Internal DNS

Thread view:

Enable EMail Alerts

Start New Thread

Thread rating:

Scopus69 - 27 Sep 2006 16:45 GMT

Our internal DNS is the same as our external DNS. We only have one A record
"www" that we point to an external IP address. This has worked no problem
for the last serveral years.

Today for some reason, I am unable to resolve the www.xxx.com site
internally. I did a nslookup on all 3 of my internal DNS servers and they
were able to resolve the correct external IP address. I was able to get to
the external web site by IP address no problem so I know our Internet
connection is working properly. I checked a few external dns servers using
nslookup and they all had the correct address. I have my forwarders properly
configured otherwise we couldn't resolve any external addresses. We don't
use hosts files internally.

What is strange is only on this one record www.xxx.com we have a issue. The
final result is it goes to:
http://sea.search.msn.com/dnserror.aspx?FORM=DNSAS&q=www.xxx.com

This is telling me my internal DNS servers can't resolve the name so it goes
looking externally. What am I missing here??

Reply to this Message

Kevin D. Goodknecht Sr. [MVP] - 27 Sep 2006 18:39 GMT

> Our internal DNS is the same as our external DNS. We only have one A
> record "www" that we point to an external IP address. This has
[quoted text clipped - 16 lines]
> This is telling me my internal DNS servers can't resolve the name so
> it goes looking externally. What am I missing here??

What is showing up in the DNS Client cache?
ipconfig /displaydns

Signature

Best regards,
Kevin D. Goodknecht Sr. [MVP]
Hope This Helps
===================================
When responding to posts, please "Reply to Group"
via your newsreader so that others may learn and
benefit from your issue, to respond directly to
me remove the nospam. from my email address.
===================================
http://www.lonestaramerica.com/
http://support.wftx.us/
http://message.wftx.us/
===================================
Use Outlook Express?... Get OE_Quotefix:
It will strip signature out and more
http://home.in.tum.de/~jain/software/oe-quotefix/
===================================
Keep a back up of your OE settings and folders
with OEBackup:
http://www.oehelp.com/OEBackup/Default.aspx
===================================

Reply to this Message

Scopus69 - 27 Sep 2006 20:01 GMT

Kevin,

I ran the ipconfig/displaydns utility. (Please see below) These settings
look correct. However, I don't have an reverse lookup for external address.
Do I need one?

www.xxx.com
----------------------------------------
Record Name . . . . . : www.xxx.com
Record Type . . . . . : 1
Time To Live . . . . : 588919
Data Length . . . . . : 4
Section . . . . . . . : Answer
A (Host) Record . . . : 205.24.165.238

238.165.24.205.in-addr.arpa
----------------------------------------
Record Name . . . . . : 238.165.24.205.in-addr.arpa.
Record Type . . . . . : 12
Time To Live . . . . : 588919
Data Length . . . . . : 4
Section . . . . . . . : Answer
PTR Record . . . . . : www.xxx.com

> > Our internal DNS is the same as our external DNS. We only have one A
> > record "www" that we point to an external IP address. This has
[quoted text clipped - 19 lines]
> What is showing up in the DNS Client cache?
> ipconfig /displaydns

Reply to this Message

Vincent Xu [MSFT] - 28 Sep 2006 03:38 GMT

Hi ,

I have two questions:

1. When you use ipconfig/displaydns and get the results:

www.xxx.com
----------------------------------------
Record Name . . . . . : www.xxx.com
Record Type . . . . . : 1
Time To Live . . . . : 588919
Data Length . . . . . : 4
Section . . . . . . . : Answer
A (Host) Record . . . : 205.24.165.238

Does the ip 205.24.165.238 is correct?

2. When you say unable to resolve the www.xxx.com site in first post, do
you mean , you cannot open the webpage in IE? Please let me know the exact
error message in IE. Properly,you can take a screen shot to let us know.

Thanks.

