Re: A problem with "hosts" file: hostnames with dots are not being resolved

Tech-Archive recommends: Repair Windows Errors & Optimize Windows Performance



In news:1169790243.133883.140450@xxxxxxxxxxxxxxxxxxxxxxxxxxxx,
Yarik <yarik@xxxxxxxxxx> stated, which I commented on below:
Did you eliminate the possibitlity of a virus (the Qhosts virus), or
spyware that may have hijacked thefile?

No. I would appreciate any pointer on how to do that.

Not to sound facetious, but a qualified antivirus program can do this. You
can physically check the registry under H+HKLM\CCS\services\TCP\database
path. That should point to system32\drivers\etc\


When you do an ipconfig /flushdns, then an ipconfig displaydns, does
the entries you put in show up with thedots?

Yes.

Right after that, try to ping both
entries, and post your results.

Below is what I get (just in case, I restarted DNS Client service
right before the experiment).

NOTE: In our intranet, failure to resolve a host/domain name has
some... peculiarity. It never happens. :-) I don't know why, but our
IT folks use OpenDNS service: whenever their DNS server can't resolve
a host/domain name it returns IP of their OpenDNS's website,
208.67.219.41. I guess, the goal of this trick (IMHO, a dirty one) is
to make a misdirected browser show a page advertizing OpenDNS and full
of Google ads. In any case, on the screenshots below, ping's failure
to resolve a domain name actually looks like successful discovery of
208.67.219.41 address.


================================= Flush DNS Cache
P:\Projects>ipconfig /flushdns

Windows 2000 IP Configuration

Successfully flushed the DNS Resolver Cache.

================================= Display DNS Cache
P:\Projects>ipconfig /displaydns

Windows 2000 IP Configuration

localhost.
------------------------------------------------------
Record Name . . . . . : localhost
Record Type . . . . . : 1
Time To Live . . . . : 31525413
Data Length . . . . . : 4
Section . . . . . . . : Answer
A (Host) Record . . . :
127.0.0.1


zzyzx.
------------------------------------------------------
Record Name . . . . . : zzyzx
Record Type . . . . . : 1
Time To Live . . . . : 31525413
Data Length . . . . . : 4
Section . . . . . . . : Answer
A (Host) Record . . . :
192.168.1.22


1.0.0.127.in-addr.arpa.
------------------------------------------------------
Record Name . . . . . : 1.0.0.127.in-addr.arpa
Record Type . . . . . : 12
Time To Live . . . . : 31525413
Data Length . . . . . : 4
Section . . . . . . . : Answer
PTR Record . . . . . :
localhost


zzyzx.com.
------------------------------------------------------
Record Name . . . . . : zzyzx.com
Record Type . . . . . : 1
Time To Live . . . . : 31525413
Data Length . . . . . : 4
Section . . . . . . . : Answer
A (Host) Record . . . :
192.168.1.22


22.1.168.192.in-addr.arpa.
------------------------------------------------------
Record Name . . . . . : 22.1.168.192.in-addr.arpa
Record Type . . . . . : 12
Time To Live . . . . : 31525413
Data Length . . . . . : 4
Section . . . . . . . : Answer
PTR Record . . . . . :
zzyzx.com

Record Name . . . . . : 22.1.168.192.in-addr.arpa
Record Type . . . . . : 12
Time To Live . . . . : 31525413
Data Length . . . . . : 4
Section . . . . . . . : Answer
PTR Record . . . . . :
zzyzx

================== Ping hostname WITHOUT a dot - succeeds
P:\Projects>ping zzyzx

Pinging zzyzx [192.168.1.22] with 32 bytes of data:

Reply from 192.168.1.22: bytes=32 time<10ms TTL=128
Reply from 192.168.1.22: bytes=32 time<10ms TTL=128
Reply from 192.168.1.22: bytes=32 time<10ms TTL=128
Reply from 192.168.1.22: bytes=32 time<10ms TTL=128

Ping statistics for 192.168.1.22:
Packets: Sent = 4, Received = 4, Lost = 0 (0% loss),
Approximate round trip times in milli-seconds:
Minimum = 0ms, Maximum = 0ms, Average = 0ms

================== Ping hostname WITHOUT a dot - fails
P:\Projects>ping zzyzx.com

Pinging zzyzx.com [208.67.219.41] with 32 bytes of data:

Request timed out.
Request timed out.
Request timed out.
Request timed out.

Ping statistics for 208.67.219.41:
Packets: Sent = 4, Received = 0, Lost = 4 (100% loss),
Approximate round trip times in milli-seconds:
Minimum = 0ms, Maximum = 0ms, Average = 0ms


That is sad that OpenDNS does that. Kind of crazy if you ask me.

But anyway, I know youmeant ping hostname with a dot fails (you said
without).

Is the DHCP Client service running? That is actually a required service for
resolution whether the machine is configured for DHCP or is statically
configured (like a server).

Alsom, you have two reverse entries for 192.168.1.22. There should only be
ONE. Choose one of them.

Curious, when you ping:
ping -a 192.168.1.22
what happens?

Ace


.



Relevant Pages

  • RE: XP User account connection issues = 1 accout cant access internet, other can
    ... I'd be interested to know what the problem is and how to resolve it. ... I can ping any IP address on the internet with success ... Windows IP Configuration ...
    (microsoft.public.windowsxp.network_web)
  • Re: Connect, ping, traceroute work, but not surf on the net
    ... My notebook connect, i am able to ping any IP, traceroute resolve, but ... I have had very similar problems and every time it has been a problem with mdns being used to resolve sites external to my LAN. ... There's another fix that doesn't require getting rid of avahi-daemon if you make use of it, but I can't remember what it is off the top of my head. ...
    (Debian-User)
  • Re: Cant browse/file/print/share between Workgroup and Domain
    ... My laptop from work is configured as ... >to obtain IP configuration via DHCP, ... How do the home system and the laptop ... Ping the other by ip address. ...
    (microsoft.public.windowsxp.network_web)
  • Re: Name resolution vs. multiple NICs
    ... Not, they cannot ping that name, not even on the same machine. ... For example I may have a private DNS server that will ... > discover the correct FQDN. ... can resolve the name on the computer you run it on. ...
    (microsoft.public.win32.programmer.networks)
  • Re: a crazy connectivity issue. unable to ping anything
    ... Just put the dsl or router's ... configuration address in the /etc/resolv.conf file as the search domain ... downloading the dban iso file with another computer and burning it on a cd ... I can not ping to any other host..then just my local interface. ...
    (Debian-User)