Technical changes

1 How to manage nameservers

2 How to edit your zone file

3 How to enable or disable DNSSEC

4 Predelegation requirement and Zone Check

5 Zone templates

6 Predefined nameservers

7 Web, email and social media forwarding

7.1 The different types of domain forwarding

7.2 Social media forwarding

7.3 Parking page

7.4 Email forwarding

How to manage nameservers

A domain name must have nameservers for users to be able to access its associated website. And when users try to go to a website, their devices need to know where to find the requested content. This is where the website’s IP address comes in. The address is then stored on a server: the nameserver.

Unless customers asked for different nameservers, domain names registered with Netim have the following nameservers by default:

ns1.netim.net
ns2.netim.net
ns3.netim.net

If you use our nameservers, you’ll be able to edit your zone file through Netim Direct (see the “How to edit your zone file” tutorial below).

Note 💡

If you use another hosting provider, you might be asked to change your current nameservers to theirs. Once the change has been made, you won’t be able to edit your zone file through your Netim Direct account.
It will take a few hours after a change has been made for your new DNS information to be propagated through the internet.

Here’s how to manage your DNS nameservers from your Netim Direct client interface:

Log in to your Netim Direct account
Click on “My Domains” in the “Domain Names” section of the left-hand menu
Click on the name of the domain you wish to modify
In the “Domain name configuration” window, click the on the “Nameservers” button

How to edit your zone file

A zone file is a text-based file stored on nameservers. It contains your domain name configuration: where your website points to, which servers your emails go through, etc.

You have the option to add/edit/delete DNS records when editing your zone file.

You need precise information to manipulate DNS records. The only reason you might be required to change your DNS settings is if Netim, or a service provider, gives your specific instructions to do so.

Important ⚠

You can only edit your zone file through Netim Direct if your website uses our nameservers. If it doesn’t, you have to go through your DNS provider to edit your zone file.
It will take a few hours after a change has been made for your zone file information to be propagated through the internet.

Here’s how to edit your DNS records in your zone file from your Netim Direct client interface:

Log in to your Netim Direct account
Click on “My Domains” in the “Domain Names” section of the left-hand menu
Click on the name of the domain you wish to modify
In the “Domain name configuration” window, click the on the “Zone file” button

The following DNS record types are supported:

A: used to point a domain or subdomain to an IPv4 address.
AAAA: used to point a domain or subdomain to an IPv6 address.

Note 💡

Wildcards are authorised on type A and AAAA registrations.

CAA (Certification Authority Authorisation): used to specify which certificate authorities (CA) are authorised to issue SSL/TLS certificates for a domain. This is defined as a text string.
CNAME (Canonical Name): used to point a subdomain to a FQDN (Full Qualified Domain Name), which points to one or more IP addresse(s). It is not a redirection: the subdomain points to the same IP address as the specified name. ⚠ It is not possible to add a CNAME record to a domain or subdomain that already has another record, whatever its type.
HTTPS (Hypertext Transfer Protocol Secure): used to describe HTTPS services associated with a name, such as destination server, priorities, or encryption settings (e.g. to optimise connections). It is a specialised type of the SVCB DNS record.
MX (Mail Exchange): used to specify the mail server(s) for the domain name. Each record must indicate a priority value (a number): the lower the number, the higher the priority.
NS (Name Server): specifies the authoritative name servers for the domain zone. These records allow to delegate management of part of the zone to third-party DNS servers.
SRV (Service): used to define a host and port for services such as Voice over IP (VoIP), instant messaging, etc., including port specification.
SSHFP (Secure SHell (Key) FingerPrint): used to store the fingerprints of public SSH keys associated with a domain, allowing the authenticity of an SSH server to be verified without a prior key exchange.
SVCB (SerViCe Binding): used to describe a service and its associated parameters (priority, target name, options, encryption, etc.). It is a generic entry, not tied to any specific service.
TLSA (TLS Authentication): used with the DANE protocol (DNS-based Authentication of Named Entities). It allows a certificate or public key to be associated with a domain name to secure TLS connections, by specifying which certificate should be accepted.
TXT (Text): used to associate one or more text strings with a domain name. Commonly used for SPF, DKIM, and DMARC records, or when a service provider needs to verify domain ownership.

