why sites suddenly stopped working in dedicated/virtual private servers

VeriSign has made some changes recently which are applied since March 1, 2010.  You can read detail by clicking here

How do I fix it?

You need to log in to your control panel and modify the affected domain name’s zone file, using the table below as an example.

To Modify or Add DNS Records in Plesk

  1. Log in to Plesk as an Admin.
  2. From the list of domains at the bottom of the page, click the domain name you want to work with.
  3. Under the Services group, click the DNS button.
  4. To add a DNS entry, select the type of record you want to create and click Add.

To Modify or Add DNS Records in Simple Control Panel

  1. Log in to Simple Control Panel.
  2. Click the DNS button on the main screen.
  3. Click the Edit icon (the pencil) to the right of the domain name you want to modify.
  4. Change the desired A and NS records and save the changes.

To Modify or Add DNS Records in cPanel

  1. Log in to cPanel at http://yourdomainnamehere.com/cpanel.
  2. In WHM, click DNS Functions, and then select Edit DNS Zone.
  3. Click the domain you want to modify then click Edit.
  4. Enter the new DNS information then click Save.

Zone File Example

Assuming your domain name is coolexample.com and your IP address is 74.15.27.119, your zone file needs to have the following NS and A records to resolve properly:

coolexample.com NS ns1.yournameserver.com
coolexample.com NS ns2.yournameserver.com
ns1.yournameserver.com A 74.15.27.119
ns2.yournameserver.com A 74.15.27.119

Where ns1 and ns2.yournameserver.com are the nameservers your domain name is pointing to.

If you have an NS record without a corresponding A record, add the A record and make sure it points to the site’s IP address.

Why was this change made?

If a domain name’s zone file has an NS record without a corresponding A record, a third party can create their own A record for your NS record. That means they can redirect traffic to a location of their choosing, a major security loophole.

Original source

Please follow and like us:
About shk

shk is a DevOps engineer with more than 12 years of experience in different organizations. He enthusiastic about learning new technologies and shares his knowledge through his blogs.

Comment Policy:

Your words are your own, so be nice and helpful if you can. Please, only use your real name, not your business name or keywords. Using business name or keywords instead of your real name will lead to the comment being deleted. Anonymous commenting is not allowed either. Limit the amount of links submitted in your comment. We accept clean XHTML in comments, but don't overdo it please.

Tell us what you're thinking...

All comments are moderated.

* Denotes required field.

*

*

Previous Post:
Next Post: