DNS server Locking up

Posted on 2009-04-29
Last Modified: 2012-05-06
 I have a DHCP server that is delivering a range of 172.16.1.* to my clients. The DHCP server is also sending out information about my DNS and WINS servers. My first DNS and WINS server is and second is I have also listed a couple of external DNS servers to help resolve things as needed. I'm having the problem of my internal DNS serves not resolving an address that I know it has, then the external DNS servers respond with an external address to an internal link. What I mean by this is that I have an address like that in resolving to on the internal DNS server and on the external it's My clients are getting the external address about once out of 20 calls. I have tried shutting down each of my DNS servers to see if one of my servers was locking up but no luck. Does anyone have any ideas what the problem could be that is causing my DNS servers not to respond?

Question by:Amirsys
    LVL 15

    Accepted Solution

    You should not be handing out external DNS servers to your windows domain clients.  They need to find an active directory aware DNS server, and ONLY an active directory aware server (same for servers that are domain members with static IPs).  

    Your DNS server should then be set to forward Internet DNS requests out to an internet DNS server.  This is set in the DNS console, under server properties, forwarders tab.

    The DNS servers TCP/IP settings on its NIC should only point to itself (using its IP address, not the loopback).


    Author Comment

    Would this cause the client to also feel like it locks up and I have to do a ipconfig /release and /renew to get the internal address?

    Author Comment

    The other question is also that I have had this configuration running for over a year with no problems. I do see how it could but just not understanding why it started to cause problems now.
    LVL 59

    Assisted Solution

    by:Darius Ghassem
    The reason is that the clients might not have used the external IP addresses to try to resolve internal names until now. Or you might have a higher volume of DNS requests and now they are getting passed down the line.

    You should never have external DNS servers listed in your internal domain's clients or server's TCP\IP properties. Even if the clients have two internal DNS servers listed before the external DNS servers the clients can still use those DNS servers. When you have multiple DNS servers listed in the TCP\IP properties the clients can use any of them it will not just look at the primary for resolution only. If the Primary DNS server doesn't come back with a request fast enough for the client the client will start going down the line of DNS servers it has.

    Author Comment

    I have made the changes and will see if the problem goes away.


    Write Comment

    Please enter a first name

    Please enter a last name

    We will never share this with anyone.

    Featured Post

    Better Security Awareness With Threat Intelligence

    See how one of the leading financial services organizations uses Recorded Future as part of a holistic threat intelligence program to promote security awareness and proactively and efficiently identify threats.

    I wrote this article to explain some important DNS concepts that should be known to avoid some typical configuration errors I often see in forums. I assume that what is described here is the typical behavior of Microsoft DNS client. I don't know …
    To add imagery to an HTML email signature, you have two options available to you. You can either add a logo/image by embedding it directly into the signature or hosting it externally and linking to it. The vast majority of email clients display l…
    Polish reports in Access so they look terrific. Take yourself to another level. Equations, Back Color, Alternate Back Color. Write easy VBA Code. Tighten space to use less pages. Launch report from a menu, considering criteria only when it is filled…

    794 members asked questions and received personalized solutions in the past 7 days.

    Join the community of 500,000 technology professionals and ask your questions.

    Join & Ask a Question

    Need Help in Real-Time?

    Connect with top rated Experts

    18 Experts available now in Live!

    Get 1:1 Help Now