Error Code 11001: Host not found

Dears,

We are receive the Following error when we are trying to open www.microsoft.com

Error:

Technical Information (for support personnel)
Error Code 11001: Host not found
Background: This error indicates that the gateway could not find the IP address of the website you are trying to access. This is usually due to a DNS-related error.
Date: 4/11/2010 9:45:11 AM
Server: domain.com
Source: DNS error


We are Using ISA 2004

Could you please help me this issue

Thanks
Ram Kumar ChellamSr. System AdministratorAsked:
Who is Participating?

[Product update] Infrastructure Analysis Tool is now available with Business Accounts.Learn More

x
I wear a lot of hats...

"The solutions and answers provided on Experts Exchange have been extremely helpful to me over the last few years. I wear a lot of hats - Developer, Database Administrator, Help Desk, etc., so I know a lot of things but not a lot about one thing. Experts Exchange gives me answers from people who do know a lot about one thing, in a easy to use platform." -Todd S.

BawerCommented:
can you check if you ISA server is able to resolve MS and other websites , just try by pinging Microsoft.com or google.com

If yes then check if you are able to browse the same from the ISA server via firefox or windows 7.
0
Ram Kumar ChellamSr. System AdministratorAuthor Commented:
Dear Bawer,

Thanks for your support, i try as per your comment, i can ping only google.com, i try to ping microsoft.com its giveing me the following error:

Ping request could not find host microsoft.com, please check the name and try again.

Thanks
0
BawerCommented:
can you check if proper DNS is assigned and the ISA server is able to ping the local dns server and that DNS server has internet to route its requests....
0
How the Cloud Can Help You as an MSSP

Today, every Managed Security Service Provider (MSSP) needs a platform to deliver effective and efficient security-as-a-service to their customers. Scale, elasticity and profitability are a few of the many features that a Cloud platform offers. Register today to learn more!

Ram Kumar ChellamSr. System AdministratorAuthor Commented:
Dear,

I checked, i try to ping my local DNS its pinging, i try to ping my external DNS IP, its not pinging and i try to ping my External Gate its also not ping.

Could you please tell me how can i check DNS server has internet to route its requests...

Thanks
0
Keith AlabasterEnterprise ArchitectCommented:
Provide an ipconfig /all from the ISA server.
0
Ram Kumar ChellamSr. System AdministratorAuthor Commented:

Dear,

As per your request please find the below ipconfig /all



Windows IP Configuration



   Host Name . . . . . . . . . . . . : ***************

   Primary Dns Suffix  . . . . . . . : ****************

   Node Type . . . . . . . . . . . . : Unknown

   IP Routing Enabled. . . . . . . . : Yes

   WINS Proxy Enabled. . . . . . . . : Yes

   DNS Suffix Search List. . . . . . : ************



Ethernet adapter Internal:



   Connection-specific DNS Suffix  . :

   Description . . . . . . . . . . . : Realtek RTL8139 Family PCI Fast Ethernet NIC

   Physical Address. . . . . . . . . : 00-C0-26-8A-F4-D5

   DHCP Enabled. . . . . . . . . . . : No

   IP Address. . . . . . . . . . . . : 192.168.0.202

   Subnet Mask . . . . . . . . . . . : 255.255.255.0

   Default Gateway . . . . . . . . . :

   DNS Servers . . . . . . . . . . . : 192.168.0.201

                                       192.168.0.204

   Primary WINS Server . . . . . . . : 192.168.0.201

   Secondary WINS Server . . . . . . : 192.168.0.204



Ethernet adapter external:



   Connection-specific DNS Suffix  . :

   Description . . . . . . . . . . . : Realtek RTL8139 Family PCI Fast Ethernet NIC #2

