DNS problem after server to server transfer of DA
- Thread starter wookie919
- Start date
I deleted all details of the problem because I don't want my IP addresses to linger around in the forums.
Problem Description:
I had huge problems with DNS after transferring from one server to another using DA admin backup/restore.
Problem Root Cause:
I shutdown the DNS server on my old server as soon as the transfer was complete. As a result, none of the domains could be properly resolved because it took time for the new DNS server details to be fully propagated around the world.
Lesson Learnt:
Do NOT disable the DNS server on the old server straight after the transfer. Instead, keep it running, but modify all A records so that all the domains correctly point to the new server IP address, and modify the NS records so that the name servers also have the correct IP addresses set. This ensures that all the websites will continue to be visible throughout the propagation process. Once fully propagated, take down the old server.
I hope no one makes the same mistake as I did.
Also if there is a better way of doing this, please share it with us.
Problem Description:
I had huge problems with DNS after transferring from one server to another using DA admin backup/restore.
Problem Root Cause:
I shutdown the DNS server on my old server as soon as the transfer was complete. As a result, none of the domains could be properly resolved because it took time for the new DNS server details to be fully propagated around the world.
Lesson Learnt:
Do NOT disable the DNS server on the old server straight after the transfer. Instead, keep it running, but modify all A records so that all the domains correctly point to the new server IP address, and modify the NS records so that the name servers also have the correct IP addresses set. This ensures that all the websites will continue to be visible throughout the propagation process. Once fully propagated, take down the old server.
I hope no one makes the same mistake as I did.
Also if there is a better way of doing this, please share it with us.
Last edited:
nobaloney
NoBaloney Internet Svcs - In Memoriam †
Well, I only removed the IP addresses and domain names because I managed to resolve the problems myself. My initial post contained full information about both.
My thoughts were along the lines of:
There are millions of IP addresses that a malicious cracker could choose to do nasty stuff with - what are the chances that my IP address will get picked? Pretty low. But by posting my IP address on internet forums, I am increasing the risk of my IP address getting chosen for 'experiments'.
I understand that it is foolish to not supply real IP addresses and domain names when asking for help relating to DNS, but I saw no point in leaving the details on the forum even after the problem was resolved.
However, I would not mind at all if you guys wished to take a look at the current state of things regarding my IP address (if you guys want to, that is).
Initially my DNS servers were:
ns1.spacemonkey.co.nz - 210.118.171.69
ns2.spacemonkey.co.nz - 210.118.171.70
I need these to be propagated to:
ns1.spacemonkey.co.nz - 60.234.40.54
ns2.spacemonkey.co.nz - 60.234.40.55
It has been 3 days since I changed the IP addresses of these domain servers, but the information has not yet been propagated to the high level domain server. Therefore I am forced to keep the old 210.118.171.69 server running to resolve domain names.
Thanks a lot for your replies.
wookie919
My thoughts were along the lines of:
There are millions of IP addresses that a malicious cracker could choose to do nasty stuff with - what are the chances that my IP address will get picked? Pretty low. But by posting my IP address on internet forums, I am increasing the risk of my IP address getting chosen for 'experiments'.
I understand that it is foolish to not supply real IP addresses and domain names when asking for help relating to DNS, but I saw no point in leaving the details on the forum even after the problem was resolved.
However, I would not mind at all if you guys wished to take a look at the current state of things regarding my IP address (if you guys want to, that is).
Initially my DNS servers were:
ns1.spacemonkey.co.nz - 210.118.171.69
ns2.spacemonkey.co.nz - 210.118.171.70
I need these to be propagated to:
ns1.spacemonkey.co.nz - 60.234.40.54
ns2.spacemonkey.co.nz - 60.234.40.55
It has been 3 days since I changed the IP addresses of these domain servers, but the information has not yet been propagated to the high level domain server. Therefore I am forced to keep the old 210.118.171.69 server running to resolve domain names.
Thanks a lot for your replies.
wookie919
floyd
Verified User
- Joined
- Mar 29, 2005
- Messages
- 6,267
That is incorrect. If you read the link Jeff supplied you will know why it is foolish thinking.
I actually read Jeff's post before posting that reply, and I believe my concern is still valid.
It is true that how secure my server is does not depend on whether someone has access to the server's IP address or not - this, of course, is foolish thinking.
However, IP addresses popping up on these forums might increase the chance of crackers having a go at that particular IP address, as oppose to some other IP address chosen some other way. This is what I want to prevent.
Of course one could simply say instead of worrying about disclosing information that is open to everyone anyway, why not try harder to secure the server in the first place... well... can a server really be 100% secure?
Back to the original topic, I modified the IP address of the name servers on all name servers currently running i.e.
210.118.171.69
210.118.171.70 - this isn't running anyway...
60.234.40.54
60.234.40.55
Now, when you say where I registered spacemonkey.co.nz originally, do you mean the domain registrar? DistributeIT is the domain registrar that spacemonkey.co.nz is currently registered in. Do I need to notify them of this change? This seems a bit odd because I don't remember specifying my IP addresses to the domain registar.
Thanks,
wookie919.
It is true that how secure my server is does not depend on whether someone has access to the server's IP address or not - this, of course, is foolish thinking.
However, IP addresses popping up on these forums might increase the chance of crackers having a go at that particular IP address, as oppose to some other IP address chosen some other way. This is what I want to prevent.
Of course one could simply say instead of worrying about disclosing information that is open to everyone anyway, why not try harder to secure the server in the first place... well... can a server really be 100% secure?
Back to the original topic, I modified the IP address of the name servers on all name servers currently running i.e.
210.118.171.69
210.118.171.70 - this isn't running anyway...
60.234.40.54
60.234.40.55
Now, when you say where I registered spacemonkey.co.nz originally, do you mean the domain registrar? DistributeIT is the domain registrar that spacemonkey.co.nz is currently registered in. Do I need to notify them of this change? This seems a bit odd because I don't remember specifying my IP addresses to the domain registar.
Thanks,
wookie919.
floyd
Verified User
- Joined
- Mar 29, 2005
- Messages
- 6,267
You want to change the ip for ns1.spacemonkey.co.nz from 210.118.171.69 to 60.234.40.54. That has to be done where spacemonkey.co.nz is currently registered.
Do you mean the domain registrar?
Or is there some other place where spacemonkey.co.nz would be registered that I am forgetting about?
floyd
Verified User
- Joined
- Mar 29, 2005
- Messages
- 6,267
Yes. The domain registrar.
Thank you very much for the clarification, very much appreciated.