# DNS / Nameserver / GANDI / glue records Issues

**URL:** <https://discourse.mailinabox.email/t/dns-nameserver-gandi-glue-records-issues/105>\
**Category:** Help with Setup/Upgrade\
**Created:** [September 30, 2014, 11:25pm UTC](https://discourse.mailinabox.email/t/dns-nameserver-gandi-glue-records-issues/105 "2014-09-30T23:25:23Z")\
**Posts on this page:** 7\
**Page:** 1

<div class="post-metadata">

**Author:** ![tr0t](https://discourse.mailinabox.email/user_avatar/discourse.mailinabox.email/tr0t/32/30_2.png) [@tr0t](https://discourse.mailinabox.email/u/tr0t)\
**Post date:** [September 30, 2014, 11:25pm UTC](https://discourse.mailinabox.email/t/dns-nameserver-gandi-glue-records-issues/105/1 "2014-09-30T23:25:24Z")

</div>

Following the setup guide, i probably did something wrong (/noobie mistake?) Please call me out! ☹

Errors i’m having a hard time resolving…

> Nameserver glue records are incorrect. The [ns1.box.MYDOMAIN.me](http://ns1.box.MYDOMAIN.me) and [ns2.box.MYDOMAIN.me](http://ns2.box.MYDOMAIN.me) nameservers must be configured at your domain name registrar as having the IP address 111.111.111.111. They currently report addresses of [Not Set]/[Not Set]. It may take several hours for public DNS to update after a change.

> This domain must resolve to your box’s IP address (111.111.111.111) in public DNS but it currently resolves to [Not Set]. It may take several hours for public DNS to update after a change. This problem may result from other issues listed here.

> The nameservers set on this domain are incorrect. They are currently [Not Set]. Use your domain name registar’s control panel to set the nameservers to [ns1.box.MYDOMAIN.me](http://ns1.box.MYDOMAIN.me); [ns2.box.MYDOMAIN.me](http://ns2.box.MYDOMAIN.me).

> This domain should resolve to your box’s IP address (111.111.111.111) if you would like the box to serve webmail or a website on this domain. The domain currently resolves to [Not Set] in public DNS. It may take several hours for public DNS to update after a change. This problem may result from other issues listed here.

Over at GANDI, i have my glueservers set up as - [ns1.box.MYDOMAIN.me](http://ns1.box.MYDOMAIN.me) , [ns2.box.MYDOMAIN.me](http://ns2.box.MYDOMAIN.me) both pointing at my DigitalOcean VPS IP “111.111.111.111” . Then, setup my DNS Nameservers (in GANDI Control Panel) as [ns1.box.MYDOMAIN.me](http://ns1.box.MYDOMAIN.me) and [ns2.box.MYDOMAIN.me](http://ns2.box.MYDOMAIN.me)

I assume that’s correct? No zone file is being used at my register (Gandi). In the GANDI control panel the DNS is set to “External DNS” which has the above nameservers as entries.

On another machine i can nslookup and resolve my domainname. Example output -

**:~$ host [ns1.box.MYDOMAIN.me](http://ns1.box.MYDOMAIN.me)**  
[ns1.box.MYDOMAIN.me](http://ns1.box.MYDOMAIN.me) has address 111.111.111.111  
**:~$ host -t ns [MYDOMAIN.me](http://MYDOMAIN.me)**  
[MYDOMAIN.me](http://MYDOMAIN.me) name server [ns1.box.MYDOMAIN.me](http://ns1.box.MYDOMAIN.me).  
[MYDOMAIN.me](http://MYDOMAIN.me) name server [ns1.box.MYDOMAIN.me](http://ns1.box.MYDOMAIN.me).

However, on my VPS (mail-in-a-box) server, it cannot resolve. Which i assume is why my status page is bleeding red errors on DNS.

**$ host [ns1.box.MYDOMAIN.me](http://ns1.box.MYDOMAIN.me)**  
Host [ns1.box.MYDOMAIN.me](http://ns1.box.MYDOMAIN.me) not found: 2(SERVFAIL)

**$ host -t ns [MYDOMAIN.me](http://MYDOMAIN.me)**  
Host [MYDOMAIN.me](http://MYDOMAIN.me) not found: 2(SERVFAIL)

Any idea where i’m going wrong?? The “External DNS” section in Super Advanced Options, do i have to set those up at DigitalOcean VPS? Or Gandi?!?

Any help would be appreciated! Thanks!

---

<div class="post-metadata">

**Author:** ![JoshData](https://discourse.mailinabox.email/user_avatar/discourse.mailinabox.email/joshdata/32/2153_2.png) [@JoshData](https://discourse.mailinabox.email/u/JoshData)\
**Post date:** [October 1, 2014, 12:14am UTC](https://discourse.mailinabox.email/t/dns-nameserver-gandi-glue-records-issues/105/2 "2014-10-01T00:14:05Z")

</div>

Could you try just giving your box a reboot?

