DNS

DNS 2 SERVFAIL vs 10 NOTZONE

Both DNS 2 (SERVFAIL) and 10 (NOTZONE) belong to the DNS Response Codes (RCODEs) category. 2 indicates that server failure. The name server encountered an internal error while processing the query. Meanwhile, 10 means that name not contained in zone. A name used in the Prerequisite or Update section is not within the zone denoted by the Zone section.

説明

Server failure. The name server encountered an internal error while processing the query.

このコードが表示される場合

The recursive resolver could not get an authoritative answer — commonly caused by DNSSEC validation failures, unreachable upstream nameservers, or misconfigured zones.

解決方法

Try a different resolver (e.g., 8.8.8.8 or 1.1.1.1) to isolate the issue. If you control the zone, check DNSSEC signatures, SOA serial consistency, and nameserver reachability.

説明

Name not contained in zone. A name used in the Prerequisite or Update section is not within the zone denoted by the Zone section.

このコードが表示される場合

Your dynamic update tried to modify a record that falls outside the zone specified in the update message (e.g., updating foo.example.org in the example.com zone).

解決方法

Ensure all names in the update are within the target zone. Check for typos in the zone name or the records being updated.

主な違い

1.

DNS 2: Server failure. The name server encountered an internal error while processing the query.

2.

DNS 10: Name not contained in zone. A name used in the Prerequisite or Update section is not within the zone denoted by the Zone section.

3.

You encounter 2 when the recursive resolver could not get an authoritative answer — commonly caused by DNSSEC validation failures, unreachable upstream nameservers, or misconfigured zones.

4.

You encounter 10 when your dynamic update tried to modify a record that falls outside the zone specified in the update message (e.g., updating foo.example.org in the example.com zone).

どちらをいつ使うか

For 2 (SERVFAIL): Try a different resolver (e.g., 8.8.8.8 or 1.1.1.1) to isolate the issue. If you control the zone, check DNSSEC signatures, SOA serial consistency, and nameserver reachability. For 10 (NOTZONE): Ensure all names in the update are within the target zone. Check for typos in the zone name or the records being updated.

詳しく見る