Category: DNS

How to install dig on debian

By , June 22, 2018

If I’m working on a box that doesn’t have a nameserver installed and I want to do some diagnostics I can never remember the name of the debian package that contains the utilities such as host and dig.

The magic answer is dnsutils

$ sudo apt-get install -y dnsutils

How to disable DNSSEC on a domain

By , April 3, 2018

There are plenty of tutorials around on how to enable DNSSEC on a domain name, every once in awhile you may find yourself in a situation where you want to turn it off.

When that happens it is often misunderstood, and people think that by simply removing the keys from their zone and reloading it as a clear, unsigned zone, they’ve disabled DNSSEC. Read more »

What to do if dnssec-keygen hangs forever

By , May 2, 2017


On some systems when you are trying to generate dnssec keys using dnssec-keygen, it just hangs (seemingly) forever.

As per Alexander Gurvitz’s post in the Ubuntu forums:

It is NOT a bug.
In order to generate SECURE keys, dnssec-keygen reads /dev/random, which will block until there’s enough entropy available on your system. Some systems have very little entropy and thus dnssec-keygen may take forever.
Possible solutions:
1. apt-get install haveged
haveged daemon supplies lots of entropy to /dev/random.

2. dnssec-keygen -r /dev/urandom
Will use “non-blocking” pseudo-random device (lower security).

3. Move mouse and tap on keyboard – kernel uses this as entropy source.

4. Buy a hardware entropy device.

Easiest/best solution is #1, most expedient if you can’t even do that is #2.

How to link multiple domains to a website

By , April 24, 2010

Nick from the U.K asks:

My company recently purchased a couple domains and we want those to link to our current website. Eg. will transfer to instantly. How can I do this?

Many Thanks,

This is similar to an earlier post How do I point “” at “” or vice-versa?, but since we’re going across multiple domains, we should also think about a couple additional issues.

Read more »

When the internet doesn't see an update to your zonefile

By , April 22, 2010

Every once in awhile we see a situation where somebody changes the IP address one of their hostname (A records) points at and the rest of the world still sees the old address.

Common causes of this include:

Read more »

How do I point "" at "" or vice-versa?

comments Comments Off on How do I point "" at "" or vice-versa?
By , April 22, 2010

You may have your webserver setup for either or just and you want it to work either way, whether people type in the “www” part of your domain or not.

(By way of info, “www” is purely a convention, it isn’t in itself necessary to “make your domain work” over the web).

There are a couple ways to do this:

Read more »