Quering Root Domain

hruodr · 2026-06-18T09:41:58+0100

Is this normal?!

Code:

# drill @8.8.8.8 . NS
;; ->>HEADER<<- opcode: QUERY, rcode: NOERROR, id: 37605
;; flags: qr aa rd ra ; QUERY: 1, ANSWER: 1, AUTHORITY: 0, ADDITIONAL: 0
;; QUESTION SECTION:
;; .    IN      NS

;; ANSWER SECTION:
.       0       IN      A       192.168.0.1

;; AUTHORITY SECTION:

;; ADDITIONAL SECTION:

;; Query time: 1 msec
;; SERVER: 8.8.8.8
;; WHEN: Thu Jun 18 08:40:44 2026
;; MSG SIZE  rcvd: 33

With tcp:

Code:

# drill -t @8.8.8.8 . NS
;; ->>HEADER<<- opcode: QUERY, rcode: NOERROR, id: 11673
;; flags: qr rd ra ; QUERY: 1, ANSWER: 13, AUTHORITY: 0, ADDITIONAL: 0
;; QUESTION SECTION:
;; .    IN      NS

;; ANSWER SECTION:
.       87203   IN      NS      a.root-servers.net.
.       87203   IN      NS      k.root-servers.net.
.       87203   IN      NS      d.root-servers.net.
.       87203   IN      NS      h.root-servers.net.
.       87203   IN      NS      e.root-servers.net.
.       87203   IN      NS      l.root-servers.net.
.       87203   IN      NS      b.root-servers.net.
.       87203   IN      NS      m.root-servers.net.
.       87203   IN      NS      j.root-servers.net.
.       87203   IN      NS      f.root-servers.net.
.       87203   IN      NS      c.root-servers.net.
.       87203   IN      NS      i.root-servers.net.
.       87203   IN      NS      g.root-servers.net.

;; AUTHORITY SECTION:

;; ADDITIONAL SECTION:

;; Query time: 116 msec
;; SERVER: 8.8.8.8
;; WHEN: Thu Jun 18 08:41:24 2026
;; MSG SIZE  rcvd: 228

With host

Code:

# host -t NS . 8.8.8.8
Using domain server:
Name: 8.8.8.8
Address: 8.8.8.8#53
Aliases:

 has address 192.168.0.1

# host -t NS . localhost
Using domain server:
Name: localhost
Address: 127.0.0.1#53
Aliases:

 name server c.root-servers.net.
 name server d.root-servers.net.
 name server e.root-servers.net.
 name server f.root-servers.net.
 name server g.root-servers.net.
 name server h.root-servers.net.
 name server i.root-servers.net.
 name server j.root-servers.net.
 name server k.root-servers.net.
 name server l.root-servers.net.
 name server m.root-servers.net.
 name server a.root-servers.net.
 name server b.root-servers.net.

fff2024g · 2026-06-18T14:04:07+0100

Code:

dig @8.8.8.8 . NS

; <<>> DiG 9.20.23 <<>> @8.8.8.8 . NS
; (1 server found)
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 41981
;; flags: qr rd ra ad; QUERY: 1, ANSWER: 13, AUTHORITY: 0, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 512
;; QUESTION SECTION:
;.                              IN      NS

;; ANSWER SECTION:
.                       87203   IN      NS      m.root-servers.net.
.                       87203   IN      NS      j.root-servers.net.
.                       87203   IN      NS      c.root-servers.net.
.                       87203   IN      NS      b.root-servers.net.
.                       87203   IN      NS      f.root-servers.net.
.                       87203   IN      NS      h.root-servers.net.
.                       87203   IN      NS      d.root-servers.net.
.                       87203   IN      NS      k.root-servers.net.
.                       87203   IN      NS      a.root-servers.net.
.                       87203   IN      NS      i.root-servers.net.
.                       87203   IN      NS      l.root-servers.net.
.                       87203   IN      NS      e.root-servers.net.
.                       87203   IN      NS      g.root-servers.net.

;; Query time: 206 msec
;; SERVER: 8.8.8.8#53(8.8.8.8) (UDP)
;; WHEN: Thu Jun 18 21:03:04 CST 2026
;; MSG SIZE  rcvd: 239

hruodr · 2026-06-18T14:16:47+0100

fff2024g said:
dig @8.8.8.8 . NS

And what does drill @8.8.8.8 . NS in your computer?

Alain De Vos · 2026-06-18T14:19:42+0100

Seems ok for me.
Could try to use local unbound ?

hruodr · 2026-06-18T14:27:23+0100

Alain De Vos said:
Seems ok for me.
Could try to use local unbound ?

In my original post you see what unbound gives (host -t NS . localhost).

What seems OK for you?!

fff2024g · 2026-06-19T06:20:48+0100

Code:

game@work2:~ $ drill @8.8.8.8 . NS
;; ->>HEADER<<- opcode: QUERY, rcode: NOERROR, id: 37370
;; flags: qr rd ra ; QUERY: 1, ANSWER: 13, AUTHORITY: 0, ADDITIONAL: 0 
;; QUESTION SECTION:
;; .    IN      NS

;; ANSWER SECTION:
.       87203   IN      NS      a.root-servers.net.
.       87203   IN      NS      g.root-servers.net.
.       87203   IN      NS      c.root-servers.net.
.       87203   IN      NS      b.root-servers.net.
.       87203   IN      NS      k.root-servers.net.
.       87203   IN      NS      l.root-servers.net.
.       87203   IN      NS      f.root-servers.net.
.       87203   IN      NS      h.root-servers.net.
.       87203   IN      NS      m.root-servers.net.
.       87203   IN      NS      i.root-servers.net.
.       87203   IN      NS      e.root-servers.net.
.       87203   IN      NS      d.root-servers.net.
.       87203   IN      NS      j.root-servers.net.

;; AUTHORITY SECTION:

;; ADDITIONAL SECTION:

;; Query time: 230 msec
;; SERVER: 8.8.8.8
;; WHEN: Fri Jun 19 13:20:22 2026
;; MSG SIZE  rcvd: 228

hruodr · 2026-06-19T08:26:44+0100

Strange, why in my case shows my router.

SirDice · 2026-06-19T10:13:20+0100

hruodr said:
my router

What kind of router is it? One of those all-in-one things supplied by the ISP?

sko · 2026-06-19T10:23:09+0100

hruodr said:
Strange, why in my case shows my router.

DNS hijacking by the ISP and/or their provided plastic router.

Quering Root Domain

Administrator