Re: Windows 2003 external nslookup times out, internal works

Thanks for the response!

No, there is nothing to block those packets. As a matter of fact, after I
asked this question, I added DNS services to one of our backup sql servers,
also running 2003 SP1. DNS queries to that machine worked perfectly. Both
machines are in the same subnet and go through the same firewall.

The same type of firewall also protects the other two dns servers and they
do not have an issue.

"Kevin D. Goodknecht Sr. [MVP]" wrote:

> Jason Carter <JasonCarter@xxxxxxxxxxxxxxxxxxxxxxxxx> wrote:
> > We have three Windows 2003 domain controllers, all running DNS for
> > our entire network. One of these servers cannot successfully preform
> > NSLOOKUP on external sites, but it works for internal sites. Even
> > setting the server to another external public DNS server fails. I see
> > the DNS queries going through my firewall to all the root hint
> > servers, but nothing ever resolves. I have two more servers where
> > this works just fine. All three servers are setup identical.
> >
> > Has anyone seen this before?
>
> Is this a Pix or simular firewall that blocks UDP packets over 512 bytes?
> DNS query responses do not travel through a firewall in Windows Server 2003:
> http://support.microsoft.com/default.aspx?scid=kb;en-us;828263&sd=RMVP
>
> --
> Best regards,
> Kevin D4 Dad Goodknecht Sr. [MVP]
> Hope This Helps
> ===================================
> When responding to posts, please "Reply to Group"
> via your newsreader so that others may learn and
> benefit from your issue, to respond directly to
> me remove the nospam. from my email address.
> ===================================
> http://www.lonestaramerica.com/
> ===================================
> Use Outlook Express?... Get OE_Quotefix:
> It will strip signature out and more
> http://home.in.tum.de/~jain/software/oe-quotefix/
> ===================================
> Keep a back up of your OE settings and folders
> with OEBackup:
> http://www.oehelp.com/OEBackup/Default.aspx
> ===================================
>
>
>
.

Relevant Pages

  • Re: Help SMPT Errors
    ... FAIL Reverse DNS entries for MX records ERROR: The IP of one or more of your ... it may mean that your DNS servers did not respond fast enough). ... INFO NS records at parent servers Your NS records at the parent servers ... PASS Parent nameservers have your nameservers listed OK. ...
    (microsoft.public.exchange.admin)
  • Re: Windows 2000 logon process
    ... Paul Williams ... when clients are accessing the GPO stored in SYSVOL during logon. ... PW>> Sound's like - that's a combination of DNS and Dfs client pointing ... Global Catalogue servers? ...
    (microsoft.public.win2000.active_directory)
  • Re: Replication issues
    ... I wanted to say Zone Transfers not Zone Forwarding. ... on 2 servers out of 4 DNS servers. ... DNS and 2003 DNS and how to set up Conditional Forwarding. ...
    (microsoft.public.windows.server.active_directory)
  • Re: DHCP assinged DNS servers dont work
    ... Although the WinXP firewall is enabled and configured via Group ... The first two DNS servers are AD controllers running ONLY core ... I have 75 WinXP machines on a Win2K3 domain using DHCP for address ...
    (microsoft.public.windows.server.networking)
  • Re: Howto refresh IIS 6 Application pool identity credential info
    ... You already have 80% of the work setup (DNS Aliases and HostHeaders) on the ... domain accounts (one for each layer) should be sufficient. ... The Application Servers are load balanced clustered, ... as the account name and SPN alias is correctly defined on both nodes. ...
    (microsoft.public.inetserver.iis.security)