DNS resolution problem

[Kathleen]

We changed the IP of our email server to an internal IP address in our network. We made the changes to our internal dns and all looks well. Only problem is, when we do an nslookup on the old outside address, the internal dns still finds a way to resolve it. I have looked in all the db files and I can't find anywhere that old IP is listed. What do I need to do to totally refresh the indns database...where could it be finding that old address. Any help would be greatly appreciated. We are using bind 9.2.0

[Bill McNAMARA_1]

post your resolv.conf file?

[Kathleen]

It shows our domain name and the ip of our internal dns

[Steven E. Protter]

This is dependent on two things:

1) The contents of the Master DNS record. Are they correct?

2) How the machines resolve. If they are unix, /etc/resolv.conf

My guess based on experience is that you've got machines pointing to some secondary DNS server that is not updated.

SEP

[Mark Greene_1]

You need to add a "forwarders" statement to you /etc/named.conf file to include the IP addresses (not the names!) of your ISP's DNS servers.

mark

[Paul Sperry]

try adding the address in you /etc/hosts file.

also make sure in the /etc/nsswitch.conf
you have the following entry:

hosts: files [NOTFOUND=continue] dns

[Kathleen]

The internal resolves fine.....it resolves to the outside address too....which is what we DON'T want to happen. So it shouldn't be in hosts, right? Which were you talking about adding to the hosts file?

[Mark Greene_1]

Kathleen,

Yes, take any external hosts you do not want to be resolved out of both the /etc/hosts file and out of your internal DNS tables. If you don't want any external hosts being resolved, then *remove* the forwarders line from the /etc/named.conf, if it exists.

mark

[Ron Kinner · Accepted solution]

nslookup
set debug
emailservername

(note results)

set norec
set nosearch
emailservername

set type=any
emailservername

The results should tell you where the old ip is coming from.

Ron

[Jason Martens]

Make sure you removed the old entry from the reverse lookup too.