   Physical Address. . . . . . . . . : 00-05-5D-2F-8E-03

   DHCP Enabled. . . . . . . . . . . : No

   IP Address. . . . . . . . . . . . : 212.102.22.113

   Subnet Mask . . . . . . . . . . . : 255.255.255.224

   IP Address. . . . . . . . . . . . : 212.102.22.111

   Subnet Mask . . . . . . . . . . . : 255.255.255.224

   IP Address. . . . . . . . . . . . : 212.102.22.110

   Subnet Mask . . . . . . . . . . . : 255.255.255.224

   IP Address. . . . . . . . . . . . : 212.102.22.101

   Subnet Mask . . . . . . . . . . . : 255.255.255.224

   IP Address. . . . . . . . . . . . : 212.102.22.100

   Subnet Mask . . . . . . . . . . . : 255.255.255.224

   IP Address. . . . . . . . . . . . : 212.102.22.98

   Subnet Mask . . . . . . . . . . . : 255.255.255.224

   Default Gateway . . . . . . . . . : 212.102.22.97

   DNS Servers . . . . . . . . . . . : 212.102.0.10

                                       212.102.0.11

   NetBIOS over Tcpip. . . . . . . . : Disabled

Waiting for your reply

Thanks
0
BawerCommented:
are you able to ping 212.102.0.10,,, also check from your DNS server if the name resolution is happening. and let us know if your DNS server has internet or any forwarder defined.....
0
Ram Kumar ChellamSr. System AdministratorAuthor Commented:

Dear,

I try to ping my external DNS but i can't ping, how can i check the following:

 check from your DNS server if the name resolution is happening. and let us know if your DNS server has internet or any forwarder defined

Waiting for your reply

Thanks
0
BawerCommented:
ok so you are unable to ping the DNS which you defined in your secondary network card. Now either you make sure that your ISA server has internet and you can ping the mentioned IP if not then make sure your DNS server can ping any external domain address but one of the most important is internet connection in your ISA server....
0
BawerCommented:
it may be better that if you design your ISA structure connected with internet and DNS server...
0
Keith AlabasterEnterprise ArchitectCommented:
this server is setup incorrectly.

you cannot have an external dns server ip address on the external nic - it needs to be the same dns ip addresses as used on the internal nic. this is also the same for all clients and servers. They should ONLY reference your internal DNS servers. The internal DNS servers will then use their forwarders to resolve external DNS names.

Basic  ISA setup requirement - although it is also the way that normal Windows servers should be setup also.
Keith


0
Ram Kumar ChellamSr. System AdministratorAuthor Commented:
Dears All,

Thanks for you Support, Yesterday i checked internet is working in ISA. yesterday i try to open Microsoft.com through Firefox- its working fine, but when every i try to one in IE (8,7 or 6) its giving me the same error.

Could you please hell me

Thanks
0
BawerCommented:
great then go to explorer 7-8 > tools>internet options>connections there in LAN settings select the automatic detection option and if possible in proxy setting give server name and port number...hope this works
0
Ram Kumar ChellamSr. System AdministratorAuthor Commented:

I tried but the result is same.
0
BawerCommented:
can you upload few screen shots for the main internet explorer screen and the internet options...
0
Ram Kumar ChellamSr. System AdministratorAuthor Commented:

Please find the attached Screen Shot
IE-Option.jpg
Microsoft-Error.jpg
0
BawerCommented:
i hope this is client machine, if yes then check if firefox works in this machine, and it can resolve the domain names...
0
Ram Kumar ChellamSr. System AdministratorAuthor Commented:

Dear Bawer:

its client machine, i can open Microsoft websire through Firefox n this machine.
0
BawerCommented:
hmmm one last check you have to do is that check the websites in ISA server itself using IE..
0
Ram Kumar ChellamSr. System AdministratorAuthor Commented:


In ISA we are using IE (6) only
0
Keith AlabasterEnterprise ArchitectCommented:
Ignore me if you wish, but I will say again the server is incorrectly set up for ISA Server use. You can play to your hearts content with all the little bits biut unless you get the basics right, it is game over. If you do not understand the basics of network setup and the operation of DNS then you would be wise to get a book or read up on the subject.

If you wish, you can read on my blog for the subject, my articles on Experts-Exchange or you can read the Microsoft Technet pages that refer to my blog on correct basic setup for ISA Server.

http://www.kalabaster.com/dasblog/2009/09/06/ISAServerAndFTMGBasicNetworkAndDNSSettingsOnceAndForAll.aspx


keith
ISA Forefront MVP
0
Ram Kumar ChellamSr. System AdministratorAuthor Commented:
Dear Keith,

Good Day,

As per your comment, i configure both external & Internal nic  DNS  setting same (now external nic DNS is pointing to Internal nic DNS setting). ans still i am facing the same problem.

