• Status: Solved
  • Priority: Medium
  • Security: Public
  • Views: 309
  • Last Modified:

DNS problem - i think...

Hi all,

i think we maybe have problems with our DNS server

users are unable to connect to certain web pages, to diagnose the problem, i remote desktoped to another machine at another site and that machine was able to get on one of the sites

where on sbs with isa installed at this site, i ruled out isa as my machine doesnt point to isa as its dg, it points straight out to the internet, so the only thing my machine has in common with the others on this network is the DNS server,

i have the primary dns server set to the sbs server and then under dns i have added a forwarder to my isps dns server

can anyone help me out?
help me diagnose further?

Thanks
Alex
0
awilderbeast
Asked:
awilderbeast
  • 5
  • 4
5 Solutions
 
dicconbCommented:
You can use nslookup to troubleshoot name resolution.

At a command prompt on an affected machine, type:

nslookup
set debug
www.websitethatisntworking.com.

Copy and paste the output into a reply in this thread.

Cheers,

D
0
 
awilderbeastAuthor Commented:
heres the output below

i nslookup'd before and typed the ip into my browser and part of the website came up, looked like a website without a stylesheet attached (i tried it in IE and firefox)

and have just typed the IP into the machine a machine i was rdp'd into and the whole page came up there with no errors

so leaving me a bit baffled at the moment

Microsoft Windows [Version 6.0.6002]
Copyright (c) 2006 Microsoft Corporation.  All rights reserved.

C:\Users\>nslookup
Default Server:  server01.cworks.local
Address:  192.168.170.2

> set debug
> sendables.jibjab.com
Server:  server01.domain.local
Address:  192.168.170.2

------------
Got answer:
    HEADER:
        opcode = QUERY, id = 2, rcode = NOERROR
        header flags:  response, want recursion, recursion avail.
        questions = 1,  answers = 1,  authority records = 0,  additional = 0

    QUESTIONS:
        sendables.jibjab.com, type = A, class = IN
    ANSWERS:
    ->  sendables.jibjab.com
        internet address = 67.199.138.223
        ttl = 13019 (3 hours 36 mins 59 secs)

------------
Non-authoritative answer:
------------
Got answer:
    HEADER:
        opcode = QUERY, id = 3, rcode = NOERROR
        header flags:  response, want recursion, recursion avail.
        questions = 1,  answers = 0,  authority records = 0,  additional = 0

    QUESTIONS:
        sendables.jibjab.com, type = AAAA, class = IN

------------
Name:    sendables.jibjab.com
Address:  67.199.138.223

>

Open in new window

0
 
dicconbCommented:
Does sound very strange!

Your DNS lookup looks perfect, and I'm getting exactly the same here.  It seems the error is taking place at the HTTP level.

Please can you post the output you got when you browsed to the website by IP address?

Cheers,

D
0
Free recovery tool for Microsoft Active Directory

Veeam Explorer for Microsoft Active Directory provides fast and reliable object-level recovery for Active Directory from a single-pass, agentless backup or storage snapshot — without the need to restore an entire virtual machine or use third-party tools.

 
awilderbeastAuthor Commented:
screens below, this happens on both browsers on all machines on our network :S

one is using the domain name, the other the IP


website-error.png
website-error-dns.png
0
 
dicconbCommented:
I can only assume it's some sort of proxy.  Please could you browse to http://www.jockersoft.com/english/ipaddress.php on an affected machine, and let me know the results from the blue box at the top?  Feel free to block out your public IP address if it appears.

Here is my output:

"Your detected IP address is 93.xx.xx.xx (93-xx-xxx-xxx.zone5.bethere.co.uk) - whois search

There are 2 alternatives:
"You are directly connected to the internet
"You are using a highly anonymous proxy"
0
 
awilderbeastAuthor Commented:
its on all machines, and my machine bypasses our proxy so it cant be that?

here you go

Your detected IP address is 77.xxx.xxx.xxx(static-77-xxx-xxx-xxx.karoo.KCOM.COM) - whois search
There are 2 alternatives:

    * You are directly connected to the internet
    * You are using a highly anonymous proxy ok
0
 
dicconbCommented:
I was thinking a transparent proxy at your ISP might be caching invalid data, which could cause the problem.  However, that doesn't fit with the output from jockersoft, so I'm stumped I'm afraid.

Does there seem to be any pattern to the websites that you can't visit?  Roughly how many are there, and do they serve similar types of content?
0
 
awilderbeastAuthor Commented:
ah right, the other site i rdp'd into and all worked is on the same isp also, infact its just around the corner

where would you suggest investigating further

im not sure, i just get users saying i cant get on this site, its not coming up etc
so thought id try look into it, i wouldnt be able to give another sample until it happened again really

cheers
0
 
dicconbCommented:
I'd be tempted to open a support call with the ISP, but I'm not sure how far you'd get.

Sorry I couldn't be more help!

D
0

Featured Post

Industry Leaders: We Want Your Opinion!

We value your feedback.

Take our survey and automatically be enter to win anyone of the following:
Yeti Cooler, Amazon eGift Card, and Movie eGift Card!

  • 5
  • 4
Tackle projects and never again get stuck behind a technical roadblock.
Join Now