Solved

DNS Resolving local Names as external IP address

Posted on 2010-09-23
4
346 Views
Last Modified: 2012-05-10
This occures randomly through out the day. All workstations have experienced it. It usually only lasts for a few minutes or until I flush and register the DNS on the workstation.

This is a standard SBS 2003 server that does DHCP, DNS, File serving, print serving. Just basic stuff.

I have scoured through the DNS settings, they seem ok. I have also checked the firewall to make sure DNS is disabled on it.

In the example below it should be resolve 192.168.4.233
Example:
C:\Documents and Settings\user>ping server01

Pinging p12p-i.geo.vip.re4.yahoo.com [216.39.57.107] with 32 bytes of data:

Reply from 216.39.57.107: bytes=32 time=86ms TTL=52
Reply from 216.39.57.107: bytes=32 time=109ms TTL=52
Reply from 216.39.57.107: bytes=32 time=96ms TTL=52

Ping statistics for 216.39.57.107:
Packets: Sent = 3, Received = 3, Lost = 0 (0% loss),
Approximate round trip times in milli-seconds:
Minimum = 86ms, Maximum = 109ms, Average = 97ms
0
Comment
Question by:demmons-ssit
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
  • 2
4 Comments
 
LVL 59

Accepted Solution

by:
Darius Ghassem earned 500 total points
ID: 33749117
Make sure you are only pointing to the SBS server only within the TCP\IP settings of the clients and server.
0
 
LVL 13

Expert Comment

by:markusdamenous
ID: 33749180
Check the hosts file also.

C:\Windows\System32\Drivers\etc

Should only really need to have localhost in there as an entry, anything is prob. suspicious.
0
 

Author Comment

by:demmons-ssit
ID: 33749668
Just fixed it... This was a doozey!

The DNS settings all look fine on the server.

I checked DHCP and there was an entry for two external IP addresses as secondary DNS servers being dished out to workstations. So every workstation could browse the intertubes even if the server went down. Mind you I just took over this environment, don't know what the previous sys admin was thinking. The two Public IP's set as DNS servers for workstations were from CBeyond and a DSL company.

Looking at the A records for the company website host name I noticed an odd A record that was resolving *.DomainName.com to the Yahoo IP in the OP.

Basically the path and randomness looked like this...
Server was overloaded with requests, the workstation tapped its secondary DNS, the secondary DNS can resolve *.domainname.com so it was resolving private hostnames as that public Yahoo IP. The local DNS server finally cools off from requests and the clients revert back to primary DNS.

I can confirm the fix, the DNS path and everything but the workstations flipping to secondary DNS. I don't know how to track that.

Thanks guys!
0
 

Author Closing Comment

by:demmons-ssit
ID: 33749680
Thank you, checking the DNS settings using ipconfig /all did indeed show the two extra public IP's under the secondary DNS field. Which is what I believe you were trying to convey here.
0

Featured Post

Get 15 Days FREE Full-Featured Trial

Benefit from a mission critical IT monitoring with Monitis Premium or get it FREE for your entry level monitoring needs.
-Over 200,000 users
-More than 300,000 websites monitored
-Used in 197 countries
-Recommended by 98% of users

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

There have been a lot of times when we have seen the need to enter a large number of DNS entries in a forward lookup zone. The standard procedure would be to launch the DNS Manager console, create the Zone and start adding new hosts using the New…
BIND is the most widely used Name Server. A Name Server is the one that translates a site name to it's IP address. There is a new bug in BIND (https://kb.isc.org/article/AA-01272), affecting all versions of BIND 9 from BIND 9.1.0 (inclusive) thro…
There are cases when e.g. an IT administrator wants to have full access and view into selected mailboxes on Exchange server, directly from his own email account in Outlook or Outlook Web Access. This proves useful when for example administrator want…
Visualize your data even better in Access queries. Given a date and a value, this lesson shows how to compare that value with the previous value, calculate the difference, and display a circle if the value is the same, an up triangle if it increased…

627 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question