We do use forwarders on both servers. They are both currently set to 4.2.2.1 and 4.2.2.2, we have tried the local ISP provided DNS on both servers. We have no conditional forwaders enabled.
Greg Sweers CEO ACTS360.com<http://www.acts360.com/> P.O. Box 1193 Brandon, FL 33509 813-657-0849 Office 813-758-6850 Cell 813-341-1270 Fax From: Richard Stovall [mailto:rich...@gmail.com] Sent: Wednesday, November 30, 2011 3:27 PM To: NT System Admin Issues Subject: Re: 2008 R2 DNS strangeness Do you use forwarders? If so, are they the same for both servers? What about conditional forwarders? Are any setup? If so, are they the same for both servers? On Wed, Nov 30, 2011 at 3:08 PM, Greg Sweers <gswe...@acts360.com<mailto:gswe...@acts360.com>> wrote: No we have only a few clients on RR and none of them use it for anything but internet. All email is hosted. For the last 2 days since I have pointed them to another DC running DNS they have had no issues, but that DC is at another office. If I manually set one of them back to the suspect DNS they about every 15 to 20 mins hit a site or click an link inside of gmail, page cannot be displayed, hit F5 and bam the page comes up. I haven't been able to get on to run DNS queries at the same time, but I am going onsite to do some wifi stuff Friday so I will test then. Greg Sweers CEO ACTS360.com P.O. Box 1193 Brandon, FL 33509 813-657-0849<tel:813-657-0849> Office 813-758-6850<tel:813-758-6850> Cell 813-341-1270<tel:813-341-1270> Fax -----Original Message----- From: Benjamin Zachary [mailto:li...@levelfive.us<mailto:li...@levelfive.us>] Sent: Monday, November 28, 2011 9:30 PM To: NT System Admin Issues Subject: RE: 2008 R2 DNS strangeness Hey Greg, just curious are you seeing any issues with rr.com<http://rr.com/> up there? we have an office in Tampa and since last week are getting really weird connectivity coming out of roadrunner, and today we couldn't even email rr.com<http://rr.com/> from down here I was getting no route to host ... we have 3 connections with this client, a T1 from Paetec, a Cable from Comcast, and a 10mb fiber from Host.Net and all are having weird routing/locating issues with roadrunner ... I don't know if that might shed some light on your situation either.. -----Original Message----- From: Greg Sweers [mailto:gswe...@acts360.com<mailto:gswe...@acts360.com>] Sent: Monday, November 28, 2011 5:55 PM To: NT System Admin Issues Subject: RE: 2008 R2 DNS strangeness Thx Ben. I will get to test some more in the morning. I had to move them all to another DNS server in the office for some major projects today and they were flipping out. Tomorrow most of them are out so I will let you know. Thx Greg Sweers CEO ACTS360.com P.O. Box 1193 Brandon, FL 33509 813-657-0849<tel:813-657-0849> Office 813-758-6850<tel:813-758-6850> Cell 813-341-1270<tel:813-341-1270> Fax -----Original Message----- From: Ben Scott [mailto:mailvor...@gmail.com<mailto:mailvor...@gmail.com>] Sent: Monday, November 28, 2011 10:35 AM To: NT System Admin Issues Subject: Re: 2008 R2 DNS strangeness On Mon, Nov 28, 2011 at 9:51 AM, Greg Sweers <gswe...@acts360.com<mailto:gswe...@acts360.com>> wrote: > Sorry should have been more clear. The NSlookup is to the internal DC > server. When you try and query it comes up with service failure or > timeout. Right, but the question is, do you get different behaviors depending on what name you query. If my DC/DNS server is 192.0.2.10, and my AD domain is <example.net<http://example.net/>.>, I would compare: nslookup example.net<http://example.net/>. 192.0.2.10 with nslookup google.com<http://google.com/>. 192.0.2.10 I'd also check a site unlikely to be cached, such as: nslookup purple.com<http://purple.com/>. 192.0.2.10 I'd also run a query against an external resolver: nslookup google.com<http://google.com/>. 8.8.8.8 I'd also avoid NSLOOKUP and use DIG (you can get it from the ISC BIND distribution). NSLOOKUP is historically prone to giving bad diagnostics. I don't know if Microsoft has fixed their version, but DIG gives better information than NSLOOKUP even when both are working correctly. Example syntax: dig example.net<http://example.net/>. @192.0.2.10<http://192.0.2.10/> > When you try and query it comes up with service failure or timeout. Be aware that SERVFAIL is an actual DNS result code from a nameserver, while a timeout is NSLOOKUP getting tired of waiting for the nameserver to respond. -- Ben ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ <http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/> ~ --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to listmana...@lyris.sunbeltsoftware.com<mailto:listmana...@lyris.sunbeltsoftware.com> with the body: unsubscribe ntsysadmin ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ <http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/> ~ --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to listmana...@lyris.sunbeltsoftware.com<mailto:listmana...@lyris.sunbeltsoftware.com> with the body: unsubscribe ntsysadmin ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ <http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/> ~ --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to listmana...@lyris.sunbeltsoftware.com<mailto:listmana...@lyris.sunbeltsoftware.com> with the body: unsubscribe ntsysadmin ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ <http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/> ~ --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to listmana...@lyris.sunbeltsoftware.com<mailto:listmana...@lyris.sunbeltsoftware.com> with the body: unsubscribe ntsysadmin ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ <http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/> ~ --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to listmana...@lyris.sunbeltsoftware.com<mailto:listmana...@lyris.sunbeltsoftware.com> with the body: unsubscribe ntsysadmin ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ <http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/> ~ --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to listmana...@lyris.sunbeltsoftware.com with the body: unsubscribe ntsysadmin
