Networking Forums

Networking Forums > Computer Networking > Windows Networking > DNS - Unxplained Behaviour

Reply
Thread Tools Display Modes

DNS - Unxplained Behaviour

 
 
test
Guest
Posts: n/a

 
      11-12-2004, 05:23 PM
Hi All

I have two Windows 2003 servers operating within my LAN, each with static
IPs (*.*.*.7 -a domain controller and *.*.*.8 -the PDC). The PDC is where
we have configured the DNS zone, a copy is being replicated onto the DC

For the PDC, I have the DNS server set to *.*.*.8 (its own address), while
for the other DC, I have the PDC's IP. My DHCP service is provided by my
Netscreen firewall, and there we have identified the DC's IP as the DNS
server.

My problem is that over the last six months we have had a recurring
situation where one or both of the machines loses its ability to surf the
internet. Investigations show that they are not able to ping externally by
IP or by name. We have found that the situation is resolved simply by
changing the static IP to some other number within the range.

Why should this be happening? We are not making any changes to the DNS
configuration and cannot identify anything which might trigger the loss of
this service.

Thanks


 
Reply With Quote
 
 
 
 
Doug Sherman [MVP]
Guest
Posts: n/a

 
      11-12-2004, 10:44 PM
If you cannot external IP addresses, the problem is with routing not DNS.

Doug Sherman
MCSE Win2k/NT4.0, MCSA, MCP+I, MVP

"test" <(E-Mail Removed)> wrote in message
news:(E-Mail Removed)...
> Hi All
>
> I have two Windows 2003 servers operating within my LAN, each with static
> IPs (*.*.*.7 -a domain controller and *.*.*.8 -the PDC). The PDC is where
> we have configured the DNS zone, a copy is being replicated onto the DC
>
> For the PDC, I have the DNS server set to *.*.*.8 (its own address), while
> for the other DC, I have the PDC's IP. My DHCP service is provided by my
> Netscreen firewall, and there we have identified the DC's IP as the DNS
> server.
>
> My problem is that over the last six months we have had a recurring
> situation where one or both of the machines loses its ability to surf the
> internet. Investigations show that they are not able to ping externally

by
> IP or by name. We have found that the situation is resolved simply by
> changing the static IP to some other number within the range.
>
> Why should this be happening? We are not making any changes to the DNS
> configuration and cannot identify anything which might trigger the loss of
> this service.
>
> Thanks
>
>



---
Outgoing mail is certified Virus Free.
Checked by AVG anti-virus system (http://www.grisoft.com).
Version: 6.0.789 / Virus Database: 534 - Release Date: 11-7-2004


 
Reply With Quote
 
Test
Guest
Posts: n/a

 
      11-13-2004, 05:21 AM
Could you advise on what I should check or what commands I should run to
test my routing.

Thanks

"Doug Sherman [MVP]" <(E-Mail Removed)> wrote in message
news:#7#(E-Mail Removed)...
> If you cannot external IP addresses, the problem is with routing not DNS.
>
> Doug Sherman
> MCSE Win2k/NT4.0, MCSA, MCP+I, MVP
>
> "test" <(E-Mail Removed)> wrote in message
> news:(E-Mail Removed)...
> > Hi All
> >
> > I have two Windows 2003 servers operating within my LAN, each with

static
> > IPs (*.*.*.7 -a domain controller and *.*.*.8 -the PDC). The PDC is

where
> > we have configured the DNS zone, a copy is being replicated onto the DC
> >
> > For the PDC, I have the DNS server set to *.*.*.8 (its own address),

while
> > for the other DC, I have the PDC's IP. My DHCP service is provided by

my
> > Netscreen firewall, and there we have identified the DC's IP as the DNS
> > server.
> >
> > My problem is that over the last six months we have had a recurring
> > situation where one or both of the machines loses its ability to surf

the
> > internet. Investigations show that they are not able to ping externally

> by
> > IP or by name. We have found that the situation is resolved simply by
> > changing the static IP to some other number within the range.
> >
> > Why should this be happening? We are not making any changes to the DNS
> > configuration and cannot identify anything which might trigger the loss

of
> > this service.
> >
> > Thanks
> >
> >

>
>
> ---
> Outgoing mail is certified Virus Free.
> Checked by AVG anti-virus system (http://www.grisoft.com).
> Version: 6.0.789 / Virus Database: 534 - Release Date: 11-7-2004
>
>



