• If you are still using CentOS 7.9, it's time to convert to Alma 8 with the free centos2alma tool by Plesk or Plesk Migrator. Please let us know your experiences or concerns in this thread:
    CentOS2Alma discussion

Question Plesk Nameserver as Hidden Master / Primary for INWX Domains

speedbird

Basic Pleskian
Hi there...

I'm currently transferring all my domains to INWX. As their FAQ states, it is possible to use my nameserver as a hidden master, so only their INWX nameservers will show.

Sadly this isn't working for me at all... Domain robot always tells me, that the update has failed.

In the DNS menu in Plesk of the domain in question, I deleted all previous NS entries and added 5 new NS entries which were their nameservers :
  • ns.inwx.de, ns2.inwx.de, ns3.inwx.eu, ns4.inwx.com, ns5.inwx.net
I then applied the new configuration to the domain in question. I also allowed the AXFR zone transfer of INWX for IP 217.70.142.96.

In INWX customer menu I followed their FAQ guide, which means I created a new NS-Set with the following entries:

Type: SECONDARY DNS
Description: HIDDEN-MASTER CONFIG
Nameserver: ns.inwx.de
Nameserver: ns2.inwx.de
Nameserver: ns3.inwx.eu
Nameserver: ns4.inwx.com
Nameserver: ns5.inwx.net
Master-IP adress: (IP of my Server)

I then added the domain in question to the nameserver entries and selected the newly created "HIDDEN-MASTER CONFIG".

Shortly after, in my server logfiles, I see the successful AXFR transfer from INWX IP address mentioned above, so that works.

However, when I try to "update" the domain and select the afore created "HIDDEN-MASTER CONFIG" and enter the Master-IP of my server, the update always fails with messages like these:

