?
Solved

Remote user's NSLOOKUP resolves wrong IP address.

Posted on 2008-11-13
5
Medium Priority
?
1,087 Views
Last Modified: 2012-06-21
Good morning,

Details:
1. Remote user (XP service pack 3) was able to connect in with Sonicwall vpn client late last night.
2. Today he is unable to connect (other remotes are connected).  NSLOOKUP shows incorrect ip address for our host.
3. I changed the VPN host target to the host ip with same result.
3. User cannot access logmein123.com - goes to a google search page.
4. Provider Verizon claims, anecdotally, that they are receiving calls this morning from users having problems accessing secure sites (my user can access other secure sites).  They are blaming it on last night's Microsoft patch.
5. Only change to user's system is the patches.

Questions:
1. Is anyone else experiencing this problem?
2. Does a bad NSLOOKUP imply DNS poisoning, and if so, where should I look?

Any advice is appreciated.

Thanks,
Joseph
0
Comment
Question by:JosephLemos
  • 3
  • 2
5 Comments
 
LVL 16

Expert Comment

by:robrandon
ID: 22950944
Have the remote user restart their Verizon router, and then restart their computer.  Perhaps Verizon is having DNS problems with one of their DNS servers.


0
 

Author Comment

by:JosephLemos
ID: 22950974
Thanks, but I've tried restarting several times (as did the Verizon rep).  I suspect a DNS problem with Verizon, but I'm trying to find out if others are experiencing it as well.
0
 
LVL 16

Accepted Solution

by:
robrandon earned 1500 total points
ID: 22951113
Just saw this post.  Can you check the DNS server settings on that workstation?

http://www.experts-exchange.com/Networking/Protocols/DNS/Q__23898657.html

0
 

Author Comment

by:JosephLemos
ID: 22951823
Thanks for the tip.  The DNS servers were Verizon's.  

Verizon did a hard reset of the modem/router, and I ran "netsh int ip reset" on the workstation - now it's working.  

I would still really like know what happen - bad DNS makes me very nervous.  BTW the workstation runs on limited privileges and I run Symantec Corporate Antivirus - doesn't mean I'm completely safe, but hopefully it helps.  The hosts files were also clean.
0
 

Author Closing Comment

by:JosephLemos
ID: 31516402
Thanks for your help.
0

Featured Post

A Cyber Security RX to Protect Your Organization

Join us on December 13th for a webinar to learn how medical providers can defend against malware with a cyber security "Rx" that supports a healthy technology adoption plan for every healthcare organization.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Some of you may have heard that SonicWALL has finally released an app for iOS devices giving us long awaited connectivity for our iPhone's, iPod's, and iPad's. This guide is just a quick rundown on how to get up and running quickly using the app. …
I wrote this article to explain some important DNS concepts that should be known to avoid some typical configuration errors I often see in forums. I assume that what is described here is the typical behavior of Microsoft DNS client. I don't know …
After creating this article (http://www.experts-exchange.com/articles/23699/Setup-Mikrotik-routers-with-OSPF.html), I decided to make a video (no audio) to show you how to configure the routers and run some trace routes and pings between the 7 sites…
Windows 10 is mostly good. However the one thing that annoys me is how many clicks you have to do to dial a VPN connection. You have to go to settings from the start menu, (2 clicks), Network and Internet (1 click), Click VPN (another click) then fi…
Suggested Courses

840 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question