Best regards,

Vincent Xu
Microsoft Online Partner Support

======================================================
Get Secure! - www.microsoft.com/security
======================================================
When responding to posts, please "Reply to Group" via your newsreader so
that others
may learn and benefit from this issue.
======================================================
This posting is provided "AS IS" with no warranties,and confers no rights.
======================================================

--------------------

>>Thread-Topic: Internal DNS
>>thread-index: AcbiZ0bkufccnSatRfeeAmwF5DkwJw==
>>X-WBNR-Posting-Host: 66.20.1.12
>>From: =?Utf-8?B?U2NvcHVzNjk=?= <Scopus69@nospam.postalias>
>>References: <4B384DC2-14E1-443E-A348-F5DC05C88200@microsoft.com>

<O4cxdvl4GHA.1496@TK2MSFTNGP05.phx.gbl>

>>Subject: Re: Internal DNS
>>Date: Wed, 27 Sep 2006 12:01:02 -0700
[quoted text clipped - 65 lines]
>>> What is showing up in the DNS Client cache?
>>> ipconfig /displaydns

Reply to this Message

Scopus69 - 28 Sep 2006 10:34 GMT

Vincent,

Here are responses to your two questions:

1. Yes, when I do a ipconfig /displaydns the correct IP address is shown.

www.xxx.com

> ----------------------------------------
> Record Name . . . . . : www.xxx.com
[quoted text clipped - 3 lines]
> Section . . . . . . . : Answer
> A (Host) Record . . . : 205.24.165.238

2. When the page is trying to be being displayed in IE it goes to the
following link:

http://sea.search.msn.com/dnserror.aspx?FORM=DNSAS&q=www.xxx.com

You know the bogus html page when a site is usually unanavailbe.

I also tried to use http://www.xxx.com and got a different error. This was
"The Page Cannot be displayed" error

TEST RESULTS:
www.xxx.com = doesn't work, goes to:
http://sea.search.msn.com/dnserror.aspx?FORM=DNSAS&q=www.xxx.com

http://www.xxx.com = doesn't work, PAGE CANNOT BE DISPLAYED error

205.24.165.238 = WORKS NO PROBLEM

website.xxx.com (CNAME) = WORKS NO PROBLEM

> Hi ,
>
[quoted text clipped - 111 lines]
> >>> What is showing up in the DNS Client cache?
> >>> ipconfig /displaydns

Reply to this Message

Scopus69 - 27 Sep 2006 20:07 GMT

Kevin,

I forget to add, if I add a CNAME (website.xxx.com) that points to my
internal A record this works with no problem. Only the "www" doesn't work.
Strange

Thanks!

Reply to this Message

Kevin D. Goodknecht Sr. [MVP] - 28 Sep 2006 05:47 GMT

> Kevin,
>
> I forget to add, if I add a CNAME (website.xxx.com) that points to my
> internal A record this works with no problem. Only the "www" doesn't
> work. Strange

Then it is settled, you can resolve the name, it is the correct IP, so its
definitely not a DNS issue, must be a connectivity issue, possibly a
firewall, MTU, Proxy, or spyware.
You might try resetting Internet Explorer Web setting on the Programs tab of
Internet Options, in Control panel.

Signature

Reply to this Message

Scopus69 - 28 Sep 2006 10:56 GMT

Kevin,

I agree the name is being resolved proberly. The CNAME points to the A
record!! But why doesn't www work? I went into my hosts file to add the
www.xxx.com and IP address since windows looks here first. That doesn't work
either. I can change the entry to "simple.xxx.com" and that works no problem.

What is strange is this just happened all of a sudden. We changed the
internal A record about two weeks ago on 9/15/2006 and it has been working
fine. Then all of a sudden...

I don't think it is a MTU problem since going to it via IP works. We don't
use a proxy server either.

> > Kevin,
> >
[quoted text clipped - 7 lines]
> You might try resetting Internet Explorer Web setting on the Programs tab of
> Internet Options, in Control panel.

Reply to this Message

Scopus69 - 28 Sep 2006 16:20 GMT

I did some more troubleshooting.

If I change the www.xxx.com from 205.24.165.238 to lets say 66.54.38.9 then
the www record works no problem. When I cange it back....it doesn't work.

If I delete the www.xxx.com and the CNAME record from DNS, then create
aanother A record called external.xxx.com and then create a CNAME of www
that points to external.xxx.com. The external.xxx.com works but the
www.xxx.com does not.

What do www.xxx.com and the IP of 205.24.165.238 have that causing it not to
be displayed? This is so bizzare!

> > Kevin,
> >
[quoted text clipped - 7 lines]
> You might try resetting Internet Explorer Web setting on the Programs tab of
> Internet Options, in Control panel.

