for some consulting work/freelancer gigs

0 Comments
2025/01/24
18:24 UTC

1

ELI5 the difference between using an app (like Adguard/Blockada/etc) versus a specified DNS entry for my use case

Hi, I am here to try and understand these things. (e.g. systemwide blockers versus web blockers like Adguard). Currently I only use browser blockers.

Since I want no interference or speed drops with my phone OS or installed apps (especially finance ones) so this private DNS option makes me want to understand more. I certainly do not want to sit and have to constantly white list stuff to avoid errors. ANd I would love to put these on my wifes phone and child's iPad.

I have seen a few people just use this DNS entry in settings, but then how do these companies make money and why doesn't everyone just do it this way? If it works so well what is the point of the apps?

2 Comments
2025/01/24
18:05 UTC

2

nslookup question?

3 Comments
2025/01/24
16:56 UTC

3

Emails that I sent is landing on recipient's Junk folder (Only Happens On Outlook)

I have a Host on (Hostinger).

Business Emails that I sent is landing on recipient's Junk folder and this is only happening if the recipient has an (Outlook/Hotmail) account, if I send an email to Gmail this won't happen.

Some people gave me an advice that I use Google Workspace or Microsoft 365 and connect their DNS to my domain. I thought that will definitely solve this issue. I tried Google Workspace and it failed successfully, then I tried Microsoft and added my domain as u can see:

https://preview.redd.it/got4wr7yhxee1.png?width=1099&format=png&auto=webp&s=5f904547c47660f105031e2c616bcdc99a095b28

I setup all the DNS and everything looks good, and I created an business email via Microsoft:

https://preview.redd.it/w6xttzshixee1.png?width=1485&format=png&auto=webp&s=aa59e2ac2f01e4967eec623513e44ef09d725c6a

But all of this didn't help, It is still going to the Junk when sending an email to an (Outlook/Hotmail) accounts.

I also have a Host on (Blue Host) and a domain with (.org) extension, and emails from this domain always lands on the inbox, I really don't understand what is the issue on my previous domain, is the issue is the Host that it is registered on, or it is because of the domain extension (should I have .org to solve this issue)?

Thank u so much for reading my problem, I really appreciate it if u reached here,

if u can help me, or have any suggestions, please tell me what to do?

8 Comments
2025/01/24
11:50 UTC

2

How do I find the best dns for my area

I’m mainly gaming on 50-70+ ping and I want to squeeze what I can lol if possible

4 Comments
2025/01/24
11:17 UTC

3

Have AWS Route 53 pull additional DNS from internal Server?

I used to know DNS stone cold. But it's been a few decades, and my knowledge has withered ... :-(

We currently are using AWS Route 53 (this is negotiable) as the primary NS source for our top level zone.

In addition, we have internal DNS servers that generate Dynamic DNS records and results based on our internal automation and orchestration provisioning platform.

I would like all of our Internal DNS records to be made publicly available via the Route 53 resolvers so any outside queries do the traditional NS lookup, then obtain results from either the records configured in Route53, or our internal dynamic records.

I can separate out our internal dynamic records as Tertiary zones, so those can be completely owned zones from internal DNS service - but I don't want to directly serve them publicly.

Is this possible? It seems AWS Route 53 (like mose AWS features) are dramatically lacking in actual real world capabilities with integrating other non-AWS services. By design. Of course.

Thank you for pointers or input!

Here is a a basic overview of the environment that might help highlight what I'm driving at.

https://preview.redd.it/4sixug6khnee1.png?width=471&format=png&auto=webp&s=8334b851917b02cf31fa6f0e35310766da515dfa

15 Comments
2025/01/22
22:27 UTC

Back To Top