Domain Trust DNS Problems

Having some trouble with an external domain trust.  The networking portion is functional as I am able to ping ip addresses in both directions but I cannot ping host names from one side of the trust but I can ping hostnames from the other.

Conditional forwarders are validated and FQDN resolved.

Two Way External
Not Transitive

Both sides are 2003 functional level

DomainA
ServerA
Server2003

DomainB
ServerB
Server2008

I am able to ping hostnames from DomainA (from any server) on DomainB however, I cannot ping hostnames on DomainA from DomainB.  I can ping ip addresses/

This trust was functional at some point in the past but disabled - I don't think zone transfers/secordary servers were used but and I swear I was able to ping hostnames in both directions just a few days ago.
LenCepedaAsked:
Who is Participating?
I wear a lot of hats...

"The solutions and answers provided on Experts Exchange have been extremely helpful to me over the last few years. I wear a lot of hats - Developer, Database Administrator, Help Desk, etc., so I know a lot of things but not a lot about one thing. Experts Exchange gives me answers from people who do know a lot about one thing, in a easy to use platform." -Todd S.

DeleteCommented:
When you say you can't ping hostnames, do you mean you can't ping the FQDN of a system in DomainA from DomainB?  Or is it only the shortname that you cannot ping?

When you perform the ping, does it resolve to the correct IP Address of the destination system?
0
LenCepedaAuthor Commented:
That is correct - I should I wrote I am unable to ping FQDN of a system in DomainA from DomainB.  

Yes, when I ping the FQDN it does resolve the correct ip address.  

Thank you for you quick response.
0
Cliff GaliherCommented:
First, don't use ping to test DNS issues. Firewalls can easily block ICMP traffic and DNS as well as other traffic can work just fine. Not only is a failed ping a bad test for DNS, it may not even indicate a problem.

Use nslookup.
0
Introducing the "443 Security Simplified" Podcast

This new podcast puts you inside the minds of leading white-hat hackers and security researchers. Hosts Marc Laliberte and Corey Nachreiner turn complex security concepts into easily understood and actionable insights on the latest cyber security headlines and trends.

DeleteCommented:
As a test try disabling IPv6 if it is enabled (assuming your not using anything that is reliant on IPv6).
0
LenCepedaAuthor Commented:
Cliff I attempted nslookup and it wasn't able to find the other domain:  

****domainB can't find server: non-existent domain


Justing,
I disabled IPv6 on serverB- no change
0
Cliff GaliherCommented:
Then I'd check the conditional forwarder settings. Routes between the two domains. And, if necessary, follow the DNS packets themselves to see where they are getting stopped (again, firewall can be an issue) using something like wireshark at each hop.

Don't guess at random. These are simple troubleshooting steps that can pinpoint the problem definitively.
0

Experts Exchange Solution brought to you by

Your issues matter to us.

Facing a tech roadblock? Get the help and guidance you need from experienced professionals who care. Ask your question anytime, anywhere, with no hassle.

Start your 7-day free trial
DeleteCommented:
Can you clarify what you mean by
Conditional forwarders are validated and FQDN resolved.
and how you validated those items if you say now you can't resolve DNS of DomainA from DomainB.

If you in fact cannot resolve DomainA from DomainB then you will need to follow Cliff's suggestions.
0
LenCepedaAuthor Commented:
Alright - I deleted the conditional forwarded and recreated it and poof it worked!!!!
0
It's more than this solution.Get answers and train to solve all your tech problems - anytime, anywhere.Try it for free Edge Out The Competitionfor your dream job with proven skills and certifications.Get started today Stand Outas the employee with proven skills.Start learning today for free Move Your Career Forwardwith certification training in the latest technologies.Start your trial today
DNS

From novice to tech pro — start learning today.

Question has a verified solution.

Are you are experiencing a similar issue? Get a personalized answer when you ask a related question.

Have a better answer? Share it in a comment.