Re: External DNS queries

Tech-Archive recommends: Fix windows errors by optimizing your registry

Here is the ipconfig/all from the XP system. As you can see the server never
sends a response to his dns query on www.google.com.
However, the server does respond to a dns query for www.yahoo.com. We can
ping www.yahoo.com (and everybody else) just fine from all systems.

C:\>ipconfig/all

Windows IP Configuration

Host Name . . . . . . . . . . . . : xpbox
Primary Dns Suffix . . . . . . . : abc.local
Node Type . . . . . . . . . . . . : Hybrid
IP Routing Enabled. . . . . . . . : No
WINS Proxy Enabled. . . . . . . . : No
DNS Suffix Search List. . . . . . : abc.local
abc.local

Ethernet adapter Local Area Connection:

Connection-specific DNS Suffix . : abc.local
Description . . . . . . . . . . . : Broadcom NetXtreme 57xx Gigabit
Cont
roller
Physical Address. . . . . . . . . : 00-11-11-D0-6F-8A
Dhcp Enabled. . . . . . . . . . . : Yes
Autoconfiguration Enabled . . . . : Yes
IP Address. . . . . . . . . . . . : 10.1.1.174
Subnet Mask . . . . . . . . . . . : 255.255.255.0
Default Gateway . . . . . . . . . : 10.1.1.254
DHCP Server . . . . . . . . . . . : 10.1.1.11
DNS Servers . . . . . . . . . . . : 10.1.1.1
10.1.1.11
Primary WINS Server . . . . . . . : 10.1.1.1
Secondary WINS Server . . . . . . : 10.1.1.11
Lease Obtained. . . . . . . . . . : Monday, August 29, 2005 9:51:19 AM
Lease Expires . . . . . . . . . . : Tuesday, September 06, 2005
9:51:19
AM

C:\>nslookup www.google.com.
Server: server1.abc.local
Address: 10.1.1.1

DNS request timed out.
timeout was 2 seconds.
*** Request to server1.abc.local timed-out

C:\>nslookup www.yahoo.com.
Server: server1.abc.local
Address: 10.1.1.1

Non-authoritative answer:
Name: www.yahoo.akadns.net
Addresses: 216.109.118.75, 216.109.118.64, 216.109.117.207, 216.109.118.79
216.109.117.109, 216.109.117.108, 216.109.117.206, 216.109.118.78
Aliases: www.yahoo.com


C:\>ping www.yahoo.com

Pinging www.yahoo.akadns.net [216.109.118.78] with 32 bytes of data:

Reply from 216.109.118.78: bytes=32 time=39ms TTL=54
Reply from 216.109.118.78: bytes=32 time=59ms TTL=54
Reply from 216.109.118.78: bytes=32 time=50ms TTL=54
Reply from 216.109.118.78: bytes=32 time=120ms TTL=54

Ping statistics for 216.109.118.78:
Packets: Sent = 4, Received = 4, Lost = 0 (0% loss),
Approximate round trip times in milli-seconds:
Minimum = 39ms, Maximum = 120ms, Average = 67ms


The real problem is that the DNS server receives a reply for the DNS query
but does not load it into the cache or return it to the clients.
Please note that as the recursion progresses the last query sent is for
www.l.google.COM not www.l.google.com. Somehow com was converted to COM.
Please review this DNS log with detail records.


11:56:31 218 PACKET UDP Rcv 10.0.200.103 0004 Q [0001 D NOERROR]
(3)www(6)google(3)com(0)
UDP question info at 007FE670
Socket = 388
Remote addr 10.0.200.103, port 3262
Time Query=706122, Queued=0, Expire=0
Buf length = 0x0500 (1280)
Msg length = 0x0020 (32)
Message:
XID 0x0004
Flags 0x0100
QR 0 (QUESTION)
OPCODE 0 (QUERY)
AA 0
TC 0
RD 1
RA 0
Z 0
RCODE 0 (NOERROR)
QCOUNT 1
ACOUNT 0
NSCOUNT 0
ARCOUNT 0
QUESTION SECTION:
Offset = 0x000c, RR count = 0
Name "(3)www(6)google(3)com(0)"
QTYPE A (1)
QCLASS 1
ANSWER SECTION:
empty
AUTHORITY SECTION:
empty
ADDITIONAL SECTION:
empty

