RE: [ActiveDir] (OT) DNS settings

2004-05-11 Thread Rutherford, Robert
Title: Message



I take 
it that you also use DHCP in your internal networks, i.e. you don't assign
static IP'sto your internal NIC's? As a test could you just disable the 
internal NIC and try the dialup again?

Are 
all the machine exactly the same, i.e. same model with same 
NIC's?

Sorry 
if I seem to be shooting all over the place but we will home in 
eventually.

  
  -Original Message-From: Carlos Magalhaes 
  [mailto:[EMAIL PROTECTED] Sent: 11 May 2004 13:11To: 
  [EMAIL PROTECTED]Subject: RE: [ActiveDir] DNS settings 
  
  
  DHCP Enabled. . . . . 
  . . . . . . : Yes
  Autoconfiguration 
  Enabled . . . . : Yes
  IP Address. . . . . . 
  . . . . . . : 196.2.45.82
  Subnet Mask . . . . . 
  . . . . . . : ispSubnetMask
  Default Gateway . . . 
  . . . . . . : ispGateWay
  DHCP Server . . . . . 
  . . . . . . : ispDHCPServer
  DNS Servers . . . . . 
  . . . . . . : internal/localDNS
  
  
  
  
  
  From: 
  [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] 
  On Behalf Of Rutherford,
  RobertSent: Tuesday, May 11, 
  2004 12:05 PMTo: 
  [EMAIL PROTECTED]Subject: RE: [ActiveDir] DNS settings 
  
  
  
  For some reason I 
  thought you were using a VPN to connect I'm an idiot and should have read 
  the detail.
  
  
  
  Can you humour me and 
  justpost an IPCONFIG /ALL dump from a troubled client.. just type local 
  DNS in place of your internal IP range if 
  required.
  
  
  
  Thanks,
  
  
  
  Rob
  
-Original 
Message-From: Carlos 
Magalhaes [mailto:[EMAIL PROTECTED] Sent: 11 May 2004 10:03To: [EMAIL PROTECTED]Subject: RE: [ActiveDir] DNS settings 

Hey 
Robert,

Ok there is nothing 
wrong with the internal DNS at all, they can resolve everything they want 
when logged onto the network.

Their problem is 
when they go home and are off the network they use their own third party ISP 
accounts with the default windows dialer to create a 56k Dial up PPP
connection to a third party ISP. This is for their own email and internet 
usage. At this stage (when they dial up) they are not connected to us in any 
way what so ever.

What I am finding 
strange is that the ISP usually assigns them a valid IP, DNS and gateway 
from the ISPs DHCP server. The weird thing here is that they are assigned a 
valid IP and gateway but the DNS servers for that PPP connection is using 
our internal DNS server address. Which causes a nightmare when they try to 
resolve names while connected to the ISP. 

As you can see the 
ISP can not resolve names cause its trying to use the DNS settings of our 
internal network.

Thats what I dont 
get and I dont get why its doing this either L

Thanks for your 
time.





From: 
[EMAIL PROTECTED] 
[mailto:[EMAIL PROTECTED] On Behalf Of Rutherford, 
RobertSent: Tuesday, May 
11, 2004 10:53 AMTo: 
[EMAIL PROTECTED]Subject: RE: [ActiveDir] DNS settings 



Sorry I think I 
have lost track here somewhere... I probably didn't read your problem
correctly.



I would actually 
think that it is better for them to resolve to your internal DNS servers. I 
have seen loads of issues with people trying to get it to work the other way 
round. The only thing is that do your internal DNS servers forward out? If 
they did then you would probably be in an ok 
situation?



I'd still like to 
find out how your machines are getting their DNS entries though?? 
Strange.





-Original 
Message-From: Carlos 
Magalhaes [mailto:[EMAIL PROTECTED] Sent: 11 May 2004 09:14To: [EMAIL PROTECTED]Subject: RE: [ActiveDir] DNS settings 

We havent and 
  still dont use WINS , this network only uses DNS. 
  
  
  The problem I am 
  having is that the user logged onto our network can work fine DNS is
  working etc. The user dialed up to their own ISPs are being forced to our 
  internal DNS servers, they still get a valid IP addy from the ISP they 
  just are forced to use ours
  
  
  
  
  
  
  
  From: 
  [EMAIL PROTECTED] 
  [mailto:[EMAIL PROTECTED] On Behalf Of Rutherford, 
  RobertSent: Tuesday, May 
  11, 2004 9:56 AMTo: 
  [EMAIL PROTECTED]Subject: RE: [ActiveDir] DNS settings 
  
  
  
  It's either got 
  to be WINS or Hosts files while using the standard W2K VPN dial-up. I 
  don't think WINS is a bad solution to be honest unless you want to dig 
  into your pocket.
  
