Interactive module · The Nameforge
DNS: The Nameforge
DNS looks simple until it ruins everyone's Friday. Your job is to make sure it doesn't. Learn DNS by using it — in the terminal, on broken systems, against real symptoms — from first query to full incident response.
Begin the first quest →
0/5 quests · 0 XP · rank: Name Apprentice
⏱️ ~4h full module•🧪 terminal-first, hands-on•📈 beginner → operator•36 quests · 3,440 XP at completion
Debug
Prove whether it's DNS, the cache, the resolver, or the zone — with evidence, fast.
Operate
Run zones, transfers, reverse DNS and TTL strategy like a real operator.
Design & defend
Split-horizon, DNSSEC, delegation, and production monitoring.
The quest map
12 chapters and a final boss. The first quests are fully playable now — more chapters are forging.
1
The Lost Name
Names, IPs, /etc/hosts and resolution order.0/32
The Resolver's Path
Recursive vs authoritative; following a query.0/23
The Record Keepers
A, AAAA, CNAME, MX, TXT, NS, SOA.coming soonQ6soon
A and AAAA: The Gates
AAAAA
Q7soon
CNAME: The Alias
CNAME
Q8soon
MX: The Mail Tower
MX
Q9soon
TXT: The Secret Scroll
TXTSPF
Q10soon
NS: The Delegates
NSdelegation
Q11soon
SOA: The Zone's Ledger
SOAserial
4
TTL & the Curse of Waiting
TTL, caches, negative caching.coming soonQ12soon
The Stale Answer
TTLcaching
Q13soon
The TTL Timer
TTL
Q14soon
Flush the Cache
cacheresolvectl
Q15soon
Negative Caching
NXDOMAINSOA minimum
5
The Broken Zone
Zone files, checks, reloads, SOA serials.coming soonQ16soon
Enter the Zone File
zone file$TTL
Q17soon
Add the API Record
A recordzone edit
Q18soon
Check Before Reload
named-checkzone
Q19soon
Serial Killer
SOA serialsecondary
6
The Lying CNAME
CNAME chains, loops, conflicts.coming soonQ20soon
Follow the Alias
CNAME chain
Q21soon
CNAME and A Conflict
CNAMEconflict
7
Reverse the Name
PTR and reverse DNS.coming soonQ22soon
Who Owns This IP?
PTRdig -x
Q23soon
Build a Reverse Zone
reverse zonein-addr.arpa
8
Split Brain
Split-horizon, resolvers, search domains, ndots.coming soonQ24soon
Inside the Walls
split-horizon
Q25soon
Search Domain Hell
search domainsndots
9
Packets Don't Lie
UDP/TCP 53, tcpdump, timeouts vs refused.coming soonQ26soon
Watch the Query
tcpdumpUDP 53
Q27soon
The Blocked Port
TCP 53timeout vs refused
10
The Forbidden Transfer
AXFR, leaks, allow-transfer, secondaries.coming soonQ28soon
AXFR: The Whole Scroll
AXFRzone transfer
Q29soon
Lock the Gate
allow-transfersecurity
11
DNSSEC & the Sealed Scroll
DNSKEY, DS, RRSIG, the chain of trust.coming soonQ30soon
What DNSSEC Does (and Doesn't)
DNSSEC
Q31soon
DNSKEY and DS
DNSKEYDS
Q32soon
The Broken Chain
RRSIGvalidation failure
12
Modern DNS & Production Design
DoH/DoT, CAA, email DNS, delegation, monitoring.coming soonQ33soon
DoH and DoT
DoHDoT
Q34soon
Email Records: SPF, DKIM, DMARC
SPFDKIMDMARC
Q35soon
Monitoring DNS
monitoringalerting
13
The Friday DNS Incident
One outage, everything you've learned.coming soonQ36soon
The Friday DNS Incident
incident responseeverything
Badges
🔎
First Query
Read your first DNS answer.
🧭
Resolver Scout
Followed a query from root to authoritative.
📜
Record Keeper
Mastered the core record types.
⏳
Cache Breaker
Beat the TTL and the propagation myth.
🛠️
Zone Fixer
Repaired and reloaded a broken zone.
🔗
CNAME Slayer
Untangled a deadly alias chain.
📡
Packet Listener
Read DNS off the wire.
🔐
Transfer Guardian
Locked down zone transfers.
🛡️
Trust Chain Warden
Validated a DNSSEC chain of trust.
🔥
Friday Survivor
Survived the Friday DNS incident.
🏛️
Nameforge Architect
Completed The Nameforge.