Re: USERS UNABLE TO GET TO WEBSITES

From: Scott Harding - MS MVP (scrockel_at_**NO_SPAM**hotmail.com)
Date: 02/09/04 

Date: Mon, 9 Feb 2004 12:26:49 -0700

What IP' are used for the clients? Can you do a Nslookup on the clients and
resolve Internet domain names? Can the clients ping outside through the
firewall? 

-- 
Scott Harding
MCSE, MCSA, A+, Network+
Microsoft MVP - Windows NT Server
"BSM" <BSanMiguel@sbccenter.net> wrote in message
news:q1lf2015nsa473ig3t9mjm58k6jg06ijor@4ax.com...
> I have a problem in which , including myself, the users are unable to
> get to certain websites. Either they get a paged cannot be found or go
> straight to a MSN can't find <website> error page.
> HERE IS THE KICKER.
> My servers can get to those websites just fine
>
> Here is my setup.
>
> Clients get an IP Address from a DHCP server.
> DHCP Server sends them DNS entries for 2 internal servers only.
> The PC's are natted behind a firewall which isn't blocking anything
> internally. They have a straight shot to the internet
> There are NO PROXIES
> There are NO ISA servers.
>
> The DNS Servers are using Windows DNS and I have my servers statically
> addressed with their dns entries pointing to the internal servers.
>
> On the DNS Servers I have their DNS entries pointed to the internal
> DNS servers. Within the DNS Admin tool I have 4 forwards pointing to
> my ISP's DNS/Name servers and I have do not recursive turned on.
>
> If I am missing anything else or if anyone has any more questions
> please let me know...  Thanks
>
> They cannot get to the websites via name or IP address.
>
> Below are my servers ipconfigs..
>
> Servers
>
>
> Windows 2000 IP Configuration
>
>
>
> Host Name . . . . . . . . . . . . : DNS2
> Primary DNS Suffix  . . . . . . . : domain.net
> Node Type . . . . . . . . . . . . : Hybrid
>
> IP Routing Enabled. . . . . . . . : No
>
> WINS Proxy Enabled. . . . . . . . : No
>
> DNS Suffix Search List. . . . . . : domain.net
>
> Ethernet adapter Local Area Connection:
>
>
>
> Connection-specific DNS Suffix  . : domain.net
> Description . . . . . . . . . . . : Broadcom NetXtreme Gigabit
> Ethernet
> Physical Address. . . . . . . . . : removed
>
> DHCP Enabled. . . . . . . . . . . : No
>
> IP Address. . . . . . . . . . . . : 10.100.8.2
>
> Subnet Mask . . . . . . . . . . . : 255.255.255.0
>
> Default Gateway . . . . . . . . . : 10.100.8.254
>
> DNS Servers . . . . . . . . . . . : 10.100.8.2
>                                     10.100.8.5
> Primary WINS Server . . . . . . . : 10.100.8.10
>
> Here is another..
>
>
>
> Windows 2000 IP Configuration
>
>
>
> Host Name . . . . . . . . . . . . : DNS1
> Primary DNS Suffix  . . . . . . . : domain.net
> Node Type . . . . . . . . . . . . : Hybrid
>
> IP Routing Enabled. . . . . . . . : No
>
> WINS Proxy Enabled. . . . . . . . : No
>
> DNS Suffix Search List. . . . . . : domain.net
>
> Ethernet adapter Local Area Connection:
>
>
>
> Connection-specific DNS Suffix  . : domain.net
> Description . . . . . . . . . . . : Intel(R) PRO/1000 XT
> Network Connection
> Physical Address. . . . . . . . . : removed
>
> DHCP Enabled. . . . . . . . . . . : No
>
> IP Address. . . . . . . . . . . . : 10.100.8.5
>
> Subnet Mask . . . . . . . . . . . : 255.255.255.0
>
> Default Gateway . . . . . . . . . : 10.100.8.254
>
> DNS Servers . . . . . . . . . . . : 10.100.8.5
>                                     10.100.8.2

Relevant Pages

  • Re: How Secure is ".Local?"
    ... > dozen servers and ~500 websites/public domains. ... Shadow DNS ... Is your DC on the Internet? ... >>It is not going to provide your zone info to anyone ...
    (microsoft.public.win2000.dns)
  • RE: New Forest - Old Domain - Plus DMZ - Help Please
    ... Make sure Windows XP client should use the AD DNS ... The Cert should match the name in Internet. ... New Forest - Old Domain - Plus DMZ - Help Please ... vast majority of our inside production equipment is 2003 servers and XP ...
    (microsoft.public.windows.server.migration)
  • Re: Active Directory and child DNS Zone
    ... > Our internal and external DNS domains are both the same - mycompany.com. ... > hosts our external domain and it only contains entries for our web servers ... >>> but the test bed isn't a true picture (no internet access to test VPN, ...
    (microsoft.public.windows.server.dns)
  • Re: DNS design questions
    ... We're a medium size college campus with about 10,000 users and the CIO wants to have DNS locally housed. ... only a hand full to a few dozen max "Internet servers" while ... how big of a security issue really is allowing the "external" DNS server pull a zone transfer from an internal one? ...
    (microsoft.public.windows.server.dns)
  • Re: How Secure is ".Local?"
    ... dozen servers and ~500 websites/public domains. ... I'm weighing the importance of split-brain DNS ... >It is not going to provide your zone info to anyone ... >on the Internet since local is NOT a zone in the ...
    (microsoft.public.win2000.dns)
Loading