| Previous | Next |
| DNS_ERROR_NSEC_INCOMPATIBLE_WITH_NSEC3_RSA_SHA1 | DNS_ERROR_BAD_PACKET |
DNS_INFO_NO_RECORDS
No matching records is not always NXDOMAIN
DNS_INFO_NO_RECORDS means the query completed without a record list for the requested owner name and RR type. The name can still exist. For example, a host may have an AAAA record but no A record, or a service name may exist without the queried SRV type. This differs from an NXDOMAIN response, which says the queried domain name itself does not exist.
Negative DNS answers can be cached, commonly using SOA data from the authority section. A resolver cache can therefore continue returning “no records” after an administrator adds the missing RR until the applicable negative TTL expires or the cache is deliberately cleared.
What to inspect
- Log the exact fully qualified name, class, and numeric RR type sent to the resolver.
- Inspect the DNS RCODE, CNAME chain, authority section, and SOA data instead of recording only the Windows status.
- Query the authoritative server to separate missing authoritative data from stale recursive-cache state.
- Do not substitute another RR type automatically unless the application’s protocol explicitly permits it.
References
- Microsoft: DnsQueryEx
- RFC 2308: Negative Caching of DNS Queries
- RFC 1035: Domain Names — Implementation and Specification
Looking for a different code? Search another status or error code.