On 25/10/18 10.17, Thariq Basyir (thariqbas...@gmail.com) wrote:
> kemarin saya juga iseng2 cari tau sendiri dari potongan log ini:
> 
> Wed 2018-10-24 11:00:51.639: [054576] Resolving A record for
> hkgmail1.hk.publicisgroupe.net <http://hkgmail1.hk.publicisgroupe.net>
> (DNS Server: 202.146.0.5)...
> Wed 2018-10-24 11:00:51.655: [054576] *  DNS server refuses to honor
> queries from this location
> 
> merujuk pada link archive ini
> <https://www.mail-archive.com/mdaemon-l@dutaint.com/msg22727.html>
> apakah berpengaruh juga karena kami memakai authoritive DNS


Ya.

Error "DNS server refuses to honor queries from this location" artinya
client query tidak berhak melakukan DNS resolver/recursive.


DNS itu ada macam-2x

https://ns1.com/resources/dns-types-records-servers-and-queries

-->
DNS Types: 3 Types of DNS Servers


A DNS resolver (recursive resolver), is designed to receive DNS queries,
which include a human-readable hostname such as “www.example.com”, and
is responsible for tracking the IP address for that hostname.
DNS Root Server

The root server is the first step in the journey from hostname to IP
address. The DNS Root Server extracts the Top Level Domain (TLD) from
the user’s query—for example, www.example.com—and provides details for
the .com TLD Name Server. In turn, that server will provide details for
domains with the .com DNS zone, including “example.com”.

The Authoritative Name Server is the last stop in the name server
query—it takes the hostname and returns the correct IP address to the
DNS Resolver (or if it cannot find the domain, returns the message
NXDOMAIN).
<---

Authoritative DNS bisa saja bertindak selaku DNS resolver (asla di set
begitu), tetapi tanggung jawab utamanya adalah meresponse DNS domain
yang terdaftar di DNS zonenya saja.

> padahal settingan DNS kami di MDaemon mengarah ke [v] DNS windows yakni 
> 8.8.8.8 dan 8.8.4.4
> sedangkan yang (DNS Server: 202.146.0.5)di MDaemonnya


Yang diperlukan oleh MDaemon adalah DNS resolver bukan Authoritative DNS.
Kalau memang authoritative DNS tidak di set sebagai DNS resolver maka
hapus dari daftar DNS rujukkan di MDaemon.

Public DNS adalah DNS resolver bukan authoritative DNS.



-- 
syafril
-------
Syafril Hermansyah
MDaemon-L Moderators, running MDaemon 18.5.1-64 bit Beta A
Harap tidak cc: atau kirim ke private mail untuk masalah MDaemon.

Bodily exercise, when compulsory, does no harm to the body; but
knowledge which is acquired under compulsion obtains no hold on the mind.
        --- Plato, The Republic


-- 
--[mdaemon-l]----------------------------------------------------------
Milis ini untuk Diskusi antar pengguna MDaemon Mail Server di Indonesia

Netiket: https://wiki.openstack.org/wiki/MailingListEtiquette
Arsip: http://mdaemon-l.dutaint.com
Dokumentasi : http://mdaemon.dutaint.co.id
Berlangganan: Kirim mail ke mdaemon-l-subscr...@dutaint.com
Henti Langgan: Kirim mail ke mdaemon-l-unsubscr...@dutaint.com
Versi terakhir MD 18.5.0, SG 5.5.0


Kirim email ke