OSEC

Neohapsis is currently accepting applications for employment. For more information, please visit our website www.neohapsis.com or email hr@neohapsis.com
 
Subject: DNS issue in W2K
From: Florentin Albu (falbuAMNESTY.ORG)
Date: Mon Apr 10 2000 - 12:40:06 CDT

Hello!

I think there is a strange issue with the name resolver on W2K server

I configured the W2K server on a machine to be used as a proxy server. It
was supposed to use
3 DNS servers for name solving, 2 on the Internet and the last one on the
internal LAN (as a last resort).
As you know, you can configure the order in which the DNS servers are
accessed.

The DNS in the internal LAN is not having any real names, and is not
communicating with the Internet in any way (the LAN is behind the
firewall).
It is also installed on W2K server, and it is integrated with AD. The proxy
server is not configured as part of the AD.

I have noticed that the proxy W2K server was acting strange. After
restarting it, it would server few clients OK and after that it will stop
resolving names.
From the server console I have noticed that the nslookup was working OK,
the default DNS used being the first external one configured.
However, when I tried to use a web browser with or without the proxy
software, it will no longer resolve the names at all.

I have tried ipconfig /flushdns without changing the way the server acted.

The only way to make it work correctly was to remove the entry of the
internal DNS server from the list.
After that it worked OK.

Did anyone had similar experiences?

Thanks,

Florentin Albu

Client-Server Systems Manager
falbuamnesty.org
_________________________________________________________
                      Amnesty International, International Secretariat
                                visit us at http://www.amnesty.org

Be Realistic! Plan for a Miracle!

----------------------------------------------------------------------------
Delivery co-sponsored by VeriSign - The Internet Trust Company
============================================================================
Upgrade your server security to 128-bit SSL encryption!

Get VeriSign's FREE guide, "Securing Your Web Site
for Business." You will learn everything you need to
know about using 128-bit SSL to encrypt your e-commerce
transactions for serious online security. Click here!
http://www.verisign.com/cgi-bin/go.cgi?a=n046607800008000
----------------------------------------------------------------------------