 
Reply With Quote
 
Doug Sherman [MVP]
Guest
Posts: n/a

 
      11-13-2004, 01:36 PM
On the domain controllers:

1. Check subnet mask - easy to make a mistake when manually setting this.

2. Check default gateway - make sure this is set to the LAN IP of the
Netscreen device.

3. Ping the default gateway IP.

4. If #3 works then the problem is most likely with the Netscreen settings.
You can confirm this by running tracert to an external IP - probably the
result will show that packets stop at the router. Possibly, Netscreen DHCP
is leasing *.*.*.7 or 8 to a client machine; however, Netscreen devices have
multiple features that could account for this behavior if not properly
configured.

Doug Sherman
MCSE Win2k/NT4.0, MCSA, MCP+I, MVP

"Test" <(E-Mail Removed)> wrote in message
news:(E-Mail Removed)...
> Could you advise on what I should check or what commands I should run to
> test my routing.
>
> Thanks
>
> "Doug Sherman [MVP]" <(E-Mail Removed)> wrote in message
> news:#7#(E-Mail Removed)...
> > If you cannot external IP addresses, the problem is with routing not

DNS.
> >
> > Doug Sherman
> > MCSE Win2k/NT4.0, MCSA, MCP+I, MVP
> >
> > "test" <(E-Mail Removed)> wrote in message
> > news:(E-Mail Removed)...
> > > Hi All
> > >
> > > I have two Windows 2003 servers operating within my LAN, each with

> static
> > > IPs (*.*.*.7 -a domain controller and *.*.*.8 -the PDC). The PDC is

> where
> > > we have configured the DNS zone, a copy is being replicated onto the

DC
> > >
> > > For the PDC, I have the DNS server set to *.*.*.8 (its own address),

> while
> > > for the other DC, I have the PDC's IP. My DHCP service is provided by

> my
> > > Netscreen firewall, and there we have identified the DC's IP as the

DNS
> > > server.
> > >
> > > My problem is that over the last six months we have had a recurring
> > > situation where one or both of the machines loses its ability to surf

> the
> > > internet. Investigations show that they are not able to ping

externally
> > by
> > > IP or by name. We have found that the situation is resolved simply by
> > > changing the static IP to some other number within the range.
> > >
> > > Why should this be happening? We are not making any changes to the

DNS
> > > configuration and cannot identify anything which might trigger the

loss
> of
> > > this service.
> > >
> > > Thanks
> > >
> > >

> >
> >
> > ---
> > Outgoing mail is certified Virus Free.
> > Checked by AVG anti-virus system (http://www.grisoft.com).
> > Version: 6.0.789 / Virus Database: 534 - Release Date: 11-7-2004
> >
> >

>
>



---
Outgoing mail is certified Virus Free.
Checked by AVG anti-virus system (http://www.grisoft.com).
Version: 6.0.789 / Virus Database: 534 - Release Date: 11-7-2004


 
Reply With Quote
 
test
Guest
Posts: n/a

 
      12-01-2004, 02:23 PM
HI Doug

Thanks for your responses.

The subnet mask is manually set to 255.255.254.0, on the DC. However when I
perform the IPconfig command on any of the clients it shows as
255.255.255.0.
The default gateway is set to the trusted side of the firewall - that device
can be reached without a problem
I can also ping the trusted side of the ADSL modem.

This is a trace I performed to google.com, the results are as follows.
C:\>tracert 216.239.37.99



Tracing route to 216.239.37.99 over a maximum of 30 hops



1 <1 ms 1 ms 1 ms *.*.*.10

2 * * * Request timed out.

3 * * * Request timed out.

4 * * * Request timed out.

5 * * * Request timed out.

6 * * * Request timed out.

7 * * * Request timed out.

8 * * * Request timed out.