11:56:31 218 PACKET UDP Snd 192.31.80.30 1fc0 Q [0000 NOERROR]
(3)www(6)google(3)com(0)
UDP question info at 007F21D0
Socket = 404
Remote addr 192.31.80.30, port 53
Time Query=0, Queued=0, Expire=0
Buf length = 0x0500 (1280)
Msg length = 0x0020 (32)
Message:
XID 0x1fc0
Flags 0x0000
QR 0 (QUESTION)
OPCODE 0 (QUERY)
AA 0
TC 0
RD 0
RA 0
Z 0
RCODE 0 (NOERROR)
QCOUNT 1
ACOUNT 0
NSCOUNT 0
ARCOUNT 0
QUESTION SECTION:
Offset = 0x000c, RR count = 0
Name "(3)www(6)google(3)com(0)"
QTYPE A (1)
QCLASS 1
ANSWER SECTION:
empty
AUTHORITY SECTION:
empty
ADDITIONAL SECTION:
empty

11:56:31 1F8 PACKET UDP Rcv 192.31.80.30 1fc0 R Q [0080 NOERROR]
(3)www(6)google(3)com(0)
UDP response info at 00807550
Socket = 404
Remote addr 192.31.80.30, port 53
Time Query=706122, Queued=0, Expire=0
Buf length = 0x0500 (1280)
Msg length = 0x00a8 (168)
Message:
XID 0x1fc0
Flags 0x8000
QR 1 (RESPONSE)
OPCODE 0 (QUERY)
AA 0
TC 0
RD 0
RA 0
Z 0
RCODE 0 (NOERROR)
QCOUNT 1
ACOUNT 0
NSCOUNT 4
ARCOUNT 4
QUESTION SECTION:
Offset = 0x000c, RR count = 0
Name "(3)www(6)google(3)com(0)"
QTYPE A (1)
QCLASS 1
ANSWER SECTION:
empty
AUTHORITY SECTION:
Offset = 0x0020, RR count = 0
Name "[C010](6)google(3)com(0)"
TYPE NS (2)
CLASS 1
TTL 172800
DLEN 6
DATA (3)ns1[C010](6)google(3)com(0)
Offset = 0x0032, RR count = 1
Name "[C010](6)google(3)com(0)"
TYPE NS (2)
CLASS 1
TTL 172800
DLEN 6
DATA (3)ns2[C010](6)google(3)com(0)
Offset = 0x0044, RR count = 2
Name "[C010](6)google(3)com(0)"
TYPE NS (2)
CLASS 1
TTL 172800
DLEN 6
DATA (3)ns3[C010](6)google(3)com(0)
Offset = 0x0056, RR count = 3
Name "[C010](6)google(3)com(0)"
TYPE NS (2)
CLASS 1
TTL 172800
DLEN 6
DATA (3)ns4[C010](6)google(3)com(0)
ADDITIONAL SECTION:
Offset = 0x0068, RR count = 0
Name "[C02C](3)ns1[C010](6)google(3)com(0)"
TYPE A (1)
CLASS 1
TTL 172800
DLEN 4
DATA 216.239.32.10
Offset = 0x0078, RR count = 1
Name "[C03E](3)ns2[C010](6)google(3)com(0)"
TYPE A (1)
CLASS 1
TTL 172800
DLEN 4
DATA 216.239.34.10
Offset = 0x0088, RR count = 2
Name "[C050](3)ns3[C010](6)google(3)com(0)"
TYPE A (1)
CLASS 1
TTL 172800
DLEN 4
DATA 216.239.36.10
Offset = 0x0098, RR count = 3
Name "[C062](3)ns4[C010](6)google(3)com(0)"
TYPE A (1)
CLASS 1
TTL 172800
DLEN 4
DATA 216.239.38.10

11:56:31 1F8 PACKET UDP Snd 216.239.34.10 1fc0 Q [0000 NOERROR]
(3)www(6)google(3)com(0)
UDP question info at 007F21D0
Socket = 404
Remote addr 216.239.34.10, port 53
Time Query=0, Queued=0, Expire=0
Buf length = 0x0500 (1280)
Msg length = 0x002b (43)
Message:
XID 0x1fc0
Flags 0x0000
QR 0 (QUESTION)
OPCODE 0 (QUERY)
AA 0
TC 0
RD 0
RA 0
Z 0
RCODE 0 (NOERROR)
QCOUNT 1
ACOUNT 0
NSCOUNT 0
ARCOUNT 1
QUESTION SECTION:
Offset = 0x000c, RR count = 0
Name "(3)www(6)google(3)com(0)"
QTYPE A (1)
QCLASS 1
ANSWER SECTION:
empty
AUTHORITY SECTION:
empty
ADDITIONAL SECTION:
Offset = 0x0020, RR count = 0
Name "(0)"
TYPE OPT (41)
CLASS 1280
TTL 0
DLEN 0
DATA (none)

