Page 1 of 2
domain expiration
Posted: Sat May 15, 2021 9:51 am
by ccheltenham
What does it mean if you query the whois DB and get nothing back from it.
One of our URLs is simply "goship.com" which comes back with nothing from whois.
Its creating a domain expiration error in Nagios.
Re: domain expiration
Posted: Mon May 17, 2021 1:03 pm
by dchurch
I was unable to reproduce your issue; the "goship.com" domain for me says it expires in 255 days:
Code: Select all
$ /usr/local/nagios/libexec/check_domain.php -d goship.com
OK - Domain 'goship.com' will expire in 255 days (2022-01-27T19:12:33Z).
What is the full check command for that Domain Expiration service?
I'm wondering if your server is set up to query a different DNS server. What is the output from the following commands?
Code: Select all
cat /etc/resolv.conf
dig goship.com NS
whois goship.com
Re: domain expiration
Posted: Tue May 18, 2021 8:36 am
by ccheltenham
I appreciate your help with this -
for my NagiosXI servers it cannot resolve the following -
[email protected] ~ $ whois goship.com
[Querying whois.verisign-grs.com]
[email protected] ~ $ /usr/local/nagios/libexec/check_domain.php -d goship.com
So i have a DNS issue for sure.
It appears a review of the DNS servers fixes this.
Thanks for your help
Re: domain expiration
Posted: Tue May 18, 2021 8:50 am
by ccheltenham
One thing that does happen is the whois keeps failing no matter what DNS i use.
[email protected] ~ $ whois goship.com
[Querying whois.verisign-grs.com]
Is there another authority I can use and where is verisign configured on Nagios.
I can find it in ICANN and Verisign Who is
[email protected] ~ $ /usr/local/nagios/libexec/check_domain.php -d goship.com
Error running whois:
[email protected] ~ $ /usr/local/nagios/libexec/check_domain.php -d goship.com
[email protected] ~ $ whois goship.com
[Querying whois.verisign-grs.com]
[Unable to connect to remote host]
[email protected] ~ $ ping webwhois.verisign.com
PING webwhois.verisign.com (216.87.134.26) 56(84) bytes of data.
64 bytes from 216.87.134.26 (216.87.134.26): icmp_seq=1 ttl=44 time=68.3 ms
64 bytes from 216.87.134.26 (216.87.134.26): icmp_seq=2 ttl=44 time=69.4 ms
64 bytes from 216.87.134.26 (216.87.134.26): icmp_seq=3 ttl=44 time=71.1 ms
--- webwhois.verisign.com ping statistics ---
9 packets transmitted, 9 received, 0% packet loss, time 10199ms
rtt min/avg/max/mdev = 66.708/69.790/75.260/2.314 ms
Re: domain expiration
Posted: Tue May 18, 2021 8:59 am
by ccheltenham
[email protected] ~ $ ping webwhois.verisign.com
PING webwhois.verisign.com (199.16.84.26) 56(84) bytes of data.
64 bytes from 199.16.84.26 (199.16.84.26): icmp_seq=1 ttl=43 time=71.7 ms
64 bytes from 199.16.84.26 (199.16.84.26): icmp_seq=2 ttl=43 time=70.5 ms
64 bytes from 199.16.84.26 (199.16.84.26): icmp_seq=3 ttl=43 time=71.0 ms
64 bytes from 199.16.84.26 (199.16.84.26): icmp_seq=4 ttl=43 time=71.3 ms
64 bytes from 199.16.84.26 (199.16.84.26): icmp_seq=5 ttl=43 time=71.9 ms
64 bytes from 199.16.84.26 (199.16.84.26): icmp_seq=6 ttl=43 time=68.3 ms
64 bytes from 199.16.84.26 (199.16.84.26): icmp_seq=7 ttl=43 time=75.5 ms
^C
--- webwhois.verisign.com ping statistics ---
7 packets transmitted, 7 received, 0% packet loss, time 8185ms
rtt min/avg/max/mdev = 68.340/71.513/75.529/2.004 ms
[email protected] ~ $ /usr/local/nagios/libexec/check_domain.php -d goship.com -s webwhois.verisign.com
Error running whois:
[email protected] ~ $
Re: domain expiration
Posted: Tue May 18, 2021 1:01 pm
by dchurch
The whois server the "whois" command goes to for information comes from the DNS "NS" record, which you can view using the "dig" command:
Code: Select all
# query your default DNS server
dig goship.com NS
# query Google's DNS server
dig @8.8.8.8 goship.com NS
Please post the output from these commands. Perhaps this can help us with debugging.
Try using "-s whois.verisign-grs.com" in your check command:
Code: Select all
/usr/local/nagios/libexec/check_domain.php -s whois.verisign-grs.com -d goship.com
ccheltenham wrote:$ whois goship.com
[Querying whois.verisign-grs.com]
This is very strange output for the "whois" command. Perhaps you're using a custom whois command. What's the output from the following commands?
Re: domain expiration
Posted: Tue May 18, 2021 3:56 pm
by ccheltenham
[email protected] ~ $ whois --version
jwhois version 4.0, Copyright (C) 1999-2007 Free Software Foundation, Inc.
This program is free software with ABSOLUTELY NO WARRANTY; you may
redistribute it under the terms of the GNU General Public License.
[email protected] ~ $
Re: domain expiration
Posted: Tue May 18, 2021 4:35 pm
by dchurch
Which Linux distro are you using? Did you install jwhois manually?
Re: domain expiration
Posted: Thu May 20, 2021 8:28 am
by ccheltenham
RHEL 7.9.2009
Re: domain expiration
Posted: Thu May 20, 2021 8:31 am
by ccheltenham
What are the permissions supposed to be in this dir -
[email protected] /usr/local/nagios/libexec $ ll
total 10676
-rwsrwxr-x 1 root nagios 177560 Jun 22 2020 check_apt
-rwsrwxr-x. 1 root nagios 6897 Nov 13 2018 check_asterisk.pl
-rwsrwxr-x. 1 root nagios 4173 Jan 20 10:27 check_bl
-rwsrwxr-x. 1 root nagios 2287 Jan 20 10:27 check_bpi.php
-rwsrwxr-x 1 root nagios 2342 Jun 22 2020 check_breeze
not sure if this changed on me.