---

<div class="post-metadata">

**Author:** ![tr0t](https://discourse.mailinabox.email/user_avatar/discourse.mailinabox.email/tr0t/32/30_2.png) [@tr0t](https://discourse.mailinabox.email/u/tr0t)\
**Post date:** [October 1, 2014, 1:41am UTC](https://discourse.mailinabox.email/t/dns-nameserver-gandi-glue-records-issues/105/3 "2014-10-01T01:41:27Z")

</div>

Yeah, just tried that again. No love. For testing on my VPS I ran the host command against [google.com](http://google.com), thats resolving fine.

I went over to [pingability.com](http://pingability.com) , some intersrting warnings that are yelling at me about a probably misconfigured DNS setting somewhere I just can’t figure out where i went wrong… ☹

> Info Type Message  
> Warning [MYDOMAIN.me](http://MYDOMAIN.me) does not have an IP Address (A) record.  
> Information 1,076 milliseconds to complete zone checks.

> **Error**  
> None of this zone’s name servers responded on the request for ‘[MYDOMAIN.me](http://MYDOMAIN.me)’ records. Giving up.  
> **Heads-up**  
> None of the name servers had an SOA record, randomly selecting [ns1.box.MYDOMAIN.me](http://ns1.box.MYDOMAIN.me) as the master name server.

> **Warning**  
> Did not find any IP Address (A) records for the name server  
> ‘[ns1.box.MYDOMAIN.me](http://ns1.box.MYDOMAIN.me)’. Normally the parent name server will list  
> them. These name server A records are also called ‘host records’ and  
> are usually set by the domain name registrar.  
> **Heads-up**  
> Found a glue record (111.111.111.111) at the  
> parent name servers but it appears [ns1.box.MYDOMAIN.me](http://ns1.box.MYDOMAIN.me) is missing an  
> IP Address (A) record.  
> **Error**  
> The name server did not return any SOA records. This could indicate a ‘lame’ nameserver -  
> one that is listed as authoratative, but does not return any information  
> for the zone.

Thanks for the help/response JoshData!

---

<div class="post-metadata">

**Author:** ![JoshData](https://discourse.mailinabox.email/user_avatar/discourse.mailinabox.email/joshdata/32/2153_2.png) [@JoshData](https://discourse.mailinabox.email/u/JoshData)\
**Post date:** [October 1, 2014, 2:46am UTC](https://discourse.mailinabox.email/t/dns-nameserver-gandi-glue-records-issues/105/4 "2014-10-01T02:46:23Z")

</div>

Can you post or email me (jt@occams.info) the domain name and IP address?

---

<div class="post-metadata">

**Author:** ![JoshData](https://discourse.mailinabox.email/user_avatar/discourse.mailinabox.email/joshdata/32/2153_2.png) [@JoshData](https://discourse.mailinabox.email/u/JoshData)\
**Post date:** [October 1, 2014, 11:49am UTC](https://discourse.mailinabox.email/t/dns-nameserver-gandi-glue-records-issues/105/5 "2014-10-01T11:49:31Z")

</div>

Thanks for emailing me the details.

The problem is DNSSEC. It’s actually reported in the system status checks but it’s buried between all of the other errors so I can see how you would miss it.

Try turning it off at Gandi to see if things start to resolve. Then once the box says it’s working you can try setting up DNSSEC again to see if that works. DNSSEC setup is very opaque. I had a lot of trouble with some of my domains. In fact, I thought I had a .me domain working with DNSSEC but this morning it’s not working. Maybe there was something wrong at .me itself.

---

<div class="post-metadata">

**Author:** ![Samuele](https://discourse.mailinabox.email/user_avatar/discourse.mailinabox.email/samuele/32/32_2.png) [@Samuele](https://discourse.mailinabox.email/u/Samuele)\
**Post date:** [October 1, 2014, 1:55pm UTC](https://discourse.mailinabox.email/t/dns-nameserver-gandi-glue-records-issues/105/6 "2014-10-01T13:55:09Z")

</div>

Hi tr0t,  
I’m finding the same issue.  
If u set the glue records with the same ip address (as the setup guide suggests), gandi will give u an error when u set the nameservers.  
I’ve tried to define only the first nameserve, but no luck too.  
I’ll try to put the first name server as the glued one, and the second one as something else (digitalocean ns2 for example).  
I’ll let u know if I find a solution.

---

<div class="post-metadata">

**Author:** ![tr0t](https://discourse.mailinabox.email/user_avatar/discourse.mailinabox.email/tr0t/32/30_2.png) [@tr0t](https://discourse.mailinabox.email/u/tr0t)\
**Post date:** [October 1, 2014, 7:27pm UTC](https://discourse.mailinabox.email/t/dns-nameserver-gandi-glue-records-issues/105/7 "2014-10-01T19:27:11Z")

</div>

Thanks guys! @JoshData , **that did the trick!** Thanks for taking the time to help. Now I can ditch gmail servers 😄 .

Today i learned, DNSSEC is touchy. I must of created my KSK wrong… ill have to revisit the documentation on the `dnssec-keygen` command.

@Samuele , check your DNSSEC man. My nameserver setup with GANDI seems cool. I also had to not use a zone file, that was eff’n it up.

Thanks again!