11:56:31 218 PACKET UDP Rcv 216.239.34.10 1fc0 R Q [0084 A NOERROR]
(3)www(6)google(3)com(0)
UDP response info at 007F8C20
Socket = 404
Remote addr 216.239.34.10, port 53
Time Query=706122, Queued=0, Expire=0
Buf length = 0x0500 (1280)
Msg length = 0x00df (223)
Message:
XID 0x1fc0
Flags 0x8400
QR 1 (RESPONSE)
OPCODE 0 (QUERY)
AA 1
TC 0
RD 0
RA 0
Z 0
RCODE 0 (NOERROR)
QCOUNT 1
ACOUNT 1
NSCOUNT 5
ARCOUNT 6
QUESTION SECTION:
Offset = 0x000c, RR count = 0
Name "(3)www(6)google(3)com(0)"
QTYPE A (1)
QCLASS 1
ANSWER SECTION:
Offset = 0x0020, RR count = 0
Name "[C00C](3)www(6)google(3)com(0)"
TYPE CNAME (5)
CLASS 1
TTL 900
DLEN 8
DATA (3)www(1)l[C010](6)google(3)com(0)
AUTHORITY SECTION:
Offset = 0x0034, RR count = 0
Name "[C030](1)l[C010](6)google(3)com(0)"
TYPE NS (2)
CLASS 1
TTL 86400
DLEN 4
DATA (1)a[C030](1)l[C010](6)google(3)com(0)
Offset = 0x0044, RR count = 1
Name "[C030](1)l[C010](6)google(3)com(0)"
TYPE NS (2)
CLASS 1
TTL 86400
DLEN 4
DATA (1)b[C030](1)l[C010](6)google(3)com(0)
Offset = 0x0054, RR count = 2
Name "[C030](1)l[C010](6)google(3)com(0)"
TYPE NS (2)
CLASS 1
TTL 86400
DLEN 4
DATA (1)c[C030](1)l[C010](6)google(3)com(0)
Offset = 0x0064, RR count = 3
Name "[C030](1)l[C010](6)google(3)com(0)"
TYPE NS (2)
CLASS 1
TTL 86400
DLEN 4
DATA (1)e[C030](1)l[C010](6)google(3)com(0)
Offset = 0x0074, RR count = 4
Name "[C030](1)l[C010](6)google(3)com(0)"
TYPE NS (2)
CLASS 1
TTL 86400
DLEN 4
DATA (1)f[C030](1)l[C010](6)google(3)com(0)
ADDITIONAL SECTION:
Offset = 0x0084, RR count = 0
Name "[C040](1)a[C030](1)l[C010](6)google(3)com(0)"
TYPE A (1)
CLASS 1
TTL 86400
DLEN 4
DATA 216.239.53.9
Offset = 0x0094, RR count = 1
Name "[C050](1)b[C030](1)l[C010](6)google(3)com(0)"
TYPE A (1)
CLASS 1
TTL 86400
DLEN 4
DATA 64.233.179.9
Offset = 0x00a4, RR count = 2
Name "[C060](1)c[C030](1)l[C010](6)google(3)com(0)"
TYPE A (1)
CLASS 1
TTL 86400
DLEN 4
DATA 64.233.161.9
Offset = 0x00b4, RR count = 3
Name "[C070](1)e[C030](1)l[C010](6)google(3)com(0)"
TYPE A (1)
CLASS 1
TTL 86400
DLEN 4
DATA 66.102.11.9
Offset = 0x00c4, RR count = 4
Name "[C080](1)f[C030](1)l[C010](6)google(3)com(0)"
TYPE A (1)
CLASS 1
TTL 86400
DLEN 4
DATA 72.14.207.9
Offset = 0x00d4, RR count = 5
Name "(0)"
TYPE OPT (41)
CLASS 4096
TTL 0
DLEN 0
DATA (none)

11:56:31 218 PACKET UDP Snd 216.239.53.9 07ca Q [0000 NOERROR]
(3)www(1)l(6)google(3)COM(0)
UDP question info at 007F21D0
Socket = 404
Remote addr 216.239.53.9, port 53
Time Query=0, Queued=0, Expire=0
Buf length = 0x0500 (1280)
Msg length = 0x002d (45)
Message:
XID 0x07ca
Flags 0x0000
QR 0 (QUESTION)
OPCODE 0 (QUERY)
AA 0
TC 0
RD 0
RA 0
Z 0
RCODE 0 (NOERROR)
QCOUNT 1
ACOUNT 0
NSCOUNT 0
ARCOUNT 1
QUESTION SECTION:
Offset = 0x000c, RR count = 0
Name "(3)www(1)l(6)google(3)COM(0)"
QTYPE A (1)
QCLASS 1
ANSWER SECTION:
empty
AUTHORITY SECTION:
empty
ADDITIONAL SECTION:
Offset = 0x0022, RR count = 0
Name "(0)"
TYPE OPT (41)
CLASS 1280
TTL 0
DLEN 0
DATA (none)

