Solved

Windows 2008 DNS server forwarding issue ???

Posted on 2009-04-02
15
1,195 Views
Last Modified: 2013-12-29
Hi Experts,

I'm running SBS 2008 domain and I use SBS inbuilt DNS server to forward my external requests. I have added my ISP's DNS server in to the "Forward" list. Both DNS server are identifying and this was working fine from past couple of months. But from yesterday users are getting time outs (DNS issues) when they are browsing.

I have added ISP DNS to client's machine then and then situation will be ok.

how do I troubleshoot this ??? Please advices ??

Thanks a lot !
0
Comment
Question by:Shakthi777
  • 6
  • 4
  • 3
  • +1
15 Comments
 
LVL 8

Expert Comment

by:halejr1
Comment Utility
First what are the DNS settings on your interface of the server?

I would check using NSLOOKUP and pointing directly to the servers provided by your ISP.  Also make sure that port 53 is open for DNS traffic.  It sounds like your ISP may be having the issues, and you could allow forward lookup to standard recommended dns hosts if you set your servers DNS server to itself.

It doesn't sound like a browser issue if you are having the same problem via multiple browsers.  Just do some basic IP troubleshooting, i.e. ping , tracert, etc. etc.

Good luck
Let me know what you find.
0
 

Author Comment

by:Shakthi777
Comment Utility
The timeouts still happening with the ISP DNS server in the client machines. But it's resolved temporarily (for about 15 minutes) when I do ipconfig /renew

Please advise !!!!  
0
 

Author Comment

by:Shakthi777
Comment Utility
ok thanks halejr1: I'll try with your command line tools and post you result ! BTW the SBS server is running on VMware ESXi
:::Server Interface:::
 

Ethernet adapter Local Area Connection:
 

   Connection-specific DNS Suffix  . :

   Description . . . . . . . . . . . : Intel(R) PRO/1000 MT Network Connection

   Physical Address. . . . . . . . . : 00-0C-29-BB-58-97

   DHCP Enabled. . . . . . . . . . . : No

   Autoconfiguration Enabled . . . . : Yes

   Link-local IPv6 Address . . . . . : fe80::4c51:b8fd:e0ea:c2d5%10(Preferred)

   Link-local IPv6 Address . . . . . : fe80::d550:5f5a:24f6:cae9%10(Preferred)

   IPv4 Address. . . . . . . . . . . : 192.168.1.1(Preferred)

   Subnet Mask . . . . . . . . . . . : 255.255.255.0

   Default Gateway . . . . . . . . . : 192.168.1.254

   DNS Servers . . . . . . . . . . . : fe80::d550:5f5a:24f6:cae9%10

                                       192.168.1.1

   NetBIOS over Tcpip. . . . . . . . : Enabled

Open in new window

0
 
LVL 8

Expert Comment

by:halejr1
Comment Utility
ipconfig /renew -- on local system?  shouldn't matter, if you've got a lease and the parameters don't change, renew won't do anything for you on  a client machine.  

your IP address, Default Gateway and Subnet mask probably don't change

Also, do an IPconfig / all from you local  "problem" PC's.  If you have static DNS entries, this too could be a problem.
0
 

Author Comment

by:Shakthi777
Comment Utility
ipconfig /renew -- on local system?
YES
shouldn't matter, if you've got a lease and the parameters don't change, renew won't do anything for you on  a client machine.
BUT IT'S STARTING BROWSING !

Also, do an IPconfig / all from you local  "problem" PC's.  If you have static DNS entries, this too could be a problem.
I DID, ALL ARE CORRECT !
0
 
LVL 21

Accepted Solution

by:
suppsaws earned 200 total points
Comment Utility
Hello Shakthi777,

the clients should never have an isp dns server in their tcp/ip configs.
The ONLY place you -could- configure an external dns forwarder is on the SBS server itself.
can you give an ipconfig /all of the client?
how were the clients joined to the domain? via http://connect?
http://blogs.technet.com/sbs/archive/2009/01/29/cannot-resolve-names-in-certain-top-level-domains-like-co-uk.aspx
http://msmvps.com/blogs/bradley/archive/2008/12/14/dns-root-hints-and-forwarders.aspx


Regards,

suppsaws
0
 
LVL 8

Assisted Solution

by:halejr1
halejr1 earned 100 total points
Comment Utility
Shakthi,

when you say it's starting browsing are you referring to the fact that browsing works after you do an IPconfig?  I think that is an anomoly or coincidence.  Maybe not.  The DNS settings of hte client machines is what I am interested in.
Do an IPCONFIG /ALL and post here.

Thanks.  

Like I mentioned inthe first post, if the DNS server is pointing to itself, it will be doing forward lookup based on the root hints provided the server.  this is all standard and automatic -- by design stuff.

0
Highfive Gives IT Their Time Back

Highfive is so simple that setting up every meeting room takes just minutes and every employee will be able to start or join a call from any room with ease. Never be called into a meeting just to get it started again. This is how video conferencing should work!