9 * ^C

C:\>


Clients are being allocated IP address within the *.*.*.101 - 199 range.

Am I missing anything.

Thanks
"Doug Sherman [MVP]" <(E-Mail Removed)> wrote in message
news:(E-Mail Removed)...
> On the domain controllers:
>
> 1. Check subnet mask - easy to make a mistake when manually setting this.
>
> 2. Check default gateway - make sure this is set to the LAN IP of the
> Netscreen device.
>
> 3. Ping the default gateway IP.
>
> 4. If #3 works then the problem is most likely with the Netscreen

settings.
> You can confirm this by running tracert to an external IP - probably the
> result will show that packets stop at the router. Possibly, Netscreen

DHCP
> is leasing *.*.*.7 or 8 to a client machine; however, Netscreen devices

have
> multiple features that could account for this behavior if not properly
> configured.
>
> Doug Sherman
> MCSE Win2k/NT4.0, MCSA, MCP+I, MVP
>
> "Test" <(E-Mail Removed)> wrote in message
> news:(E-Mail Removed)...
> > Could you advise on what I should check or what commands I should run to
> > test my routing.
> >
> > Thanks
> >
> > "Doug Sherman [MVP]" <(E-Mail Removed)> wrote in message
> > news:#7#(E-Mail Removed)...
> > > If you cannot external IP addresses, the problem is with routing not

> DNS.
> > >
> > > Doug Sherman
> > > MCSE Win2k/NT4.0, MCSA, MCP+I, MVP
> > >
> > > "test" <(E-Mail Removed)> wrote in message
> > > news:(E-Mail Removed)...
> > > > Hi All
> > > >
> > > > I have two Windows 2003 servers operating within my LAN, each with

> > static
> > > > IPs (*.*.*.7 -a domain controller and *.*.*.8 -the PDC). The PDC is

> > where
> > > > we have configured the DNS zone, a copy is being replicated onto the

> DC
> > > >
> > > > For the PDC, I have the DNS server set to *.*.*.8 (its own address),

> > while
> > > > for the other DC, I have the PDC's IP. My DHCP service is provided

by
> > my
> > > > Netscreen firewall, and there we have identified the DC's IP as the

> DNS
> > > > server.
> > > >
> > > > My problem is that over the last six months we have had a recurring
> > > > situation where one or both of the machines loses its ability to

surf
> > the
> > > > internet. Investigations show that they are not able to ping

> externally
> > > by
> > > > IP or by name. We have found that the situation is resolved simply

by
> > > > changing the static IP to some other number within the range.
> > > >
> > > > Why should this be happening? We are not making any changes to the

> DNS
> > > > configuration and cannot identify anything which might trigger the

> loss
> > of
> > > > this service.
> > > >
> > > > Thanks
> > > >
> > > >
> > >
> > >
> > > ---
> > > Outgoing mail is certified Virus Free.
> > > Checked by AVG anti-virus system (http://www.grisoft.com).
> > > Version: 6.0.789 / Virus Database: 534 - Release Date: 11-7-2004
> > >
> > >

> >
> >

>
>
> ---
> Outgoing mail is certified Virus Free.
> Checked by AVG anti-virus system (http://www.grisoft.com).
> Version: 6.0.789 / Virus Database: 534 - Release Date: 11-7-2004
>
>



 
Reply With Quote
 
 
 
Reply

Thread Tools
Display Modes

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is On
HTML code is Off
Trackbacks are On
Pingbacks are On
Refbacks are Off


Similar Threads
Thread Thread Starter Forum Replies Last Post
help understanding this behaviour SeriousSam Windows Networking 6 12-10-2007 10:02 PM
Unexpected behaviour of TCP... srinivasan.gct@gmail.com Linux Networking 0 10-07-2005 02:07 PM
AP behaviour nospam@jcoppens.com Linux Networking 1 01-25-2005 06:32 PM
Regarding behaviour of select() all Rajat Linux Networking 1 10-09-2004 08:54 PM
Strange behaviour Daniele Grassi Wireless Internet 0 10-14-2003 06:08 PM



1 2 3 4 5 6 7 8 9 10 11