Question A domain's DNS can't find it's own hosts / A record ?

lantis3

Distinguished
Nov 5, 2015
856
149
19,070
Isn't a domain name's registered DNS supposed to have records of its own hosts like "A" record?

Why nslookup command always tell me it can't find the record or there is no response from the dns server?

And these dns servers are supposed to be autoreactive dns servers, right?

Code:
C:\Windows\System32>nslookup -type=ns tomshardware.com
Server:  dns.google
Address:  8.8.8.8


Non-authoritative answer:
tomshardware.com        nameserver = ns-1533.awsdns-63.org
tomshardware.com        nameserver = ns-1591.awsdns-06.co.uk
tomshardware.com        nameserver = ns-185.awsdns-23.com
tomshardware.com        nameserver = ns-840.awsdns-41.net

C:\Windows\System32>nslookup
Default Server:  dns.google
Address:  8.8.8.8


> server ns-1533.awsdns-63.org
Default Server:  ns-1533.awsdns-63.org
Addresses:  2600:9000:5305:fd00::1
          205.251.197.253


> tomshardware.com
Server:  ns-1533.awsdns-63.org
Addresses:  2600:9000:5305:fd00::1
          205.251.197.253


*** ns-1533.awsdns-63.org can't find tomshardware.com: No response from server
> www.tomshardware.com
Server:  ns-1533.awsdns-63.org
Addresses:  2600:9000:5305:fd00::1
          205.251.197.253


*** ns-1533.awsdns-63.org can't find www.tomshardware.com: No response from server
> forums.tomshardware.com
Server:  ns-1533.awsdns-63.org
Addresses:  2600:9000:5305:fd00::1
          205.251.197.253


*** ns-1533.awsdns-63.org can't find forums.tomshardware.com: No response from server

================
Can't even switch dns servers

> server ns-1591.awsdns-06.co.uk
*** Can't find address for server ns-1591.awsdns-06.co.uk: No response from server
> server ns-840.awsdns-41.net
*** Can't find address for server ns-840.awsdns-41.net: No response from server
> server ns-1591.awsdns-06.co.uk
*** Can't find address for server ns-1591.awsdns-06.co.uk: No response from server
 
Hard to say what limitation there are on accessing DNS servers.

What you have shown just means the DNS server refuses to respond to you. That is very different than the server responding but telling you the domain does not exist or some other error.

Many dns servers are configured to only talk to a group of other DNS servers. Way to many people that would do denial of service attacks against a server...even accidentally. Public DNS servers are much more powerful, things like 8.8.8.8 or 1.1.1.1 are not just a single machie they are clusters of machines duplicted in many cities around the world.

Even something like your ISP dns is likely restricted. You can use the DNS your ISP provides as long as you are on the ISP network if you are coming in from a IP owned by another ISP the dns server will many times just ignore you.
 
  • Like
Reactions: lantis3