DNS servfail at some of Nameservers
A SERVFAIL
answer tells you there's an issue reaching the DNS server for your domain, or that it isn't set up properly.
It looks like you're only replying to A
queries from your DNS server, which might explain why some nameservers don't like your domain.
A trace outputs the following:
dig +trace iwanhae.ga
; <<>> DiG 9.8.2rc1-RedHat-9.8.2-0.23.rc1.el6_5.1 <<>> +trace iwanhae.ga
;; global options: +cmd
. 6862 IN NS e.root-servers.net.
. 6862 IN NS h.root-servers.net.
. 6862 IN NS b.root-servers.net.
. 6862 IN NS a.root-servers.net.
. 6862 IN NS m.root-servers.net.
. 6862 IN NS f.root-servers.net.
. 6862 IN NS l.root-servers.net.
. 6862 IN NS d.root-servers.net.
. 6862 IN NS j.root-servers.net.
. 6862 IN NS k.root-servers.net.
. 6862 IN NS c.root-servers.net.
. 6862 IN NS i.root-servers.net.
. 6862 IN NS g.root-servers.net.
;; Received 508 bytes from 10.2.39.219#53(10.2.39.219) in 290 ms
ga. 172800 IN NS a.ns.ga.
ga. 172800 IN NS b.ns.ga.
ga. 172800 IN NS c.ns.ga.
ga. 172800 IN NS d.ns.ga.
;; Received 271 bytes from 192.203.230.10#53(192.203.230.10) in 72 ms
iwanhae.ga. 300 IN NS doctor.iptime.org.
iwanhae.ga. 300 IN NS dns.iwanhae.ga.
;; Received 93 bytes from 185.21.171.49#53(185.21.171.49) in 3366 ms
iwanhae.ga. 3600 IN A 175.193.162.44
;; Received 44 bytes from 175.193.162.44#53(175.193.162.44) in 319 ms
Asking your nameserver directly for SOA
or NS
records gives no results:
dig @175.193.162.44 iwanhae.ga. SOA
; <<>> DiG 9.8.2rc1-RedHat-9.8.2-0.23.rc1.el6_5.1 <<>> @175.193.162.44 iwanhae.ga. SOA
; (1 server found)
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 65076
;; flags: qr aa rd; QUERY: 1, ANSWER: 0, AUTHORITY: 0, ADDITIONAL: 0
;; WARNING: recursion requested but not available
;; QUESTION SECTION:
;iwanhae.ga. IN SOA
;; Query time: 302 msec
;; SERVER: 175.193.162.44#53(175.193.162.44)
;; WHEN: Wed Sep 21 18:26:15 2016
;; MSG SIZE rcvd: 28
dig @175.193.162.44 iwanhae.ga. NS
; <<>> DiG 9.8.2rc1-RedHat-9.8.2-0.23.rc1.el6_5.1 <<>> @175.193.162.44 iwanhae.ga. NS
; (1 server found)
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 37126
;; flags: qr aa rd; QUERY: 1, ANSWER: 0, AUTHORITY: 0, ADDITIONAL: 0
;; WARNING: recursion requested but not available
;; QUESTION SECTION:
;iwanhae.ga. IN NS
;; Query time: 305 msec
;; SERVER: 175.193.162.44#53(175.193.162.44)
;; WHEN: Wed Sep 21 18:26:20 2016
;; MSG SIZE rcvd: 28
Additionally, querying it for anything under *.iwanhae.ga
always yields the same result, which means you've probably set up some rule-based DNS response instead of a proper zone:
dig @175.193.162.44 verylongnamewhichprobablydoesnotexist.iwanhae.ga.
; <<>> DiG 9.8.2rc1-RedHat-9.8.2-0.23.rc1.el6_5.1 <<>> @175.193.162.44 verylongnamewhichprobablydoesnotexist.iwanhae.ga.
; (1 server found)
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 56861
;; flags: qr aa rd; QUERY: 1, ANSWER: 1, AUTHORITY: 0, ADDITIONAL: 0
;; WARNING: recursion requested but not available
;; QUESTION SECTION:
;verylongnamewhichprobablydoesnotexist.iwanhae.ga. IN A
;; ANSWER SECTION:
verylongnamewhichprobablydoesnotexist.iwanhae.ga. 3600 IN A 175.193.162.44
;; Query time: 301 msec
;; SERVER: 175.193.162.44#53(175.193.162.44)
;; WHEN: Wed Sep 21 18:27:50 2016
;; MSG SIZE rcvd: 82
For your domain to function properly on the internet, you must reply to SOA
and NS
queries from your DNS server, otherwise some DNS resolvers won't like the way it's set up and fail the lookups.
Proper SOA
and NS
records would look something like:
iwanhae.ga. 300 IN SOA dns.iwanhae.ga. admin.iwanhae.ga. 2016092100 10800 3600 1209600 300
iwanhae.ga. IN NS dns.iwanhae.ga.
iwanhae.ga. IN NS doctor.iptime.org.
dns IN A 175.193.162.44