/r/dns
I was surprised to find all of my AppleTV units are responding to DNS queries from my LAN on port 53.
They seem to be pulling through my pihole per DHCP settings, so I don't see this as an obvious security bypass, but it certainly seems odd. My MacOS and IOS devices on the same net do not seem to have this service open to the LAN. I don't allow uPnP devices to setup any port forwarding, so I am not worried about my units creating an open DNS on the WAN. I am not sure how safe this is in general, and would like to hear what DNS experts think.
Let's say I have a domain : example.com I also have a sub-domain : test.example.com
If I have IPv4 values in the SPF record for the parent domain but don't have any IPv4 values in the SPF record for the sub-domain, will it cause any potential issues?
I am using Domain.com and I am trying to connect my shopify to this. However when I go into my DNS I cannot seem to find it. I try to manually add it but it says it already excists. I can only see A's. Thank you in advance.
All I know at present is dns resolves name->IP address. I want to learn to configure it etc. Can you share what labs can I do?
I created a WP website which is being hosted on Bluehost. I now want to create a Google Workspace gmail for it. Bluehost is currently the nameserver for the entire site, so it holds all the DNS records for the website and email domains.
My question is this: who is better at handing the email DNS records, Bluehost or Namecheap? Is it recommended to keep my email DNS records with Bluehost or move the email DNS records back to Namecheap where I originally purchased the domain (but keep the web domain with Bluehost)? What do you recommend I do?
Gday guys it's dan here. I've through up a ad blocking dns server in Adelaide feels free to jump on the server and enjoy fast ad free browsing experience 😀 dns ip 163.47.117.122
You know the moment you switch your DNS to "improve speed" and suddenly the internet goes from lightning-fast to a dial-up sound effect? It's like DNS said, "You want fast? Here's the nostalgia of waiting for a page to load!" We, the chosen ones, deserve faster speeds, not internet time travel. Anyone else feel personally attacked by their own DNS?
I’m at workdomain.com. I have no idea who controls workdomain.com nor do I think they’ll work with me if I asked. I want to have internal only dns for site{1,2,3}.workdomain.com. I don’t care about mail or any machine.workdomain.com hosts at this point, just get machine.site1.workdomain.com = 10.x.x.x
Thanks!
It is used to rebound to NextDNS, I use it in a VPN to deliver it to my phone.
The support team basically said to do this
MX Record Address: igw19.site4now.net
CNAME :: mail :: mail5019.site4now.net
Is this what they want me to do?
HI,
what is your dns adblocker system on your network, I tried many things on my router, and android phone, but it is hard to obtain 100% on adblocker test.
thanks
I need a Windows program that can block DNS requests using blocklists stored locally on my machine. I'm NOT looking for DNS servers / DoT / DoH etc. Something like YogaDNS is not what I'm looking for.
Ones I've tried so far:
Your internet will slow to a crawl if you have many entries – so it isn't an option.
Works (can block based on local lists); but requires you to input a custom DNS (and not use your default VPN / ISP DNS) in order to function (poor coding from what I hear.)
As far as I can tell; this isn't gonna work solely for just local DNS blocking so I gave up on it pretty quickly.
I've heard about Pi-hole and all kinds of NETWORK level solutions, but I need something that I can simply run as a program on my PC and achieve a similar result. Why is this not a thing??
I'm dumb when it comes to DNS and even dumber when it comes to concepts such as Reverse Lookup Zones. I've got a bunch of VLANs in a DMZ network with each VLAN having a different type of web service on it (e.g. web services; app services; report services; ftp; active directory/dns; file; etc). A Firewall manages what services can talk to what services across those VLANs (that's a topic for another day). Somebody has added a Reverse Lookup Zone in DNS for each individual VLAN. Is there any benefit to doing it this way? Or should I just add one reverse lookup zone for the entire network.
For example, we have a 192.168.0.0/16 subnet in our DMZ, with multiple VLANs including 192,168.10.0/24, 192.168.11.0.24, 192.168.14.0/24, 192.168.40.0/24, and 192.168.254.0/24. Someone has created one reverse lookup zone (RLZ) per VLAN, so we've got dozens of them to keep up with (and to modify anytime our DNS servers change). For example, 10.168.192.in-addr.arpa, 11.168.192.in-addr.arpa, etc.
Would it be better if I replaced all those individual VLAN RLZs with one big RLZ named 168.192.in-addr.arpa? What is the upside of the individual RLZs, if any? Any downside to the one big RLZ? the upside is obviously maintenance and simplicity. Maybe performance takes a small hit?
DNS nameserver migration is the most intimidating to me.
How easy is a DNS nameserver migration from a WHM/cPanel Managed VPS to an unmanaged VPS? Are there any caveats or tips you can share with a person doing it for the first time?
