Diagnose mail DNS failures

Separate authoritative errors, cache staleness, and delegation problems.

Difficulty:
Intermediate
Prerequisites:
Failing name and symptom
Last updated:
2026-07-15
Author:
empire

Steps

  1. Query the authorityAsk authoritative servers directly for the RRset.
  2. Compare recursive answersCheck whether recursive resolvers still cache prior data.
  3. Inspect delegationValidate NS and glue if authority cannot be reached cleanly.

Expected outcome: Failure class identified with next remediation step.