Some external domaine not resolving on new 2003 to 2008 migration.

We recently migrated from Server 2003 to 2008 DNS and DCs we are having a weird issue where paypal and it seems to only be paypal so far is unreachable or pingable. If I connect to our public Wireless network(outside our DMZ and using same link) it works fine. I have a feeling it may have something to do with Root hints or something but I don't know enough to troubleshoot. It's just weird that it is not for all sites. We are not using any forwarders.

Thanks in Advance
nocalertsAsked:
Who is Participating?

[Product update] Infrastructure Analysis Tool is now available with Business Accounts.Learn More

x
I wear a lot of hats...

"The solutions and answers provided on Experts Exchange have been extremely helpful to me over the last few years. I wear a lot of hats - Developer, Database Administrator, Help Desk, etc., so I know a lot of things but not a lot about one thing. Experts Exchange gives me answers from people who do know a lot about one thing, in a easy to use platform." -Todd S.

BCipolloneCommented:
Hmm I would flush the DNS and ARP tables.  Are you able to ping either the host name or the IP seperately?  Have you narrowed it down to your DNS server?  Is it resolving the correct IP address?  
0
Neil RussellTechnical Development LeadCommented:
0
nocalertsAuthor Commented:
I will try restarting DNS and if that fixes it I'll try the Reg fix. Does anyone see a problem restarting the DNS service in the middle of the day is I have 2 Servers?
0
IT Pros Agree: AI and Machine Learning Key

We’d all like to think our company’s data is well protected, but when you ask IT professionals they admit the data probably is not as safe as it could be.

Neil RussellTechnical Development LeadCommented:
DNS takes a few seconds max to do a service restart. a few clients may get web page not found etc if they are real unlucky.
0
nocalertsAuthor Commented:
Ok Thanks I'll let you know how it goes.
0
nocalertsAuthor Commented:
No luck. I'll try in a few minutes incase something has to replicate. Any other ideas if it still doesn't work?
0
Neil RussellTechnical Development LeadCommented:
You have done the regfix?
0
nocalertsAuthor Commented:
no not yet
0
nocalertsAuthor Commented:
I will try that tonight
0
ddiazpCommented:
May sound dumb but did you create a forward zone for paypal?

On one of the machines where you can't access it do:

nslookup
set type=ns
paypal.com

(ensure the result is valid)

then:
server <any of the servers from the results above>
set type=a
<hostname you want to ping>
0
Neil RussellTechnical Development LeadCommented:
IF it is the issue i posted about then WHEN you restart DNS it will seem to work, even though you havent done the reg fix. FOR A WHILE.

The whole point is its a known bug and a reboot/restart of DNS will fix it very short term.
0
nocalertsAuthor Commented:
restarting DNS services didn't fix the problem. So should I still try the reg fix?

ddiazp: I'm not sure what you mean by setup a forward zone. Shouldn't the root hints forward it correctly?
0
Darius GhassemCommented:
I would use DNS Forwarders there are known issues with Root Hints in Windows 2008 Server

http://technet.microsoft.com/en-us/library/cc773370(WS.10).aspx
0

Experts Exchange Solution brought to you by

Your issues matter to us.

Facing a tech roadblock? Get the help and guidance you need from experienced professionals who care. Ask your question anytime, anywhere, with no hassle.

Start your 7-day free trial
ddiazpCommented:
Yes, mine was a rather tricky question.

If you added a forward lookup zone for the domains you cant access then that would explain it. other than that, probably the other guys are onto something
0
brwwigginsIT ManagerCommented:
If it were me I would try disabling eDNS. It's an easy command line and does not require a server restart (although I would personally restart DNS). This has helped me numerous times on 2008 servers

http://support.microsoft.com/kb/832223

From an elevated command prompt, type the following and hit enter

dnscmd /config /enableednsprobles 0

NOTE: that is the number zero and not "O"
0
nocalertsAuthor Commented:
I fixed it by adding google's dns servers as a forwarder. (8.8.8.8) I would recomend setting that if you can. It made our page loads faster than I have ever seen them

Thanks everyone.
0
It's more than this solution.Get answers and train to solve all your tech problems - anytime, anywhere.Try it for free Edge Out The Competitionfor your dream job with proven skills and certifications.Get started today Stand Outas the employee with proven skills.Start learning today for free Move Your Career Forwardwith certification training in the latest technologies.Start your trial today
Active Directory

From novice to tech pro — start learning today.