DNS resolve problem

347 views

Skip to first unread message

steven....@gmail.com

unread,

Aug 19, 2014, 12:43:17 PM8/19/14

to public-dn...@googlegroups.com

I'm not sure where the problem is, but I cannot reach my domains when I have 8.8.8.8 and 8.8.4.4. If I change my dns to the default of automatic, my sites resolve fine.

I'm trying : http://stevenhong.com which is up and running and verified by switching my DNS servers, as well as tools.pingdom.com. The site and host are fine.

Here is intoDNS:

Category	Test name	Informationsend feedback
Parent	Domain NS records	Nameserver records returned by the parent servers are: ns57.domaincontrol.com. ['216.69.185.29'] [TTL=172800] ns58.domaincontrol.com. ['208.109.255.29'] [TTL=172800] l.gtld-servers.net was kind enough to give us that information.
	TLD Parent Check	Good. l.gtld-servers.net, the parent server I interrogated, has information for your TLD. This is a good thing as there are some other domain extensions like "co.us" for example that are missing a direct check.
	Your nameservers are listed	Good. The parent server l.gtld-servers.net has your nameservers listed. This is a must if you want to be found as anyone that does not know your DNS servers will first ask the parent nameservers.
	DNS Parent sent Glue	Good. The parent nameserver sent GLUE, meaning he sent your nameservers as well as the IPs of your nameservers. Glue records are A records that are associated with NS records to provide "bootstrapping" information to the nameserver.(see RFC 1912 section 2.3)
	Nameservers A records	Good. Every nameserver listed has A records. This is a must if you want to be found.
NS	NS records from your nameservers	NS records got from your nameservers listed at the parent NS are: ns58.domaincontrol.com ['208.109.255.29'] [TTL=3600] ns57.domaincontrol.com ['216.69.185.29'] [TTL=3600]
	Recursive Queries	Good. Your nameservers (the ones reported by the parent server) do not report that they allow recursive queries for anyone.
	Same Glue	The A records (the GLUE) got from the parent zone check are the same as the ones got from your nameservers. You have to make sure your parent server has the same NS records for your zone as you do according to the RFC. This tests only nameservers that are common at the parent and at your nameservers. If there are any missing or stealth nameservers you should see them below!
	Glue for NS records	INFO: GLUE was not sent when I asked your nameservers for your NS records.This is ok but you should know that in this case an extra A record lookup is required in order to get the IPs of your NS records. The nameservers without glue are: 208.109.255.29 216.69.185.29 You can fix this for example by adding A records to your nameservers for the zones listed above.
	Mismatched NS records	OK. The NS records at all your nameservers are identical.
	DNS servers responded	Good. All nameservers listed at the parent server responded.
	Name of nameservers are valid	OK. All of the NS records that your nameservers report seem valid.
	Multiple Nameservers	Good. You have multiple nameservers. According to RFC2182 section 5 you must have at least 3 nameservers, and no more than 7. Having 2 nameservers is also ok by me.
	Nameservers are lame	OK. All the nameservers listed at the parent servers answer authoritatively for your domain.
	Missing nameservers reported by parent	OK. All NS records are the same at the parent and at your nameservers.
	Missing nameservers reported by your nameservers	OK. All nameservers returned by the parent server l.gtld-servers.net are the same as the ones reported by your nameservers.
	Domain CNAMEs	OK. RFC1912 2.4 and RFC2181 10.3 state that there should be no CNAMEs if an NS (or any other) record is present.
	NSs CNAME check	OK. RFC1912 2.4 and RFC2181 10.3 state that there should be no CNAMEs if an NS (or any other) record is present.
	Different subnets	OK. Looks like you have nameservers on different subnets!
	IPs of nameservers are public	Ok. Looks like the IP addresses of your nameservers are public. This is a good thing because it will prevent DNS delays and other problems like
	DNS servers allow TCP connection	OK. Seems all your DNS servers allow TCP connections. This is a good thing and useful even if UDP connections are used by default.
	Different autonomous systems	OK. It seems you are safe from a single point of failure. You must be careful about this and try to have nameservers on different locations as it can prevent a lot of problems if one nameserver goes down.
	Stealth NS records sent	Ok. No stealth ns records are sent
SOA	SOA record	The SOA record is: Primary nameserver: ns57.domaincontrol.com Hostmaster E-mail address: dns.jomax.net Serial #: 2014030401 Refresh: 28800 Retry: 7200 Expire: 604800 1 weeks Default TTL: 3600
	NSs have same SOA serial	OK. All your nameservers agree that your SOA serial number is 2014030401.
	SOA MNAME entry	OK. ns57.domaincontrol.com That server is listed at the parent servers.
	SOA Serial	Your SOA serial number is: 2014030401. This appears to be in the recommended format of YYYYMMDDnn.
	SOA REFRESH	OK. Your SOA REFRESH interval is: 28800. That is OK
	SOA RETRY	Your SOA RETRY value is: 7200. Looks ok
	SOA EXPIRE	Your SOA EXPIRE number is: 604800.Looks ok
	SOA MINIMUM TTL	Your SOA MINIMUM TTL is: 3600. This value was used to serve as a default TTL for records without a given TTL value and now is used for negative caching (indicates how long a resolver may cache the negative answer). RFC2308 recommends a value of 1-3 hours. Your value of 3600 is OK.
MX	MX Records	Your MX records that were reported by your nameservers are: 5 alt1.aspmx.l.google.com 74.125.130.26 (no glue) 5 alt2.aspmx.l.google.com 74.125.203.26 (no glue) 10 aspmx2.googlemail.com 74.125.130.26 (no glue) 10 aspmx3.googlemail.com 74.125.203.26 (no glue) 1 aspmx.l.google.com 74.125.136.26 (no glue) [These are all the MX records that I found. If there are some non common MX records at your nameservers you should see them below. ]
	Different MX records at nameservers	Good. Looks like all your nameservers have the same set of MX records. This tests to see if there are any MX records not reported by all your nameservers and also MX records that have the same hostname but different IPs
	MX name validity	Good. I did not detect any invalid hostnames for your MX records.
	MX IPs are public	OK. All of your MX records appear to use public IPs.
	MX CNAME Check	OK. No problems here.
	MX A request returns CNAME	OK. No CNAMEs returned for A records lookups.
	MX is not IP	OK. All of your MX records are host names.
	Number of MX records	Good. Looks like you have multiple MX records at all your nameservers. This is a good thing and will help in preventing loss of mail.
	Mismatched MX A	OK. I did not detect differing IPs for your MX records.
	Duplicate MX A records	OK. You have some duplicate MX records (MX records with the same IPs). This is not that good but if you know what you are doing than it's ok.
	Reverse MX A records (PTR)	ERROR: No reverse DNS (PTR) entries. The problem MX records are: 26.130.125.74.in-addr.arpa -> no reverse (PTR) detected 26.203.125.74.in-addr.arpa -> no reverse (PTR) detected You should contact your ISP and ask him to add a PTR record for your ips
WWW	WWW A Record	ERROR: I could not get any A records for www.stevenhong.com! (I only do a cache request, if you recently added a WWW A record, it might not show up here.)