Re: Event ID 7063

Tech-Archive recommends: Repair Windows Errors & Optimize Windows Performance

From: Kevin D. Goodknecht Sr. [MVP] (admin_at_nospam.WFTX.US)
Date: 07/23/04


Date: Fri, 23 Jul 2004 10:36:21 -0500

In news:cdr7o9$kv7$1@news.dg.net.ua,
Mykhaylo Khodorev <ralfeus@chicagocentre.com.ua> posted a question
Then Kevin replied below:
> I've changed forwarders to servers you've gave. Now I'm
> continuesly getting a warning ID 5504:
> Event Type: Warning
> Event Source: DNS
> Event Category: None
> Event ID: 5504
> Date: 23.07.2004
> Time: 17:18:45
> User: N/A
> Computer: DC1
> Description:
> The DNS server encountered an invalid domain name in a
> packet from 4.2.2.2. The packet is rejected.
>
> For more information, see Help and Support Center at
> http://go.microsoft.com/fwlink/events.asp.
>
> I've found Microsoft KB 838969 about this problem, but
> there was no hotfix, just link to their Support Service.

We had one of these a couple of weeks ago, for some reason DNS was sending a
query for localhost to the root servers, the weird thing about that is DNS
should not even be queried for localhost in the first place, that is why it
is in the hosts file. As a workaround creating a forward lookup zone named
"localhost" then in the zone create a host record leaving the name field
blank and give it IP 127.0.0.1, create the record anyway when it barks at
you saying (same as parent folder) is not a valid host name.
We never figured out why DNS was trying to resolve localhost, the only thing
I could think of is there a program that has its own resolver logic that
ignores the hosts file and queries directly to DNS, bypassing the hosts
file.

If this does not stop the 5504s post your ipconfig /all for this machine and
verify on all machines that your DNS suffix search list does not have a
single-label DNS suffix that there isn't a zone for, or is not registered in
WINS.
This can also happen if you have a machine with an illegal character in its
host name.

http://www.eventid.net/display.asp?eventid=5504&eventno=642&source=DNS&phase=1

-- 
Best regards,
Kevin D4 Dad Goodknecht Sr. [MVP]
Hope This Helps
============================
-- 
When responding to posts, please "Reply to Group"  via your
newsreader so that others may learn and benefit from your
issue. To respond directly to me remove the nospam. from my
email. ==========================================
 http://www.lonestaramerica.com/
==========================================
Use Outlook Express?... Get OE_Quotefix:
It will strip signature out and more
 http://home.in.tum.de/~jain/software/oe-quotefix/
==========================================
Keep a back up of your OE settings and folders with
OEBackup:
 http://www.oehelp.com/OEBackup/Default.aspx
==========================================


Relevant Pages

  • Re: Slow DNS Lookup - Debian
    ... >> hosts: files nisplus nis dns ... >> and if you don't run NIS or NIS+, you can speed things up slightly by ... use tcpdump to see that you are using responsive name servers. ...
    (comp.os.linux.networking)
  • Re: Mysterious delay establishing any TCP/IP connection
    ... Ensure that on the hosts: ... > files directive appears before the dns directive. ... servers of our hoster. ... right after the upgrades -- we noticed the problem about ...
    (comp.os.linux.networking)
  • Re: no name resolution on local domain
    ... You are correct about dig (and the other DNS query tools) ignoring ... server running on localhost even if localhost is not ... You need to have a line referring to hosts, ...
    (comp.os.linux.networking)
  • Re: Gnome Ethernet Very Slow
    ... what sholud reslov.conf & hosts have for gnome to acces the router/internet properly? ... ::1 localhost localhost.my.domain ... >>Danny Browne ... > Check your DNS settings, make sure resolv.conf points to a valid DNS ...
    (freebsd-questions)
  • RE: Unable to create an additional DC using dcpromo at remote site
    ... your Server doesn't have the DNS info. about the parent zone. ... Basically it sounds like you are using HOSTS for the FQDN of the server's name, but the dcpromo requires the use of the SRV records -which aren't referenced in your hosts file. ... We can ping the root dc, dns, wins servers at the central site from the ...
    (microsoft.public.windows.server.active_directory)