I did confirm that running this command: dnscmd /config /enableednsprobes 0
resolves the problem, and that running this command: dnscmd /config /enableednsprobes 1 reintroduces the problem. Amounts to a temporary fix until we address the root cause. I don't know if we want to leave EDNS functionality disabled forever. On Wed, Dec 15, 2010 at 11:09 AM, Trees, Ray <rtr...@key.net> wrote: > I think the jest of the KB article is that it is caused > by your firewall, I know that I am running a Cisco ASA and there are DNS > filters by default. I’m going to check those out now. > > > > *From:* VIPCS [mailto:vi...@stny.rr.com] > *Sent:* Wednesday, December 15, 2010 8:23 AM > > *To:* NT System Admin Issues > *Subject:* RE: 2K8R2 DNS anomaly > > > > Jeffrey just tried an nslookup query (results below) on two WS2K8 servers > (one is R2) on two different networks and both resolved (both are DCs with > DNS installed): > > > > Non-authoritative answer: > > Name: www.insead.edu > > Address: 213.182.38.52 > > > > Is it possible an upstream DNS forwarder is blocking access? > > > > Sincerely, > > > > Jeffrey and Mary Jane Harris > > VIPCS > > > ------------------------------ > > *From:* m b [mailto:midphan12...@gmail.com] > *Sent:* Wednesday, December 15, 2010 11:15 AM > *To:* NT System Admin Issues > *Subject:* 2K8R2 DNS anomaly > > > > Within our forest, all domain controllers are DNS servers. We've been > working to upgrade from 2K3 to 2K8. Most of those that are upgraded are > 2K8R2, while a few are just 2K8. > > > > I have heard some reports from users that they were unable to access > certain websites that they were able to access from home. Today's example > is www.insead.edu. > > > > When I do an nslookup against any of our 2K8R2 DNS servers, the lookup > fails to resolve. If I do that same lookup against any 2K3 or 2K8 DNS > server, it is successful. > > > > I'm not seeing any common event log errors/warnings among the 2K8R2 DNS > servers. My only hunch is root hints. Anyone experienced something > similar? > > ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ > ~ <http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/> ~ > > --- > To manage subscriptions click here: > http://lyris.sunbelt-software.com/read/my_forums/ > or send an email to listmana...@lyris.sunbeltsoftware.com > with the body: unsubscribe ntsysadmin > > ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ > ~ <http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/> ~ > > --- > To manage subscriptions click here: > http://lyris.sunbelt-software.com/read/my_forums/ > or send an email to listmana...@lyris.sunbeltsoftware.com > with the body: unsubscribe ntsysadmin > > ----------------------------------------- > > Key Technology, Inc. Disclaimer Notice - The information and attachment(s) > contained in this communication are intended for the addressee only, and may > be confidential and/or legally privileged. If you have received this > communication in error, please contact the sender immediately, and delete > this communication from any computer or network system. Any interception, > review, printing, copying, re-transmission, dissemination, or other use of, > or taking of any action upon this information by persons or entities other > than the intended recipient is strictly prohibited by law and may subject > them to criminal or civil liability. Key Technology, Inc. is not liable for > the improper and/or incomplete transmission of the information contained in > this communication or for any delay in its receipt. > > ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ > ~ <http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/> ~ > > --- > To manage subscriptions click here: > http://lyris.sunbelt-software.com/read/my_forums/ > or send an email to listmana...@lyris.sunbeltsoftware.com > with the body: unsubscribe ntsysadmin > ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ <http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/> ~ --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to listmana...@lyris.sunbeltsoftware.com with the body: unsubscribe ntsysadmin
