πŸ“– ~1 min read

Table of contents
  1. Symptom & Impact
  2. Environment & Reproduction
  3. Root Cause Analysis
  4. Quick Triage
  5. Step-by-Step Diagnosis
  6. Solution – Primary Fix
  7. Solution – Alternative Approaches
  8. Verification & Acceptance Criteria
  9. Rollback Plan
  10. Prevention & Hardening
  11. Related Errors & Cross-Refs
  12. References & Further Reading

Symptom & Impact

Hosts running RHEL 9 resolve domains incorrectly because NetworkManager profile DNS values are wrong.

Environment & Reproduction

Internal hostnames fail, resolver order is unexpected, or /etc/resolv.conf changes after reconnect.

Root Cause Analysis

DHCP-provided DNS overrides static settings, or an outdated connection profile is still active.

Quick Triage

Use nmcli to identify active connections and inspect ipv4.dns, ipv4.ignore-auto-dns, and search domains.

Step-by-Step Diagnosis

Set desired DNS values with nmcli and disable automatic DNS where policy requires static resolvers.

Illustrative mockup for rhel-9 β€” rhel9-nmcli-connection-show-40.webp
Reviewing active NetworkManager connection profile DNS parameters β€” Illustrative mockup β€” Progressive Robot

Solution – Primary Fix

Bring the profile down/up or restart NetworkManager, then verify resolver output and query success.

Still having issues? Our IT Solutions & Services team can diagnose and resolve this for you. Get in touch for a free consultation.

Illustrative mockup for rhel-9 β€” rhel9-nmcli-dns-update-40.webp
Updating DNS servers and search domains with nmcli on RHEL 9 β€” Illustrative mockup β€” Progressive Robot

Solution – Alternative Approaches

Confirm interaction with systemd-resolved if enabled, including domain routing behavior per interface.

Verification & Acceptance Criteria

Ensure firewalld and upstream ACLs allow UDP/TCP DNS traffic to configured resolvers.

Rollback Plan

SELinux typically does not alter DNS profile values, but audit denials if custom resolver daemons are used.

Prevention & Hardening

Inspect ‘journalctl -u NetworkManager –no-pager -n 100’ for profile override and DHCP option events.

Test with dig or getent hosts for both internal and external names after applying profile changes.

Related tutorial: View the step-by-step tutorial for rhel-9.

View all rhel-9 tutorials on the Tutorials Hub β†’

Browse all common problems & solutions on the Tutorials Hub.

References & Further Reading

Standardize nmcli profile templates and enforce expected DNS settings via automation.

Need Expert Help?

If you cannot resolve this yourself, our team offers hands-on Server Management, Managed IT Services, and flexible Support Plans. Contact us today β€” we respond within one business day.