Solved

DNS cannot resolve external company website

Posted on 2016-08-06
7
66 Views
Last Modified: 2016-08-08
Last Week our local ISP/telephone/cable company started handling our DNS records. Everything seems to be working great except, when I try to go to our company website I get the following error:

"This site can’t be reached
www.mycompany.org’s server DNS address could not be found."

When I run nslookup I get this error:

"***myserver.mycompany.local can't find www.mycompany.org: Server failed".

This problem ONLY began when the ISP/Cable company started handling our DNS records!

Oddly enough if I try to go to our IPS/Cable company website I get the same exact error message in the browser and same error in nslookup. All other websites I go to resolve without any problems. We are running Windows SBS 2011 standard with all patches up to date and the static IP of our server is also the DNS being pushed to all our client PC's. There are no Forwarders in place in the DNS server. The error's described above happen on the server and every client PC in our offices regardless of whether they are connect via CAT5 or in-house wifi.

 I have attached screen shots of the different errors. This is worth 500 points as I have now been with this problem for 4 days and the ISP cannot seem to resolve it.
browser-error-screen-shot.png
nslookup-screen-shot.png
ipconfig-screen-shot.png
functioning-correct-screen-shot-goog.png
0
Comment
Question by:Houston Blancett
  • 4
  • 2
7 Comments
 
LVL 29

Expert Comment

by:Sudeep Sharma
ID: 41745479
What do you get when you do
nslookup www.mycompany.org 4.2.2.2
or
nslookup www.mycompany.org 8.8.8.8

Sudeep
1
 

Author Comment

by:Houston Blancett
ID: 41745510
Sudeen thank you for your comment. I can definitely resolve to the website using google dns. And I have tried that before my post with success.  But still to my question posted, I cannot determine  why this is now happening when prior to the moving of DNS records, this EXACT setup/configuration has worked perfectly for the past 7 yrs.
0
 
LVL 78

Expert Comment

by:David Johnson, CD, MVP
ID: 41745574
Why, why, why would you allow someone else to manage your dns? It would appear that they don't have forwarders setup
0
How your wiki can always stay up-to-date

Quip doubles as a “living” wiki and a project management tool that evolves with your organization. As you finish projects in Quip, the work remains, easily accessible to all team members, new and old.
- Increase transparency
- Onboard new hires faster
- Access from mobile/offline

 

Author Comment

by:Houston Blancett
ID: 41745629
David regarding your somewhat condescending comment… My predecessor had DNS set up on an independent web hosting company which was at that point hosting our website. And since we were already pulling our  DNS from our ISP's servers from the cable modem to our router, that's why they are handling our DNS records. I certainly am not a DNS expert and if there is a better way to do this I would welcome a suggestion.
0
 
LVL 78

Accepted Solution

by:
David Johnson, CD, MVP earned 500 total points
ID: 41745810
ISP's are notorious for not having good DNS servers. So at your domain registrar you set your NS records to point to your ISP's DNS servers? If the ISP manages your DNS then you forgo Active Directory Integration.  DNS is something is trivial to manage and is pretty much a set it up and forget it item.

I use Cloudflare for my Name Servers (I don't have 2 IP addresses on different subnets) and they have all of my external records (they provide caching/ddos protection) and an A record on Cloudflare that points to my External Ip address.. Internal addresses are handled completely by the local DNS server.  If my Internet goes out, or have an extended power outage my globaly redundant WEB servers that reside in the cloud are always accessible. Also this way if I need to access an external site i.e. www.example.com from my domain example.com the search will go as follows:
locally  no match -> dns forwarders ->  registrar -> cloudflare -> website.
internal sites go to the local dns server and don't have to leave the organization.. so if internet goes out all computers can work just without internet access.
1
 

Author Comment

by:Houston Blancett
ID: 41745820
Excellent advise. Just to clarify what you're saying...our local ISP provides our internet service, which gives us a static external IP and of course the ISP's DNS of which all numbers are plugged into our router between the cable modem and internal server. Just trying to understand why I'm forgoing AD integration with that setup?? Obviously I want to take the best solution that will keep our systems solid. And if the current setup isn't good, then I need to change to what is best.
0
 

Author Comment

by:Houston Blancett
ID: 41747083
Closing this as I took DNS records back from local ISP to manage myself. Once I completed that change, DNS is now resolving correctly. Thank you experts for your comments.
0

Featured Post

How to run any project with ease

Manage projects of all sizes how you want. Great for personal to-do lists, project milestones, team priorities and launch plans.
- Combine task lists, docs, spreadsheets, and chat in one
- View and edit from mobile/offline
- Cut down on emails

Join & Write a Comment

Do you come here a lot? Are you lazy like me and don't want to go through the "trouble" of having to click your Dock's Safari icon and then having to click your Experts Exchange Favorites bookmark to get here? Well then this article is for you.
Several part series to implement Internet Explorer 11 Enterprise Mode
This Micro Tutorial will demonstrate how nuggets on the Web are formatted by using Chrome Developer Tools. These tools would not only view the site's CSS but it can also modify it and save the CSS to use on your own site.
How to create a custom search shortcut to site-search Experts Exchange using Google in the Firefox browser. This eliminates the need to type out site:experts-exchange.com whenever you want to search the site. Launch your Bookmark Menu: Press 'Ctrl +…

744 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

13 Experts available now in Live!

Get 1:1 Help Now