Reply to this Message

Kevin D. Goodknecht Sr. [MVP] - 28 Sep 2006 17:05 GMT

> I did some more troubleshooting.
>
[quoted text clipped - 9 lines]
> What do www.xxx.com and the IP of 205.24.165.238 have that causing it
> not to be displayed? This is so bizzare!

I get the feeling there is more to this than you are saying, especially
after this statement:

> If I change the www.xxx.com from 205.24.165.238 to lets say
> 66.54.38.9 then the www record works no problem.

Are you saying that you are changing this record to some random IP address
and then you can access the site?

If you are, it makes absolutely no sense whatsoever. Be more clear and not
so cryptic about what you are saying. Just exactly where is this web site
located?
Give me real names and IPs, and locations. If the site is hosted locally, I
need to know that because then it has to be accessed by different IPs based
on which side of your router you are on.

Signature

Reply to this Message

Scopus69 - 28 Sep 2006 18:39 GMT

Kevin,

Sorry for the confusion and being so cryptic but this is actually pretty
simple. Our website site is hosted externally. Our domain is the same
internally as it is externally....bugs.com. We created a A record "www" in
our internal DNS pointing to the external IP address of 204.29.162.238. This
has been working no problem for the last two years.

This week it just stopped working. We have not made any changes. I created
a alias (CNAME) called external.bugs.com and pointed it to our www.bugs.com A
record. I test it and it works fine. However, trying to use www.bugs.com
does not work. That;s what is strange!

If I change the IP address of the internal A record from 204.29.162.238
(www.bugs.com) to lets say 66.54.38.9 (eds.com) the when I go to my
browser and I type in www.bugs.com this will go to EDS website like it
should. This was just strictly a test. When I change the A record back to
204.29.162.238 it will not resolve the name again.

For some reason using that IP 204.29.162.238 address and www.bugs.com just
stops. The ipconfig/displaydns all look good:

www.bugs.com
----------------------------------------
Record Name . . . . . : www.bugs.com
Record Type . . . . . : 1
Time To Live . . . . : 595468
Data Length . . . . . : 4
Section . . . . . . . : Answer
A (Host) Record . . . : 204.29.162.238

I hope this helps. Thanks!

> > I did some more troubleshooting.
> >
[quoted text clipped - 24 lines]
> need to know that because then it has to be accessed by different IPs based
> on which side of your router you are on.

Reply to this Message

Kevin D. Goodknecht Sr. [MVP] - 28 Sep 2006 19:14 GMT

> Kevin,
>
[quoted text clipped - 28 lines]
> Section . . . . . . . : Answer
> A (Host) Record . . . : 204.29.162.238

Try checking the MTU to this website.

ping -f www.bugs.com -l 1472

Signature

Reply to this Message

Vincent Xu [MSFT] - 29 Sep 2006 03:55 GMT

Hi,

I suggest you enable DNS debug logging to check.

After enabled debug logging, try to access the website via IE.

Oops, before you access the website via IE, please purge the dns cache.

Thanks.

Best regards,

Vincent Xu
Microsoft Online Partner Support

======================================================
Get Secure! - www.microsoft.com/security
======================================================
When responding to posts, please "Reply to Group" via your newsreader so
that others
may learn and benefit from this issue.
======================================================
This posting is provided "AS IS" with no warranties,and confers no rights.
======================================================

--------------------

>>Reply-To: "Kevin D. Goodknecht Sr. [MVP]" <admin@nospam.WFTX.US>
>>From: "Kevin D. Goodknecht Sr. [MVP]" <admin@nospam.WFTX.US>
>>References: <4B384DC2-14E1-443E-A348-F5DC05C88200@microsoft.com>

<O4cxdvl4GHA.1496@TK2MSFTNGP05.phx.gbl>
<E01A9DB6-B769-4518-93B9-B6CA72EA31E7@microsoft.com>
<uzVk7kr4GHA.3960@TK2MSFTNGP02.phx.gbl>
<84CE6279-F99C-4EBE-A568-089B339FFDB0@microsoft.com>
<#EPb5fx4GHA.1248@TK2MSFTNGP03.phx.gbl>
<911F313F-5BE2-457A-B524-2B72F08D3229@microsoft.com>

>>Subject: Re: Internal DNS
>>Date: Thu, 28 Sep 2006 13:14:01 -0500
[quoted text clipped - 47 lines]
>>
>>ping -f www.bugs.com -l 1472

Reply to this Message