Link to home
Start Free TrialLog in
Avatar of Ram Kumar Chellam
Ram Kumar ChellamFlag for Saudi Arabia

asked on

Error Code 11001: Host not found

Dears,

We are receive the Following error when we are trying to open www.microsoft.com

Error:

Technical Information (for support personnel)
Error Code 11001: Host not found
Background: This error indicates that the gateway could not find the IP address of the website you are trying to access. This is usually due to a DNS-related error.
Date: 4/11/2010 9:45:11 AM
Server: domain.com
Source: DNS error


We are Using ISA 2004

Could you please help me this issue

Thanks
Avatar of Bawer
Bawer
Flag of Afghanistan image

can you check if you ISA server is able to resolve MS and other websites , just try by pinging Microsoft.com or google.com

If yes then check if you are able to browse the same from the ISA server via firefox or windows 7.
Avatar of Ram Kumar Chellam

ASKER

Dear Bawer,

Thanks for your support, i try as per your comment, i can ping only google.com, i try to ping microsoft.com its giveing me the following error:

Ping request could not find host microsoft.com, please check the name and try again.

Thanks
can you check if proper DNS is assigned and the ISA server is able to ping the local dns server and that DNS server has internet to route its requests....
Dear,

I checked, i try to ping my local DNS its pinging, i try to ping my external DNS IP, its not pinging and i try to ping my External Gate its also not ping.

Could you please tell me how can i check DNS server has internet to route its requests...

Thanks
Provide an ipconfig /all from the ISA server.

Dear,

As per your request please find the below ipconfig /all



Windows IP Configuration



   Host Name . . . . . . . . . . . . : ***************

   Primary Dns Suffix  . . . . . . . : ****************

   Node Type . . . . . . . . . . . . : Unknown

   IP Routing Enabled. . . . . . . . : Yes

   WINS Proxy Enabled. . . . . . . . : Yes

   DNS Suffix Search List. . . . . . : ************



Ethernet adapter Internal:



   Connection-specific DNS Suffix  . :

   Description . . . . . . . . . . . : Realtek RTL8139 Family PCI Fast Ethernet NIC

   Physical Address. . . . . . . . . : 00-C0-26-8A-F4-D5

   DHCP Enabled. . . . . . . . . . . : No

   IP Address. . . . . . . . . . . . : 192.168.0.202

   Subnet Mask . . . . . . . . . . . : 255.255.255.0

   Default Gateway . . . . . . . . . :

   DNS Servers . . . . . . . . . . . : 192.168.0.201

                                       192.168.0.204

   Primary WINS Server . . . . . . . : 192.168.0.201

   Secondary WINS Server . . . . . . : 192.168.0.204



Ethernet adapter external:



   Connection-specific DNS Suffix  . :

   Description . . . . . . . . . . . : Realtek RTL8139 Family PCI Fast Ethernet NIC #2

   Physical Address. . . . . . . . . : 00-05-5D-2F-8E-03

   DHCP Enabled. . . . . . . . . . . : No

   IP Address. . . . . . . . . . . . : 212.102.22.113

   Subnet Mask . . . . . . . . . . . : 255.255.255.224

   IP Address. . . . . . . . . . . . : 212.102.22.111

   Subnet Mask . . . . . . . . . . . : 255.255.255.224

   IP Address. . . . . . . . . . . . : 212.102.22.110

   Subnet Mask . . . . . . . . . . . : 255.255.255.224

   IP Address. . . . . . . . . . . . : 212.102.22.101

   Subnet Mask . . . . . . . . . . . : 255.255.255.224

   IP Address. . . . . . . . . . . . : 212.102.22.100

   Subnet Mask . . . . . . . . . . . : 255.255.255.224

   IP Address. . . . . . . . . . . . : 212.102.22.98

   Subnet Mask . . . . . . . . . . . : 255.255.255.224

   Default Gateway . . . . . . . . . : 212.102.22.97

   DNS Servers . . . . . . . . . . . : 212.102.0.10

                                       212.102.0.11

   NetBIOS over Tcpip. . . . . . . . : Disabled

Waiting for your reply

Thanks
are you able to ping 212.102.0.10,,, also check from your DNS server if the name resolution is happening. and let us know if your DNS server has internet or any forwarder defined.....

Dear,

I try to ping my external DNS but i can't ping, how can i check the following:

 check from your DNS server if the name resolution is happening. and let us know if your DNS server has internet or any forwarder defined

Waiting for your reply

Thanks
ok so you are unable to ping the DNS which you defined in your secondary network card. Now either you make sure that your ISA server has internet and you can ping the mentioned IP if not then make sure your DNS server can ping any external domain address but one of the most important is internet connection in your ISA server....
it may be better that if you design your ISA structure connected with internet and DNS server...
this server is setup incorrectly.

you cannot have an external dns server ip address on the external nic - it needs to be the same dns ip addresses as used on the internal nic. this is also the same for all clients and servers. They should ONLY reference your internal DNS servers. The internal DNS servers will then use their forwarders to resolve external DNS names.

