DNS Queries fail
-
Monday, March 04, 2013 7:00 PM
I have an SBS 2003 server that’s unable to perform any DNS queries. I’m mentioning that it’s a SBS (DC) server, but it fails to query even when configuring the server to use a public (4.2.2.2) DNS server. Clients are actually able to use this server for DNS resolution, but at the same time, the server fails to query either itself or a pubic. Nslookup does work. I did a packet capture and did not even see DNS traffic coming from the server (when pinging yahoo.com), only from clients to the server. I am able to telnet to 53 from the server to any DNS server.
All Replies
-
Monday, March 04, 2013 7:50 PM
Domain Controllers should not be configured with public dns addresses. The public dns server should be used as forwarders. How ever for more details you may contact SBS forums as this forum is dedicated for Windows Sever General questions
http://social.technet.microsoft.com/Forums/en/category/sbsserver
http://www.arabitpro.com
-
Monday, March 04, 2013 8:13 PM
please check the firewall
please check and test the DNS server
i think you can test query from DNS server with NSLOOKUP
MCSE | MCITP [x2] | ISMS27001
-
Monday, March 04, 2013 8:19 PM
No offense, but this is really annoying. Do people actually read the question? Did i mention that i configured my DC with a public DNS? I said that that for "troubleshooting purposes" i used a public DNS (to rule out the local DNS server being the issue) and it still failed to query. Based on what im seeing, its leading me to believe that there is an issue with the DNS client on the server. Oddly enough, NSlookup does work.
Ok, i will repost in the SBS group (though im not sure why the SBS aspect has anything to do with it).
-
Monday, March 04, 2013 8:22 PM
Omid,
The firewall is disabled. As I mentioned in my first post, NSlookup works, but any other resolution (i.e. Ping Yahoo.com) does not.
-
Monday, March 04, 2013 9:51 PM
Any failures on the DNS system of this server? Any logged DNS failures in event logs?
You may need to temporary disable all security software in use on this server for troubleshooting.
Please make the server point to its private IP address as primary DNS server and 127.0.0.1 as secondary one. For public DNS resolution, I would recommend using your ISP public DNS server IP address instead of 4.2.2.2 for security reasons. This should be configured as a forwarder.
More details if you ask them in SBS forums.
This posting is provided "AS IS" with no warranties or guarantees , and confers no rights.
- Marked As Answer by Cheers ZHANGMicrosoft Contingent Staff, Moderator Tuesday, March 12, 2013 8:54 AM

