DNS issue, ping resolves IP, but times out, on any attempt.

icarus2256
icarus2256 used Ask the Experts™
on
Greetings,

I am experiancing a strange issue.
I am running dual DNS/DC servers. One as the main, and another as a backup.
When I attempt a ping, for say:  google.com, It resolves the IP, but then proceeds to time out on any ping attempt. I can ping any public name, get the IP, enter that IP into a browser and it works fine. I just cannot seem connect or ping to anything durring a ping test.
When I run a NSLOOKUP, it work just fine.
For example, I do the following command:  nslookup google.com
The response:
Server:  'My DSN server'
Address: 10.1.1.24 (my dns address)

Non-authorative Answer:
Name:  google.com
Address:  74.125.19.103, 74.125.19.125, 74.125.19.147, 74.125.19.99

Yet, when I ping anything, it shows the IP and then proceeds to time-out.
I have tried resetting the Stack and flushing DNS on my machine, etc.

Any Ideas of what to try next?

Thanks,

Comment
Watch Question

Do more with

Expert Office
EXPERT OFFICE® is a registered trademark of EXPERTS EXCHANGE®
Top Expert 2012

Commented:
Most likely Firewall is blocking the ping request.

If nslookup is working properly then DNS is working correctly.
Top Expert 2012

Commented:
Type in ping www.google.com

Author

Commented:
Yea, also tried the WWW in front of all attempts.
I am Running an ASA, is there a way to block all outbound ping requests?
I know how to config inbound ICMP requests, but have never needed to deal with outbound pings, etc.

Cisco ASA 5510 (or something like that)

C++ 11 Fundamentals

This course will introduce you to C++ 11 and teach you about syntax fundamentals.

Top Expert 2012

Commented:
Can you ping the IP addresses?

Author

Commented:
No, like I said, I run a ping command with either www.google.com or google.com (yahoo.com, etc - does not matter): PING www.google.com
[results]:
Pinging www.1.google.com [74.125.19.104]

Request Timed Out
Request Times Out..
etc, etc

Yet, I can go to a browser and enter the IP direct and it will pull right up.
Also, I can enter the name and not IP into URL and it too works!!
I think its just a senario where the outbound ICMP on my ASA is desabled.
I am not even sure if thats an option or even do'able, but about the only thing I can think of.
Top Expert 2012

Commented:
No what I'm saying is can you type ping 74.125.19.104 and get a response?
Top Expert 2012
Commented:
What I believe is your DNS is solid there are no issues but you have a firewall or router disabled ping requests (ICMP)

Author

Commented:
Heh, I just found the issue.
There is indeed a way to allow ICMP in and out for any machine.
Set it and Volia, I am now golden

Thanks for jarring my memory.

Author

Commented:
Thanks for making me think harder.

Do more with

Expert Office
Submit tech questions to Ask the Experts™ at any time to receive solutions, advice, and new ideas from leading industry professionals.

Start 7-Day Free Trial