Troubleshoot Email or Subdomains After Delegation Changes
Delegation can be correct at the registry while mail or a hostname still fails. Use the checks below to confirm that public resolvers reach DNSimple for your zone and that the records you expect exist on the authoritative side.
Table of Contents
- Before you start
- Confirm delegation
- Email still undeliverable
- Subdomain still fails
- Have more questions?
Before you start
Read How DNS Caching and TTL Affect Delegation and Record Changes so resolver caching does not look like a misconfiguration. Flush local cache if needed (Check DNS Cache).
Confirm delegation
Verify name servers in DNS
- Run
dig NS yourdomain.com +short(replaceyourdomain.com). - Compare the result to DNSimple name servers. All four should appear and no unexpected third-party NS should remain unless you intentionally use Secondary DNS.
- If delegation is wrong, follow Pointing a Domain to DNSimple and wait for caches to expire, then retest.
Note
dig NS example.com +short uses the resolver you query. Results can be cached, so if you changed delegation recently, you may still see old name servers until the previous delegation TTL expires. For background, see How DNS Caching and TTL Affect Delegation and Record Changes.
Broader checks: Troubleshoot DNSimple Name Servers and Troubleshoot Domain Resolution Issues.
Email still undeliverable
Verify MX and related records
- Run
dig MX yourdomain.com +shortat a public resolver (for exampledig @8.8.8.8 MX yourdomain.com +short). - Confirm the MX targets resolve (A/AAAA) and match what your mail host expects.
- In DNSimple, open the zone and confirm MX records (and any required SPF, DKIM, or DMARC TXT records) exist on the apex domain that receives mail.
- If you send from the domain, review Email DNS Records Quick Reference for missing authentication records.
If delegation was wrong until recently, remote senders may still retry against old paths; combine DNS fixes with How DNS Caching and TTL Affect Delegation and Record Changes.
Subdomain still fails
Trace authority for the hostname
- Query the specific name:
dig A full.hostname.yourdomain.com +traceordig CNAME full.hostname.yourdomain.com +tracedepending on record type. - Confirm which zone is authoritative. If a parent zone delegates the subdomain with NS records, those child name servers must hold the records you expect.
- If the subdomain should live on DNSimple, ensure no stale NS at the parent points elsewhere.
- For resolution errors after edits, see Troubleshoot Record Resolution Issues.
Have more questions?
If you are stuck after these checks, contact support with dig output for NS and the failing record type, and we will be happy to help.