Managing DNS nameservers

How to manage nameservers

A domain name must have nameservers for users to be able to access its associated website. And when users try to go to a website, their devices need to know where to find the requested content. This is where the website’s IP address comes in. The address is then stored on a server: the nameserver.

Unless customers asked for different nameservers, domain names registered with Netim have the following nameservers by default:

  • ns1.netim.net
  • ns2.netim.net
  • ns3.netim.net

If you use our nameservers, you’ll be able to edit your zone file through Netim Direct (see the “How to edit your zone file” tutorial below).

Here’s how to manage your DNS nameservers from your Netim Direct client interface:

  1. Log in to your Netim Direct account
  2. Click on “My Domains” in the “Domain Names” section of the left-hand menu
  3. Click on the name of the domain you wish to modify
  4. In the “Domain name configuration” window, click the on the “Nameservers” button
My Domains List
Nameservers
Manage nameservers

How to enable or disable DNSSEC

Nameservers make the link between a domain name and an IP address. An IP address is the number your browser needs to be able to display your website’s contents.

DNS has vulnerabilities that are exploited by cybercriminals to lead users to a different website than the one they requested. That’s why DNSSEC was created: to prevent those problems.

DNSSEC secures communications between devices with an encrypted key and authenticates DNS requests.

There are two options to enable DNSSEC:

1️⃣ You would like to use Netim servers

In that case, all you have to do is enable or disable the DNSSEC option. Netim will automatically create keys to sign your DNS zone and send the necessary DS keys to the Registry. To enable or disable DNSSEC, simply follow this steps:

  1. Log in to your Netim Direct account
  2. Click on “My domains” in the “Domain names” menu
  3. Click on the relevant domain name
  4. In the “Summary” section, click on “DNSSEC” toggle button to enable or disable it.
My Domains List

2️⃣ You would like to use other servers

If you are using the nameservers provided by your hosting provider and they have signed your zone, then they will need to provide you with the DNSSEC information so that you can send it to us via the provided form.

Expected fields are :

  • Keytag: a number
  • Algorithm: a number
  • Encryption type: 1 (SHA-1), 2 (SHA-256), 3 (GOST R 34.11-94), 4 (SHA-384)
  • Digest: a string of characters (your public key)

Predefined nameservers

Predefined nameservers allow you to create and store nameserver lists, which can then be applied to your domain names.
To create predefined nameserver lists:

  1. Log in to your Netim Direct account
  2. Click on “Predefined DNS” in the left menu
  3. Click on “Create a new list”
  4. Enter your nameservers and click on “Create”
Create name server list

You can now apply this predefined nameserver list to your domain names. To do so:

  1. Log in to your Netim Direct account
  2. Go to the “My domains” tab in the left menu
  3. Click on the domain name of your choice to display its settings
  4. Go to the “DNS management” window and click on “DNS change”
  5. Click on “Use my predefined nameservers” to associate your list of predefined servers with your domain name
Manage name servers

Using Netim DNS Servers as secondary servers

If you wish to use Netim’s DNS servers as secondary servers, you must ensure that your primary DNS server is correctly configured. Our secondary servers update automatically from your primary server, provided that your primary server authorises them to do so.

Here are the two servers you can use as secondary DNS servers:

➡️ ns2.netim.net
➡️ ns3.netim.net
⚠️⛔ Do not use ns1.netim.net.

To configure this setup, your primary DNS server must:

  1.  Allow zone transfers (Enable XFR-access from)
    You must allow our secondary servers to retrieve the data from your zone. This requires enabling AXFR to the following IP addresses:
    IPv4 : 83.136.34.41
    IPv6 : 2a02:850:8::41
  2. Send update notifications (Send NOTIFYs to)
    Your primary server must also send notifications to our secondary servers to inform them of any changes:
    IPv4 : 83.136.34.41 Port 53
    IPv6 : 2a02:850:8::41 Port 53

Predelegation requirement and Zone Check

Depending on the Registry, your domain DNS zone might be required to pass a Registry check when you register or update a domain.

In other words: your domain name must resolve on the internet.

  • Example: the .is Registry will only allow you to register netim.is (nameservers: ns1.netim.net and ns2.netim.net) if the given nameservers are already answering DNS queries for netim.is.

Registries of these TLDs require nameservers to be set up for your domain before you attempt to register it.

You can check your DNS zone setup is in compliance with Registries’ requirements using our ZoneCheck tool.

  • ZoneCheck displays a “Success” message?
    You can register or update your domain name!

  • ZoneCheck displays a “Warning” message?
    The error won’t prevent you from registering or updating your domain name.

  • ZoneCheck displays a “Failed” message?
    Your DNS zone is not properly set up for that domain on the requested nameservers or the requested nameservers are not in compliance with the Registry’s requirements.

If the Zone Check displays a “Failed” message, additional steps might need to be taken:

  1. If you’re using Netim nameservers: not to worry, Netim will set up the DNS zone before going through with your domain name registration or update. If you’re still encountering a Zone Check error, please contact our customer support team.
  2. If you’re using external nameservers: you’ll have to reach out to your service provider so that they can set up your DNS zone.