Go Premium for a chance to win a PS4. Enter to Win

x
  • Status: Solved
  • Priority: Medium
  • Security: Public
  • Views: 340
  • Last Modified:

Unable to access internal website -- DNS Issue

hi Experts,

One our client is not able to access their own website.
To troubleshoot I did the following
1) gave unlimited internet access to a user in firewall and tested as that user.
2)Ran a tracert and that pointed to right ipaddress
3) ran a ping (for both ip and name)
4) in DNS there is a zone under company name. If I delete that zone it works without a problem. Problem is we need to have zone name with company name. users have exchange server and there are records for mail, owa, auto discover in that zone. There is a record for www and it is pointing to right ipaddress.
5) I restarted DNS server service

Can you please assist me in fixing this issue?
0
ukitsme
Asked:
ukitsme
1 Solution
 
MASTechnical Department HeadCommented:
Did you try nslookup with "www.websitename.com" and "websitename.com" from the problematic client

please post the error details
0
 
piyushranusriCommented:
can you resolve the domain name of the website to an ip address?

Can you get to the website via the Internal IP address of the server

what does an nslookup for the website fqdn return?

check the DNS, that did you allready added entry with same name,,

might be that your internal DNS server is giving back the WAN IP address when asked for www.abcd.com and your modem/router does not support feeding data back to the LAN interfaces when a request is made of its WAN IP from within the LAN. This is very common on home and SOHO modems.


please share the output
0
 
Jan SpringerCommented:
It sounds like a firewall issue.  The www record probably points to the external IP address.  

When the internal users hit that address in the firewall, it points back inside (hairpinning).

You need to create the NAT for that private/public IP in the firewall to have 'dns doctoring' configured.  This way when internal users go to reach the public IP of a host that sits inside the firewall with them, the firewall will return the private IP instead of the public IP.
0
New Tabletop Appliances Blow Competitors Away!

WatchGuard’s new T15, T35 and T55 tabletop UTMs provide the highest-performing security inspection in their class, allowing users at small offices, home offices and distributed enterprises to experience blazing-fast Internet speeds without sacrificing enterprise-grade security.

 
ukitsmeAuthor Commented:
Sorry looks like there is some confusion is here.
Web site is hosted by a 3rd party. My www record is pointing to external ip.

hi abbasiftt,

yes I tried both of them.

hi piyushranusri,
can you resolve the domain name of the website to an ip address?
yes I can

Can you get to the website via the Internal IP address of the server?
Web server is hosted by a 3rd party. I created a record to www to point to that external ip

what does an nslookup for the website fqdn return?
it points to right ipaddress. Strange part is nslookup from my computer is pointing to right ipaddress. When I log into client server/computer it is pointing to same ipaddress but user is not able to access web site. please note there is no proxy setup.

check the DNS, that did you already added entry with same name,,
I already checked it. There are only 5 records in the Zone.
4 records  for exchange and 1 for www.

hi _jesper_,

I created a rule in firewall LAn -WAN (ipaddress of the client I am logged into to allow all) and it is on top of the list.
I uninstalled Antivirus and disabled windows firewall
0
 
Jan SpringerCommented:
you need to install 'dig' (comes standard with *nix bind distributions).  if you are running windows, you will need to download it and:

/path/to/dig www.domain.com +trace

ee recommends that public domain names not be published but there is no violation of security if you do so.  

that will make it easier to troubleshoot.
0
 
ukitsmeAuthor Commented:
Managed to fix it.

Under name of the zone I created host A record leaving name space blank and that fixed the issue.
0
 
ukitsmeAuthor Commented:
Found a fix for the issue.
0

Featured Post

 [eBook] Windows Nano Server

Download this FREE eBook and learn all you need to get started with Windows Nano Server, including deployment options, remote management
and troubleshooting tips and tricks

Tackle projects and never again get stuck behind a technical roadblock.
Join Now