The goal is to migrate a LAMP server to an unmanaged VPS.
For example:
This year, my goal is to try to setup unmanaged VPS as a LAMP stack except not use WHM/cPanel control panel. Still trying to figure out which control panel to use. The VPS is a low end one with 1 core and 1 GB RAM.
This unmanaged VPS will be just like WHM/cPanel one except it will use a free and open-source control panel instead of WHM/cPanel.
Any clues appreciated. Thank you.
hi there
My teemmate and I are working on a mini-project for our networking course , and we have about 3 months to complete it. We're thinking of building a DNS server that filters pornographic and unwanted websites. The idea is to use AI-based filtering to decide whether to block or allow a domain based on its content or metadata.
Is this realistic for a small team and timeframe? Any advice or suggestions for tools/approaches?
Thanks!
Ciao a tutti,
sto riscontrando un problema con il mio sistema Windows 10 che mi fa cadere la connessione in modo casuale, e mi servirebbe aiuto per risolverlo. Ogni tanto appare l'errore DNS Client Event 1014 con il seguente messaggio:
"Timeout della risoluzione dei nomi per il nome wpad. Nessun server DNS configurato ha risposto."
Ho già provato a fare alcune verifiche, ma il problema persiste:
Qualcuno ha già affrontato questo tipo di problema? Avete suggerimenti su come risolverlo o ulteriori verifiche da fare?
Hello everyone,
I’m currently using Expiry.com as my domain registrar and managing my DNS records through their default nameservers. I’m planning to migrate my website to Hostinger and intend to change the nameservers to those provided by Hostinger. My current DNS setup includes various records (A, MX, CNAME, TXT, etc.) configured for different services (Outlook, etc)
My main concerns are:
I would greatly appreciate any advice or experiences you can share regarding this type of DNS migration. Thank you in advance for your assistance!
I am Japanese and living in Europe. I would like to improve my connection to Japansese websites by setting up a DNS. Is there a recommendation which DNS to connect ?
experts, i am looking for someone who is experienced in DNS in general and well aware of route53 different features, worked on aws and hybrid dns setups , for some consulting work/freelancer gigs
Hi, I am here to try and understand these things. (e.g. systemwide blockers versus web blockers like Adguard). Currently I only use browser blockers.
Since I want no interference or speed drops with my phone OS or installed apps (especially finance ones) so this private DNS option makes me want to understand more. I certainly do not want to sit and have to constantly white list stuff to avoid errors. ANd I would love to put these on my wifes phone and child's iPad.
I have seen a few people just use this DNS entry in settings, but then how do these companies make money and why doesn't everyone just do it this way? If it works so well what is the point of the apps?
is my output supposed to look like this or is this an error?
I have a Host on (Hostinger).
Business Emails that I sent is landing on recipient's Junk folder and this is only happening if the recipient has an (Outlook/Hotmail) account, if I send an email to Gmail this won't happen.
Some people gave me an advice that I use Google Workspace or Microsoft 365 and connect their DNS to my domain. I thought that will definitely solve this issue. I tried Google Workspace and it failed successfully, then I tried Microsoft and added my domain as u can see:
I setup all the DNS and everything looks good, and I created an business email via Microsoft:
But all of this didn't help, It is still going to the Junk when sending an email to an (Outlook/Hotmail) accounts.
I also have a Host on (Blue Host) and a domain with (.org) extension, and emails from this domain always lands on the inbox, I really don't understand what is the issue on my previous domain, is the issue is the Host that it is registered on, or it is because of the domain extension (should I have .org to solve this issue)?
Thank u so much for reading my problem, I really appreciate it if u reached here,
if u can help me, or have any suggestions, please tell me what to do?
I’m mainly gaming on 50-70+ ping and I want to squeeze what I can lol if possible
I used to know DNS stone cold. But it's been a few decades, and my knowledge has withered ... :-(
We currently are using AWS Route 53 (this is negotiable) as the primary NS source for our top level zone.
In addition, we have internal DNS servers that generate Dynamic DNS records and results based on our internal automation and orchestration provisioning platform.
I would like all of our Internal DNS records to be made publicly available via the Route 53 resolvers so any outside queries do the traditional NS lookup, then obtain results from either the records configured in Route53, or our internal dynamic records.
I can separate out our internal dynamic records as Tertiary zones, so those can be completely owned zones from internal DNS service - but I don't want to directly serve them publicly.
Is this possible? It seems AWS Route 53 (like mose AWS features) are dramatically lacking in actual real world capabilities with integrating other non-AWS services. By design. Of course.
Thank you for pointers or input!
Here is a a basic overview of the environment that might help highlight what I'm driving at.