Primary name server not listed at parent

Hi there,
I’m new to desec, and I finally succeeded in setting up everything and got it running. Everything seems to work. But if I check the dns with mxtoolbox, some issues appear, which i do not know whether I can do something to solve it or if it’s to ignore or if it is on desec’s side. Please take a look at the attached screenshot. I would appreciate some advice or explanation about these issues.

Greetings
Armin

Hello @armin_bl,

Well the https://en.wikipedia.org/wiki/SOA_record defines the MNAME “Primary master name server for this zone”.
Technically that does not have to be one of the Authoritative Nameservers, as is true for deSEC.

Using one of my test domain names shows the SOA

$ nslookup -q=soa petrifiedhaggis.us.kg ns1.desec.io.
Server:         ns1.desec.io.
Address:        45.54.76.1#53

petrifiedhaggis.us.kg
        origin = get.desec.io
        mail addr = get.desec.io
        serial = 2024094257
        refresh = 86400
        retry = 3600
        expire = 2419200
        minimum = 3600

And its Authoritative Nameservers

$ nslookup -q=ns petrifiedhaggis.us.kg ns1.desec.io.
Server:         ns1.desec.io.
Address:        45.54.76.1#53

petrifiedhaggis.us.kg   nameserver = ns2.desec.org.
petrifiedhaggis.us.kg   nameserver = ns1.desec.io.

And you can see it with DNS Spy report for petrifiedhaggis.us.kg

And this is what my deSEC looks like

And I too get this

And this is their statement on that “ERROR”

Edit

And the Whois https://register.us.kg/whois?name=petrifiedhaggis


This is US.KG's WHOIS service. (http://register.us.kg/)

Domain Name: petrifiedhaggis.us.kg
Registrar URL: http://nic.us.kg
Creation Date: 2024-08-24
Registry Expiry Date: 2025-08-24
Registrar: US.KG NIC (DigitalPlat.org)
Registrar Abuse Contact Email: abuse@nic.us.kg
Registrar Abuse Contact Phone: +1.8559805959
Registrant Name: REDACTED FOR PRIVACY
Registrant Email: REDACTED FOR PRIVACY
Registrant Address: REDACTED FOR PRIVACY
Registrant Phone: REDACTED FOR PRIVACY
Name Server: ns1.desec.io.
Name Server: ns2.desec.org.

You only see the Name Servers, not the SOA

Hello @Bruce5051 ,

thank you for your detailed answer.

I followed your steps and got similar results for my domain. I was a little worried, because they say “If your name server is not listed at the root this could cause impaired/incorrect lookups for your domain.” and I had no idea, how severe this issue is.

So if I understand this now correctly, there is nothing we can do from our side other than ignore the “error” at mxtoolbox.

Regards
Armin

1 Like

Hi @armin_bl,

Yes, just ignore the so called “error”.
I have not found any issues with that.

1 Like