Flushdns

Thread view:

Enable EMail Alerts

Start New Thread

Thread rating:

yba02 - 26 Sep 2006 18:50 GMT

Hi,
In a PC, a memeber of 2k3 AD, I typed at the command line "ipconfig
/displaydns" and got a list of my PC cached resolved names. Then, I typed
"ipconfig /flushdns" and got a confirmation message that the command executed
successfully. Again, I typed "ipconfig /displaydns" and still get the same
output as in the first time. I even kept on retyping and executing flushdns
but always the same first result.
Is this normal? What am I missing here?
Thanks
Yba

Reply to this Message

Albert Kikkert - 27 Sep 2006 14:08 GMT

At flush the lmhosts and hosts file are also reloaded.
maybe you have something in those files.

hope this helps.

> Hi,
> In a PC, a memeber of 2k3 AD, I typed at the command line "ipconfig
[quoted text clipped - 10 lines]
> Thanks
> Yba

Reply to this Message

Kevin D. Goodknecht Sr. [MVP] - 27 Sep 2006 16:51 GMT

> Hi,
> In a PC, a memeber of 2k3 AD, I typed at the command line "ipconfig
[quoted text clipped - 4 lines]
> retyping and executing flushdns but always the same first result.
> Is this normal? What am I missing here?

Check your hosts file, it may have been hijacked.

Signature

Best regards,
Kevin D. Goodknecht Sr. [MVP]
Hope This Helps
===================================
When responding to posts, please "Reply to Group"
via your newsreader so that others may learn and
benefit from your issue, to respond directly to
me remove the nospam. from my email address.
===================================
http://www.lonestaramerica.com/
http://support.wftx.us/
http://message.wftx.us/
===================================
Use Outlook Express?... Get OE_Quotefix:
It will strip signature out and more
http://home.in.tum.de/~jain/software/oe-quotefix/
===================================
Keep a back up of your OE settings and folders
with OEBackup:
http://www.oehelp.com/OEBackup/Default.aspx
===================================

Reply to this Message

yba02 - 28 Sep 2006 04:13 GMT

Hi,
Ok, first, this behavior is abnormal. Then, hijacked in what sense? My PC
sits behind an ISA firewall and has a strong AV that also has its own
firewall. How can I tell that my hosts file has been hijacked, odd entries?
Thanks
Yba

> > Hi,
> > In a PC, a memeber of 2k3 AD, I typed at the command line "ipconfig
[quoted text clipped - 6 lines]
>
> Check your hosts file, it may have been hijacked.

Reply to this Message

Kevin D. Goodknecht Sr. [MVP] - 28 Sep 2006 05:37 GMT

> Hi,
> Ok, first, this behavior is abnormal. Then, hijacked in what sense?
> My PC sits behind an ISA firewall and has a strong AV that also has
> its own firewall. How can I tell that my hosts file has been
> hijacked, odd entries? Thanks
> Yba

By default the only entry in the host file is 127.0.0.1 localhost.

Additional entries may be done adminstratively or programatically. (Either
the Administrator did it, or a program did it. The question is, if it was
done programatically, are they valid entries?
Some antispyware programs use hostfile entries to block spyware sites. Can
you post a snippit of the hosts file?
%SYSTEMROOT%\system32\drivers\etc\hosts

Signature

Reply to this Message

yba02 - 30 Sep 2006 04:08 GMT

Hi,
I am a bit aware of hosts file. It is normal. It's got the default local
host entry plus my DC and virtual SQL (cluster) server. That is all there.
Thanks
Yba

> > Hi,
> > Ok, first, this behavior is abnormal. Then, hijacked in what sense?
[quoted text clipped - 11 lines]
> you post a snippit of the hosts file?
> %SYSTEMROOT%\system32\drivers\etc\hosts

Reply to this Message