DNS resolution not working (Win2k Pro)

G

Guest

Guest
Archived from groups: microsoft.public.win2000.dns (More info?)

Hello,

I have a problem with the DNS resolution on a Win2k Pro system. The network
adapter is set up with hardcoded addresses and DNS server addresses, and
access from it to the internet and from the internet to the system works.

For example, "ping 216.109.112.135" works fine. But "ping yahoo.com"
returns "unknown host", even though I can ping both DNS server IP addresses
fine and both the "DNS Client" and "DHCP Client" services are running.

In the event viewer I get a dnscache warning whenever the computer starts
(event id 11050) that says that the computer can't contact any DNS servers.
Why is this, when I can ping the two DNS servers from the same computer,
and they seem to work as DNS servers on other systems?

(The behavior is independent of the installed firewall Tiny PF 5. When I
disable it, nothing changes.)

Can anybody help me out here, please? What can I check, what is necessary
for the DNS resolution to work?

Thanks,
Gerhard
 
G

Guest

Guest
Archived from groups: microsoft.public.win2000.dns (More info?)

"Gerhard Fiedler" <lists@connectionbrazil.com> wrote in message
news:1nwb8l28enrxu.7h8mg0i00l6a$.dlg@40tude.net...
> Hello,
>
> I have a problem with the DNS resolution on a Win2k Pro system. The
network
> adapter is set up with hardcoded addresses and DNS server addresses, and
> access from it to the internet and from the internet to the system works.

> For example, "ping 216.109.112.135" works fine. But "ping yahoo.com"
> returns "unknown host", even though I can ping both DNS server IP
addresses
> fine and both the "DNS Client" and "DHCP Client" services are running.
>

What are the DNS server addresses?

Do you have an INTERNAL DNS server (set)?

If you use internal DNS servers then your client must
be set to use ONLY the internal server (set).

In that case, the INTERNAL DNS servers will usually
"Forward" to an External (e.g, at the ISP.)

> In the event viewer I get a dnscache warning whenever the computer starts
> (event id 11050) that says that the computer can't contact any DNS
servers.

Sounds like the client machine is set with INCORRECT
addresses for DNS server -- or those servers are not
funtioning.

> Why is this, when I can ping the two DNS servers from the same computer,
> and they seem to work as DNS servers on other systems?

Then maybe it is a routing problem for the client, or
some filtering on your network.

Try:

nslookup www.yahoo.com
nslookup www.yahoo.com ADDRESS_OF_DNS_SERVER

See if you get a difference.


> (The behavior is independent of the installed firewall Tiny PF 5. When I
> disable it, nothing changes.)

Are you sure it is disable? (Really, weirder things have happened.)

> Can anybody help me out here, please? What can I check, what is necessary
> for the DNS resolution to work?


Client machines specify the (correct) DNS servers in their
NIC->IP properties.

That is pretty much it unless you have firewalled yourself
into isolation.
 
G

Guest

Guest
Archived from groups: microsoft.public.win2000.dns (More info?)

In news:1nwb8l28enrxu.7h8mg0i00l6a$.dlg@40tude.net,
Gerhard Fiedler <lists@connectionbrazil.com> commented
Then Kevin replied below:
> Hello,
>
> I have a problem with the DNS resolution on a Win2k Pro
> system. The network adapter is set up with hardcoded
> addresses and DNS server addresses, and access from it to
> the internet and from the internet to the system works.
>
> For example, "ping 216.109.112.135" works fine. But "ping
> yahoo.com" returns "unknown host", even though I can ping
> both DNS server IP addresses fine and both the "DNS
> Client" and "DHCP Client" services are running.
>
> In the event viewer I get a dnscache warning whenever the
> computer starts (event id 11050) that says that the
> computer can't contact any DNS servers. Why is this, when
> I can ping the two DNS servers from the same computer,
> and they seem to work as DNS servers on other systems?

Just because you can ping a certain IP address does that mean you can
connect to a given port at those same IP addresses?

> (The behavior is independent of the installed firewall
> Tiny PF 5. When I disable it, nothing changes.)
>
> Can anybody help me out here, please? What can I check,
> what is necessary for the DNS resolution to work?

