TechKnowSurge
CompTIA Network+ 5.5 CompTIA A+ Core 1 2.8 Cisco CCST Networking 5.3 Cisco CCNA 4.3 CompTIA Network+ 1.4 Cisco CCST Networking 1.5
VideoNetworkFree

DEMO: NSlookup

NSLookup is a command-line tool used to verify DNS resolution by returning the IP addresses associated with a domain name. MX Toolbox extends DNS testing through a web interface, supporting lookups for MX, A, AAAA, SPF records, and blacklist checks.

Complete this video to capture a CTF flag worth 1 point.

About this video

NSLookup is a command-line utility built into most operating systems that verifies DNS resolution by translating a human-readable domain name into its corresponding IP addresses. When queried with a domain like www.google.com, it identifies the DNS server handling the request and returns both IPv4 and IPv6 results, confirming that name resolution is working as expected on the local machine. Running NSLookup in interactive mode provides additional flexibility, including the ability to switch to a different DNS server mid-session, which is useful for comparing results from a local resolver against a public one such as Google's 8.8.8.8. For broader DNS diagnostics, MX Toolbox is a web-based tool that supports lookups across multiple DNS record types from a single interface. Beyond the standard A and AAAA records that map hostnames to IPv4 and IPv6 addresses, it can retrieve MX records that identify the mail servers responsible for a domain, as well as SPF records, which are text-based entries that specify which servers are authorized to send email on a domain's behalf. MX Toolbox also includes blacklist checking, making it a practical resource for both DNS troubleshooting and email deliverability analysis.

What you'll learn

What's covered

DNS Testing Tools

Aligned to

CompTIA Network+
5.5 Given a scenario, use the appropriate tool or protocol to solve networking issues.
1.4 Explain common networking ports, protocols, services, and traffic types.
CompTIA A+ Core 1
2.8 Given a scenario, use networking tools.
Cisco CCST Networking
5.3 Run basic diagnostic commands and interpret the results.
1.5 Describe common network applications and protocols
Cisco CCNA
4.3 Explain the role of DHCP and DNS within the network

Key terms

Domain Name System
DNS
A hierarchical naming system that translates human-readable domain names into IP addresses.
IP Address
A numerical label assigned to each device connected to a network that uses the Internet Protocol.
nslookup
A command-line tool used to query DNS servers and verify that domain name resolution is working correctly.
MX Record
A DNS record type that specifies the mail exchange server responsible for receiving email for a domain.
A Record
A DNS record type that maps a hostname to an IPv4 address.
AAAA Record
A DNS record type that maps a hostname to an IPv6 address.
SPF Record
A DNS TXT record that specifies which mail servers are authorized to send email on behalf of a domain.

Transcript

Why We Look Up Names

We know that we don't type in IP addresses to get to certain websites. In fact, that becomes even more critical when we're dealing with IP version 6 addresses, because they're so long. So instead, what we do is type in some sort of name using the naming convention that we talked about before. An example of this that we're going to be using is www.google.com, where www is the host and google.com is the domain.

Using nslookup

What we can use to test that domain lookup is working on this machine is nslookup. To use nslookup, all I have to do is type in nslookup and the domain that I want to access. So I'm going to type in nslookup www.google.com and hit enter.

It's showing me the server that it's using to look this up, which is 192.168.42.1. That is my home router that it's using, and that home router then is in turn going and looking up other DNS servers and getting the information that I need. It's coming back with an IP version 6 address, and it's coming back with an IP version 4 address. So we have now successfully figured out what IP addresses are associated with www.google.com.

Now there are some additional features with nslookup. To use those additional features, I just type in nslookup, and that accesses the program and opens it up. It's showing me which server it's using, and all I have to do now is type in www.google.com, and it gives me the same answer here. So I can see that there's the same answer there.

But perhaps I want to change some of the options — maybe I want to reference a different server. Then I just type in server and then the server that I want to use. In this case I'm going to use the 8.8.8.8 server, which is a DNS server that's publicly available out there. So I'll hit enter, and now I'm going to type in www.google.com and see what I come up with. Here we have the same answer once again, but it's from a different server.

So those are some ways that you can use nslookup to test to make sure DNS is working.

MX Toolbox

There is one other tool that I wanted to show you, a tool that I like, and that is MX Toolbox. I'm going to bring up a browser and type in MX Toolbox, and we're just going to take a look. I'll click on this MX Toolbox.

What I can do here is lookups. This particular one is for MX records, so let's take a look at the MX record for google.com and hit enter. It's going to actually show me the mail exchange record for it. I forgot an E in there, so — there, that looks a little better. It's showing me some SMTP addresses that it has, and showing me some other records that are mail exchange records.

In fact, I can actually look up a lot of different types of records. The records that we were talking about before were just an A record, or I could look up just the AAAA record, the quad A record, which would be the IP version 6 address for these domains. You can see that I can look up a lot of different information, and also do things like check the domain for blacklists. So there are a lot of cool features with this MX Toolbox. I recommend going and checking it out, because it'll give you some aspects to the different records.

Another one that I'll use this a lot on is the SPF record. The SPF record is a text record that tells machines what servers are allowed to send mail on behalf of it. This is one of the records that I'll quite often look up, and then it gives you this information of what servers are allowed to send mail on behalf of it.

So MX Toolbox is a great resource, one of those things that you can jump on and play around with.

About TechKnowSurge

TechKnowSurge builds IT and cybersecurity professionals through hands-on, concept-first training built around real understanding — not memorization. Free interactive tools, structured programs, and 25+ years of real-world experience, all in one place.

Explore free tools and programs →