Re: Primary & Secondary DNS Server Problem

From: Herb Martin (news_at_LearnQuick.com)
Date: 01/13/05 

Date: Thu, 13 Jan 2005 17:20:02 -0600

"Brian" <bhanley72@yahoo.com> wrote in message
news:O8JhJ5b#EHA.1292@TK2MSFTNGP10.phx.gbl...
> I set the timeout to 20 seconds and it still fails. Looks like it's OUT.
> Also, that DNS server fails the Recursive test when I do it in the DNS gui
> interface.

Failing the recursive test usually doesn't mean
as much for an internal server -- it may have no
access to the root servers (to do the recursion).

Does it pass the non-recursive test? Usually this
means you will NOT get a timeout even if you get
an incorrect answer.

> I'm wondering if I remove DNS from this server and re-add it that
> will take care of the problem.

Probably not, but if you don't mind the work involved
in recreating the zone it is worth a try.

What happens if you use the nslookup from the SAME
server (ask itself).

You might also POST the results so we can make
sure you aren't falling for the infamous NSLookup
"fake error." 

-- 
Herb Martin
> Thanks for your help!
>
>
> "Herb Martin" <news@LearnQuick.com> wrote in message
> news:%23LIMuQb%23EHA.2016@TK2MSFTNGP15.phx.gbl...
> > "Brian" <bhanley72@yahoo.com> wrote in message
> > news:#1Hpnka#EHA.2076@TK2MSFTNGP15.phx.gbl...
> > > When I do an NSLookup from DNS2, it fails with DNS timeout.
> > >
> >
> > What happens if you increase the timeout?  Is it just slow,
> > or really broken?
> >
> > nslookup -time=10 NAME dns.server.IP.address
> >
> > -time=10 can be 20 or whatever until you convince yourself
> > it is OUT (or works slow.)
> >
> > If it is out, then it is one of:
> >
> >     1) DNS server not working
> >     2) DNS server not on
> >     3) DNS server with firewall
> >     4) Client set to wrong DNS server address
> >     5) Firewall or other filter BETWEEN them
> >
> > And remember to ignore any INITIAL error from
> > NSLookup (on the first few lines) IF you get the
> > answer sought down below before the command
> > output completes.
> >
> > -- 
> > Herb Martin
> >
> >
> > >
> > > "Mark Renoden [MSFT]" <markreno@online.microsoft.com> wrote in message
> > > news:eVVlFbD%23EHA.1300@TK2MSFTNGP14.phx.gbl...
> > > > Hi Brian
> > > >
> > > > What happens if you do an NSLookup from DNS2 using one of the
servers
> > > you're
> > > > forwarding to?
> > > >
> > > > Kind regards
> > > > -- 
> > > > Mark Renoden [MSFT]
> > > > Windows Platform Support Team
> > > > Email: markreno@online.microsoft.com
> > > >
> > > > Please note you'll need to strip ".online" from my email address to
> > email
> > > > me; I'll post a response back to the group.
> > > >
> > > > This posting is provided "AS IS" with no warranties, and confers no
> > > rights.
> > > >
> > > > "Brian" <bhanley72@yahoo.com> wrote in message
> > > > news:uaQIJ8C%23EHA.3640@tk2msftngp13.phx.gbl...
> > > > > I've got a Win2000 AD domain.
> > > > > Two DNS servers configured.
> > > > > All network clients have DNS1 as their primary and DNS2 as their
> > > secondary
> > > > > DNS servers (XP clients).
> > > > >
> > > > > The other day, DNS1 crashed. During that time, no clients could
> > resolve
> > > > > external addresses. I was shocked. I got DNS1 back up within a few
> > > > > minutes,
> > > > > but now I'm concerned as to why DNS2 is not resolving external
> > > addresses!
> > > > >
> > > > > Here is output for each DNS server using nslookup for cnn.com:
> > > > >
> > > > > DNS1:
> > > > >>cnn.com
> > > > >>Server:  DNS1.corp.us
> > > > >>Address: 172.1.1.1
> > > > >>
> > > > >>Non-authoritative answer:
> > > > >>Name:     cnn.com
> > > > >>Addresses:  64.236.24.12, 64.236.24.20, etc
> > > > >
> > > > >
> > > > > DNS2:
> > > > >>cnn.com
> > > > >>Server:  DNS2.corp.us
> > > > >>Address:  172.1.1.2
> > > > >>
> > > > >>DNS request timed out.
> > > > >>         timeout was 2 seconds.
> > > > >>*** Can't find address for server cnn.com: timed out
> > > > >
> > > > > Both servers have the same forwarders set up. Any ideas of what I
> > should
> > > > > be
> > > > > looking for?
> > > > >
> > > > > Thanks!
> > > > >
> > > > >
> > > > >
> > > >
> > > >
> > >
> > >
> >
> >
>
>

Relevant Pages

  • Re: disabling aaaa queries
    ... The problem seems to be that when bind cannot resolve the ... timeout instantly on A records, but take 5 seconds to timeout on ... for a DNS server serving authoritative data for a LAN I ... ISPs DNS server, ...
    (comp.os.linux.networking)
  • Re: nslookup - sometimes working, sometimes get a time out
    ... "aks" wrote in message ... But increasing the timeout has same results, ... DNS server in the client NIC settings. ... Herb Martin> "Herb Martin" wrote: ...
    (microsoft.public.windows.server.dns)
  • Re: DNS host name
    ... Rgds ... > about the nslookup message, post the entire unedited message so we can give ...
    (microsoft.public.win2000.dns)
  • Can I specify the resolver timeout?
    ... We have two internal DNS servers in a FreeBSD web cluster. ... timeout takes 10 to 15 seconds on FreeBSD 4.9-STABLE. ... we want to get a response within 3 seconds or the resolver should ... try the second DNS server. ...
    (freebsd-questions)
  • Re: Primary & Secondary DNS Server Problem
    ... I set the timeout to 20 seconds and it still fails. ... that DNS server fails the Recursive test when I do it in the DNS gui ... > 5) Firewall or other filter BETWEEN them ...
    (microsoft.public.windows.server.dns)