[Okta Webinar] Learn how to a build a cloud-first strategyRegister Now

x
?
Solved

Windows XP cannot resolve DNS names but nslookup works

Posted on 2009-02-23
10
Medium Priority
?
5,407 Views
Last Modified: 2012-05-06
My PC is a samsung X20 laptop, ran fine for many years.
Had trouble with spoolsv.exe, made me remove some network drivers (e.g. Cisco VPN client, AVM bluetooth driver), and installed XP service pack 3 (through complete download).

After this, DNS resolution has stopped working.
Network connection works fine, can reach any host through IP address, but no windows program resolves DNS names.

E.g.
>ping google.com
gives: ping can't find host "google.com"

>nslookup google.com
Server: two.xxx.intern
Address: 172.16.0.246

non-authoritative answer:
Name: google.com
addresses: 74.125.67.100,....

Have seen similar question before, but answers didn't help.

- Windows XP Professional SP3
- Basic SW loaded
- Integrated NIC
- ESET virus, old Sophos installation (unable to remove, but disabled)

Problem:
- PC receives IP information address via DHCP (IP addr, DNS)
- PC cannot resolve Internet host names via DNS
- PC can get to web sites using ip address in place of Host name

ipconfig /all gives:
Ethernetadapter LAN-Verbindung:
        Verbindungsspezifisches DNS-Suffix: xxx.de.intern
        Beschreibung. . . . . . . . . . . : Broadcom 440x 10/100 Integrated Controller
        Physikalische Adresse . . . . . . : 00-1C....
        DHCP aktiviert. . . . . . . . . . : Yes
        Autokonfiguration aktiviert . . . : Yes
        IP-Adresse. . . . . . . . . . . . : 172.16.2.139
        Subnetzmaske. . . . . . . . . . . : 255.255.252.0
        Standardgateway . . . . . . . . . : 172.16.0.1
        DHCP-Server . . . . . . . . . . . : 172.16.0.253
        DNS-Server. . . . . . . . . . . . : 172.16.0.246
                                            172.16.0.245
        Primärer WINS-Server. . . . . . . : 172.16.0.253

Troubleshooting history (the following have been unsuccessful)
- LSPFIX
- WinsockXPfix
- Removed TCP/IP and reinstalled
- Disabled Windows Firewall
- Set manual DNS server addresses
- Spybot S&D, AdAware failes
- services: dns-client running, tried activated/non-activated
- re-installed network card (broadcom 440)
- problem on both connections: the internal nic and the wlan
- tried to remove service pack 3, failed due to "file not found"

Current status
I am currently at a loss.

Do you have any idea?

Thanks!
0
Comment
Question by:ultimate_newuser
  • 6
  • 4
10 Comments
 
LVL 26

Expert Comment

by:akahan
ID: 23713041
What happens if you set your DNS server to 208.67.222.222?  Does DNS suddenly start working?  If so, perhaps it's a problem with the DNS servers you are currently using, which seem to be on your own network.
0
 

Author Comment

by:ultimate_newuser
ID: 23713088
Thank you for the quick reply!

Just tested it, unfortunately doesn't help.

As nslookup also uses the nameserver on our own network and ip addresses are resolved with nslookup, I assume the problem is on the client.

How can I discover if my client sends out any udp/tcp packets at all for the dns request? Maybe that'd help to narrow down the problem
0
 
LVL 26

Expert Comment

by:akahan
ID: 23713163
Good point re nslookup.

You could use wireshark (a packet sniffer) to determine whether the machine is actually sending packets for the DNS requests.  Have you looked for something strange in your hosts file?

0
What does it mean to be "Always On"?

Is your cloud always on? With an Always On cloud you won't have to worry about downtime for maintenance or software application code updates, ensuring that your bottom line isn't affected.

 

Author Comment

by:ultimate_newuser
ID: 23713254
hosts file: was empty
now I just put in two lines for my provider's smtp/imap server to be able to send and receive emails.

Thanks for the wireshark hint, just downloading and will test it in a minute.
0
 

Author Comment

by:ultimate_newuser
ID: 23713676
ok, captured the packets with wireshark.

now it gets interesting:

test:
typed "http://www.google.com" into firefox and captured packets.

result:
Even though the dns server 208.67.222.222 is the only DNS server according to ipconfig /all, there are no packets sent to it.

The client sends a packet to the WINS-Server in the network to port 137 net bios querying for www.google.com.
The wins-server returns "requested name does not exist"
Client sends 4 net bios name queries to 172.16.3.255 (?) without getting a response.

So:
- client does not send a dns query to the nameserver
- client sends netbios ns requests to wins server
0
 
LVL 26

Expert Comment

by:akahan
ID: 23713745
- Are you by any chance using Zonealarm?
0
 

Author Comment

by:ultimate_newuser
ID: 23713909
have used it previously, but not anymore.
no zonealarm processes running.
0
 
LVL 26

Accepted Solution

by:
akahan earned 1500 total points
ID: 23714427
Hmm.  I've seen a number of instances where SP3 didn't install properly and, as a result, DNS exhibited symptoms like yours.  The normal advice is to uninstall SP3 and try again, but apparently that's not working for you.  Could you try reinstalling SP3 (by downloading the package using another machine, putting it on, e.g., a USB drive, and installing it from there?)

0
 

Author Comment

by:ultimate_newuser
ID: 23714955
Thank you. Yes, that's a good idea. I was already looking for the downloaded version from this morning, but somehow it's gone, so I'll have to download it tomorrow again when I'm at the good network connection with a second computer.
0
 

Author Comment

by:ultimate_newuser
ID: 23736136
sp3 installation in protected mode fixed the problem
0

Featured Post

Fill in the form and get your FREE NFR key NOW!

Veeam is happy to provide a FREE NFR server license to certified engineers, trainers, and bloggers.  It allows for the non‑production use of Veeam Agent for Microsoft Windows. This license is valid for five workstations and two servers.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

For both online and offline retail, the cross-channel business is the most recent pattern in the B2C trade space.
This article provides a convenient collection of links to Microsoft provided Security Patches for operating systems that have reached their End of Life support cycle. Included operating systems covered by this article are Windows XP,  Windows Server…
Two types of users will appreciate AOMEI Backupper Pro: 1 - Those with PCIe drives (and haven't found cloning software that works on them). 2 - Those who want a fast clone of their boot drive (no re-boots needed) and it can clone your drive wh…
When cloud platforms entered the scene, users and companies jumped on board to take advantage of the many benefits, like the ability to work and connect with company information from various locations. What many didn't foresee was the increased risk…
Suggested Courses

834 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question