  
  
  If you use 
  a 3rd party, i.e. Checkpoint, then their technology allows for overlay of 
  your DNS setting post connection. I mentioned IPass earlier and they can 
  do a similar thing with their client, i.e. push on your internal DNS
  server post connection to 

RE: [ActiveDir] (OT) DNS settings

2004-05-11 Thread Carlos Magalhaes
Title: Message








Not a problem I might have overlooked something
and thank you for taking the time to help.




 Ok 
 Yes we use DHCP.
 No
 Static IP addies.
 Machines
 are all different models and NICs
 I
 could disable the internal NIC  why would that make a diff (just
 trying to understand the logic?)












From:
[EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Rutherford, Robert
Sent: Tuesday, May 11, 2004 2:21
PM
To: [EMAIL PROTECTED]
Subject: RE: [ActiveDir] (OT) DNS
settings 







I take it that you also use DHCP in your
internal networks, i.e. you don't assign static IP'sto your internal
NIC's? As a test could you just disable the internal NIC and try the dialup
again?











Are all the machine exactly the same, i.e.
same model with same NIC's?











Sorry if I seem to be shooting all over
the place but we will home in eventually.





-Original Message-
From: Carlos Magalhaes
[mailto:[EMAIL PROTECTED] 
Sent: 11 May 2004 13:11
To: [EMAIL PROTECTED]
Subject: RE: [ActiveDir] DNS
settings 

DHCP Enabled. . . . . . . . . . . : Yes

Autoconfiguration Enabled . . . . : Yes

IP Address. . . . . . . . . . . . :
196.2.45.82

Subnet Mask . . . . . . . . . . . :
ispSubnetMask

Default Gateway . . . . . . . . . :
ispGateWay

DHCP Server . . . . . . . . . . . :
ispDHCPServer

DNS Servers . . . . . . . . . . . : internal/localDNS











From:
[EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Rutherford, Robert
Sent: Tuesday, May 11, 2004 12:05
PM
To: [EMAIL PROTECTED]
Subject: RE: [ActiveDir] DNS
settings 







For some reason I thought you were using a
VPN to connect I'm an idiot and should have read the detail.











Can you humour me and justpost an
IPCONFIG /ALL dump from a troubled client.. just type local DNS in place of
your internal IP range if required.











Thanks,











Rob





-Original Message-
From: Carlos Magalhaes
[mailto:[EMAIL PROTECTED] 
Sent: 11 May 2004 10:03
To: [EMAIL PROTECTED]
Subject: RE: [ActiveDir] DNS
settings 

Hey Robert,



Ok there is nothing wrong with the
internal DNS at all, they can resolve everything they want when logged onto the
network.



Their problem is when they go home and are
off the network they use their own third party ISP accounts with the default
windows dialer to create a 56k Dial up PPP connection to a third party ISP.
This is for their own email and internet usage. At this stage (when they dial
up) they are not connected to us in any way what so ever.



What I am finding strange is that the ISP
usually assigns them a valid IP, DNS and gateway from the ISPs DHCP
server. The weird thing here is that they are assigned a valid IP and gateway
but the DNS servers for that PPP connection is using our internal DNS server
address. Which causes a nightmare when they try to resolve names while
connected to the ISP. 



As you can see the ISP can not resolve
names cause its trying to use the DNS settings of our internal network.



Thats what I dont get and I
dont get why its doing this either L



Thanks for your time.











From:
[EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Rutherford, Robert
Sent: Tuesday, May 11, 2004 10:53
AM
To: [EMAIL PROTECTED]
Subject: RE: [ActiveDir] DNS
settings 







Sorry I think I have lost track here
somewhere... I probably didn't read your problem correctly.











I would actually think that it is better
for them to resolve to your internal DNS servers. I have seen loads of issues
with people trying to get it to work the other way round. The only thing is
that do your internal DNS servers forward out? If they did then you would probably
be in an ok situation?











I'd still like to find out how your
machines are getting their DNS entries though?? Strange.

















-Original Message-
From: Carlos Magalhaes
[mailto:[EMAIL PROTECTED] 
Sent: 11 May 2004 09:14
To: [EMAIL PROTECTED]
Subject: RE: [ActiveDir] DNS
settings 





We havent and still dont use
WINS , this network only uses DNS. 



The problem I am having is that the user
logged onto our network can work fine DNS is working etc. The user dialed up to
their own ISPs are being forced to our internal DNS servers, they still
get a valid IP addy from the ISP they just are forced to use
ours















From:
[EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Rutherford, Robert
Sent: Tuesday, May 11, 2004 9:56
AM
To: [EMAIL PROTECTED]
Subject: RE: [ActiveDir] DNS
settings 







It's either got to be WINS or Hosts files
while using the standard W2K VPN dial-up. I don't think WINS is a bad solution
to be honest unless you want to dig into your pocket.











If you use a 3rd party, i.e.
Checkpoint, then their technology allows for overlay of your DNS setting post
connection. I mentioned IPass earlier and they can do a similar thing with
their client, i.e. push on your internal DNS server post connection to an IPass
ISP