• Our team is looking to connect with folks who use email services provided by Plesk, or a premium service. If you'd like to be part of the discovery process and share your experiences, we invite you to complete this short screening survey. If your responses match the persona we are looking for, you'll receive a link to schedule a call at your convenience. We look forward to hearing from you!
  • We are looking for U.S.-based freelancer or agency working with SEO or WordPress for a quick 30-min interviews to gather feedback on XOVI, a successful German SEO tool we’re looking to launch in the U.S.
    If you qualify and participate, you’ll receive a $30 Amazon gift card as a thank-you. Please apply here. Thanks for helping shape a better SEO product for agencies!
  • The BIND DNS server has already been deprecated and removed from Plesk for Windows.
    If a Plesk for Windows server is still using BIND, the upgrade to Plesk Obsidian 18.0.70 will be unavailable until the administrator switches the DNS server to Microsoft DNS. We strongly recommend transitioning to Microsoft DNS within the next 6 weeks, before the Plesk 18.0.70 release.
  • The Horde component is removed from Plesk Installer. We recommend switching to another webmail software supported in Plesk.

Question Plesk Nameserver as Hidden Master / Primary for INWX Domains

speedbird

Basic Pleskian
Hi there...

I'm currently transferring all my domains to INWX. As their FAQ states, it is possible to use my nameserver as a hidden master, so only their INWX nameservers will show.

Sadly this isn't working for me at all... Domain robot always tells me, that the update has failed.

In the DNS menu in Plesk of the domain in question, I deleted all previous NS entries and added 5 new NS entries which were their nameservers :
  • ns.inwx.de, ns2.inwx.de, ns3.inwx.eu, ns4.inwx.com, ns5.inwx.net
I then applied the new configuration to the domain in question. I also allowed the AXFR zone transfer of INWX for IP 217.70.142.96.

In INWX customer menu I followed their FAQ guide, which means I created a new NS-Set with the following entries:

Type: SECONDARY DNS
Description: HIDDEN-MASTER CONFIG
Nameserver: ns.inwx.de
Nameserver: ns2.inwx.de
Nameserver: ns3.inwx.eu
Nameserver: ns4.inwx.com
Nameserver: ns5.inwx.net
Master-IP adress: (IP of my Server)

I then added the domain in question to the nameserver entries and selected the newly created "HIDDEN-MASTER CONFIG".

Shortly after, in my server logfiles, I see the successful AXFR transfer from INWX IP address mentioned above, so that works.

However, when I try to "update" the domain and select the afore created "HIDDEN-MASTER CONFIG" and enter the Master-IP of my server, the update always fails with messages like these:

Code:
RESULT: failed
STID: b1e89b31-2981-11e6-88d2-9d9f449cdb9c
ERROR: 53300102912 Nameserver error [ERROR: 116 SOA record response must be authoritative (resolver\, answer) (ns2.inwx.de./213.239.206.103:53 (UDP\, Timeout: 3s\, Retry: 1 x 0s\, NO DNSSEC\, ignore TC\, via local interface \[IPv4: nast-17-out.prod.denic.de/10.121.46.35|IPv6: /2a02:568:101:214:0:0:1:14\])\, ns2.inwx.de./213.239.206.103:53 (UDP\, Timeout: 3s\, Retry: 1 x 0s\, NO DNSSEC\, ignore TC\, via local interface \[IPv4: nast-17-out.prod.denic.de/10.121.46.35|IPv6: /2a02:568:101:214:0:0:1:14\]): <No records>)]
ERROR: 53300102912 Nameserver error [ERROR: 116 SOA record response must be authoritative (resolver\, answer) (ns3.inwx.eu./\[2a00:c98:2100:a006:3:0:0:1\]:53 (UDP\, Timeout: 3s\, Retry: 1 x 0s\, NO DNSSEC\, ignore TC\, via local interface \[IPv4: nast-17-out.prod.denic.de/10.121.46.35|IPv6: /2a02:568:101:214:0:0:1:14\])\, ns3.inwx.eu./\[2a00:c98:2100:a006:3:0:0:1\]:53 (UDP\, Timeout: 3s\, Retry: 1 x 0s\, NO DNSSEC\, ignore TC\, via local interface \[IPv4: nast-17-out.prod.denic.de/10.121.46.35|IPv6: /2a02:568:101:214:0:0:1:14\]): <No records>)]
ERROR: 53300102912 Nameserver error [ERROR: 116 SOA record response must be authoritative (resolver\, answer) (ns4.inwx.com./\[2001:1af8:4400:a048:1:0:0:1\]:53 (UDP\, Timeout: 3s\, Retry: 1 x 0s\, NO DNSSEC\, ignore TC\, via local interface \[IPv4: nast-17-out.prod.denic.de/10.121.46.35|IPv6: /2a02:568:101:214:0:0:1:14\])\, ns4.inwx.com./\[2001:1af8:4400:a048:1:0:0:1\]:53 (UDP\, Timeout: 3s\, Retry: 1 x 0s\, NO DNSSEC\, ignore TC\, via local interface \[IPv4: nast-17-out.prod.denic.de/10.121.46.35|IPv6: /2a02:568:101:214:0:0:1:14\]): <No records>)]
ERROR: 53300102912 Nameserver error [ERROR: 116 SOA record response must be authoritative (resolver\, answer) (ns4.inwx.com./95.211.1.145:53 (UDP\, Timeout: 3s\, Retry: 1 x 0s\, NO DNSSEC\, ignore TC\, via local interface \[IPv4: nast-17-out.prod.denic.de/10.121.46.35|IPv6: /2a02:568:101:214:0:0:1:14\])\, ns4.inwx.com./95.211.1.145:53 (UDP\, Timeout: 3s\, Retry: 1 x 0s\, NO DNSSEC\, ignore TC\, via local interface \[IPv4: nast-17-out.prod.denic.de/10.121.46.35|IPv6: /2a02:568:101:214:0:0:1:14\]): <No records>)]
ERROR: 53300102912 Nameserver error [ERROR: 116 SOA record response must be authoritative (resolver\, answer) (ns.inwx.de./217.70.142.66:53 (UDP\, Timeout: 3s\, Retry: 1 x 0s\, NO DNSSEC\, ignore TC\, via local interface \[IPv4: nast-17-out.prod.denic.de/10.121.46.35|IPv6: /2a02:568:101:214:0:0:1:14\])\, ns.inwx.de./217.70.142.66:53 (UDP\, Timeout: 3s\, Retry: 1 x 0s\, NO DNSSEC\, ignore TC\, via local interface \[IPv4: nast-17-out.prod.denic.de/10.121.46.35|IPv6: /2a02:568:101:214:0:0:1:14\]): <No records>)]
ERROR: 53300102912 Nameserver error [ERROR: 116 SOA record response must be authoritative (resolver\, answer) (ns2.inwx.de./\[2a01:4f8:130:90e1:0:0:0:2\]:53 (UDP\, Timeout: 3s\, Retry: 1 x 0s\, NO DNSSEC\, ignore TC\, via local interface \[IPv4: nast-17-out.prod.denic.de/10.121.46.35|IPv6: /2a02:568:101:214:0:0:1:14\])\, ns2.inwx.de./\[2a01:4f8:130:90e1:0:0:0:2\]:53 (UDP\, Timeout: 3s\, Retry: 1 x 0s\, NO DNSSEC\, ignore TC\, via local interface \[IPv4: nast-17-out.prod.denic.de/10.121.46.35|IPv6: /2a02:568:101:214:0:0:1:14\]): <No records>)]
ERROR: 53300102912 Nameserver error [ERROR: 116 SOA record response must be authoritative (resolver\, answer) (ns5.inwx.net./\[2604:9a00:2010:a013:1:0:0:1\]:53 (UDP\, Timeout: 3s\, Retry: 1 x 0s\, NO DNSSEC\, ignore TC\, via local interface \[IPv4: nast-17-out.prod.denic.de/10.121.46.35|IPv6: /2a02:568:101:214:0:0:1:14\])\, ns5.inwx.net./\[2604:9a00:2010:a013:1:0:0:1\]:53 (UDP\, Timeout: 3s\, Retry: 1 x 0s\, NO DNSSEC\, ignore TC\, via local interface \[IPv4: nast-17-out.prod.denic.de/10.121.46.35|IPv6: /2a02:568:101:214:0:0:1:14\]): <No records>)]
ERROR: 53300102912 Nameserver error [ERROR: 116 SOA record response must be authoritative (resolver\, answer) (ns5.inwx.net./108.59.8.65:53 (UDP\, Timeout: 3s\, Retry: 1 x 0s\, NO DNSSEC\, ignore TC\, via local interface \[IPv4: nast-17-out.prod.denic.de/10.121.46.35|IPv6: /2a02:568:101:214:0:0:1:14\])\, ns5.inwx.net./108.59.8.65:53 (UDP\, Timeout: 3s\, Retry: 1 x 0s\, NO DNSSEC\, ignore TC\, via local interface \[IPv4: nast-17-out.prod.denic.de/10.121.46.35|IPv6: /2a02:568:101:214:0:0:1:14\]): <No records>)]
ERROR: 53300102912 Nameserver error [ERROR: 116 SOA record response must be authoritative (resolver\, answer) (ns3.inwx.eu./46.165.212.97:53 (UDP\, Timeout: 3s\, Retry: 1 x 0s\, NO DNSSEC\, ignore TC\, via local interface \[IPv4: nast-17-out.prod.denic.de/10.121.46.35|IPv6: /2a02:568:101:214:0:0:1:14\])\, ns3.inwx.eu./46.165.212.97:53 (UDP\, Timeout: 3s\, Retry: 1 x 0s\, NO DNSSEC\, ignore TC\, via local interface \[IPv4: nast-17-out.prod.denic.de/10.121.46.35|IPv6: /2a02:568:101:214:0:0:1:14\]): <No records>)]

No matter how long I wait, how often I try, it just won't do the trick.


On the other side, what works is this:

In Plesk I create two NS entries in the DNS config of the domain in question, one is the hostname of my server, the other one is "ns2.inwx.de".

In INWX customer menu, I create a new NS-Set, which is type "SECONDARY", add my hostname and "ns2.inwx.de" as nameserver entries, as well as the Master-Server IP address. Just like before, I then create the nameserver entry for the domain in question, which will show up as SLAVE in INWX menu and shortly after, the AXFR transfer is logged.

When I update my domain and select the afore created NS-Template, I get a "success" message and everything works as it should.


What am I doing wrong here, that keeps me from being successful in using Plesk as a hidden primary nameserver? How does a working configuration has to look like? Maybe it is just a small thing I'm missing here?

Thanks guys :)
 
Back
Top