Solved

DNS error 5504 The DNS server encountered an invalid domain name in a packet from 128.8.10.90.  The packet is rejected.

Posted on 2004-09-24
9
36,692 Views
Last Modified: 2013-12-07
Hi,

We are having a recuring problem on a 2000 SBS server, within the DNS event viewer with event ID 5504.  The full error reads..

The DNS server encountered an invalid domain name in a packet from 198.41.0.10.  The packet is rejected.

There are no obvious problems on the network. Does anyone know what causes this, and what can be done to prevent the error from appearing?

Thanks a lot,
Daniel Murfitt
0
Comment
Question by:DClayden
  • 4
  • 3
  • 2
9 Comments
 
LVL 17

Expert Comment

by:Microtech
ID: 12142557
Hi DClayden,
http://www.eventid.net/display.asp?eventid=5504&eventno=642&source=DNS&phase=1 there are some reasons in this doc about invalid characters from your workstations when using forwarding on your dns server.

Hope This helps
0
 
LVL 1

Author Comment

by:DClayden
ID: 12142669
Do you think this could cause any problems? I have read that to stop this you need to disable DNS forwarding, but this wouldn'r be suitable on the setup we have. Any ideas mate?

Thanks a lot,
Daniel Murfitt
0
 
LVL 23

Expert Comment

by:Tim Holman
ID: 12143023
Is this actually causing any problems ?

198.41.0.10 is a root DNS server - one of several placed at the top of the DNS tree containing a copy of the master DNS database for more or less everybody.
The error you're getting suggests that one of their entries is corrupt, but to be honest - who cares ?  There are plenty of DNS records with missing or invalid information in them, but these tend to be obscure sites that you'd never visit anyway...
 
Hope this helps !
0
 
LVL 1

Author Comment

by:DClayden
ID: 12143218
I see your point mate! It's strange though, this error has only started appearing after a certain software package has been installed on one of the workstations. The warning is appearing every few hours. Do you think it's anything to worry about then?

Cheers,
Daniel Murfitt
0
Enabling OSINT in Activity Based Intelligence

Activity based intelligence (ABI) requires access to all available sources of data. Recorded Future allows analysts to observe structured data on the open, deep, and dark web.

 
LVL 23

Expert Comment

by:Tim Holman
ID: 12144601
What software package is this ?
It could be worth looking at this fix if there are problems -

http://support.microsoft.com/?kbid=838969
0
 
LVL 1

Author Comment

by:DClayden
ID: 12144957
It says on that link that Microsoft does not recommend ignoring this error, but I'm not sure if it's talking about the 5504 or the other event?!?!?!?

The software package is a third party database application. The user is currently investigating the issue with the software company.

Everything is working fine, so I am reluctant to change any settings. What would you advise?

Thanks a lot for you help, really appreciate it! :D

Daniel Murfitt
0
 
LVL 17

Expert Comment

by:Microtech
ID: 12145092
I have checked on a few of the servers I look afetr and alos have these errors, with no problems, so I would leave the current config. my $0.2
0
 
LVL 23

Accepted Solution

by:
Tim Holman earned 500 total points
ID: 12145963
A lot of new software packages are using DNS as a storage system for all sorts of variables.  The error says it's because there are characters other than a-z, A-Z, 0-9, . and -.  So - if there are %s or &s for example, you will get this error.
It's protection against DNS pollution/poisoning, so you shouldn't ignore it and were right to flag this, but as it's pollution from a known source and is probably something to do with extended DNS (EDNS) or blatant abuse of DNS fields to store extra information, then things should be fine.
I would check with the software vendor though, just to work out what they're doing and why.
0
 
LVL 1

Author Comment

by:DClayden
ID: 12224903
The problem has happened since we have installed a third part piece of software. We will contact the software vendor. Thanks a lot for your help.
Dan
0

Featured Post

Free Trending Threat Insights Every Day

Enhance your security with threat intelligence from the web. Get trending threat insights on hackers, exploits, and suspicious IP addresses delivered to your inbox with our free Cyber Daily.

Join & Write a Comment

Some time ago I was asked to set up a web portal PC to put at our entrance. When customers arrive, they could see a webpage 'promoting' our company. So I tried to set up a windows 7 PC as a kiosk PC.......... I will spare you all the annoyances I…
I eventually solved a perplexing problem setting up telnet for a new switch.  I installed a new Cisco WS-03560X-24P switch connected to an existing Cisco 4506 running a WS-X4013-10GE Sup II-Plus. After configuring vlans and trunking,  I could no…
Get a first impression of how PRTG looks and learn how it works.   This video is a short introduction to PRTG, as an initial overview or as a quick start for new PRTG users.
Here's a very brief overview of the methods PRTG Network Monitor (https://www.paessler.com/prtg) offers for monitoring bandwidth, to help you decide which methods you´d like to investigate in more detail.  The methods are covered in more detail in o…

706 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

15 Experts available now in Live!

Get 1:1 Help Now