Basic  ISA setup requirement - although it is also the way that normal Windows servers should be setup also.
Keith


Dears All,

Thanks for you Support, Yesterday i checked internet is working in ISA. yesterday i try to open Microsoft.com through Firefox- its working fine, but when every i try to one in IE (8,7 or 6) its giving me the same error.

Could you please hell me

Thanks
great then go to explorer 7-8 > tools>internet options>connections there in LAN settings select the automatic detection option and if possible in proxy setting give server name and port number...hope this works

I tried but the result is same.
can you upload few screen shots for the main internet explorer screen and the internet options...

Please find the attached Screen Shot
IE-Option.jpg
Microsoft-Error.jpg
i hope this is client machine, if yes then check if firefox works in this machine, and it can resolve the domain names...

Dear Bawer:

its client machine, i can open Microsoft websire through Firefox n this machine.
hmmm one last check you have to do is that check the websites in ISA server itself using IE..


In ISA we are using IE (6) only
Ignore me if you wish, but I will say again the server is incorrectly set up for ISA Server use. You can play to your hearts content with all the little bits biut unless you get the basics right, it is game over. If you do not understand the basics of network setup and the operation of DNS then you would be wise to get a book or read up on the subject.

If you wish, you can read on my blog for the subject, my articles on Experts-Exchange or you can read the Microsoft Technet pages that refer to my blog on correct basic setup for ISA Server.

http://www.kalabaster.com/dasblog/2009/09/06/ISAServerAndFTMGBasicNetworkAndDNSSettingsOnceAndForAll.aspx


keith
ISA Forefront MVP
Dear Keith,

Good Day,

As per your comment, i configure both external & Internal nic  DNS  setting same (now external nic DNS is pointing to Internal nic DNS setting). ans still i am facing the same problem.

Could you please Advice

Thanks
i am suspecting some issue in ISA application itself,, how its possible that browsing works in firefox but not in e-explorer...
Dear All,

I found it, its working fine, thanks for every one who helped me in this case:

you should configure your ISA NICs as following:
http://blog.msedge.org.uk/2010/04/recommended-network-card-configuration_14.html 


Thanks

Dear All,

Sorry for that its works only 10 mins after that its giving me the same Error........... :(


Thanks
No one ready to help me

Thanks
you mentioned that itworked only 10 min and then again stopped working,,, are you pointing to iexplorer... any other applications.... since our discussion was about i-explorer....

we are ready to help you ,,but sometimes unless the person is not on site it a bit difficult to figure out the exact issue...

Dear Bawer,

I am pointing to IE only
ok, now its a bit strange to me how its possible that IE work only for 10 minutes and then again it gets buggy.... how many rules you have in ISA server,,,,

Dear Bawer,

My ISA Internal & External Nics setting was like this before, Internal DNS Setting (Our own DNS Server setting) External DNS Setting ( ISP's DNS Seeting) after i go through the below article, i change my External Nics DNS setting ( Right now there is no DNS Setting in External).

http://blog.msedge.org.uk/2010/04/recommended-network-card-configuration_14.html 

Then i check the Users IE -> www.microsoft.com, its works after some time i checked again its gives me the same error.

In My ISA we have lot of rule

1. DNS Rule
2. SMTP Rule
3.POP3 Rule
4.Block Facebook Rule
5.Block Youtube Rule
6.Internet Access Rule
7.OMA Access Rule
8.OWA Access Rule
9.RPC Over HTTP Rule
10.Last Default Rule

and some other rule disabled

Waiting for your reply.

Thanks
First of all no need to create that much rules, one rule is enough for all blocked sites,, this will kill the ISA server performance...

what is DNS rule for?

i see some protocol based allowed rules no need to create rule for each application/port and different protocols, max two are enough. but you should definitely minimize block sites rules..

Just give me some details of the DNS rule and once again confirm if the internet is working fine using firefox...


Dear Bawer,

Sure i will reduce the rules,

DNS Rule:

Action-Allow
Protocols - All OutBound Traffic
From - DNS Server (1st DNS Server & 2nd DNS Server) & Exchange Server
To - External
User - All User
Content Type - All Content Type

Thanks


Yes Microsoft web site s working in Firefox
ASKER CERTIFIED SOLUTION
Avatar of Bawer
Bawer
Flag of Afghanistan image

Link to home
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
Start Free Trial


Still my issue not yet solved by anyone
have you done what i mentioned in 32237516

Yes, i did but the result is same
1) Turn off ISA services all together,, and then check if IE is able to browse any thing itself in ISA server..since ISA server is only for client side prevention not itself for the server.


2) Create on new rule and put it in the top with all protocols allowed and in the FROM tab add your machine IP and disable all other rules....check if the IE is working from your machine....


can you write answers for each...what was the result

Still not Sloved
so what was the last result ??