I suspect a firewall rule in place the blocks outbound connections to port
53 UDP.



--
Best regards,
Kevin D4 Dad Goodknecht Sr. [MVP]
Hope This Helps
===================================
When responding to posts, please "Reply to Group"
via your newsreader so that others may learn and
benefit from your issue, to respond directly to
me remove the nospam. from my email address.
===================================
http://www.lonestaramerica.com/
===================================
Use Outlook Express?... Get OE_Quotefix:
It will strip signature out and more
http://home.in.tum.de/~jain/software/oe-quotefix/
===================================
Keep a back up of your OE settings and folders
with OEBackup:
http://www.oehelp.com/OEBackup/Default.aspx
===================================
 
G

Guest

Guest
Archived from groups: microsoft.public.win2000.dns (More info?)

"Kevin D. Goodknecht Sr. [MVP]" <admin@nospam.WFTX.US> wrote in message

> > Can anybody help me out here, please? What can I check,
> > what is necessary for the DNS resolution to work?
>
> I suspect a firewall rule in place the blocks outbound connections to port
> 53 UDP.

Popular (and free) tool for resolving this is NetCat (NC.exe).

Telnet is commonly used to test text based TCP services
by connection thus: telnet server.domain.com 80

Problem is that Telnet doesn't support UDP connections so
it won't work for (most) DNS testing.



--
Herb Martin
 
G

Guest

Guest
Archived from groups: microsoft.public.win2000.dns (More info?)

Herb Martin wrote:

>> I have a problem with the DNS resolution on a Win2k Pro system. The
>> network adapter is set up with hardcoded addresses and DNS server
>> addresses, and access from it to the internet and from the internet to
>> the system works.
>>
>> For example, "ping 216.109.112.135" works fine. But "ping yahoo.com"
>> returns "unknown host", even though I can ping both DNS server IP
>> addresses fine and both the "DNS Client" and "DHCP Client" services are
>> running.

> What are the DNS server addresses?

209.116.241.10 and 209.205.242.132 (as given by the local ISP)

From all I can tell, there is a problem with these two DNS servers.
However, what people from that site told me, that's the DNS servers their
(working) machines are using. But I'll investigate that further. (Takes a
bit, though -- I'm off site.)

> Do you have an INTERNAL DNS server (set)?

No. Both external.

>> In the event viewer I get a dnscache warning whenever the computer
>> starts (event id 11050) that says that the computer can't contact any
>> DNS servers.

> Sounds like the client machine is set with INCORRECT addresses for DNS
> server -- or those servers are not funtioning.

Exactly what seems to be.

>> Why is this, when I can ping the two DNS servers from the same computer,
>> and they seem to work as DNS servers on other systems?
>
> Then maybe it is a routing problem for the client, or some filtering on
> your network.
>
> Try:
>
> nslookup www.yahoo.com
> nslookup www.yahoo.com ADDRESS_OF_DNS_SERVER

This (and the netdiag tool that somebody else mentioned) are exactly what I
needed to investigate that. (Plus the reassuring explanations that there's
no tricky stuff behind that I don't know about... :)

>> (The behavior is independent of the installed firewall Tiny PF 5. When I
>> disable it, nothing changes.)
>
> Are you sure it is disable? (Really, weirder things have happened.)

I know... no offense taken :) But when I use the DNS servers of my own ISP
(for example 200.174.144.14), it all works -- the nslookup works, and
normal Internet access and DNS resolution too if I add it to the DNS
servers in the connection configuration. So I guess the firewall is not a
problem.

It looks like something's wrong with the DNS server addresses they got from
their ISP. The only thing I have to find out is why their other computers
work and this one not, even though they assured me that they are set to the
same DNS servers. Anyway, thanks to all for your help -- I think I have
enough information now to get to the bottom of this.

Thanks,
Gerhard
 
G

Guest

Guest
Archived from groups: microsoft.public.win2000.dns (More info?)

In news:1oe0vys2n6a1b.7jgtmabbboqj.dlg@40tude.net,
Gerhard Fiedler <lists@connectionbrazil.com> commented
Then Kevin replied below:
> 209.116.241.10 and 209.205.242.132 (as given by the local
> ISP)
I cannot make either a UDP or TCP connection to port 53 of either of these
addresses.
Try 4.2.2.1 and 4.2.2.2



--
Best regards,
Kevin D4 Dad Goodknecht Sr. [MVP]
Hope This Helps
===================================
When responding to posts, please "Reply to Group"
via your newsreader so that others may learn and
benefit from your issue, to respond directly to
me remove the nospam. from my email address.
===================================
http://www.lonestaramerica.com/
===================================
Use Outlook Express?... Get OE_Quotefix:
It will strip signature out and more
http://home.in.tum.de/~jain/software/oe-quotefix/
===================================
Keep a back up of your OE settings and folders
with OEBackup:
http://www.oehelp.com/OEBackup/Default.aspx
===================================
 
G

Guest

Guest
Archived from groups: microsoft.public.win2000.dns (More info?)

"Gerhard Fiedler" <lists@connectionbrazil.com> wrote in message
news:1oe0vys2n6a1b.7jgtmabbboqj.dlg@40tude.net...
> Herb Martin wrote:
>
> >> I have a problem with the DNS resolution on a Win2k Pro system. The
> >> network adapter is set up with hardcoded addresses and DNS server
> >> addresses, and access from it to the internet and from the internet to
> >> the system works.
> >>
> >> For example, "ping 216.109.112.135" works fine. But "ping yahoo.com"
> >> returns "unknown host", even though I can ping both DNS server IP
> >> addresses fine and both the "DNS Client" and "DHCP Client" services are
> >> running.
>
> > What are the DNS server addresses?
>
> 209.116.241.10 and 209.205.242.132 (as given by the local ISP)
>
> From all I can tell, there is a problem with these two DNS servers.
> However, what people from that site told me, that's the DNS servers their
> (working) machines are using. But I'll investigate that further. (Takes a
> bit, though -- I'm off site.)

They do NOT work from here (even with 10 second timeouts),
but then they might be firewall or restricted to servicing only
local clients.


> > Do you have an INTERNAL DNS server (set)?
>
> No. Both external.

You need a reliable DNS server (set) even if you have
to install one yourself.

(No zones or registration are required if you just wish
to RESOLVE addresses on behalf of your own clients.)

> >> In the event viewer I get a dnscache warning whenever the computer
> >> starts (event id 11050) that says that the computer can't contact any
> >> DNS servers.

Well, they don't work from here, so perhaps you aren't
allowed through the firewalls or considered local addresses
either.

> > Sounds like the client machine is set with INCORRECT addresses for DNS
> > server -- or those servers are not funtioning.
>
> Exactly what seems to be.

> >> Why is this, when I can ping the two DNS servers from the same
computer,
> >> and they seem to work as DNS servers on other systems?
> >
> > Then maybe it is a routing problem for the client, or some filtering on
> > your network.
> >
> > Try:
> >
> > nslookup www.yahoo.com
> > nslookup www.yahoo.com ADDRESS_OF_DNS_SERVER
>
> This (and the netdiag tool that somebody else mentioned) are exactly what
I
> needed to investigate that. (Plus the reassuring explanations that there's
> no tricky stuff behind that I don't know about... :)
>
> >> (The behavior is independent of the installed firewall Tiny PF 5. When
I
> >> disable it, nothing changes.)
> >
> > Are you sure it is disabled? (Really, weirder things have happened.)
>
> I know... no offense taken :) But when I use the DNS servers of my own ISP
> (for example 200.174.144.14), it all works -- the nslookup works, and
> normal Internet access and DNS resolution too if I add it to the DNS
> servers in the connection configuration. So I guess the firewall is not a
> problem.

What do you mean "of your own ISP"?

Although clients can TECHNICAL use any DNS server (that
will respond with the correct answers), it is impolite to use
one owned by others without permission (for more than just
a brief test), and really the clients should typically use the
closest, correct, working DNS server.

Why aren't you using YOUR ISP DNS?

> It looks like something's wrong with the DNS server addresses they got
from
> their ISP.

Oh, different set of clients -- sorry.

Or the DNS servers are firewall -- or set so the clients are
considered "foreign" and therefore not serviced.

> The only thing I have to find out is why their other computers
> work and this one not, even though they assured me that they are set to
the
> same DNS servers. Anyway, thanks to all for your help -- I think I have
> enough information now to get to the bottom of this.

nslookup is a pretty funky tool (e.g., it gives bogus errors if their is
no reverse-PTR record for the DNS server) but it has the advantage
of being available on all NT-class machines that have IP.
 
G

Guest

Guest
Archived from groups: microsoft.public.win2000.dns (More info?)

Kevin's test is a good one because if the clients can
connect to these addresses, then the problem lies
either with the DNS server or at least close to that
server and not with the clients.

--
Herb Martin


"Kevin D. Goodknecht Sr. [MVP]" <admin@nospam.WFTX.US> wrote in message
news:eakAAif3EHA.3416@TK2MSFTNGP09.phx.gbl...
> In news:1oe0vys2n6a1b.7jgtmabbboqj.dlg@40tude.net,
> Gerhard Fiedler <lists@connectionbrazil.com> commented
> Then Kevin replied below:
> > 209.116.241.10 and 209.205.242.132 (as given by the local
> > ISP)
> I cannot make either a UDP or TCP connection to port 53 of either of these
> addresses.
> Try 4.2.2.1 and 4.2.2.2
>
>
>
> --
> Best regards,
> Kevin D4 Dad Goodknecht Sr. [MVP]
> Hope This Helps
> ===================================
> When responding to posts, please "Reply to Group"
> via your newsreader so that others may learn and
> benefit from your issue, to respond directly to
> me remove the nospam. from my email address.
> ===================================
> http://www.lonestaramerica.com/
> ===================================
> Use Outlook Express?... Get OE_Quotefix:
> It will strip signature out and more
> http://home.in.tum.de/~jain/software/oe-quotefix/
> ===================================
> Keep a back up of your OE settings and folders
> with OEBackup:
> http://www.oehelp.com/OEBackup/Default.aspx
> ===================================
>
>
 
G

Guest

Guest
Archived from groups: microsoft.public.win2000.dns (More info?)

Kevin D. Goodknecht Sr. [MVP] wrote:

> Just because you can ping a certain IP address does that mean you can
> connect to a given port at those same IP addresses?

Yes, I knew that. I just didn't know how to specifically test for a DNS
connection. But I guess the nslookup tool does exactly that.

>> (The behavior is independent of the installed firewall
>> Tiny PF 5. When I disable it, nothing changes.)

> I suspect a firewall rule in place the blocks outbound connections to port
> 53 UDP.

If so, I think it is not a firewall on this system. The symptoms don't
change when I disable the firewall. Maybe somewhere in the ISP's routing...

Thanks,
Gerhard
 

obiwan

Distinguished
Feb 16, 2001
90
0
18,630
Archived from groups: microsoft.public.win2000.dns (More info?)

> I have a problem with the DNS resolution on a Win2k Pro system. The
> network adapter is set up with hardcoded addresses and DNS server
> addresses, and access from it to the internet and from the internet to the
> system works.

Ok

> For example, "ping 216.109.112.135" works fine. But "ping yahoo.com"
> returns "unknown host", even though I can ping both DNS server IP
> addresses fine and both the "DNS Client" and "DHCP Client" services are
> running.
<snippage>

Either the configured DNS servers are wrong, or they are
unreachable from the machine; to perform a quick test
open a command prompt on the machine, then enter the
command "nslookup", you'll see some messages and
a ">" prompt, enter www.microsoft.com and press enter
if the configured DNS are working you should see the
IP addresses of the Microsoft site, if that's not true, try
entering the command "server 4.2.2.2" and then retry
entering www.microsoft.com if neither works, there is
probably something blocking DNS traffic from/to the
machine; if the second check (using the DNS 4.2.2.2)
works the DNS servers you're currently using aren't
reachable or aren't working properly

Let me/us (the NG) know

Regards

--

* ObiWan

Microsoft MVP: Windows Server - Networking
http://www.microsoft.com/communities/MVP/MVP.mspx
http://mvp.support.microsoft.com

DNS "fail-safe" for Windows clients.
http://ntcanuck.com

408+ XP/2000 tweaks and tips
http://ntcanuck.com/tq/Tip_Quarry.htm
 
G

Guest

Guest
Archived from groups: microsoft.public.win2000.dns (More info?)

GF> I can ping both DNS server IP addresses fine

"ping" is a tool for testing ICMP/IP connectivity, and that is all that
you have tested with it. Test, with a DNS diagnosis tool, whether you
can send a DNS query to the DNS server and receive a response.

<URL:http://homepages.tesco.net./~J.deBoynePollard/FGA/dns-diagnosis-tools.html>
 
G

Guest

Guest
Archived from groups: microsoft.public.win2000.dns (More info?)

First off, thank you all very much for your help. That's a not so common
experience in newsgroups these days... :)

It seems I created some confusion not describing the complete situation.
Here it is:

- I am off-site, using my own ISP to connect through pcAnywhere to one
computer on a client's internal network.
- This one computer is an FTP server. All other computers on that network
are normal office PCs.
- The client's internal network is connected to the Internet through the
client's ISP.
- The ISP has some firewall running, but opened the ports I need to connect
to that one computer (and some others we need for that machine).
- The two DNS servers that don't work are the ones that my client has
received from their ISP.
- They are also the ones they see in the ipconfig output of their office
PCs (which work fine).
- But I haven't yet seen an actual copy of ipconfig or nslookup output. So
far they just confirmed that the numbers were the ones. This is what I'm
waiting for now.
- In the meantime, I have set up that one machine to use the DNS servers of
my own ISP (which is different from my client's ISP). It works fine with
these DNS servers. I think that's ok, as long as it is a temporary
solution. After all, they only get used very rarely (that machine is not
typically used for browsing, only when I download updates etc.)

Hope this clarifies some of the confusion I created.

At this point, I'm waiting for the copies of the outputs of a few commands
run on their normal PCs to see what exactly these PCs do, and whether they
in fact are using these two DNS servers that don't work -- not from that
machine, not from here, and not from a few other places (as you were nice
enough to check also).

I guess if in fact the other office PCs use these two DNS servers and they
work there, we have some kind of firewall problem with my client's ISP.

If the office PCs use other DNS servers, then the whole thing was a
miscommunication from my client's ISP to my client and from my client to
me.

See also some inline comments below.

Thanks,
Gerhard


Herb Martin wrote:

> You need a reliable DNS server (set) even if you have to install one
> yourself.

I know. And I intend to get one from my client's ISP :) I think it's their
responsibility to provide that.


>> I know... no offense taken :) But when I use the DNS servers of my own ISP
>> (for example 200.174.144.14), it all works -- the nslookup works, and
>> normal Internet access and DNS resolution too if I add it to the DNS
>> servers in the connection configuration. So I guess the firewall is not a
>> problem.
>
> What do you mean "of your own ISP"?

I hope that the above has cleared that up. I am off-site and using a
different ISP than my client, where the one computer with the DNS server
problem is located.

> Why aren't you using YOUR ISP DNS?

I think I wrote that I'm using my ISP's DNS server :) And the whole
problem is that the client's DNS servers (or what I currently have reason
to believe what they are) don't work from that one computer. So I added
temporarily the DNS servers of my own ISP to the list of DNS servers on
that problematic machine, just to get it working for now.

>> It looks like something's wrong with the DNS server addresses they got
>> from their ISP.

> Or the DNS servers are firewall -- or set so the clients are
> considered "foreign" and therefore not serviced.

Yes. I'm waiting for some feedback about other machines on the network to
see what their exact setup is.

> nslookup is a pretty funky tool (e.g., it gives bogus errors if their is
> no reverse-PTR record for the DNS server) but it has the advantage
> of being available on all NT-class machines that have IP.

Thanks for that info. I've always thought that networking is some kind of a
black art... :)
 
G

Guest

Guest
Archived from groups: microsoft.public.win2000.dns (More info?)

>>> 209.116.241.10 and 209.205.242.132 (as given by the local ISP)

>> I cannot make either a UDP or TCP connection to port 53 of either of
>> these addresses. Try 4.2.2.1 and 4.2.2.2

> Kevin's test is a good one because if the clients can connect to these
> addresses, then the problem lies either with the DNS server or at least
> close to that server and not with the clients.

I didn't try these DNS servers, but I tried the DNS servers of my own ISP
(one is 200.174.144.14), and everything works fine when I use them.

Thanks,
Gerhard
 
G

Guest

Guest
Archived from groups: microsoft.public.win2000.dns (More info?)

Jonathan de Boyne Pollard wrote:

> GF> I can ping both DNS server IP addresses fine
>
> "ping" is a tool for testing ICMP/IP connectivity, and that is all that
> you have tested with it.

I know... :) Only after I asked here, I became aware of nslookup.

> Test, with a DNS diagnosis tool, whether you can send a DNS query to the
> DNS server and receive a response.
>
> <URL:http://homepages.tesco.net./~J.deBoynePollard/FGA/dns-diagnosis-tool
> s.html>

Thanks for the link! Unluckily, as this site explains, there seems to be a
certain lack of DNS tools (well, they give at least one that looks good
http://mvptools.com/ ).

But from the investigation so far, it seems that for some reason this one
computer can't access the same DNS servers that all other computers on the
network are using. If I get that confirmed, I guess it is a problem with
their ISP's firewall or routing.

Thanks,
Gerhard
 
G

Guest

Guest
Archived from groups: microsoft.public.win2000.dns (More info?)

"Gerhard Fiedler" <lists@connectionbrazil.com> wrote in message
news:jwscc3caqxwu.hg8i6v4eam47$.dlg@40tude.net...
> >>> 209.116.241.10 and 209.205.242.132 (as given by the local ISP)
>
> >> I cannot make either a UDP or TCP connection to port 53 of either of
> >> these addresses. Try 4.2.2.1 and 4.2.2.2
>
> > Kevin's test is a good one because if the clients can connect to these
> > addresses, then the problem lies either with the DNS server or at least
> > close to that server and not with the clients.
>
> I didn't try these DNS servers, but I tried the DNS servers of my own ISP
> (one is 200.174.144.14), and everything works fine when I use them.

That pretty much gives you (or the authorized users)
the information/ammunition to discuss the problem
with the DNS admins, or for them to get their network
admins to fix it.

--
Herb Martin


>
> Thanks,
> Gerhard
 
G

Guest

Guest
Archived from groups: microsoft.public.win2000.dns (More info?)

"Gerhard Fiedler" <lists@connectionbrazil.com> wrote in message
news:1wot9qdp1oy82$.pscu3zqa532k$.dlg@40tude.net...
> First off, thank you all very much for your help. That's a not so common
> experience in newsgroups these days... :)

You are very welcome.

I do appreciate the thanks and you will probably find that
your experience with news groups in general is not the same
as these Microsoft newsgroups.

Generally, any well-formed question will get some response
and more often than not a LOT of help.

Part of the reason may be the MVP system Microsoft uses to
recognize and reward those of us who help a lot.

> It seems I created some confusion not describing the complete situation.
> Here it is:

I think you have explained it pretty well.

(In the other part of the thread, you seem to have it
focused on the problem if not completely resolved
so I am not going to address the items below unless
you reply and indicate otherwise.)

> - I am off-site, using my own ISP to connect through pcAnywhere to one
> computer on a client's internal network.
> - This one computer is an FTP server. All other computers on that network
> are normal office PCs.
> - The client's internal network is connected to the Internet through the
> client's ISP.
> - The ISP has some firewall running, but opened the ports I need to
connect
> to that one computer (and some others we need for that machine).
> - The two DNS servers that don't work are the ones that my client has
> received from their ISP.
> - They are also the ones they see in the ipconfig output of their office
> PCs (which work fine).
> - But I haven't yet seen an actual copy of ipconfig or nslookup output. So
> far they just confirmed that the numbers were the ones. This is what I'm
> waiting for now.
> - In the meantime, I have set up that one machine to use the DNS servers
of
> my own ISP (which is different from my client's ISP). It works fine with
> these DNS servers. I think that's ok, as long as it is a temporary
> solution. After all, they only get used very rarely (that machine is not
> typically used for browsing, only when I download updates etc.)
>
> Hope this clarifies some of the confusion I created.
>
> At this point, I'm waiting for the copies of the outputs of a few commands
> run on their normal PCs to see what exactly these PCs do, and whether they
> in fact are using these two DNS servers that don't work -- not from that
> machine, not from here, and not from a few other places (as you were nice
> enough to check also).
>
> I guess if in fact the other office PCs use these two DNS servers and they
> work there, we have some kind of firewall problem with my client's ISP.
>
> If the office PCs use other DNS servers, then the whole thing was a
> miscommunication from my client's ISP to my client and from my client to
> me.
>
> See also some inline comments below.


--
Herb Martin


>
> Thanks,
> Gerhard
>
>
> Herb Martin wrote:
>
> > You need a reliable DNS server (set) even if you have to install one
> > yourself.
>
> I know. And I intend to get one from my client's ISP :) I think it's
their
> responsibility to provide that.
>
>
> >> I know... no offense taken :) But when I use the DNS servers of my own
ISP
> >> (for example 200.174.144.14), it all works -- the nslookup works, and
> >> normal Internet access and DNS resolution too if I add it to the DNS
> >> servers in the connection configuration. So I guess the firewall is not
a
> >> problem.
> >
> > What do you mean "of your own ISP"?
>
> I hope that the above has cleared that up. I am off-site and using a
> different ISP than my client, where the one computer with the DNS server
> problem is located.
>
> > Why aren't you using YOUR ISP DNS?
>
> I think I wrote that I'm using my ISP's DNS server :) And the whole
> problem is that the client's DNS servers (or what I currently have reason
> to believe what they are) don't work from that one computer. So I added
> temporarily the DNS servers of my own ISP to the list of DNS servers on
> that problematic machine, just to get it working for now.
>
> >> It looks like something's wrong with the DNS server addresses they got
> >> from their ISP.
>
> > Or the DNS servers are firewall -- or set so the clients are
> > considered "foreign" and therefore not serviced.
>
> Yes. I'm waiting for some feedback about other machines on the network to
> see what their exact setup is.
>
> > nslookup is a pretty funky tool (e.g., it gives bogus errors if their is
> > no reverse-PTR record for the DNS server) but it has the advantage
> > of being available on all NT-class machines that have IP.
>
> Thanks for that info. I've always thought that networking is some kind of
a
> black art... :)
 
G

Guest

Guest
Archived from groups: microsoft.public.win2000.dns (More info?)

>>>> Try 4.2.2.1 and 4.2.2.2

>> I didn't try these DNS servers, but I tried the DNS servers of my own ISP
>> (one is 200.174.144.14), and everything works fine when I use them.

> That pretty much gives you (or the authorized users) the
> information/ammunition to discuss the problem with the DNS admins, or
> for them to get their network admins to fix it.

Just one more question: I saw these two DNS servers recently in another
context (the 4.2.2.1 and 4.2.2.2 addresses). Are they some kind of basic,
public, always available DNS servers, generally used for tests like what I
needed to do?

Gerhard
 
G

Guest

Guest
Archived from groups: microsoft.public.win2000.dns (More info?)

> Just one more question: I saw these two DNS servers recently in
> another context (the 4.2.2.1 and 4.2.2.2 addresses). Are they some
> kind of basic, public, always available DNS servers, generally used
> for tests like what I needed to do?
>

Not, exactly.

They belong to a large network and have fairly easy to remember addresses.

Since they don't block requests from random addresses they work.

It is sort of rude to use such permanently without asking permission
however.
No one much minds for a bit or for testing however.

And if they really didn't want it to happen they could disable recursion or
disallow public addresses from making requests.

--
Herb Martin