Avatar of DebelloCaminus
DebelloCaminusFlag for United States of America asked on

Unable to access sec.gov by name

We are having an issue accessing sec.gov website, it seems to be hit or miss.  No reports of any other websites not being accessible.  Am pretty sure it is nothing on their side, but something in our DNS.  We are able to get to the site if we connect to our external DSL line or I remote into my home machine.  We are using MS DNS server on our domain controllers. OS = 2008r2. Below are the steps I have gone through, doing "ipconfig /flushdns" and "ipconfig /registerdns" after most steps:

Unable to ping sec.gov
Unable to ping sec.gov by IP - most likely have responses turned off
Added googles public dns as a forwarder on our DNS servers (with our ISP provided DNS servers) and moved it to top of the list.
Removed our ISPs provided DNS server and left just the google DNS server  
Restart DNS server service

The below work, but are just work arounds not resolutions:
Statically set the DNS server in the NIC to googles public dns (8.8.8.8) and able to get out without issue.
Able to access the site by typing the IP address instead of the name

Any other assistance troubleshooting this would be great.  Thanks ahead of time.
DNS

Avatar of undefined
Last Comment
Amit Bhatnagar

8/22/2022 - Mon
avilov

check if your DNS server has conditional forwarding set for that domain
ASKER
DebelloCaminus

Avilov,
   Thanks for the response.  Checked conditional forwarding on both servers and there are none set.  Also for more information.  This does seems to be only happening in our 1 site, out of 4.  All DNS servers are suppose to be replicating with each other and they seem to be without issue.  I went through all settings of the dns server that seems to work ok and the one that isn't.

I turned on logging and attempted to access sec.gov again.  Everything seems to be ok to me.  I can attached log if needed.

Thanks again
ASKER CERTIFIED SOLUTION
Amit Bhatnagar

Log in or sign up to see answer
Become an EE member today7-DAY FREE TRIAL
Members can start a 7-Day Free trial then enjoy unlimited access to the platform
Sign up - Free for 7 days
or
Learn why we charge membership fees
We get it - no one likes a content blocker. Take one extra minute and find out why we block content.
See how we're fighting big data
Not exactly the question you had in mind?
Sign up for an EE membership and get your own personalized solution. With an EE membership, you can ask unlimited troubleshooting, research, or opinion questions.
ask a question
ASKER
DebelloCaminus

This article actually makes sense.  We are using a Cisco ASA device for our firewall and its an older version of the IOS.  My only question would be, is anything else dependent on the EDNS being enabled?  As a current work around I statically set an outside dns server (8.8.8.8) as in our DHCP options.
All of life is about relationships, and EE has made a viirtual community a real community. It lifts everyone's boat
William Peck
Amit Bhatnagar

None..It's a feature which was started with Windows 2003 and I was working with Microsoft Networking Team at that time. We disabled this feature in almost 100% of all the issues that came by us and it worked. No one came back saying disabling it broke one of the other functionalities.

Do try it and let us know the result :)

-Amit Bhatnagar.
ASKER
DebelloCaminus

Amit,
   Thanks for the info.  I ran the commands on both our DNS servers and removed the 8.8.8.8 entry from our DHCP options.  Ran ipconfig /flushdns and ipconfig /registerdns for good measure and am able to get to all the sites I wasn't able to before!

Thanks again
Amit Bhatnagar

Glad it worked !! :)
-Amit.
Get an unlimited membership to EE for less than $4 a week.
Unlimited question asking, solutions, articles and more.