How to enable or disable DNSSEC

Nameservers make the link between a domain name and an IP address. An IP address is the number your browser needs to be able to display your website’s contents.

DNS has vulnerabilities that are exploited by cybercriminals to lead users to a different website than the one they requested. That’s why DNSSEC was created: to prevent those problems.

DNSSEC secures communications between devices with an encrypted key and authenticates DNS requests.

Important ⚠

DNSSEC is not available for all extensions (go to the list).
If you’re in the process of transferring a DNSSEC-enabled domain, you need to be very careful when entering your nameservers information. If you edit your nameservers settings and break the DNSSEC chain, your domain name will become unreachable.
Please feel free to contact customer support to be guided through the transfer process.

There are two options to enable DNSSEC:

1️⃣ You would like to use Netim servers

In that case, all you have to do is enable or disable the DNSSEC option. Netim will automatically create keys to sign your DNS zone and send the necessary DS keys to the Registry. To enable or disable DNSSEC, simply follow this steps:

Log in to your Netim Direct account
Click on “My domains” in the “Domain names” menu
Click on the relevant domain name
In the “Summary” section, click on “DNSSEC” toggle button to enable or disable it.

2️⃣ You would like to use other servers

If you are using the nameservers provided by your hosting provider and they have signed your zone, then they will need to provide you with the DNSSEC information so that you can send it to us via the provided form.

Expected fields are :

Keytag: a number
Algorithm: a number
Encryption type: 1 (SHA-1), 2 (SHA-256), 3 (GOST R 34.11-94), 4 (SHA-384)
Digest: a string of characters (your public key)

Predelegation requirement and Zone Check

Depending on the Registry, your domain DNS zone might be required to pass a Registry check when you register or update a domain.

In other words: your domain name must resolve on the internet.

Example: the .is Registry will only allow you to register netim.is (nameservers: ns1.netim.net and ns2.netim.net) if the given nameservers are already answering DNS queries for netim.is.

Important ⚠

Here are some examples of TLDs with that requirement: .br, .de, .dk, .fi, .gw, .hu, .ie, .it, .lu, .my, .net.za, .no, .org.za, .pt, .si, .web.za, .za

Registries of these TLDs require nameservers to be set up for your domain before you attempt to register it.

You can check your DNS zone setup is in compliance with Registries’ requirements using our ZoneCheck tool.

ZoneCheck displays a “Success” message?
You can register or update your domain name!
ZoneCheck displays a “Warning” message?
The error won’t prevent you from registering or updating your domain name.
ZoneCheck displays a “Failed” message?
Your DNS zone is not properly set up for that domain on the requested nameservers or the requested nameservers are not in compliance with the Registry’s requirements.

If the Zone Check displays a “Failed” message, additional steps might need to be taken:

If you’re using Netim nameservers: not to worry, Netim will set up the DNS zone before going through with your domain name registration or update. If you’re still encountering a Zone Check error, please contact our customer support team.
If you’re using external nameservers: you’ll have to reach out to your service provider so that they can set up your DNS zone.

Zone templates

A zone template contains zone file settings: it’s a list of DNS records you can save and use to configure your domain names.

As an example, you could create the following zone template:

@ IN NS ns1.netim.com
@ IN NS ns2.netim.com
@ IN NS ns3.netim.com
@ IN MX 10 mx1.netim.com
@ IN MX 10 mx2.netim.com
@ IN A 185.26.105.244
www IN CNAME netim.com

And then save it. Once saved, it can be easily applied to another domain.

