$ host www.sex.com www.sex.com is an alias for dmz01.cdn.live. dmz01.cdn.live ha... | Hacker News

Hacker Newsnew | past | comments | ask | show | jobs | submit

Symbiote on April 1, 2020 | parent | context | favorite | on: 1.1.1.1 for Families

  $ host www.sex.com
  www.sex.com is an alias for dmz01.cdn.live.
  dmz01.cdn.live has address 15.222.131.21
  
  $ host www.sex.com 1.1.1.3
  Host www.sex.com not found: 5(REFUSED)
  
  $ host www.nothing 1.1.1.3
  Host www.nothing not found: 3(NXDOMAIN)

I hadn't noticed a DNS REFUSED response before. That seems reasonable, although a web browser's error message doesn't differ between REFUSED and NXDOMAIN.

andyjpb on April 1, 2020 [–]

The error may differ if the zone is signed with DNSSEC.

NXDOMAIN is a valid response that won't pass a signature verification.

REFUSED just means that DNS Server can't or won't provide a response at this time.

psz on April 1, 2020 | [–]

"Can't provide a response" should be SERVFAIL.

Consider applying for YC's Fall 2026 batch! Applications are open till July 27.
Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact