nslookup adding my domain name and returning always the sa..

Archived from groups: microsoft.public.win2000.dns (More info?)

Hi,
we have a w2k server running an exchange 2k server with a
domain. All updates have been done on it. With no apparent
reason, it starts considering all email as spam (using
Spamhaus.org black lists)last sunday. After few research,
it seems to be a DNS problem.

By doing Nslookup on it I realized that it always add my
domain name at the end and always return the same IP
address.

Exemple of the nslookup:
> hotmail.com
Server: pigeon.interne.mydomain.com
Address: 192.9.200.1
Non-authoritative answer:
Name: hotmail.com.mydomain.com
Address: 63.246.26.4

> msn.com
Server: pigeon.interne.mydomain.com
Address: 192.9.200.1
Non-authoritative answer:
Name: msn.com.mydomain.com
Address: 63.246.26.4

The address 63.246.26.4 isn't our mydomain.com homepage or
mail server.
And it will answer to anything.anything by the samething
(even if the site doesn't exist).
However, we can access the internet using this dns server
without any problem and it resolve the site well. It also
send mail without any problem.

No Forwarder are configured in the server.
Forward lookup zone contain: interne.mydomain.com (under
it, we finds all internal clients dhcp ip).
Reverse lookup zone contain: 192.9.200.x Subnet (with the
internal clients ip in it)

Any hint on how to resolve this problem???
Regards, Marco
9 answers Last reply
More about nslookup adding domain returning
  1. Archived from groups: microsoft.public.win2000.dns (More info?)

    In news:466801c47fce$9544ef90$a401280a@phx.gbl,
    marcoprince@hotmail.com <marcoprince@hotmail.com> wrote their comments
    Then Kevin replied below:
    > Hi,
    > we have a w2k server running an exchange 2k server with a
    > domain. All updates have been done on it. With no apparent
    > reason, it starts considering all email as spam (using
    > Spamhaus.org black lists)last sunday. After few research,
    > it seems to be a DNS problem.
    >
    > By doing Nslookup on it I realized that it always add my
    > domain name at the end and always return the same IP
    > address.
    >
    > Exemple of the nslookup:
    >> hotmail.com
    > Server: pigeon.interne.mydomain.com
    > Address: 192.9.200.1
    > Non-authoritative answer:
    > Name: hotmail.com.mydomain.com
    > Address: 63.246.26.4
    >
    >> msn.com
    > Server: pigeon.interne.mydomain.com
    > Address: 192.9.200.1
    > Non-authoritative answer:
    > Name: msn.com.mydomain.com
    > Address: 63.246.26.4
    >
    > The address 63.246.26.4 isn't our mydomain.com homepage or
    > mail server.
    > And it will answer to anything.anything by the samething
    > (even if the site doesn't exist).
    > However, we can access the internet using this dns server
    > without any problem and it resolve the site well. It also
    > send mail without any problem.
    >
    > No Forwarder are configured in the server.
    > Forward lookup zone contain: interne.mydomain.com (under
    > it, we finds all internal clients dhcp ip).
    > Reverse lookup zone contain: 192.9.200.x Subnet (with the
    > internal clients ip in it)
    >
    > Any hint on how to resolve this problem???
    > Regards, Marco

    It sounds to me like someone created a wildcard record and the combination
    of your DNS suffix search list makes it resolve to the wild card record.
    On the DNS tab there is a selection for "append parent suffixes of the
    primary DNS suffix" deselect that option and see what is does.
    If you would post your unedited ipconfig /all I could probably verify this.

    --
    Best regards,
    Kevin D4 Dad Goodknecht Sr. [MVP]
    Hope This Helps
    ================================================
    --
    When responding to posts, please "Reply to Group"
    via your newsreader so that others may learn and
    benefit from your issue, to respond directly to
    me remove the nospam. from my email address.
    ================================================
    http://www.lonestaramerica.com/
    ================================================
    Use Outlook Express?... Get OE_Quotefix:
    It will strip signature out and more
    http://home.in.tum.de/~jain/software/oe-quotefix/
    ================================================
    Keep a back up of your OE settings and folders
    with OEBackup:
    http://www.oehelp.com/OEBackup/Default.aspx
    ================================================
  2. Archived from groups: microsoft.public.win2000.dns (More info?)

    Thanks for the quick answer.
    Here is the ipconfig /all as asked.
    Thanks, Marco


    C:\Documents and Settings\administrator>ipconfig /all

    Windows 2000 IP Configuration

    Host Name . . . . . . . . . . . . : PIGEON
    Primary DNS Suffix . . . . . . . :
    interne.plastic-xxx.com
    Node Type . . . . . . . . . . . . : Hybrid
    IP Routing Enabled. . . . . . . . : Yes
    WINS Proxy Enabled. . . . . . . . : No
    DNS Suffix Search List. . . . . . :
    interne.plastic-xxx.com
    plastic-xxx.com

    Ethernet adapter Local Area Connection:

    Connection-specific DNS Suffix . :
    Description . . . . . . . . . . . : Compaq NC3163
    Fast Ethernet NIC
    Physical Address. . . . . . . . . : 00-02-A5-EC-ED-
    B1
    DHCP Enabled. . . . . . . . . . . : No
    IP Address. . . . . . . . . . . . : 192.9.200.1
    Subnet Mask . . . . . . . . . . . : 255.255.255.0
    Default Gateway . . . . . . . . . : 192.9.200.2
    DNS Servers . . . . . . . . . . . : 192.9.200.1
    Primary WINS Server . . . . . . . : 192.9.200.1

    PPP adapter RAS Server (Dial In) Interface:

    Connection-specific DNS Suffix . :
    Description . . . . . . . . . . . : WAN (PPP/SLIP)
    Interface
    Physical Address. . . . . . . . . : 00-53-45-00-00-
    00
    DHCP Enabled. . . . . . . . . . . : No
    IP Address. . . . . . . . . . . . : 192.9.200.60
    Subnet Mask . . . . . . . . . . . : 255.255.255.255
    Default Gateway . . . . . . . . . :
    DNS Servers . . . . . . . . . . . : 127.0.0.1

    C:\Documents and Settings\administrator>
  3. Archived from groups: microsoft.public.win2000.dns (More info?)

    In news:426b01c47fda$08338a10$a301280a@phx.gbl,
    anonymous@discussions.microsoft.com <anonymous@discussions.microsoft.com>
    wrote their comments
    Then Kevin replied below:

    Either you posted false data or there is a wildcard record in your zone
    resolving to the IP. The domain name you posted in your ipconfig resolves to
    nothing. I need to see an unedited ipconfig /all.

    > Thanks for the quick answer.
    > Here is the ipconfig /all as asked.
    > Thanks, Marco
    >
    >
    > C:\Documents and Settings\administrator>ipconfig /all
    >
    > Windows 2000 IP Configuration
    >
    > Host Name . . . . . . . . . . . . : PIGEON
    > Primary DNS Suffix . . . . . . . :
    > interne.plastic-xxx.com
    > Node Type . . . . . . . . . . . . : Hybrid
    > IP Routing Enabled. . . . . . . . : Yes
    > WINS Proxy Enabled. . . . . . . . : No
    > DNS Suffix Search List. . . . . . :
    > interne.plastic-xxx.com
    >
    > plastic-xxx.com
    >
    > Ethernet adapter Local Area Connection:
    >
    > Connection-specific DNS Suffix . :
    > Description . . . . . . . . . . . : Compaq NC3163
    > Fast Ethernet NIC
    > Physical Address. . . . . . . . . :
    > 00-02-A5-EC-ED- B1
    > DHCP Enabled. . . . . . . . . . . : No
    > IP Address. . . . . . . . . . . . : 192.9.200.1
    > Subnet Mask . . . . . . . . . . . : 255.255.255.0
    > Default Gateway . . . . . . . . . : 192.9.200.2
    > DNS Servers . . . . . . . . . . . : 192.9.200.1
    > Primary WINS Server . . . . . . . : 192.9.200.1
    >
    > PPP adapter RAS Server (Dial In) Interface:
    >
    > Connection-specific DNS Suffix . :
    > Description . . . . . . . . . . . : WAN (PPP/SLIP)
    > Interface
    > Physical Address. . . . . . . . . :
    > 00-53-45-00-00- 00
    > DHCP Enabled. . . . . . . . . . . : No
    > IP Address. . . . . . . . . . . . : 192.9.200.60
    > Subnet Mask . . . . . . . . . . . :
    > 255.255.255.255 Default Gateway . . . . . . . . .
    > : DNS Servers . . . . . . . . . . . : 127.0.0.1
    >
    > C:\Documents and Settings\administrator>


    --
    Best regards,
    Kevin D4 Dad Goodknecht Sr. [MVP]
    Hope This Helps
    ================================================
    --
    When responding to posts, please "Reply to Group"
    via your newsreader so that others may learn and
    benefit from your issue, to respond directly to
    me remove the nospam. from my email address.
    ================================================
    http://www.lonestaramerica.com/
    ================================================
    Use Outlook Express?... Get OE_Quotefix:
    It will strip signature out and more
    http://home.in.tum.de/~jain/software/oe-quotefix/
    ================================================
    Keep a back up of your OE settings and folders
    with OEBackup:
    http://www.oehelp.com/OEBackup/Default.aspx
    ================================================
  4. Archived from groups: microsoft.public.win2000.dns (More info?)

    In news:426b01c47fda$08338a10$a301280a@phx.gbl,
    anonymous@discussions.microsoft.com <anonymous@discussions.microsoft.com>
    made a post then I commented below
    > Thanks for the quick answer.
    > Here is the ipconfig /all as asked.
    > Thanks, Marco
    >
    >

    Do you work for Sun Microsystems?

    ===================
    Curious, this IP range you're using, belongs to Sun Microsystems.
    Search results for: 192.9.0.0

    OrgName: Sun Microsystems, Inc
    OrgID: SUN
    Address: 4150 Network Circle
    City: Santa Clara
    StateProv: CA
    PostalCode: 95054
    Country: US
    ===================

    Is this supposed to be a private range? If so, the private ranges are:
    192.168.0.0/16
    172.16.0.0/19
    10.0.0.0/16


    --
    Regards,
    Ace

    Please direct all replies ONLY to the Microsoft public newsgroups
    so all can benefit.

    This posting is provided "AS-IS" with no warranties or guarantees
    and confers no rights.

    Ace Fekay, MCSE 2003 & 2000, MCSA 2003 & 2000, MCSE+I, MCT, MVP
    Microsoft Windows MVP - Windows Server - Directory Services

    Security Is Like An Onion, It Has Layers
    HAM AND EGGS: A day's work for a chicken;
    A lifetime commitment for a pig.
    --
    =================================
  5. Archived from groups: microsoft.public.win2000.dns (More info?)

    I replaced a part of my domain for privacy purpose but if
    you need it, here it is again but unedited.
    Regards, Marco

    C:\Documents and Settings\administrator>ipconfig /all
    >>
    >> Windows 2000 IP Configuration
    >>
    >> Host Name . . . . . . . . . . . . : PIGEON
    >> Primary DNS Suffix . . . . . . . :
    >> interne.plastic-ind.com
    >> Node Type . . . . . . . . . . . . : Hybrid
    >> IP Routing Enabled. . . . . . . . : Yes
    >> WINS Proxy Enabled. . . . . . . . : No
    >> DNS Suffix Search List. . . . . . :
    >> interne.plastic-ind.com
    >>
    >> plastic-ind.com
    >>
    >> Ethernet adapter Local Area Connection:
    >>
    >> Connection-specific DNS Suffix . :
    >> Description . . . . . . . . . . . : Compaq
    NC3163
    >> Fast Ethernet NIC
    >> Physical Address. . . . . . . . . :
    >> 00-02-A5-EC-ED- B1
    >> DHCP Enabled. . . . . . . . . . . : No
    >> IP Address. . . . . . . . . . . . : 192.9.200.1
    >> Subnet Mask . . . . . . . . . . . :
    255.255.255.0
    >> Default Gateway . . . . . . . . . : 192.9.200.2
    >> DNS Servers . . . . . . . . . . . : 192.9.200.1
    >> Primary WINS Server . . . . . . . : 192.9.200.1
    >>
    >> PPP adapter RAS Server (Dial In) Interface:
    >>
    >> Connection-specific DNS Suffix . :
    >> Description . . . . . . . . . . . : WAN
    (PPP/SLIP)
    >> Interface
    >> Physical Address. . . . . . . . . :
    >> 00-53-45-00-00- 00
    >> DHCP Enabled. . . . . . . . . . . : No
    >> IP Address. . . . . . . . . . . . : 192.9.200.60
    >> Subnet Mask . . . . . . . . . . . :
    >> 255.255.255.255 Default
    Gateway . . . . . . . . .
    >> : DNS Servers . . . . . . . . . . . : 127.0.0.1
    >>
    >> C:\Documents and Settings\administrator>


    >-----Original Message-----
    >In news:426b01c47fda$08338a10$a301280a@phx.gbl,
    >anonymous@discussions.microsoft.com
    <anonymous@discussions.microsoft.com>
    >wrote their comments
    >Then Kevin replied below:
    >
    >Either you posted false data or there is a wildcard
    record in your zone
    >resolving to the IP. The domain name you posted in your
    ipconfig resolves to
    >nothing. I need to see an unedited ipconfig /all.
    >
    >> Thanks for the quick answer.
    >> Here is the ipconfig /all as asked.
    >> Thanks, Marco
    >>
    >>
    >> C:\Documents and Settings\administrator>ipconfig /all
    >>
    >> Windows 2000 IP Configuration
    >>
    >> Host Name . . . . . . . . . . . . : PIGEON
    >> Primary DNS Suffix . . . . . . . :
    >> interne.plastic-xxx.com
    >> Node Type . . . . . . . . . . . . : Hybrid
    >> IP Routing Enabled. . . . . . . . : Yes
    >> WINS Proxy Enabled. . . . . . . . : No
    >> DNS Suffix Search List. . . . . . :
    >> interne.plastic-xxx.com
    >>
    >> plastic-xxx.com
    >>
    >> Ethernet adapter Local Area Connection:
    >>
    >> Connection-specific DNS Suffix . :
    >> Description . . . . . . . . . . . : Compaq
    NC3163
    >> Fast Ethernet NIC
    >> Physical Address. . . . . . . . . :
    >> 00-02-A5-EC-ED- B1
    >> DHCP Enabled. . . . . . . . . . . : No
    >> IP Address. . . . . . . . . . . . : 192.9.200.1
    >> Subnet Mask . . . . . . . . . . . :
    255.255.255.0
    >> Default Gateway . . . . . . . . . : 192.9.200.2
    >> DNS Servers . . . . . . . . . . . : 192.9.200.1
    >> Primary WINS Server . . . . . . . : 192.9.200.1
    >>
    >> PPP adapter RAS Server (Dial In) Interface:
    >>
    >> Connection-specific DNS Suffix . :
    >> Description . . . . . . . . . . . : WAN
    (PPP/SLIP)
    >> Interface
    >> Physical Address. . . . . . . . . :
    >> 00-53-45-00-00- 00
    >> DHCP Enabled. . . . . . . . . . . : No
    >> IP Address. . . . . . . . . . . . : 192.9.200.60
    >> Subnet Mask . . . . . . . . . . . :
    >> 255.255.255.255 Default
    Gateway . . . . . . . . .
    >> : DNS Servers . . . . . . . . . . . : 127.0.0.1
    >>
    >> C:\Documents and Settings\administrator>
    >
    >
    >
    >--
    >Best regards,
    >Kevin D4 Dad Goodknecht Sr. [MVP]
    >Hope This Helps
    >================================================
    >--
    >When responding to posts, please "Reply to Group"
    >via your newsreader so that others may learn and
    >benefit from your issue, to respond directly to
    >me remove the nospam. from my email address.
    >================================================
    >http://www.lonestaramerica.com/
    >================================================
    >Use Outlook Express?... Get OE_Quotefix:
    >It will strip signature out and more
    >http://home.in.tum.de/~jain/software/oe-quotefix/
    >================================================
    >Keep a back up of your OE settings and folders
    >with OEBackup:
    >http://www.oehelp.com/OEBackup/Default.aspx
    >================================================
    >
    >
    >.
    >
  6. Archived from groups: microsoft.public.win2000.dns (More info?)

    Hi,
    the 192.9.200.x range is our internal private ip range.
    Regards,
    Marco

    >-----Original Message-----
    >In news:426b01c47fda$08338a10$a301280a@phx.gbl,
    >anonymous@discussions.microsoft.com
    <anonymous@discussions.microsoft.com>
    >made a post then I commented below
    >> Thanks for the quick answer.
    >> Here is the ipconfig /all as asked.
    >> Thanks, Marco
    >>
    >>
    >
    >Do you work for Sun Microsystems?
    >
    >===================
    >Curious, this IP range you're using, belongs to Sun
    Microsystems.
    >Search results for: 192.9.0.0
    >
    >OrgName: Sun Microsystems, Inc
    >OrgID: SUN
    >Address: 4150 Network Circle
    >City: Santa Clara
    >StateProv: CA
    >PostalCode: 95054
    >Country: US
    >===================
    >
    >Is this supposed to be a private range? If so, the
    private ranges are:
    >192.168.0.0/16
    >172.16.0.0/19
    >10.0.0.0/16
    >
    >
    >
    >
    >--
    >Regards,
    >Ace
    >
    >Please direct all replies ONLY to the Microsoft public
    newsgroups
    >so all can benefit.
    >
    >This posting is provided "AS-IS" with no warranties or
    guarantees
    >and confers no rights.
    >
    >Ace Fekay, MCSE 2003 & 2000, MCSA 2003 & 2000, MCSE+I,
    MCT, MVP
    >Microsoft Windows MVP - Windows Server - Directory
    Services
    >
    >Security Is Like An Onion, It Has Layers
    >HAM AND EGGS: A day's work for a chicken;
    >A lifetime commitment for a pig.
    >--
    >=================================
    >
    >
    >.
    >
  7. Archived from groups: microsoft.public.win2000.dns (More info?)

    In news:4d0201c4806c$d8ea6600$a501280a@phx.gbl,
    marcoprince@hotmail.com <marcoprince@hotmail.com> wrote their comments
    Then Kevin replied below:
    > I replaced a part of my domain for privacy purpose but if
    > you need it, here it is again but unedited.
    > Regards, Marco

    Thank you very much for posting that. Your DNS hosting company has wildcard
    record in the public zone that points to that IP address take a look below.
    Tell the hosting company to remove the wildcard record, or go to every
    machine and uncheck "Append parent suffxes of the Primary DNS suffix" (on
    the DNS tab) this will stop plastic-ind.com from being appended to queries.

    QUESTION SECTION:
    this-is-what-a-wild-card-record-is-good-for.plastic-ind.com. IN
    A

    ANSWER SECTION:
    this-is-what-a-wild-card-record-is-good-for.plastic-ind.com. 14400 IN
    A 63.246.26.4

    AUTHORITY SECTION:
    plastic-ind.com. 172525 IN NS ns2.dnswebserver.net.
    plastic-ind.com. 172525 IN NS ns1.dnswebserver.net.

    ADDITIONAL SECTION:
    ns1.dnswebserver.net. 172543 IN A 63.246.26.5
    ns2.dnswebserver.net. 172543 IN A 216.118.107.5

    QUESTION SECTION:
    see-what-i-mean.plastic-ind.com. IN A

    ANSWER SECTION:
    see-what-i-mean.plastic-ind.com. 14400 IN A 63.246.26.4

    AUTHORITY SECTION:
    plastic-ind.com. 172486 IN NS ns1.dnswebserver.net.
    plastic-ind.com. 172486 IN NS ns2.dnswebserver.net.

    ADDITIONAL SECTION:
    ns1.dnswebserver.net. 172504 IN A 63.246.26.5
    ns2.dnswebserver.net. 172504 IN A 216.118.107.5


    --
    Best regards,
    Kevin D4 Dad Goodknecht Sr. [MVP]
    Hope This Helps
    ================================================
    --
    When responding to posts, please "Reply to Group"
    via your newsreader so that others may learn and
    benefit from your issue, to respond directly to
    me remove the nospam. from my email address.
    ================================================
    http://www.lonestaramerica.com/
    ================================================
    Use Outlook Express?... Get OE_Quotefix:
    It will strip signature out and more
    http://home.in.tum.de/~jain/software/oe-quotefix/
    ================================================
    Keep a back up of your OE settings and folders
    with OEBackup:
    http://www.oehelp.com/OEBackup/Default.aspx
    ================================================
  8. Archived from groups: microsoft.public.win2000.dns (More info?)

    Thanks a lot for your time and research!!! I'll contact my
    DNS hosting company.
    Regards, Marco
  9. Archived from groups: microsoft.public.win2000.dns (More info?)

    In news:4aa001c4806d$240aba90$a301280a@phx.gbl,
    marcoprince@hotmail.com <marcoprince@hotmail.com> made a post then I
    commented below
    > Hi,
    > the 192.9.200.x range is our internal private ip range.
    > Regards,
    > Marco
    >

    Unfortunately this is not a range that was allocated for private use and is
    actually a public IP range that is owned by Sun. The valid ranges that are
    useable for private purposes I have provided for you in my previous post.


    --
    Regards,
    Ace

    Please direct all replies ONLY to the Microsoft public newsgroups
    so all can benefit.

    This posting is provided "AS-IS" with no warranties or guarantees
    and confers no rights.

    Ace Fekay, MCSE 2003 & 2000, MCSA 2003 & 2000, MCSE+I, MCT, MVP
    Microsoft Windows MVP - Windows Server - Directory Services

    Security Is Like An Onion, It Has Layers
    HAM AND EGGS: A day's work for a chicken;
    A lifetime commitment for a pig.
    --
    =================================
Ask a new question

Read More

Domain Name Servers Windows