Once the zone template has been applied, you’ll end up for the following DNS zone for the “example.fr” domain:

example.fr IN NS ns1.netim.com
example.fr IN NS ns2.netim.com
example.fr IN NS ns3.netim.com
example.fr IN MX 10 mx1.netim.com
example.fr IN MX 10 mx2.netim.com
example.fr IN A 185.26.105.244
www.example.fr IN CNAME netim.com

Predefined nameservers

Predefined nameservers allow you to create and store nameserver lists, which can then be applied to your domain names.
To create predefined nameserver lists:

Log in to your Netim Direct account
Click on “Predefined DNS” in the left menu
Click on “Create a new list”
Enter your nameservers and click on “Create”

You can now apply this predefined nameserver list to your domain names. To do so:

Log in to your Netim Direct account
Go to the “My domains” tab in the left menu
Click on the domain name of your choice to display its settings
Go to the “DNS management” window and click on “DNS change”
Click on “Use my predefined nameservers” to associate your list of predefined servers with your domain name

Web, email and social media forwarding

The different types of domain forwarding

Our web forwarding service is included for free with all your domain name registrations. It makes it possible to redirect domain names to a URL.

For example, you could redirect from www.netim.com to www.netim.fr
Once the redirect is set up, users typing www.netim.com in their address bar will be directed to www.netim.fr instead.

You can access the forwarding control panel by doing the following:

Log in to your Netim Direct account
Select “My domains” in the left menu
Click on the domain you would like to redirect and on “Web forwarding”

Important ⚠

Your domain or sub-domain has to point to our forwarding server for redirects to be set up.

Types of forwarding	What the user types	Website	URL in the address bar	SEO score
Permanent redirect (301)	www.netim.com	www.netim.fr	www.netim.fr	www.netim.fr indexed
Temporary redirect (302)	www.netim.com	www.netim.fr	www.netim.fr	www.netim.com indexed
Masked redirect (URL frame)	www.netim.com	www.netim.fr	www.netim.com	Bad for SEO

301 and 302 redirects are unmasked: when users try to access netim.com, they will be redirected to netim.fr and their address bars will display netim.fr instead of netim.com.
With masked redirects, the source website is executed in a frame, so the address bar still displays netim.com instead of netim.fr.

Note 💡

A masked redirection will negatively affect your SEO (Search Engine Optimization)
More and more websites don’t support URL frames anymore. That’s we recommend using unmasked redirects rather than URL frames

The “Do not pass query parameters (advanced)” option makes it possible for every page on your website to be redirected to the same URL.

If you redirect www.netim.com to ww.netim.fr, the query parameters are passed by default.

So when you try to access netim.com/test, you’ll be redirected to netim.fr/test

However, if you choose to enable the “Do not pass query parameters (advanced)” option, any source URL will direct users to the URL you picked when setting up your redirect.

So if you try to access netim.com/test, you’ll be redirected to netim.fr and not netim.fr/test

Social media forwarding

This type of forwarding allows you to redirect users to your social network profiles.

We offer redirects to most social networks: LinkedIn, Facebook, Instagram, Twitter, Youtube, GitHub and Twitch.

You can access the forwarding control panel by doing the following:

Log in to your Netim Direct account
Select “My domains” in the left menu
Click on the domain you would like to redirect and on “Web forwarding”

Parking page

A parking page allows you to display content while you wait for your site to go live. Netim displays a message on your parking page by default. If you would like to customise this message, simply go to the “Add a redirect” tab and input your HTML code in the relevant window.

You can access the forwarding control panel by doing the following:

Log in to your Netim Direct account
Select “My domains” in the left menu
Click on the domain you would like to redirect and on “Web forwarding”

Email forwarding

Our email forwarding service is included for free with all your domain name registrations.

For example, if my domain is www.netim.fr, I can create a forwarding email address, contact@netim.fr, and redirect it to me@gmail.com. Every email sent to contact@netim.fr will then go through our forwarding servers and end up in the me@gmail.com inbox.

See our dedicated tutorial on how to create an e-mail redirect or catch-all.

Important ⚠

Your domain has to use our default email servers for redirects to be set up.
Forwarding email addresses do not have their own inboxes: you can’t access emails sent to a forwarding address via a webmail service, set up an IMAP/POP/SMTP account or send emails from the forwarding email address.