DIG Command Cheatsheet

Basic Queries

Query default record (A):dig example.com – obtiene el registro A (IPv4) por defecto.

Query all records:dig example.com ANY – muestra todos los registros disponibles (A, AAAA, MX, NS, TXT, etc).

Compact output:dig +short example.com – salida limpia, ideal para scripts.

---

Specify DNS Server

Query using Google DNS:dig @8.8.8.8 example.com

Query using Cloudflare DNS:dig @1.1.1.1 example.com MX – pide los registros MX al resolver de Cloudflare.

Query using specific nameserver:dig @ns1.example.com example.com – consulta directamente un servidor autoritativo.

---

Record Types

A (IPv4):dig example.com A

AAAA (IPv6):dig example.com AAAA

CNAME (alias):dig example.com CNAME

MX (mail exchange):dig example.com MX

TXT (SPF, DKIM, etc):dig example.com TXT

NS (nameservers):dig example.com NS

SOA (Start of Authority):dig example.com SOA

---

Propagation & Comparison

Compare multiple resolvers:

for s in 8.8.8.8 1.1.1.1 9.9.9.9; do  
  echo "Resolver: $s"; dig +short @$s example.com;  
done

– útil para verificar propagación global de DNS.

---

/Users/franco/Documents/dev/VuePress/docs/dig/README.md Documents/dev/VuePress/docs/dig/README.md

Trace & Debug

Trace resolution path:dig +trace example.com – sigue la resolución desde la raíz hasta el servidor autoritativo.

Show only the answer:dig example.com +noall +answer

Show stats:dig example.com +stats

Force TCP (instead of UDP):dig +tcp example.com – testea truncamientos o firewalls.

No recursion (authoritative only):dig +norecurse @ns1.example.com example.com

---

Reverse Lookup

Find domain from IP (PTR):dig -x 93.184.216.34

Compact reverse output:dig -x 93.184.216.34 +short

---

TTL & Expiration Info

Show TTL of records:dig example.com +noall +answer – el número junto al registro indica el TTL (Time-To-Live).

---

DNSSEC

Check DNSSEC information:dig example.com +dnssec

Validate signatures:dig example.com +dnssec +multi

---

Scripting Tips

Get first IP only:dig +short example.com | head -n1

Save to variable:

IP=$(dig +short example.com | head -n1)
echo $IP

Query multiple record types at once:

for t in A AAAA MX TXT; do  
  echo "--- $t ---"; dig +short example.com $t;  
done