Remote user's NSLOOKUP resolves wrong IP address.

Posted on 2008-11-13
Last Modified: 2012-06-21
Good morning,

1. Remote user (XP service pack 3) was able to connect in with Sonicwall vpn client late last night.
2. Today he is unable to connect (other remotes are connected).  NSLOOKUP shows incorrect ip address for our host.
3. I changed the VPN host target to the host ip with same result.
3. User cannot access - goes to a google search page.
4. Provider Verizon claims, anecdotally, that they are receiving calls this morning from users having problems accessing secure sites (my user can access other secure sites).  They are blaming it on last night's Microsoft patch.
5. Only change to user's system is the patches.

1. Is anyone else experiencing this problem?
2. Does a bad NSLOOKUP imply DNS poisoning, and if so, where should I look?

Any advice is appreciated.

Question by:JosephLemos
    LVL 16

    Expert Comment

    Have the remote user restart their Verizon router, and then restart their computer.  Perhaps Verizon is having DNS problems with one of their DNS servers.


    Author Comment

    Thanks, but I've tried restarting several times (as did the Verizon rep).  I suspect a DNS problem with Verizon, but I'm trying to find out if others are experiencing it as well.
    LVL 16

    Accepted Solution

    Just saw this post.  Can you check the DNS server settings on that workstation?


    Author Comment

    Thanks for the tip.  The DNS servers were Verizon's.  

    Verizon did a hard reset of the modem/router, and I ran "netsh int ip reset" on the workstation - now it's working.  

    I would still really like know what happen - bad DNS makes me very nervous.  BTW the workstation runs on limited privileges and I run Symantec Corporate Antivirus - doesn't mean I'm completely safe, but hopefully it helps.  The hosts files were also clean.

    Author Closing Comment

    Thanks for your help.

    Write Comment

    Please enter a first name

    Please enter a last name

    We will never share this with anyone.

    Featured Post

    6 Surprising Benefits of Threat Intelligence

    All sorts of threat intelligence is available on the web. Intelligence you can learn from, and use to anticipate and prepare for future attacks.

    Like many others, when I created a Windows 2008 RRAS VPN server, I connected via PPTP, and still do, but there are problems that can arise from solely using PPTP.  One particular problem was that the CFO of the company used a Virgin Broadband Wirele…
    Secure VPN Connection terminated locally by the Client.  Reason 442: Failed to enable Virtual Adapter. If you receive this error on Windows 8 or Windows 8.1 while trying to connect with the Cisco VPN Client then the solution is a simple registry f…
    After creating this article (, I decided to make a video (no audio) to show you how to configure the routers and run some trace routes and pings between the 7 sites…
    After creating this article (, I decided to make a video (no audio) to show you how to configure the routers and run some trace routes and pings between the 7 sites…

    737 members asked questions and received personalized solutions in the past 7 days.

    Join the community of 500,000 technology professionals and ask your questions.

    Join & Ask a Question

    Need Help in Real-Time?

    Connect with top rated Experts

    18 Experts available now in Live!

    Get 1:1 Help Now