Hi,

TL;DR: I too find it a little odd that whois says this domain is reserved but
querying the DNS shows that it isn't there at all as I would
usually expect just the NS records to be present in the containing
zone. I can only assume that this registrar allows for registered
zones to not be published at all if one wishes. The whois is
authoritative for what is available to register; the DNS is
authoritative for what you can globally query.

On Mon, Aug 19, 2024 at 03:49:11PM +0800, Wesley wrote:
> This is the dns info from registry nameserver:

In future it would help if you showed what actual query you are
doing with "dig". From the output I can piece together that you did
something like:

$ dig datafarm.net

or

$ dig -t s datafarm.net

but assuming that indeed is what you did, it does not actually "ask
the registry nameserver".

We can see from your output that you got a response from:

> ;; SERVER: 10.160.0.1#53(10.160.0.1)

which is probably a resolver on your local network. So that answer
you got may have been from cache.

We can see from your output that you ended up (either implicitly or
explicitly) asking for an A query:

> ;; QUESTION SECTION:
> ;datafarm.net.                        IN      A

However the best record to use when trying to see if a domain exists
i*in DNS* is an SOA ("Start of Authority"). It should show where the
domain delegation happens. It's basically the details for the DNS
zone.

By asking for an A record you run the risk of getting an empty
answer just because that record type doesn't exist. There is after
all no particular reason for an A record to exist for the root of a
domain that is registered. There is no reason why the only record in
that zone might not be

just.to.annoy.wesley.datafarm.net.

in which case there would be no A record for datafarm.net.

But! Here a technicality of DNS that does come to our aid anyway.
NXDOMAIN is for when the name does not exist at all. If the name
xists but the record type you queried for does not exist, you would
expect to get a NOERROR response but with zero results.

So you have in fact determined that datafarm.net doesn't exist in
(your) DNS, though perhaps not in the ideal way. There is still the
issue that you queried your (?) resolver so the answer could be
coming from cache.

Your use of whois confirms that this domain is registered and like
you I would expect all registered domains to create NS records in
the parent zone. whois tells us that this domain's nameservers are:

Name Server: ns1.mclink-net.it
Name Server: ns2.mclink-net.it

so in the .net zone I would expect NS records like this to exist:

datafarm IN NS ns1.mclink-net.it.
datafarm IN NS ns2.mclink-net.it.

They don't though, which is puzzling to me. Perhaps there is a
registrar option to not publish the zone until ready or something.
Anyway, this can be verified by asking the nameservers that are
authoritative for the .net zone:

$ dig +short -t ns net.
h.gtld-servers.net.
k.gtld-servers.net.
b.gtld-servers.net.
c.gtld-servers.net.
i.gtld-servers.net.
m.gtld-servers.net.
e.gtld-servers.net.
g.gtld-servers.net.
f.gtld-servers.net.
j.gtld-servers.net.
a.gtld-servers.net.
d.gtld-servers.net.
l.gtld-servers.net.

Ask any of those by directing the query with '@':

$ dig +norecurse -t ns datafarm.net @h.gtld-servers.net.

; <<>> DiG 9.16.50-Debian <<>> -t ns datafarm.net @h.gtld-servers.net.
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 25538
;; flags: qr aa; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;datafarm.net.                  IN      NS

;; AUTHORITY SECTION:
net.                    900     IN      SOA     a.gtld-servers.net. 
nstld.verisign-grs.com. 1724083355 1800 900 604800 86400

;; Query time: 20 msec
;; SERVER: 2001:502:8cc::30#53(2001:502:8cc::30)
;; WHEN: Mon Aug 19 16:02:43 UTC 2024
;; MSG SIZE  rcvd: 114

Note NXDOMAIN - so no name at all for "datafarm" exists within "net.". "aa"
flag says that this is an authoritative answer (not froma  cache) and
"AUTHORITY SECTION" says what this server we queried is authoritative for, in
this case "net." zone. So this is an authoritative answer from
h.gtld-servers.net that no such name "datafarm" exists in "net.".

Thanks,
Andy

-- 
https://bitfolk.com/ -- No-nonsense VPS hosting

Reply via email to