wierd win2k3 dns issue

[Berto Perez]

I am having an issue with my dns server. I can resolve web address (I can nslookup to hp.com, cisco.com etc. web addresses) but when I try to get to some sites it errors out. Some sites I can't get to at all, others only part ways(got all hp.com, but no mx etc for cisco.com. When I nslookup and do a set type=any I get all hp.com but timeout error for cisco.com as an example and consequently emails don't go to them)

Any Ideas.

[Berto Perez]

by the way I am connected to Qwest and when I use there dns servers (to which my dns is pulling from) it all works ok?

[Daniel Leblanc]

When ever you get error from a web site you should test with you're internet company.

First test

Dan

[Berto Perez]

I tested with the qwest dns server (verified with them they were the right ones) and it does work on those servers just fine. My server has them set to get dns updates but my server still doesn't work?

[Daniel Leblanc]

Did try to find another DNS from different company?

Dan

[Berto Perez]

sorry, forgot to add that, I did check with 2 other dns host servers from diferent vendors (ns.fastq.com, our secondary domain name host and the host of one of my personal domains) from my desk using nslookup and setting server to those ns servers and it works. But not from my local dns server and not for just a handful of domains (rebooted machine and services several times but no luck)

Thanks for taking the time to help out

[Rune J. Winje]

1) Make sure your DNS server is authoritative for your own zone. Use DNSLint to check this.

http://support.microsoft.com/kb/321045

dnslint /d /s /v

2) Make sure your TCP/IP settings are using your own dns as primary and another as secondary dns.

3) Make sure your DNS server is set to forward queries that are not meant for it's own zone to external dns servers (your ISP's dns servers for example). This is configured on the Forwarders tab of your DNS server.

4) Make sure root hints are OK.

5) Use nslookup to troubleshoot what actually happens with your query.
Open a dos window and type the following commands:
ipconfig /flushdns
nslookup
set d2
www.hp.com (or any other official web address or internet server)

This will show you the sequence of queried DNS servers, the dns-suffixes attached to your query and if answers are authoritative etc.

Cheers,
Rune

[Berto Perez]

I used nslookup with set d2, It follws the path of my local domain name suffixes until it reachs the right one ( with no suffixes). For most sites (like www.hp.com) it then goes out to the qwest servers and gets a responce. For other sites (like cisco.com and login.positni.com ) it doesn't work and timesout at the last step. I tested this with a dmz server pointed directly at the qwest dns servers and it works just fine, so I feel it is definately an error with my dns server