Want to protect your cyber security and still get fast solutions? Ask a secure question today.Go Premium

x
?
Solved

Win03 DNS Confusion: Primary DNS Not Resolving WWW record

Posted on 2004-11-29
23
Medium Priority
?
1,207 Views
Last Modified: 2008-01-09
Experts,

Strange things happening and I don't know why:  Server 1 (10.1.1.12) is my primary DNS, PDC, DHCP, and primary WINS.  Server 2 (10.1.1.13) is my web server and acts as secondary DNS, and secondary WINS.  Here is the problem:  when I try to access the company website from server one (via relative URL), I end up getting my router login screen.  I can access the site using the IP (10.1.1.13).  I have checked my www record in DNS and it appears correct; pointing to 10.1.1.13.  I am using the following DNS entries on Server 1: 10.1.1.12, 68.1.208.245, 68.1.208.30

Bad news: it doesn't happen all the time!  I can't put a finger on when or how it happens and it is driving me bonkers.  Also, some clients on the domain experience the same problem (but not all users).  I don't know if this is a DNS issue, a WINS issue, or some other dumb thing that I've done to screw up the name resolution.

Any help is greatly appreciated.

Thanks.
Stephen
0
Comment
Question by:stephenm93
  • 11
  • 10
  • 2
23 Comments
 
LVL 11

Expert Comment

by:cfairley
ID: 12696313
I would try clearing the cache on the DC and one of the workstations involved.  When you open the DNS console, right click the server and select clear cache.  On the workstation, ipconifg /flushdns.
0
 
LVL 11

Accepted Solution

by:
WeHe earned 800 total points
ID: 12696323
> DNS entries on Server 1: 10.1.1.12, 68.1.208.245, 68.1.208.30
This is set in TCPIP Settings?
On Server1 you must only have internal DNS Servers configured (recommended is the server itself, if it hosts DNS)
The DNS Servers of your ISP should be configured as Forwarders in your DNS Server.
0
 
LVL 11

Expert Comment

by:cfairley
ID: 12696413
WeHe is correct, as a small addition, server 1 should point to another dns server in the domain as it's secondary.

http://www.jsiinc.com/SUBH/tip3800/rh3869.htm

Here is the link to clearing the cache just in case that helps.

http://support.microsoft.com/default.aspx?scid=kb%3Ben-us%3B830905
0
Industry Leaders: We Want Your Opinion!

We value your feedback.

Take our survey and automatically be enter to win anyone of the following:
Yeti Cooler, Amazon eGift Card, and Movie eGift Card!

 

Author Comment

by:stephenm93
ID: 12696677
Yes, WeHe, TCPIP settings have static DNS entries.  I'm not clear on how to set a Fowarder within DNS....is that the same as a PTR record?  I've cleared the DNS cache on the DC and am working on the client machine now...

Thanks.
Stephen
0
 
LVL 11

Expert Comment

by:WeHe
ID: 12696701
open DNS Managment -> right click your Server -> Properties -> Forwarders
0
 
LVL 11

Expert Comment

by:WeHe
ID: 12696706
btw, you have to left click and then right click.
mmc is stupid, sometimes.
0
 

Author Comment

by:stephenm93
ID: 12696769
Got it.  Appears to be working on the server now.  Client machine is acting fine today.

Thanks again for the references.

Stephen
0
 
LVL 11

Expert Comment

by:WeHe
ID: 12696806
configure the clients to only use Server1 as DNS server too. (you can configure Server2 as secondary, if the zone is AD-integrated)
all clients will ask your servers for dns resolution.
If the dns does not know the name, it queries his forwarders and give the answer to the client.
0
 

Author Comment

by:stephenm93
ID: 12736848
Arrrrggggh!!

Problem is back.  Need more insight.  This time it is server 2 (Web Server) that is having the issue.  Server 2 is pullling up the router login screen when I use the relative URL!   Of course the IP works, but it can't resolve it's own domain name.

New piece of info:  Server 2 is actually NOT a secondary DNS.  The TCP/IP DNS entries on server two are 10.1.1.12 (primary) and 68.1.245.30 (secondary).    Even if I use ONLY 10.1.1.12, as DNS entry, I still get the router login.

Hope I am being clear enough.  Please help!

Stephen
0
 
LVL 11

Expert Comment

by:WeHe
ID: 12736874
did you reboot or "ipconfig /flushdns" after changing to only 10.1.1.12 ?
0
 

Author Comment

by:stephenm93
ID: 12736917
flushed dns.  haven't rebooted.   will do that now....gimme about 5 minutes.
0
 

Author Comment

by:stephenm93
ID: 12737002
no go.  rebooted and still same issue.  Server 1 and client machines can access site.  Server 2 pulls up router login.
0
 
LVL 11

Expert Comment

by:WeHe
ID: 12737108
give me the output of "nslookup www.yourdomain.com" and "tracert www.yourdomain.com" on server2.
server 2 points only to server 1 atm?
0
 

Author Comment

by:stephenm93
ID: 12737191

C:\Documents and Settings\Administrator.ROL-PDC.000>nslookup www.remaxlubbock.co
m
*** Can't find server name for address 10.1.1.12: Non-existent domain
Server:  UnKnown
Address:  10.1.1.12

Name:    www.remaxlubbock.com
Address:  10.1.1.13


C:\Documents and Settings\Administrator.ROL-PDC.000>
0
 

Author Comment

by:stephenm93
ID: 12737229
Microsoft Windows [Version 5.2.3790]
(C) Copyright 1985-2003 Microsoft Corp.

C:\Documents and Settings\Administrator.ROL-PDC.000>tracert www.remaxlubbock.com


Tracing route to www.remaxlubbock.com [10.1.1.13]
over a maximum of 30 hops:

  1    <1 ms    <1 ms    <1 ms  discovery.remaxlubbock.com [10.1.1.13]

Trace complete.

C:\Documents and Settings\Administrator.ROL-PDC.000>
0
 
LVL 11

Expert Comment

by:WeHe
ID: 12738375
Both looks like all is OK.
Do you use a Proxy for Internet Explorer on Server2?
0
 

Author Comment

by:stephenm93
ID: 12738500
No, I don't.  Why would I get a non-existent domain for 10.1.1.12?  

Crazy enough, web is responding now.  I didn't do a thing.....just started working again.  I still have one client machine that is not working though.
0
 
LVL 11

Expert Comment

by:WeHe
ID: 12738555
*** Can't find server name for address 10.1.1.12: Non-existent domain
Server:  UnKnown
Address:  10.1.1.12

This message is a result of not having a reverse lookup zone for 10.0.0.0 or 10.1.1.0, depending on your subnetmask.
Create a reverse lookup zone and this error will not show anymore.
0
 

Author Comment

by:stephenm93
ID: 12738674
Any other ideas as to why it would not be resolving the URL at times?  My only other "strange" thing is that on Server 2, when DNS entry is only 10.1.1.12 (server 1), it only resolves certain addresses; e.g. www.msn.com can be resolved, but www.yahoo.com gives me a DNS error (page cannot be displayed).

I understand how hard it is to troubleshoot things that only happen once in a while, so I appreciate your patience!
0
 
LVL 11

Expert Comment

by:WeHe
ID: 12739689
is there a firewall anywhere?
try this on server 2:
Install the Dnscmd.exe program from the Windows Server 2003 Support Tools. To install the Windows Support Tools, right-click Suptools.msi in the Support\Tools folder on the Windows Server 2003 CD-ROM, and then click Install. Follow the steps in the Windows Support Tools Setup Wizard to complete the installation of the Windows Support Tools.
At a command prompt, type the following command, and then press ENTER:

dnscmd /config /enableednsprobes 0
0
 

Author Comment

by:stephenm93
ID: 12739860
Here is what I get.


C:\Documents and Settings\Administrator.ROL-PDC.000>dnscmd /config /enableednspr
obes 0
DNS Server failed to reset registry property.
    Status = 1722 (0x000006ba)

Command failed:  RPC_S_SERVER_UNAVAILABLE     1722  (000006ba)
0
 

Author Comment

by:stephenm93
ID: 12739901
Cisco PIX506e firewall is inside my router:
                                                                                      ->Server 1
Modem -> Cisco1700 Router -> Cisco PIX506e  -> Switch -
                                                                                      ->Server 2
0
 
LVL 11

Expert Comment

by:WeHe
ID: 12740947
sorry, this command has to run on the DNS server.
0

Featured Post

Keep up with what's happening at Experts Exchange!

Sign up to receive Decoded, a new monthly digest with product updates, feature release info, continuing education opportunities, and more.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

The HP utility "HP Lights-Out Online Configuration Utility for Windows Server 2003/2008" could be of great use when it comes to remotely configure a HP servers ILO WITHOUT rebooting the server. We would only need to create and run scripts using thi…
Recently, I had the need to build a standalone system to run a point-of-sale system. I’m running this on a low-voltage Atom processor, so I wanted a light-weight operating system, but still needed Windows. I chose to use Microsoft Windows Server 200…
As many of you are aware about Scanpst.exe utility which is owned by Microsoft itself to repair inaccessible or damaged PST files, but the question is do you really think Scanpst.exe is capable to repair all sorts of PST related corruption issues?
Enter Foreign and Special Characters Enter characters you can't find on a keyboard using its ASCII code ... and learn how to make a handy reference for yourself using Excel ~ Use these codes in any Windows application! ... whether it is a Micr…

578 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question