11:56:31 1F8 PACKET UDP Rcv 216.239.53.9 07ca R Q [0084 A NOERROR]
(3)www(1)l(6)google(3)com(0)
UDP response info at 0080B620
Socket = 404
Remote addr 216.239.53.9, port 53
Time Query=706122, Queued=0, Expire=0
Buf length = 0x0500 (1280)
Msg length = 0x0042 (66)
Message:
XID 0x07ca




"Kevin D. Goodknecht Sr. [MVP]" wrote:

> SteveS <baaa7b1b-518109013@xxxxxxxxxxxxxx> wrote:
> > C:\>nslookup -d2 www.google.com.
> > ------------
> > SendRequest(), len 42
> > HEADER:
> > opcode = QUERY, id = 1, rcode = NOERROR
> > header flags: query, want recursion
> > questions = 1, answers = 0, authority records = 0,
> > additional = 0
> >
> > QUESTIONS:
> > 11.10.1.1.in-addr.arpa, type = PTR, class = IN
> >
> > ------------
> > ------------
> > Got answer (69 bytes):
> > HEADER:
> > opcode = QUERY, id = 1, rcode = NOERROR
> > header flags: response, auth. answer, want recursion,
> > recursion avail.
> > questions = 1, answers = 1, authority records = 0,
> > additional = 0
> >
> > QUESTIONS:
> > 11.10.1.1.in-addr.arpa, type = PTR, class = IN
> > ANSWERS:
> > -> 11.10.1.1.in-addr.arpa
> > type = PTR, class = IN, dlen = 15
> > name = server1.abc.local
> > ttl = 1200 (20 mins)
> >
> > ------------
> > Server: server1.abc.local
> > Address: 10.0.200.11
> >
> > ------------
> > SendRequest(), len 32
> > HEADER:
> > opcode = QUERY, id = 2, rcode = NOERROR
> > header flags: query, want recursion
> > questions = 1, answers = 0, authority records = 0,
> > additional = 0
> >
> > QUESTIONS:
> > www.google.com, type = A, class = IN
> >
> > ------------
> > DNS request timed out.
> > timeout was 2 seconds.
> > timeout (2 secs)
> > SendRequest failed
> > *** Request to server1.abc.local timed-out
>
> Send request failed, hmm it looks like the machine can't find its way out,
> does it have the proper gateway?
>
> Post the ipconfig /all from this machine.
>
>
>
> --
> Best regards,
> Kevin D4 Dad Goodknecht Sr. [MVP]
> Hope This Helps
> ===================================
> When responding to posts, please "Reply to Group"
> via your newsreader so that others may learn and
> benefit from your issue, to respond directly to
> me remove the nospam. from my email address.
> ===================================
> http://www.lonestaramerica.com/
> ===================================
> Use Outlook Express?... Get OE_Quotefix:
> It will strip signature out and more
> http://home.in.tum.de/~jain/software/oe-quotefix/
> ===================================
> Keep a back up of your OE settings and folders
> with OEBackup:
> http://www.oehelp.com/OEBackup/Default.aspx
> ===================================
>
>
>
.

Relevant Pages

  • Re: IIS and DNS rond robbin
    ... I need to have a backup ISP for my Internet apps. ... the record from query to query. ... disabled DNS will alternate the order the order of the record ... This is affected by the TTL of the records, ...
    (microsoft.public.windows.server.dns)
  • Re: DNS - TTL problem with Solaris 9
    ... > want my application to respect the TTL value returned in the DNS ... > configure Solaris to launch a query on TTL expiry ..? ...
    (comp.unix.solaris)
  • Re: Can I change the public IP of a website on dual wan router without losing customers?
    ... TTL settings on the zone or individual records ... clients (both other DNS servers and client machines) ... It is in additional to the TTL. ...
    (microsoft.public.windows.server.dns)
  • Re: How can I force Windows to do DNS lookup when I use \host?
    ... in your top-level DNS, but then further along in the post ... you say you can find no specific A records for the host ... The TTL is associated with each RR and a default TTL for ... > delegation entry is all that's present and I don't see a way to set a TTL associated with that delegation. ...
    (microsoft.public.windows.server.dns)
  • Re: DNS settings
    ... If I change the A and the WWW records, what happen to all the CNAME entries ... TTL: nope I didn't leave anything out. ... where I got these DNS records. ... >> The website and email server are currently hosted there. ...
    (microsoft.public.windows.server.dns)