Code:
RESULT: failed
STID: b1e89b31-2981-11e6-88d2-9d9f449cdb9c
ERROR: 53300102912 Nameserver error [ERROR: 116 SOA record response must be authoritative (resolver\, answer) (ns2.inwx.de./213.239.206.103:53 (UDP\, Timeout: 3s\, Retry: 1 x 0s\, NO DNSSEC\, ignore TC\, via local interface \[IPv4: nast-17-out.prod.denic.de/10.121.46.35|IPv6: /2a02:568:101:214:0:0:1:14\])\, ns2.inwx.de./213.239.206.103:53 (UDP\, Timeout: 3s\, Retry: 1 x 0s\, NO DNSSEC\, ignore TC\, via local interface \[IPv4: nast-17-out.prod.denic.de/10.121.46.35|IPv6: /2a02:568:101:214:0:0:1:14\]): <No records>)]
ERROR: 53300102912 Nameserver error [ERROR: 116 SOA record response must be authoritative (resolver\, answer) (ns3.inwx.eu./\[2a00:c98:2100:a006:3:0:0:1\]:53 (UDP\, Timeout: 3s\, Retry: 1 x 0s\, NO DNSSEC\, ignore TC\, via local interface \[IPv4: nast-17-out.prod.denic.de/10.121.46.35|IPv6: /2a02:568:101:214:0:0:1:14\])\, ns3.inwx.eu./\[2a00:c98:2100:a006:3:0:0:1\]:53 (UDP\, Timeout: 3s\, Retry: 1 x 0s\, NO DNSSEC\, ignore TC\, via local interface \[IPv4: nast-17-out.prod.denic.de/10.121.46.35|IPv6: /2a02:568:101:214:0:0:1:14\]): <No records>)]
ERROR: 53300102912 Nameserver error [ERROR: 116 SOA record response must be authoritative (resolver\, answer) (ns4.inwx.com./\[2001:1af8:4400:a048:1:0:0:1\]:53 (UDP\, Timeout: 3s\, Retry: 1 x 0s\, NO DNSSEC\, ignore TC\, via local interface \[IPv4: nast-17-out.prod.denic.de/10.121.46.35|IPv6: /2a02:568:101:214:0:0:1:14\])\, ns4.inwx.com./\[2001:1af8:4400:a048:1:0:0:1\]:53 (UDP\, Timeout: 3s\, Retry: 1 x 0s\, NO DNSSEC\, ignore TC\, via local interface \[IPv4: nast-17-out.prod.denic.de/10.121.46.35|IPv6: /2a02:568:101:214:0:0:1:14\]): <No records>)]
ERROR: 53300102912 Nameserver error [ERROR: 116 SOA record response must be authoritative (resolver\, answer) (ns4.inwx.com./95.211.1.145:53 (UDP\, Timeout: 3s\, Retry: 1 x 0s\, NO DNSSEC\, ignore TC\, via local interface \[IPv4: nast-17-out.prod.denic.de/10.121.46.35|IPv6: /2a02:568:101:214:0:0:1:14\])\, ns4.inwx.com./95.211.1.145:53 (UDP\, Timeout: 3s\, Retry: 1 x 0s\, NO DNSSEC\, ignore TC\, via local interface \[IPv4: nast-17-out.prod.denic.de/10.121.46.35|IPv6: /2a02:568:101:214:0:0:1:14\]): <No records>)]
ERROR: 53300102912 Nameserver error [ERROR: 116 SOA record response must be authoritative (resolver\, answer) (ns.inwx.de./217.70.142.66:53 (UDP\, Timeout: 3s\, Retry: 1 x 0s\, NO DNSSEC\, ignore TC\, via local interface \[IPv4: nast-17-out.prod.denic.de/10.121.46.35|IPv6: /2a02:568:101:214:0:0:1:14\])\, ns.inwx.de./217.70.142.66:53 (UDP\, Timeout: 3s\, Retry: 1 x 0s\, NO DNSSEC\, ignore TC\, via local interface \[IPv4: nast-17-out.prod.denic.de/10.121.46.35|IPv6: /2a02:568:101:214:0:0:1:14\]): <No records>)]
ERROR: 53300102912 Nameserver error [ERROR: 116 SOA record response must be authoritative (resolver\, answer) (ns2.inwx.de./\[2a01:4f8:130:90e1:0:0:0:2\]:53 (UDP\, Timeout: 3s\, Retry: 1 x 0s\, NO DNSSEC\, ignore TC\, via local interface \[IPv4: nast-17-out.prod.denic.de/10.121.46.35|IPv6: /2a02:568:101:214:0:0:1:14\])\, ns2.inwx.de./\[2a01:4f8:130:90e1:0:0:0:2\]:53 (UDP\, Timeout: 3s\, Retry: 1 x 0s\, NO DNSSEC\, ignore TC\, via local interface \[IPv4: nast-17-out.prod.denic.de/10.121.46.35|IPv6: /2a02:568:101:214:0:0:1:14\]): <No records>)]
ERROR: 53300102912 Nameserver error [ERROR: 116 SOA record response must be authoritative (resolver\, answer) (ns5.inwx.net./\[2604:9a00:2010:a013:1:0:0:1\]:53 (UDP\, Timeout: 3s\, Retry: 1 x 0s\, NO DNSSEC\, ignore TC\, via local interface \[IPv4: nast-17-out.prod.denic.de/10.121.46.35|IPv6: /2a02:568:101:214:0:0:1:14\])\, ns5.inwx.net./\[2604:9a00:2010:a013:1:0:0:1\]:53 (UDP\, Timeout: 3s\, Retry: 1 x 0s\, NO DNSSEC\, ignore TC\, via local interface \[IPv4: nast-17-out.prod.denic.de/10.121.46.35|IPv6: /2a02:568:101:214:0:0:1:14\]): <No records>)]
ERROR: 53300102912 Nameserver error [ERROR: 116 SOA record response must be authoritative (resolver\, answer) (ns5.inwx.net./108.59.8.65:53 (UDP\, Timeout: 3s\, Retry: 1 x 0s\, NO DNSSEC\, ignore TC\, via local interface \[IPv4: nast-17-out.prod.denic.de/10.121.46.35|IPv6: /2a02:568:101:214:0:0:1:14\])\, ns5.inwx.net./108.59.8.65:53 (UDP\, Timeout: 3s\, Retry: 1 x 0s\, NO DNSSEC\, ignore TC\, via local interface \[IPv4: nast-17-out.prod.denic.de/10.121.46.35|IPv6: /2a02:568:101:214:0:0:1:14\]): <No records>)]
ERROR: 53300102912 Nameserver error [ERROR: 116 SOA record response must be authoritative (resolver\, answer) (ns3.inwx.eu./46.165.212.97:53 (UDP\, Timeout: 3s\, Retry: 1 x 0s\, NO DNSSEC\, ignore TC\, via local interface \[IPv4: nast-17-out.prod.denic.de/10.121.46.35|IPv6: /2a02:568:101:214:0:0:1:14\])\, ns3.inwx.eu./46.165.212.97:53 (UDP\, Timeout: 3s\, Retry: 1 x 0s\, NO DNSSEC\, ignore TC\, via local interface \[IPv4: nast-17-out.prod.denic.de/10.121.46.35|IPv6: /2a02:568:101:214:0:0:1:14\]): <No records>)]

No matter how long I wait, how often I try, it just won't do the trick.


On the other side, what works is this:

In Plesk I create two NS entries in the DNS config of the domain in question, one is the hostname of my server, the other one is "ns2.inwx.de".

In INWX customer menu, I create a new NS-Set, which is type "SECONDARY", add my hostname and "ns2.inwx.de" as nameserver entries, as well as the Master-Server IP address. Just like before, I then create the nameserver entry for the domain in question, which will show up as SLAVE in INWX menu and shortly after, the AXFR transfer is logged.

When I update my domain and select the afore created NS-Template, I get a "success" message and everything works as it should.


What am I doing wrong here, that keeps me from being successful in using Plesk as a hidden primary nameserver? How does a working configuration has to look like? Maybe it is just a small thing I'm missing here?

Thanks guys :)
 
Back
Top