DNS, SSL Certificate

SYSTEM INFORMATION
OS type and version Ubuntu Linux 20.04.6
Virtualmin version 2.501

Please I have been trying to set up custom nameservers for my domain loriacuesta.store, but I have been experiencing issues since the day before yesterday.

Setup details:

  • Registrar: Namecheap (domain management)
  • VPS Provider: Hostwinds (IP: 104.168.156.146)
  • Control Panel: Virtualmin (latest version)

Custom nameservers configured:

  • ns1.loriacuesta.store → 104.168.156.146
  • ns2.loriacuesta.store → 104.168.156.146 (currently same IP, will add secondary later)

Problem:
When I check with IntoDNS (see report: Capture3 hosted at ImgBB — ImgBB), I get the following errors:

  • Mismatched NS records – One or more nameservers did not return any NS records.
  • DNS servers responded – ERROR: One or more nameservers did not respond (104.168.156.146).
  • Multiple Nameservers – ERROR: Only one nameserver is active. RFC2182 requires at least 2–3.
  • Missing nameservers reported by your nameservers – My own nameservers report as missing:
    • ns1.loriacuesta.store
    • ns2.loriacuesta.store
  • SOA record not found.
  • No A record for www.loriacuesta.store.

It seems that my registrar (Namecheap) and VPS DNS configuration in Virtualmin are not properly aligned.

My questions:

  1. Could this issue be caused by Virtualmin’s DNS configuration after the latest update?
  2. Is there something I need to adjust in Virtualmin so that my zone files respond properly?
  3. Do I need to configure anything differently in order for glue records and NS records to resolve correctly?
  4. Most importantly – how do I fix this problem step by step so that my nameservers work correctly?

Thank you for your assistance.

Yes, it is possible, anything is possible.

Yes, there is something you need to adjust in Virtualmin so that your zone files respond properly

Yes, you do need to configure something differently in order for glue records and NS records to resolve correctly.

See

and

Category Status Test name Informationsend feedback
Parent Info Domain NS records Nameserver records returned by the parent servers are:

ns1.riacuesta.store. [‘104.168.156.146’] [TTL=3600]
ns2.riacuesta.store. [‘104.168.156.146’] [TTL=3600]

a.nic.store was kind enough to give us that information.|
|Pass|TLD Parent Check|Good. a.nic.store, the parent server I interrogated, has information for your TLD. This is a good thing as there are some other domain extensions like “co.us” for example that are missing a direct check.|
|Pass|Your nameservers are listed|Good. The parent server a.nic.store has your nameservers listed. This is a must if you want to be found as anyone that does not know your DNS servers will first ask the parent nameservers.|
|Pass|DNS Parent sent Glue|Good. The parent nameserver sent GLUE, meaning he sent your nameservers as well as the IPs of your nameservers. Glue records are A records that are associated with NS records to provide “bootstrapping” information to the nameserver.(see RFC 1912 section 2.3)|
|Pass|Nameservers A records|Good. Every nameserver listed has A records. This is a must if you want to be found.|
|NS|Info|NS records from your nameservers|NS records got from your nameservers listed at the parent NS are:
Oups! I could not get any nameservers from your nameservers (the ones listed at the parent server). Please verify that they are not lame nameservers and are configured properly.|
|Pass|Recursive Queries|Good. Your nameservers (the ones reported by the parent server) do not report that they allow recursive queries for anyone.|
|Pass|Same Glue|Hmm,I do not consider this to be an error yet, since I did not detect any nameservers at your nameservers.|
|Pass|Glue for NS records|OK. Your nameservers (the ones reported by the parent server) have no ideea who your nameservers are so this will be a pass since you already have a lot of errors!|
|Error|Mismatched NS records|WARNING: One or more of your nameservers did not return any of your NS records.|
|Error|DNS servers responded|ERROR: One or more of your nameservers did not respond:
The ones that did not respond are:
104.168.156.146|
|Pass|Name of nameservers are valid|OK. The nameservers reported by the parent send out nothing as shown above. I can’t check nothing so it’s a green!|
|Error|Multiple Nameservers|ERROR: Looks like you have less than 2 nameservers. According to RFC2182 section 5 you must have at least 3 nameservers, and no more than 7. Having 2 nameservers is also ok by me.|
|Pass|Nameservers are lame|OK. All the nameservers listed at the parent servers answer authoritatively for your domain.|
|Pass|Missing nameservers reported by parent|OK. All NS records are the same at the parent and at your nameservers.|
|Error|Missing nameservers reported by your nameservers|You should already know that your NS records at your nameservers are missing, so here it is again:

ns1.riacuesta.store.
ns2.riacuesta.store.|
|Pass|Domain CNAMEs|OK. RFC1912 2.4 and RFC2181 10.3 state that there should be no CNAMEs if an NS (or any other) record is present.|
|Pass|NSs CNAME check|OK. RFC1912 2.4 and RFC2181 10.3 state that there should be no CNAMEs if an NS (or any other) record is present.|
|Pass|Different subnets|OK. Looks like you have nameservers on different subnets!|
|Pass|IPs of nameservers are public|Ok. Looks like the IP addresses of your nameservers are public. This is a good thing because it will prevent DNS delays and other problems like|
|Pass|DNS servers allow TCP connection|OK. Seems all your DNS servers allow TCP connections. This is a good thing and useful even if UDP connections are used by default.|
|Pass|Different autonomous systems|OK. It seems you are safe from a single point of failure. You must be careful about this and try to have nameservers on different locations as it can prevent a lot of problems if one nameserver goes down.|
|Pass|Stealth NS records sent|Ok. No stealth ns records are sent|
|SOA|Error|SOA record|No valid SOA record came back!|
|MX|Error|MX Records|Oh well, I did not detect any MX records so you probably don’t have any and if you know you should have then they may be missing at your nameservers!|
|WWW|Error|WWW A Record|ERROR: I could not get any A records for www.riacuesta.store!

(I only do a cache request, if you recently added a WWW A record, it might not show up here.)|

MXtools can’t reach your nameserver, maybe it s firewall issue, you have enabled DNS on the Virtualmin?

Using dig I got this info

Can you screenshot the setting for ns1.loriacuesta.store ns2.loriacuesta.store
at Namecheap, dig shows different IP’s for the nameservers.

I’m not seeing anything that matches what you’re showing.

joe@kate:~$ host loriacuesta.store
loriacuesta.store has address 5.230.38.29
loriacuesta.store mail is handled by 5 mail.loriacuesta.store.
joe@kate:~$ host -t NS loriacuesta.store
loriacuesta.store name server ns2.loriacuesta.store.
loriacuesta.store name server ns1.loriacuesta.store.
joe@kate:~$ host ns2.loriacuesta.store.
ns2.loriacuesta.store has address 5.230.38.29
joe@kate:~$ host ns1.loriacuesta.store.
ns1.loriacuesta.store has address 5.230.38.29
joe@kate:~$ host www.loriacuesta.store.
www.loriacuesta.store has address 5.230.38.29
joe@kate:~$ host -t soa loriacuesta.store
loriacuesta.store has SOA record ns1.loriacuesta.store. root.ns1.loriacuesta.store. 2025091009 3600 600 1209600 3600

I don’t know what to make of the results you’re seeing, they seem completely made up by whatever service you’re using to get that report.

I seem to recall NameCheap does not make it easy to create new name servers. You need to start with their DNS servers, create your A records for your name servers pointing to your server, and then once you have those, you can change the glue records to point to them by name. (But if they let you assign both name and IP, you can pretend like that’s not what’s happening…they do it for you behind the scenes.)

some help me to fix it. i am waiting for him to come online and show me how he did it

Did you follow the documenttion at namecheap?

The vidio at the 2 minute mark shows the custom name server settings, you need to enter the IP for your server. If you have record already you may need to delete or edit and put in the correct IP.

1 Like

A post was merged into an existing topic: Syntax error in Apache ports.conf