I have a Bind named server as caching server running Suddenly can it not resolve mikrotik.com and gives this error: ------------------------ nslookup -po=1053 mikrotik.com 127.0.0.1 ;; communications error to 127.0.0.1#1053: timed out ;; Got SERVFAIL reply from 127.0.0.1 Server: 127.0.…

Well ... running query against your local DNS resolver ("server: 127.0.0.1#1053") doesn't prove much. But running query against mikrotik's own DNS servers fails as well: $ dig mikrotik.com @159.148.172.248 ; <<>> DiG 9.16.50-Debian <<>> mikrotik.com @159.148.172.248 ;; global options: +cmd ;; con…

@normis SOMETHING'S NOT WORKING... [image] Support@mikrotik.com problem, domain not found General Algunos de los destinatarios no recibieron su mensaje. Asunto: OPENVPN+RADIUS+MFA issue Enviado el: 17/06/2026 13:08 No se puede localizar a los dest…

I did not dig much deeper into it except checking that nothing has changed at my side. My bind named server is behind the 127.0.0.1 ip and get it's upstream from global DNS's. Just strange that the situation was the same yesterday...if mikrotik.com nameservers really are "gone" then I would expect…

Samehere . . . local caching and ISP DNS can't find it, but 1.1.1.1 and 8.8.8.8 still do. download.mikrotik.com is gone for me in DNS as well. I created local entries, and the sites do still work though. Some might be doing opportunistic caching and not timed out yet, ???

Caching servers will cache (positive) replies up to specified TTL. And TTL starts counting down after record is retrieved from authoritative DNS server. Caching servers won't fetch record from upstream servers if they have record cached and its TTL is still valid. Which means that there's nothing op…

And then there is optimistic caching (as I mentioned prior) as used by AdGuard: "cache_optimistic` (since v0.107.0) — Make AdGuard Home respond from the cache even when the entries are expired and also try to refresh them" Not sure if anything else does similar, but with a TTL of just 6 hours (and…

It seems that ns1.mt.lv and ns2.mt.lv which are NSes for mimas.mt.lv and moon.mt.lv (NSes for mikrotik.com ) are unreachable over IPv4 but reachable over IPv6. I bet they're hosted on RouterOS and no one set up any monitoring to fix it, because having your NSes down for over 10h as networking company…

Not likely. The IP lookup for the nameservers will be a part of the SOA with the registrant (you can't serve DNS to a device trying to to find the server from the server "You can't get there from here" applies. Seems more like thier domain registrant screwed the pooch from here. (Similar result for…

What? MikroTik is hosting its own NSes, so we're looking at simple glue record (aka ADDITIONAL section). Your browser asks for forum.mikrotik.com, your OS will ask: Root servers (via root hints) for NS of com -> a.gtld-servers.net;192.5.6.30 NSes of com for NSes of mikrotik.com -> moon.mt.lv Root …

Yes, they host thier own nameservers . . . . But something upstream has to point to them, or they will never be found. (I host my own, and have done numerous Corporate deployments . . Finding the authoritative NS for a domain, it's done via the NS record(s) (errantly said SOA prior, but that is als…

Bind caching server can not resolve mikrotik.com

Site Feedback

rextended June 17, 2026, 12:58pm 3

@normis
SOMETHING'S NOT WORKING...