Dig to verify forwarders?

Posted on 2009-02-13
Last Modified: 2012-08-13
Is it possible to use dig to verify that forwarders on DCs are working?

I ask because once in a while some folks can't get to the internet and I don't always want to have to log onto the DC to verify they are working.

Any way I can do this from my workstation using DIG?
Question by:snyderkv
    LVL 57

    Assisted Solution

    by:Mike Kline
    I use nslookup for this
    So from your client machine if you want to test a particular DC
    > nslookup
    >server <ip address>
    then run your query
    I know you asked about DIG and I'm sure that will get a response too.
    LVL 82

    Assisted Solution

    You can actually already pass the DNS server to use in nslookup's command line as second argument, which saves a couple of keystrokes (and can be used in a batch script for automatic testing several forwarders):
    nslookup <DNS server IP>
    LVL 21

    Accepted Solution

    If you got multiple forwarders you can't predict whitch one will handle the query that you forward.

    Run a "dcdiag /test:dns /v" from a DC and it will test the forwarders.


    Author Comment

    Ok I did the dcdiag but it says Error: "Forwarders list has invalid forwarder: xx.xx.xx.xx"

    But its not an invalid forwarder. These are what we use.

    Any explanation?
    LVL 21

    Expert Comment

    Do you forward to the root-hints or your ISP DNS and how many forwarders do you use?


    Author Comment

    We don't forward to the root hints. The IPS in the forwards are external DNS servers.

    Featured Post

    Courses: Start Training Online With Pros, Today

    Brush up on the basics or master the advanced techniques required to earn essential industry certifications, with Courses. Enroll in a course and start learning today. Training topics range from Android App Dev to the Xen Virtualization Platform.

    Join & Write a Comment

    [b]Ok so now I will show you how to add a user name to the description at login. [/b] First connect to your DC (Domain Controller / Active Directory Server) SET PERMISSIONS FOR SCRIPT TO UPDATE COMPUTER DESCRIPTION TO USERNAME 1. Open Active …
    I was supporting a handful of Windows 2008 (non-R2) 2 node clusters with shared quorum disks. Some had SQL 2008 installed and some were just a vendor application that we supported. For the purposes of this article it doesn’t really matter which so w…
    This tutorial will walk an individual through the process of transferring the five major, necessary Active Directory Roles, commonly referred to as the FSMO roles from a Windows Server 2008 domain controller to a Windows Server 2012 domain controlle…
    This tutorial will walk an individual through the process of configuring their Windows Server 2012 domain controller to synchronize its time with a trusted, external resource. Use Google, Bing, or other preferred search engine to locate trusted NTP …

    754 members asked questions and received personalized solutions in the past 7 days.

    Join the community of 500,000 technology professionals and ask your questions.

    Join & Ask a Question

    Need Help in Real-Time?

    Connect with top rated Experts

    24 Experts available now in Live!

    Get 1:1 Help Now