Primary name server not listed at parent

Managed DNS Hosting
1

Hi there,
I’m new to desec, and I finally succeeded in setting up everything and got it running. Everything seems to work. But if I check the dns with mxtoolbox, some issues appear, which i do not know whether I can do something to solve it or if it’s to ignore or if it is on desec’s side. Please take a look at the attached screenshot. I would appreciate some advice or explanation about these issues.

mxtoolbox
mxtoolbox971×335 11.6 KB

Greetings
Armin

2

Hello @armin_bl,

Well the https://en.wikipedia.org/wiki/SOA_record defines the MNAME “Primary master name server for this zone”.
Technically that does not have to be one of the Authoritative Nameservers, as is true for deSEC.

Using one of my test domain names shows the SOA

$ nslookup -q=soa petrifiedhaggis.us.kg ns1.desec.io.
Server:         ns1.desec.io.
Address:        45.54.76.1#53

petrifiedhaggis.us.kg
        origin = get.desec.io
        mail addr = get.desec.io
        serial = 2024094257
        refresh = 86400
        retry = 3600
        expire = 2419200
        minimum = 3600

And its Authoritative Nameservers

$ nslookup -q=ns petrifiedhaggis.us.kg ns1.desec.io.
Server:         ns1.desec.io.
Address:        45.54.76.1#53

petrifiedhaggis.us.kg   nameserver = ns2.desec.org.
petrifiedhaggis.us.kg   nameserver = ns1.desec.io.

And you can see it with DNS Spy report for petrifiedhaggis.us.kg

image
image1140×608 10.8 KB

And this is what my deSEC looks like

image
image1897×1017 36.9 KB

And I too get this

image
image1124×610 19.2 KB

And this is their statement on that “ERROR”

Edit

And the Whois https://register.us.kg/whois?name=petrifiedhaggis


This is US.KG's WHOIS service. (http://register.us.kg/)

Domain Name: petrifiedhaggis.us.kg
Registrar URL: http://nic.us.kg
Creation Date: 2024-08-24
Registry Expiry Date: 2025-08-24
Registrar: US.KG NIC (DigitalPlat.org)
Registrar Abuse Contact Email: abuse@nic.us.kg
Registrar Abuse Contact Phone: +1.8559805959
Registrant Name: REDACTED FOR PRIVACY
Registrant Email: REDACTED FOR PRIVACY
Registrant Address: REDACTED FOR PRIVACY
Registrant Phone: REDACTED FOR PRIVACY
Name Server: ns1.desec.io.
Name Server: ns2.desec.org.

You only see the Name Servers, not the SOA

3

Hello @Bruce5051 ,

thank you for your detailed answer.

I followed your steps and got similar results for my domain. I was a little worried, because they say “If your name server is not listed at the root this could cause impaired/incorrect lookups for your domain.” and I had no idea, how severe this issue is.

So if I understand this now correctly, there is nothing we can do from our side other than ignore the “error” at mxtoolbox.

Regards
Armin

1 Like
4

Hi @armin_bl,

Yes, just ignore the so called “error”.
I have not found any issues with that.

1 Like