Could you please Advice

Thanks
0
BawerCommented:
i am suspecting some issue in ISA application itself,, how its possible that browsing works in firefox but not in e-explorer...
0
Ram Kumar ChellamSr. System AdministratorAuthor Commented:
Dear All,

I found it, its working fine, thanks for every one who helped me in this case:

you should configure your ISA NICs as following:
http://blog.msedge.org.uk/2010/04/recommended-network-card-configuration_14.html 


Thanks
0
Ram Kumar ChellamSr. System AdministratorAuthor Commented:

Dear All,

Sorry for that its works only 10 mins after that its giving me the same Error........... :(


Thanks
0
Ram Kumar ChellamSr. System AdministratorAuthor Commented:
No one ready to help me

Thanks
0
BawerCommented:
you mentioned that itworked only 10 min and then again stopped working,,, are you pointing to iexplorer... any other applications.... since our discussion was about i-explorer....

we are ready to help you ,,but sometimes unless the person is not on site it a bit difficult to figure out the exact issue...
0
Ram Kumar ChellamSr. System AdministratorAuthor Commented:

Dear Bawer,

I am pointing to IE only
0
BawerCommented:
ok, now its a bit strange to me how its possible that IE work only for 10 minutes and then again it gets buggy.... how many rules you have in ISA server,,,,
0
Ram Kumar ChellamSr. System AdministratorAuthor Commented:

Dear Bawer,

My ISA Internal & External Nics setting was like this before, Internal DNS Setting (Our own DNS Server setting) External DNS Setting ( ISP's DNS Seeting) after i go through the below article, i change my External Nics DNS setting ( Right now there is no DNS Setting in External).

http://blog.msedge.org.uk/2010/04/recommended-network-card-configuration_14.html 

Then i check the Users IE -> www.microsoft.com, its works after some time i checked again its gives me the same error.

In My ISA we have lot of rule

1. DNS Rule
2. SMTP Rule
3.POP3 Rule
4.Block Facebook Rule
5.Block Youtube Rule
6.Internet Access Rule
7.OMA Access Rule
8.OWA Access Rule
9.RPC Over HTTP Rule
10.Last Default Rule

and some other rule disabled

Waiting for your reply.

Thanks
0
BawerCommented:
First of all no need to create that much rules, one rule is enough for all blocked sites,, this will kill the ISA server performance...

what is DNS rule for?

i see some protocol based allowed rules no need to create rule for each application/port and different protocols, max two are enough. but you should definitely minimize block sites rules..

Just give me some details of the DNS rule and once again confirm if the internet is working fine using firefox...
0
Ram Kumar ChellamSr. System AdministratorAuthor Commented:


Dear Bawer,

Sure i will reduce the rules,

DNS Rule:

Action-Allow
Protocols - All OutBound Traffic
From - DNS Server (1st DNS Server & 2nd DNS Server) & Exchange Server
To - External
User - All User
Content Type - All Content Type

Thanks
0
Ram Kumar ChellamSr. System AdministratorAuthor Commented:


Yes Microsoft web site s working in Firefox
0
BawerCommented:
i am suspecting that the IE application is somehow mistakenly restricted in some rules.. carry out two tests which i hope will give you some solution....

1) Turn off ISA services all together,, and then check if IE is able to browse any thing itself in ISA server..since ISA server is only for client side prevention not itself for the server.


2) Create on new rule and put it in the top with all protocols allowed and in the FROM tab add your machine IP and disable all other rules....check if the IE is working from your machine....

0

Experts Exchange Solution brought to you by

Your issues matter to us.

Facing a tech roadblock? Get the help and guidance you need from experienced professionals who care. Ask your question anytime, anywhere, with no hassle.

Start your 7-day free trial
Ram Kumar ChellamSr. System AdministratorAuthor Commented:


Still my issue not yet solved by anyone
0
BawerCommented:
have you done what i mentioned in 32237516
0
Ram Kumar ChellamSr. System AdministratorAuthor Commented:

Yes, i did but the result is same
0
BawerCommented:
1) Turn off ISA services all together,, and then check if IE is able to browse any thing itself in ISA server..since ISA server is only for client side prevention not itself for the server.


2) Create on new rule and put it in the top with all protocols allowed and in the FROM tab add your machine IP and disable all other rules....check if the IE is working from your machine....


can you write answers for each...what was the result
0
Ram Kumar ChellamSr. System AdministratorAuthor Commented:

Still not Sloved
0
BawerCommented:
so what was the last result ??
0
It's more than this solution.Get answers and train to solve all your tech problems - anytime, anywhere.Try it for free Edge Out The Competitionfor your dream job with proven skills and certifications.Get started today Stand Outas the employee with proven skills.Start learning today for free Move Your Career Forwardwith certification training in the latest technologies.Start your trial today
Windows Server 2003

From novice to tech pro — start learning today.