Event ID 5504 and a clue

Event id: 5504
The DNS server encountered an invalid domain name in a packet from 128.9.0.107.  The packet is rejected.

I did a reverse lookup on 128.9.0.107, it was some ns1.isi.edu server

I went to DNS --? right click on my server-->properties-->root hints... i see that IP corresponding to b.root-servers.net.

When i go to edit on that ip and click on resolve, the ip address changes to 192.228.79.201. I have been hitting cancel on that screen to get that IP back to 128.9.0.107

I want to get rid of that error 5504. It generates every 15 minutes. Please advice.
jibranilyasAsked:
Who is Participating?
I wear a lot of hats...

"The solutions and answers provided on Experts Exchange have been extremely helpful to me over the last few years. I wear a lot of hats - Developer, Database Administrator, Help Desk, etc., so I know a lot of things but not a lot about one thing. Experts Exchange gives me answers from people who do know a lot about one thing, in a easy to use platform." -Todd S.

Alexey_KCommented:
Hello,

To find out what is going on turn on "Debug Logging" on my server-->properties. Then you probably will find the cause of the problem. But the simpliest way to get rid of DNS events is to go to my server-->properties-->Event Logging and choose "no events" option.

p.s. When you clicked on "Resolve" button you saw the usual behavior of MS DNS, it really changes 128.9.0.107 to 192.228.79.201.

Regards,
Alexey
0

Experts Exchange Solution brought to you by

Your issues matter to us.

Facing a tech roadblock? Get the help and guidance you need from experienced professionals who care. Ask your question anytime, anywhere, with no hassle.

Start your 7-day free trial
jibranilyasAuthor Commented:
yeah true, i can get rid of those events once and for all... Thanks Alexey

i m just curious to know why it generates..

i read on the web that one or more of the workstations with special characters in the hostname CAUSES this event.

Anyone has a clue of why it generates every 15 mins???
0
Alexey_KCommented:
If it is true that problem caused by some special characters in hostnames then the event is generated by zone transfer to to the secondary DNS server. By default the zone transfer occurs once per 15 minutes. Try to make it  manually and if you will see this event then the cause of event is found.
0
It's more than this solution.Get answers and train to solve all your tech problems - anytime, anywhere.Try it for free Edge Out The Competitionfor your dream job with proven skills and certifications.Get started today Stand Outas the employee with proven skills.Start learning today for free Move Your Career Forwardwith certification training in the latest technologies.Start your trial today
Networking

From novice to tech pro — start learning today.

Question has a verified solution.

Are you are experiencing a similar issue? Get a personalized answer when you ask a related question.

Have a better answer? Share it in a comment.