Re: Primary & Secondary DNS Server Problem

Tech-Archive recommends: Fix windows errors by optimizing your registry

From: Brian (bhanley72_at_yahoo.com)
Date: 01/14/05


Date: Fri, 14 Jan 2005 08:26:28 -0600


"Herb Martin" <news@LearnQuick.com> wrote in message
news:eCfTujc%23EHA.2316@TK2MSFTNGP15.phx.gbl...
> "Brian" <bhanley72@yahoo.com> wrote in message
> news:O8JhJ5b#EHA.1292@TK2MSFTNGP10.phx.gbl...
> > I set the timeout to 20 seconds and it still fails. Looks like it's OUT.
> > Also, that DNS server fails the Recursive test when I do it in the DNS
gui
> > interface.
>
> Failing the recursive test usually doesn't mean
> as much for an internal server -- it may have no
> access to the root servers (to do the recursion).
>
> Does it pass the non-recursive test? Usually this
> means you will NOT get a timeout even if you get
> an incorrect answer.

DNS2 does pass the simple (non recursive) test. But fails the recursive.

>
> > I'm wondering if I remove DNS from this server and re-add it that
> > will take care of the problem.
>
> Probably not, but if you don't mind the work involved
> in recreating the zone it is worth a try.
>
> What happens if you use the nslookup from the SAME
> server (ask itself).

When I first go to a cmd prompt and type "nslookup" on DNS2, the default
server of DNS1 comes up as it's DNS server. Is this ok? I then type "server
DNS2" to change the DNS server to itself. I can then do a DNS query for it's
own name and it returns instantly and with the correct IP address. Here is
output for both looking up itself, and looking up yahoo.com:

DNS2
Server: DNS2.corp.us
Address: 172.15.91.63

Name: DNS2.corp.us
Address: 172.15.91.63

yahoo.com
Server: DNS2.corp.us
Address: 172.15.91.63

DNS request timed out.
       timeout was 2 seconds.
*** Request to DNS2.corp.us timed-out

Also, this may be a stupid question, but in the IP configuration of both my
DNS servers, I've got my internal DNS IP addresses as the DNS servers. Is
this a problem?
Thanks

>
> You might also POST the results so we can make
> sure you aren't falling for the infamous NSLookup
> "fake error."
>
> --
> Herb Martin
>
>
> > Thanks for your help!
> >
> >
> > "Herb Martin" <news@LearnQuick.com> wrote in message
> > news:%23LIMuQb%23EHA.2016@TK2MSFTNGP15.phx.gbl...
> > > "Brian" <bhanley72@yahoo.com> wrote in message
> > > news:#1Hpnka#EHA.2076@TK2MSFTNGP15.phx.gbl...
> > > > When I do an NSLookup from DNS2, it fails with DNS timeout.
> > > >
> > >
> > > What happens if you increase the timeout? Is it just slow,
> > > or really broken?
> > >
> > > nslookup -time=10 NAME dns.server.IP.address
> > >
> > > -time=10 can be 20 or whatever until you convince yourself
> > > it is OUT (or works slow.)
> > >
> > > If it is out, then it is one of:
> > >
> > > 1) DNS server not working
> > > 2) DNS server not on
> > > 3) DNS server with firewall
> > > 4) Client set to wrong DNS server address
> > > 5) Firewall or other filter BETWEEN them
> > >
> > > And remember to ignore any INITIAL error from
> > > NSLookup (on the first few lines) IF you get the
> > > answer sought down below before the command
> > > output completes.
> > >
> > > --
> > > Herb Martin
> > >
> > >
> > > >
> > > > "Mark Renoden [MSFT]" <markreno@online.microsoft.com> wrote in
message
> > > > news:eVVlFbD%23EHA.1300@TK2MSFTNGP14.phx.gbl...
> > > > > Hi Brian
> > > > >
> > > > > What happens if you do an NSLookup from DNS2 using one of the
> servers
> > > > you're
> > > > > forwarding to?
> > > > >
> > > > > Kind regards
> > > > > --
> > > > > Mark Renoden [MSFT]
> > > > > Windows Platform Support Team
> > > > > Email: markreno@online.microsoft.com
> > > > >
> > > > > Please note you'll need to strip ".online" from my email address
to
> > > email
> > > > > me; I'll post a response back to the group.
> > > > >
> > > > > This posting is provided "AS IS" with no warranties, and confers
no
> > > > rights.
> > > > >
> > > > > "Brian" <bhanley72@yahoo.com> wrote in message
> > > > > news:uaQIJ8C%23EHA.3640@tk2msftngp13.phx.gbl...
> > > > > > I've got a Win2000 AD domain.
> > > > > > Two DNS servers configured.
> > > > > > All network clients have DNS1 as their primary and DNS2 as their
> > > > secondary
> > > > > > DNS servers (XP clients).
> > > > > >
> > > > > > The other day, DNS1 crashed. During that time, no clients could
> > > resolve
> > > > > > external addresses. I was shocked. I got DNS1 back up within a
few
> > > > > > minutes,
> > > > > > but now I'm concerned as to why DNS2 is not resolving external
> > > > addresses!
> > > > > >
> > > > > > Here is output for each DNS server using nslookup for cnn.com:
> > > > > >
> > > > > > DNS1:
> > > > > >>cnn.com
> > > > > >>Server: DNS1.corp.us
> > > > > >>Address: 172.1.1.1
> > > > > >>
> > > > > >>Non-authoritative answer:
> > > > > >>Name: cnn.com
> > > > > >>Addresses: 64.236.24.12, 64.236.24.20, etc
> > > > > >
> > > > > >
> > > > > > DNS2:
> > > > > >>cnn.com
> > > > > >>Server: DNS2.corp.us
> > > > > >>Address: 172.1.1.2
> > > > > >>
> > > > > >>DNS request timed out.
> > > > > >> timeout was 2 seconds.
> > > > > >>*** Can't find address for server cnn.com: timed out
> > > > > >
> > > > > > Both servers have the same forwarders set up. Any ideas of what
I
> > > should
> > > > > > be
> > > > > > looking for?
> > > > > >
> > > > > > Thanks!
> > > > > >
> > > > > >
> > > > > >
> > > > >
> > > > >
> > > >
> > > >
> > >
> > >
> >
> >
>
>



Relevant Pages

  • Re: Cannot get access to router on SBS server
    ... point the DNS server setting to the IP of the SBS ... calling CNetCommit::ValidateFulltimeConnectionProperties. ... Call to Reading web publishing selection returned ok. ...
    (microsoft.public.windows.server.sbs)
  • Re: Herb Martin...Global Catalog SRV record missing!
    ... Error: Root hints list has invalid root hint server: ... DNS server: 128.63.2.53 ... PTR record query for the ...
    (microsoft.public.windows.server.dns)
  • [UNIX] Hardening the BIND DNS Server
    ... Hardening the BIND DNS Server ... Your Domain Name Service is the road sign to your systems on the Internet. ...
    (Securiteam)
  • Re: NTDS Inbound neighbos removal
    ... There is no primary WINS server defined for this adapter. ... There is no secondary WINS server defined for this adapter. ... PASS - All the DNS entries for DC are registered on DNS server ... Upper Component: NWLink SPX/SPXII Protocol ...
    (microsoft.public.windows.server.active_directory)
  • RE: Server 2003 Network problems since IP address change
    ... Is there any firewall running on client or server? ... DNS server contacted refused the update request. ... zone WSW.local. ...
    (microsoft.public.windows.server.networking)