 
LVL 15

Assisted Solution

by:Dave_AND
Dave_AND earned 200 total points
Comment Utility
Open DNS, go to the server properties, and then forwarders. Remove the ISP DNS Servers, and replace with 208.67.222.222 and 208.67.220.220 (these are opendns servers far better than any ISP Servers) once thats done, on the SBS server open DHCP,  open the server> IPv4>Scope>Scope Options and make sure the DNS servers is set to your SBS Server's IP.

Once thats done, install the telnet client on the server, start>run>cmd>pkgmgr /iu:"TelnetClient"

While that installs, disable IP6 on the Network card, just open the properties of the Network card, and un tick the IP6, and hit ok. Telnet should now be installed, so go back to your cmd line, and type nslookup and hit enter. You should get something like this:

C:\Users\admin>nslookup
Default Server:  server.domain.local
Address:  192.168.0.1

>

now type google.co.uk and make sure you get a responce. Reboot your client PCs and test. Let me know if it dosnt work.
0
 

Author Comment

by:Shakthi777
Comment Utility
ok Dave I have did exactly what you have explained.  But when I'm unchecked IPv6 my out look clients are not connected to the SBS server, then i have enabled it again and not it's connecting. and so far I didn't get DNS issues.

And what about the root hints ?? Do I need to "Copy from the server" ???
0
 

Author Comment

by:Shakthi777
Comment Utility
Dave; it's happened again, below is the nslookup details; actually my DNS server IP is not 192.168.1.1 !!!!  

I think some serious thing is going on, something is changing my client's DNS entry,  and the thing is it will again get back to normal when I do ipconfig /renew

Please advise !!!!
C:\Users\hsn>nslookup

DNS request timed out.

    timeout was 2 seconds.

Default Server:  UnKnown

Address:  192.168.1.1
 

> www.google.com

Server:  UnKnown

Address:  192.168.1.1
 

DNS request timed out.

    timeout was 2 seconds.

DNS request timed out.

    timeout was 2 seconds.

DNS request timed out.

    timeout was 2 seconds.

DNS request timed out.

    timeout was 2 seconds.

*** Request to UnKnown timed-out

>

Open in new window

0
 
LVL 15

Assisted Solution

by:Dave_AND
Dave_AND earned 200 total points
Comment Utility
Lets get back to basics.. Did you run the connect to the internet wizard? That fixes a lot of your problems..

Now, what SHOULD your DNS Server be? It looks like you have another DHCP Server on the network or somthing.. try this to test.. disable the DHCP server service, and do an IPconfig /release and /renew and see if you get an I.P.

You say it shouldnt be 192.168.1.1, but earlyer, you said your server's I.P is 192.168.1.1.. these should be the same..

Can you do an Ipconfig /all for before its wrong, and after its wrong, so i can see the differances?

Thanks
0
 
LVL 21

Assisted Solution

by:suppsaws
suppsaws earned 200 total points
Comment Utility
as dave said, did you ran the WIZARDS?
here you have an overview of what wizards you should run:
http://sbs.editme.com/wizard2008
make sure you run the SBS 2008 BPA http://blogs.technet.com/sbs/archive/2008/10/16/sbs-2008-bpa-is-live.aspx
and the Fix my network wizard.
Just make sure the SBS server is the ONLY dhcp server, and the clients are on dhcp, and point to the SBS server ad their dns server.
Do NOT disable Ipv6 on the sbs: http://blogs.technet.com/sbs/archive/2008/10/24/issues-after-disabling-ipv6-on-your-nic-on-sbs-2008.aspx
0
 
LVL 21

Expert Comment

by:suppsaws
Comment Utility
I also didn't see an ipconfg /all of the server + one client, and also not how the clients were joined to the domain?
0
 

Author Closing Comment

by:Shakthi777
Comment Utility
Thanks for all you valuable comments and I have learned a lot ! I have found one of my network users running test DHCP server.

Again thanks for your great support !
0
 
LVL 8

Expert Comment

by:halejr1
Comment Utility
Shakti --

what version of antivirus are you running on your server?  Just a thought with a similar problem that I had in a previous life.

Need that IPCONFIG /ALL from the server and one or more of your clients.

Thanks.


0

Featured Post

Free Trending Threat Insights Every Day

Enhance your security with threat intelligence from the web. Get trending threat insights on hackers, exploits, and suspicious IP addresses delivered to your inbox with our free Cyber Daily.

Join & Write a Comment

Storage devices are generally used to save the data or sometime transfer the data from one computer system to another system. However, sometimes user accidentally erased their important data from the Storage devices. Users have to know how data reco…
Possible fixes for Windows 7 and Windows Server 2008 updating problem. Solutions mentioned are from Microsoft themselves. I started a case with them from our Microsoft Silver Partner option to open a case and get direct support from Microsoft. If s…
This video Micro Tutorial explains how to clone a hard drive using a commercial software product for Windows systems called Casper from Future Systems Solutions (FSS). Cloning makes an exact, complete copy of one hard disk drive (HDD) onto another d…
Windows 8 came with a dramatically different user interface known as Metro. Notably missing from that interface was a Start button and Start Menu. Microsoft responded to negative user feedback of the Metro interface, bringing back the Start button a…

743 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

17 Experts available now in Live!

Get 1:1 Help Now