• We value your experience with Plesk during 2024
    Plesk strives to perform even better in 2025. To help us improve further, please answer a few questions about your experience with Plesk Obsidian 2024.
    Please take this short survey:

    https://pt-research.typeform.com/to/AmZvSXkx
  • The Horde webmail has been deprecated. Its complete removal is scheduled for April 2025. For details and recommended actions, see the Feature and Deprecation Plan.
  • We’re working on enhancing the Monitoring feature in Plesk, and we could really use your expertise! If you’re open to sharing your experiences with server and website monitoring or providing feedback, we’d love to have a one-hour online meeting with you.

Question Plesk Nameserver as Hidden Master / Primary for INWX Domains

speedbird

Basic Pleskian
Hi there...

I'm currently transferring all my domains to INWX. As their FAQ states, it is possible to use my nameserver as a hidden master, so only their INWX nameservers will show.

Sadly this isn't working for me at all... Domain robot always tells me, that the update has failed.

In the DNS menu in Plesk of the domain in question, I deleted all previous NS entries and added 5 new NS entries which were their nameservers :
  • ns.inwx.de, ns2.inwx.de, ns3.inwx.eu, ns4.inwx.com, ns5.inwx.net
I then applied the new configuration to the domain in question. I also allowed the AXFR zone transfer of INWX for IP 217.70.142.96.

In INWX customer menu I followed their FAQ guide, which means I created a new NS-Set with the following entries:

Type: SECONDARY DNS
Description: HIDDEN-MASTER CONFIG
Nameserver: ns.inwx.de
Nameserver: ns2.inwx.de
Nameserver: ns3.inwx.eu
Nameserver: ns4.inwx.com
Nameserver: ns5.inwx.net
Master-IP adress: (IP of my Server)

I then added the domain in question to the nameserver entries and selected the newly created "HIDDEN-MASTER CONFIG".

Shortly after, in my server logfiles, I see the successful AXFR transfer from INWX IP address mentioned above, so that works.

However, when I try to "update" the domain and select the afore created "HIDDEN-MASTER CONFIG" and enter the Master-IP of my server, the update always fails with messages like these:

Code:
RESULT: failed
STID: b1e89b31-2981-11e6-88d2-9d9f449cdb9c
ERROR: 53300102912 Nameserver error [ERROR: 116 SOA record response must be authoritative (resolver\, answer) (ns2.inwx.de./213.239.206.103:53 (UDP\, Timeout: 3s\, Retry: 1 x 0s\, NO DNSSEC\, ignore TC\, via local interface \[IPv4: nast-17-out.prod.denic.de/10.121.46.35|IPv6: /2a02:568:101:214:0:0:1:14\])\, ns2.inwx.de./213.239.206.103:53 (UDP\, Timeout: 3s\, Retry: 1 x 0s\, NO DNSSEC\, ignore TC\, via local interface \[IPv4: nast-17-out.prod.denic.de/10.121.46.35|IPv6: /2a02:568:101:214:0:0:1:14\]): <No records>)]
ERROR: 53300102912 Nameserver error [ERROR: 116 SOA record response must be authoritative (resolver\, answer) (ns3.inwx.eu./\[2a00:c98:2100:a006:3:0:0:1\]:53 (UDP\, Timeout: 3s\, Retry: 1 x 0s\, NO DNSSEC\, ignore TC\, via local interface \[IPv4: nast-17-out.prod.denic.de/10.121.46.35|IPv6: /2a02:568:101:214:0:0:1:14\])\, ns3.inwx.eu./\[2a00:c98:2100:a006:3:0:0:1\]:53 (UDP\, Timeout: 3s\, Retry: 1 x 0s\, NO DNSSEC\, ignore TC\, via local interface \[IPv4: nast-17-out.prod.denic.de/10.121.46.35|IPv6: /2a02:568:101:214:0:0:1:14\]): <No records>)]
ERROR: 53300102912 Nameserver error [ERROR: 116 SOA record response must be authoritative (resolver\, answer) (ns4.inwx.com./\[2001:1af8:4400:a048:1:0:0:1\]:53 (UDP\, Timeout: 3s\, Retry: 1 x 0s\, NO DNSSEC\, ignore TC\, via local interface \[IPv4: nast-17-out.prod.denic.de/10.121.46.35|IPv6: /2a02:568:101:214:0:0:1:14\])\, ns4.inwx.com./\[2001:1af8:4400:a048:1:0:0:1\]:53 (UDP\, Timeout: 3s\, Retry: 1 x 0s\, NO DNSSEC\, ignore TC\, via local interface \[IPv4: nast-17-out.prod.denic.de/10.121.46.35|IPv6: /2a02:568:101:214:0:0:1:14\]): <No records>)]
ERROR: 53300102912 Nameserver error [ERROR: 116 SOA record response must be authoritative (resolver\, answer) (ns4.inwx.com./95.211.1.145:53 (UDP\, Timeout: 3s\, Retry: 1 x 0s\, NO DNSSEC\, ignore TC\, via local interface \[IPv4: nast-17-out.prod.denic.de/10.121.46.35|IPv6: /2a02:568:101:214:0:0:1:14\])\, ns4.inwx.com./95.211.1.145:53 (UDP\, Timeout: 3s\, Retry: 1 x 0s\, NO DNSSEC\, ignore TC\, via local interface \[IPv4: nast-17-out.prod.denic.de/10.121.46.35|IPv6: /2a02:568:101:214:0:0:1:14\]): <No records>)]
ERROR: 53300102912 Nameserver error [ERROR: 116 SOA record response must be authoritative (resolver\, answer) (ns.inwx.de./217.70.142.66:53 (UDP\, Timeout: 3s\, Retry: 1 x 0s\, NO DNSSEC\, ignore TC\, via local interface \[IPv4: nast-17-out.prod.denic.de/10.121.46.35|IPv6: /2a02:568:101:214:0:0:1:14\])\, ns.inwx.de./217.70.142.66:53 (UDP\, Timeout: 3s\, Retry: 1 x 0s\, NO DNSSEC\, ignore TC\, via local interface \[IPv4: nast-17-out.prod.denic.de/10.121.46.35|IPv6: /2a02:568:101:214:0:0:1:14\]): <No records>)]
ERROR: 53300102912 Nameserver error [ERROR: 116 SOA record response must be authoritative (resolver\, answer) (ns2.inwx.de./\[2a01:4f8:130:90e1:0:0:0:2\]:53 (UDP\, Timeout: 3s\, Retry: 1 x 0s\, NO DNSSEC\, ignore TC\, via local interface \[IPv4: nast-17-out.prod.denic.de/10.121.46.35|IPv6: /2a02:568:101:214:0:0:1:14\])\, ns2.inwx.de./\[2a01:4f8:130:90e1:0:0:0:2\]:53 (UDP\, Timeout: 3s\, Retry: 1 x 0s\, NO DNSSEC\, ignore TC\, via local interface \[IPv4: nast-17-out.prod.denic.de/10.121.46.35|IPv6: /2a02:568:101:214:0:0:1:14\]): <No records>)]
ERROR: 53300102912 Nameserver error [ERROR: 116 SOA record response must be authoritative (resolver\, answer) (ns5.inwx.net./\[2604:9a00:2010:a013:1:0:0:1\]:53 (UDP\, Timeout: 3s\, Retry: 1 x 0s\, NO DNSSEC\, ignore TC\, via local interface \[IPv4: nast-17-out.prod.denic.de/10.121.46.35|IPv6: /2a02:568:101:214:0:0:1:14\])\, ns5.inwx.net./\[2604:9a00:2010:a013:1:0:0:1\]:53 (UDP\, Timeout: 3s\, Retry: 1 x 0s\, NO DNSSEC\, ignore TC\, via local interface \[IPv4: nast-17-out.prod.denic.de/10.121.46.35|IPv6: /2a02:568:101:214:0:0:1:14\]): <No records>)]
ERROR: 53300102912 Nameserver error [ERROR: 116 SOA record response must be authoritative (resolver\, answer) (ns5.inwx.net./108.59.8.65:53 (UDP\, Timeout: 3s\, Retry: 1 x 0s\, NO DNSSEC\, ignore TC\, via local interface \[IPv4: nast-17-out.prod.denic.de/10.121.46.35|IPv6: /2a02:568:101:214:0:0:1:14\])\, ns5.inwx.net./108.59.8.65:53 (UDP\, Timeout: 3s\, Retry: 1 x 0s\, NO DNSSEC\, ignore TC\, via local interface \[IPv4: nast-17-out.prod.denic.de/10.121.46.35|IPv6: /2a02:568:101:214:0:0:1:14\]): <No records>)]
ERROR: 53300102912 Nameserver error [ERROR: 116 SOA record response must be authoritative (resolver\, answer) (ns3.inwx.eu./46.165.212.97:53 (UDP\, Timeout: 3s\, Retry: 1 x 0s\, NO DNSSEC\, ignore TC\, via local interface \[IPv4: nast-17-out.prod.denic.de/10.121.46.35|IPv6: /2a02:568:101:214:0:0:1:14\])\, ns3.inwx.eu./46.165.212.97:53 (UDP\, Timeout: 3s\, Retry: 1 x 0s\, NO DNSSEC\, ignore TC\, via local interface \[IPv4: nast-17-out.prod.denic.de/10.121.46.35|IPv6: /2a02:568:101:214:0:0:1:14\]): <No records>)]

No matter how long I wait, how often I try, it just won't do the trick.


On the other side, what works is this:

In Plesk I create two NS entries in the DNS config of the domain in question, one is the hostname of my server, the other one is "ns2.inwx.de".

In INWX customer menu, I create a new NS-Set, which is type "SECONDARY", add my hostname and "ns2.inwx.de" as nameserver entries, as well as the Master-Server IP address. Just like before, I then create the nameserver entry for the domain in question, which will show up as SLAVE in INWX menu and shortly after, the AXFR transfer is logged.

When I update my domain and select the afore created NS-Template, I get a "success" message and everything works as it should.


What am I doing wrong here, that keeps me from being successful in using Plesk as a hidden primary nameserver? How does a working configuration has to look like? Maybe it is just a small thing I'm missing here?

Thanks guys :)
 
Back
Top