Support
 
Phone Get Quote
 
Support
 
US: +1 888 720 9500
US: +1 888 791 1189
Intl: +1 925 924 9500
Aus: +1 800 631 268
UK: 0800 028 6590
CN: +86 400 660 8680

Direct Inward Dialing: +1 408 916 9892

Get Quote

 
  

What are DNS records?

DNS records are database records that reside in authoritative DNS servers and map URLs to appropriate IP addresses. These records comprise of text files written in DNS syntax and guide the DNS server on what to do. All DNS records have TTL (time to live) that indicates the frequency at which a DNS record will be refreshed by the DNS server.

Types of DNS records

The following are some of the common types of DNS records:
  • A record
  • CNAME record
  • MX record
  • TXT record
  • NS record
  • SOA record
  • SRV record
  • PTR record
  • A record (Address record)

    This is one of the basic types of DNS records which is used to point out the IP address of a given domain. Most of the websites have a single A record, but it’s possible to have multiple A records. Few high profile websites have different A records to distribute request traffic to one of various IP addresses (round robin load balancing).

  • CNAME record (Canonical name record)

    CNAME records are used instead of A record, when a domain or subdomain is an alias of another domain. When sites have subdomains, CNAME records which point to a root domain are used. These records direct users to the same IP address as the root domain.

  • MX record (Mail exchange record)

    These records are used to route emails in accordance with Simple Mail Transfer Protocol (SMTP), based on domain owner’s preference. MX record specifies the servers that should be used to deliver mails to when request is made to the domain. These records require a priority value as a part of their entry. The priority number indicates which of the servers listed in MX records should attempt to be used first.

  • TXT record (Text record)

    A domain can have more than one TXT record. These records are used to store any text based information that can be accessed when necessary and allow domain administrators to enter text in a DNS record. Initially only human readable notes were saved in TXT records, now machine readable codes can also be fed into these records. TXT records are particularly used for SPF (Sender Policy Framework) codes, these codes help a mail server determine if a message is from a trusted source.

  • NS record (Name server record)

    NS record indicates the authoritative DNS server, responsible for any domain. A domain can have several NS records which point out the domain's primary and backup name servers. The benefit of having many NS records on apex zone is additional redundancy of DNS service. To get the maximum redundancy, they should be hosted on different network segments

  • SOA record (Start of Authority record)

    The SOA record appears at the beginning of a DNS zone file, and includes critical information such as domain serial number, authoritative name server for the current DNS zone, email address of the administrator and so on.

  • SRV record (Service record)

    SRV records are service location records similar to MX but for other communication protocols. These records specify host names and port numbers for specific services like instant messaging, etc.

Simplify DNS record auditing and reporting with ADAudit Plus.

Fully functional 30-day trial

Monitoring DNS records with ADAudit Plus

Domain naming system (DNS) servers are crucial for the operation of any network. Any unintentional or malicious modification of DNS record settings can cause service unavailability. Hence it is important to track changes in DNS records.ADAudit Plus simplifies monitoring of DNS records by offering predefined DNS Nodes Removed reports along with intuitive graphical representation of the same for the ease of comprehension.

Steps to track DNS record changes

Once ADAudit Plus has been installed, it automatically configures audit policies required for Active Directory auditing.

To enable automatic configuration: Log in to the ADAudit Plus web console → Domain Settings → Audit Policy: Configure.

Deletions in DNS records can be identified by following the below mentioned steps:
  • Login to ADAudit Plus.
  • Select the required Domain from the dropdown list.
  • Go to the Reports tab.
  • Navigate to DNS Changes.
  • Select DNS Zones Modified.
User logon activity report
The following are some of the details that can be found on the DNS Nodes Removed report:
  • Object Name - Name of the DNS node that was deleted.
  • Who Deleted - The user who deleted the DNS node.
  • Time Deleted - Time of deletion.
  • Message - A description of the DNS record deletion that has been carried out.

ADAudit Plus comes bundled with more than 300 predefined reports that make AD auditing easier. The solution also sends real-time alerts for critical events and helps you to secure your network from threats and boosts your IT security posture. Check out the capabilities of ADAudit Plus here.

More related links

     

Native auditing becoming a little too much?

Try ADAudit Plus login monitoring tool to audit, track, and respond to malicious login and logoff actions instantaneously.

Try ADAudit Plus for free
 

ADAudit Plus Trusted By