Hi all, I’m currently trying to setup our domain at deSEC as netcup has massive issues with their DNSSEC implementation. However, I somehow got stuck. I already have the account at deSEC and entered all DNS records. However, when I try to change the nameservers at netcup to ns1.desec.io and ns2.de…

As is evident from the screenshot of the SOA query, you created the domain with the name www.readybill.de. So the deSEC nameservers feel responsible for that name everything below, but not for anything above. But your registered domain name is readybill.de, without www. In other words, the fix is …

It’s not clear to me from the error message what exactly Netcup is checking to trigger this message. I would ask the Netcup support. Before, to be on the safe side, you can check that the DNS zone is working correctly without changing the name servers as follows (with dig as example): # for a recor…

The netcup webpage asks to fill out 3 fields, when changing to another NS: Hostname IPv4-Adresse IPv6-Adresse What did you set ? Fell free to partly anonymize your data.

Hi markus, hi Lipahtla, thank you for your input! I’ll reach out to the netcup support. These are my inputs: [image]

yours look like https://www.netcup-wiki.de/wiki/Domaininhaber#eigene_Nameserver_eintragen except, they use IPv4, you use only IPv6. Try to set an IPv4 as well.

You may also want to check the NS glue records in the parent domain. For example if your domain is example.com. then figure out the name servers for the com. domain (dig +short com. ns) then ask one of them for e.g. dig @a.gtld-servers.net. example.com. ns. Does the result point to deSEC or to netc…

I checked the DNS Zone as @markus suggested and the records look good to me: [image] I also checked the NS glue records as @fiwswe advised and all nameserves currently direct to netcup: see next post The netcup support returned with this message: Your own name servers report back that they do …

Thank you Peter! That was indeed the problem!

deSEC Community

Netcup: The domain is not is not managed by nameserver ns1.desec.io

Managed DNS Hosting