Rogue NS Server?

[DerekNewland]

Hello,

I'm somewhat new at managing servers using WHM, although I've been using Linux for years. I currently run my own NS on a virtual dedicated server. Everything seems to be configured properly and sites resolve without a problem.

However, there's a 3rd NS listed in WHM that doesn't belong to me. Here are the NS entries:

68.178.227.165 ns1.dawgbyteproductions.us
68.178.228.152 NS2.EXECNOGEEK.COM
68.178.230.18 ns2.dawgbyteproductions.us

As you may have guessed the 2nd NS, 68.178.228.152 NS2.EXECNOGEEK.COM, does not belong to me. When attempting to remove it I get this message:

"Sorry, the nameserver ip 68.178.228.152 cannot be removing since it is still registered with an ICANN register."

I've checked all the /var/named/domain.com.db files looking for the corresponding IP address. I've also looked in /etc/resolv.conf and even httpd.conf.

Where would WHM be getting this strange NS from? And how can I get rid of it?!

Thanks!

 

[BlueZebra]

Have you checked /etc/nameserverips ?

 

[DerekNewland]

I just removed it from /etc/nameserverips, went to Nameserver IPs in WHM and it was gone. Then I went to restart BIND and it reappeared!!!!