non-authoritative answer?

I did an nslookup on my name and got this
c:> nslookup


Non-authoritative answer:

What does it mean by "non-authoritative answer?"
For what it's worth, I have the A records for pointing to my home IP (

Who is Participating?
I wear a lot of hats...

"The solutions and answers provided on Experts Exchange have been extremely helpful to me over the last few years. I wear a lot of hats - Developer, Database Administrator, Help Desk, etc., so I know a lot of things but not a lot about one thing. Experts Exchange gives me answers from people who do know a lot about one thing, in a easy to use platform." -Todd S.

see if this sheds some light
dissolvedAuthor Commented:
Thanks for link. So is that link saying it is an error or not?
I can ping and it returns the proper IP (mine).
WHat do you think?
Chris DentPowerShell DeveloperCommented:

Non-authoritative normally means one of two things (and neither is an error):

1. It's given the answer from the servers DNS Cache rather than performing a full lookup on the address (back to the source).

2. The server is not the start of authority for the domain and may have a slave zone

In nslookup you can see if further details about the record with the "set debug" command:

C:\> nslookup
> set debug

Which will show you an ANSWERS section (and loads of other things) including the remaining TTL (Time To Live). Once the TTL Expires it'll request the address from either the specified Forwarder or the Source Server if you ask it to.
Ultimate Tool Kit for Technology Solution Provider

Broken down into practical pointers and step-by-step instructions, the IT Service Excellence Tool Kit delivers expert advice for technology solution providers. Get your free copy now.

dissolvedAuthor Commented:
ok , so non authorative is either an answer that is cached, or the server isnt the state of authority for the domain.

I am using my registar's DNS servers. I havent touched those. All I have done is changed the A and CNAME records. Any idea whats going on?
Chris DentPowerShell DeveloperCommented:

Not sure, is the real domain name? I'm assuming not since that one times out.

Is the server you're asking questions of the first name server in charge of the domain?

Is DNS returning incorrect details?
dissolvedAuthor Commented:
well when i ping my domain name, it returns the correct IP address.
Does that mean I shouldnt worry?

thanks chris!
Chris DentPowerShell DeveloperCommented:

It should do.

Still, you should be able to nslookup on your primary DNS (the primary DNS for the domain that is) and get an authoritative answer. If the server you're asking isn't the primary then don't worry - it's just normal cache functionality.
dissolvedAuthor Commented:
ok gotcha. The primary DNS for my domain was never touched (still using NameSecure's....the place I registered my name).
Are you saying their secondary server cached my host to IP mapping?

Or another DNS server along the way?

Chris DentPowerShell DeveloperCommented:

The non-authoritative answer you're getting is from the cache on the server you ask (even if it just added it). Unless that server uses Forwarders then it got that answer directly from the authoritative server for the domain.

The process used by the server for it getting the address (like google) without Forwarders roughly like:

 - Ask one of the root servers for the TLD (Top Level Domain) server.

C:\> nslookup
> server tells it to ask one of the .com servers, like

 - Now we know which TLD server to ask we ask one of those for the address

> server

That one tells it to ask one of ns1 - ns4

 - Ask one of the name servers for google.

> server

Which, finally, will give us an authoritative answer to the question we asked. It's not entirely accurate to illustrate that with nslookup, but it should give you an idea.

The only difference when using Forwarders is that the server you forward requests to does all the looking around and eventually returns it to the server you asked in the first place.

Of course, if the server you ask the question of is Authoritative for the domain then that process is a lot shorter - an immediate authoritative answer.

Makes sense?
dissolvedAuthor Commented:

I read ya.
When I do  c:> nslookup
The nslookup command is being performed on MY DNS server (in other words, it is being performed on my local nslookup here at my house. If i were to go to work and do the nslookup command, it would use my work's DNS servers to do the nslookup)

By the way:
I got an IP of as the authoritative answer for
Is that right?

ps: You are one smart m***r F***ker
Chris DentPowerShell DeveloperCommented:

Yep that's the right IP, and you have the right idea :)

nslookup will always use the first DNS in your TCP/IP config unless that's down, then it'll try the second. Or unless you tell it to use something else with the server command.

Experts Exchange Solution brought to you by

Your issues matter to us.

Facing a tech roadblock? Get the help and guidance you need from experienced professionals who care. Ask your question anytime, anywhere, with no hassle.

Start your 7-day free trial
It's more than this solution.Get answers and train to solve all your tech problems - anytime, anywhere.Try it for free Edge Out The Competitionfor your dream job with proven skills and certifications.Get started today Stand Outas the employee with proven skills.Start learning today for free Move Your Career Forwardwith certification training in the latest technologies.Start your trial today

From novice to tech pro — start learning today.

Question has a verified solution.

Are you are experiencing a similar issue? Get a personalized answer when you ask a related question.

Have a better answer? Share it in a comment.