Re: DNS forwarders
- From: "Herb Martin" <news@xxxxxxxxxxxxxx>
- Date: Tue, 18 Apr 2006 14:08:31 -0500
"Russ Allen" <RussAllen@xxxxxxxxxxxxxxxxxxxxxxxxx> wrote in message
news:83B70E97-5273-4576-8525-78643E6A4C2E@xxxxxxxxxxxxxxxx
The lookup fails. I guess that something from the internal network to the
DMZ
is blocking the resolution. THanks for the help.
Sure. You can move forward to the next router etc
and try again, but chance are the "next router" is the
firewall you said was running DNS and working just
fine.
You MIGHT try forwarding from the internal DNS to
the firewall DNS which forwards successfully.
Test carefully. You don't want to stack up TOO MANY
forwarders but it's impossible to quantify that ("too many")
without testing.
--
Herb Martin, MCSE, MVP
Accelerated MCSE
http://www.LearnQuick.Com
[phone number on web site]
"Herb Martin" wrote:
"Russ Allen" <RussAllen@xxxxxxxxxxxxxxxxxxxxxxxxx> wrote in message
news:E2831437-ECDB-4922-A7C4-1BE7289986FA@xxxxxxxxxxxxxxxx
Good morning all, I have a situation I need some to excel at!!!!
I have 2 DCs that are set to forward DNS queries that they can't
resolve.
Can you use NSLookup from the CONSOLE of those two
DNS servers to make direct, explicit queries of the forwarders
theya re set to use?
nslookup www.google.com IP.Address.External.DNS
The first DNS server works fine (This is a firewall DNS). The two other
DNS
servers are Windows 2003 std boxes. They are both configured as
secondary
zones and my diagnostic shows that these two forwarders are
unresponsive.
They are NOT "forwarders" (as you have describe it -- they
are FORWARDING to other servers which are the forwarders.
It's confusing terminology but the DNS server on which you
make the setting for forwarder(s) is NOT the forwarder.
The actual "forwarder" doesn't even 'know' (in some real sense)
that it is the forwarder -- other DNS servers forward TO IT.
These two servers sit in a DMZ and don't contain any of our inside dns
records.
By doing the direct NSLookup with the explicit addresses
of these two (DMZ) forwarders you will be able to determined
if the internal machines can route to them OR if something (e.g.,
the firewall) is blocking their requests.
I am kind of at a wall here. Any suggestion for me, thanks
--
Herb Martin, MCSE, MVP
Accelerated MCSE
http://www.LearnQuick.Com
[phone number on web site]
.
- References:
- Re: DNS forwarders
- From: Herb Martin
- Re: DNS forwarders
- Prev by Date: Re: DNS and active directory
- Next by Date: Re: DNS across a WAN
- Previous by thread: Re: DNS forwarders
- Next by thread: Re: DNS forwarders
- Index(es):
Relevant Pages
|
