subject:"Re\: DNS issue\?"

Yes, when the problem originally occurred yesterday, I had her reboot
the computer.  Worked fine until this morning.  Had her reboot again and
it worked.  Seems like there is something going on at night but what
could it be?

From: Webster [mailto:webs...@carlwebster.com] 
Sent: Friday, February 17, 2012 9:00 AM
To: NT System Admin Issues
Subject: RE: dns issue with browser (OS X)

Has he restarted the computer?

Carl Webster

Consultant and Citrix Technology Professional

http://www.CarlWebster.com http://www.carlwebster.com/ 

From: Jimmy Tran [jt...@teachtci.com]
Sent: Friday, February 17, 2012 10:52 AM
To: NT System Admin Issues
Subject: dns issue with browser (OS X)

Hi All,

I have one specific user using a Mac who cannot resolve DNS properly in
Firefox or Safari on OS X 10.6.8.  They can ping by hostnames just fine.
They can get to any website by IP just fine but not by hostname.  Any
ideas?  I'm stumped and Google hasn't been very helpful this morning.

~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/  ~

---
To manage subscriptions click here:
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin

~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/  ~

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin

Re: dns issue with browser (OS X)

2012-02-17 Thread Matthew W. Ross

Doublecheck the browser/OS proxy settings.


--Matt Ross
Ephrata School District


- Original Message -
From: Jimmy Tran
[mailto:jt...@teachtci.com]
To: NT System Admin Issues
[mailto:ntsysadmin@lyris.sunbelt-software.com]
Sent: Fri, 17 Feb 2012
08:52:56 -0800
Subject: dns issue with browser (OS X)


 Hi All,
 
  
 
 I have one specific user using a Mac who cannot resolve DNS properly in
 Firefox or Safari on OS X 10.6.8.  They can ping by hostnames just fine.
 They can get to any website by IP just fine but not by hostname.  Any
 ideas?  I'm stumped and Google hasn't been very helpful this morning.
 
  
 
 Thanks,
 
  
 
 Jimmy
 
  
 
 
 ~ Finally, powerful endpoint security that ISN'T a resource hog! ~
 ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/  ~
 
 ---
 To manage subscriptions click here:
 http://lyris.sunbelt-software.com/read/my_forums/
 or send an email to listmana...@lyris.sunbeltsoftware.com
 with the body: unsubscribe ntsysadmin

~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/  ~

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin

RE: dns issue with browser (OS X)

DHCP.  When it wasn't working, I changed to static info and still
nothing.  The reboot does fix it temporarily but it just seems to come
back in 24 hours.

From: Steve Ens [mailto:stevey...@gmail.com] 
Sent: Friday, February 17, 2012 9:04 AM
To: NT System Admin Issues
Subject: Re: dns issue with browser (OS X)

DHCP or static IP addressing?

On Fri, Feb 17, 2012 at 10:52 AM, Jimmy Tran jt...@teachtci.com wrote:

Hi All,

I have one specific user using a Mac who cannot resolve DNS properly in
Firefox or Safari on OS X 10.6.8.  They can ping by hostnames just fine.
They can get to any website by IP just fine but not by hostname.  Any
ideas?  I'm stumped and Google hasn't been very helpful this morning.

Thanks,

Jimmy

~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/  ~

---
To manage subscriptions click here:
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin

~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/  ~

---
To manage subscriptions click here:
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin

~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/  ~

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin

Re: dns issue with browser (OS X)

2012-02-17 Thread Steve Ens

Group policy?

On Fri, Feb 17, 2012 at 11:04 AM, Jimmy Tran jt...@teachtci.com wrote:

 Yes, when the problem originally occurred yesterday, I had her reboot the
 computer.  Worked fine until this morning.  Had her reboot again and it
 worked.  Seems like there is something going on at night but what could it
 be?

 ** **

 *From:* Webster [mailto:webs...@carlwebster.com]
 *Sent:* Friday, February 17, 2012 9:00 AM

 *To:* NT System Admin Issues
 *Subject:* RE: dns issue with browser (OS X)

 ** **

 Has he restarted the computer?

  

  

 Carl Webster

 Consultant and Citrix Technology Professional

 http://www.CarlWebster.com http://www.carlwebster.com/
 --

 *From:* Jimmy Tran [jt...@teachtci.com]
 *Sent:* Friday, February 17, 2012 10:52 AM
 *To:* NT System Admin Issues
 *Subject:* dns issue with browser (OS X)

 Hi All,

  

 I have one specific user using a Mac who cannot resolve DNS properly in
 Firefox or Safari on OS X 10.6.8.  They can ping by hostnames just fine.
 They can get to any website by IP just fine but not by hostname.  Any
 ideas?  I’m stumped and Google hasn’t been very helpful this morning.

 ~ Finally, powerful endpoint security that ISN'T a resource hog! ~

 ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/  ~

 ---
 To manage subscriptions click here:
 http://lyris.sunbelt-software.com/read/my_forums/
 or send an email to listmana...@lyris.sunbeltsoftware.com
 with the body: unsubscribe ntsysadmin

 ~ Finally, powerful endpoint security that ISN'T a resource hog! ~
 ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/  ~

 ---
 To manage subscriptions click here:
 http://lyris.sunbelt-software.com/read/my_forums/
 or send an email to listmana...@lyris.sunbeltsoftware.com
 with the body: unsubscribe ntsysadmin


~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/  ~

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin

RE: dns issue with browser (OS X)

No proxy settings in Firefox or Safari.

-Original Message-
From: Matthew W. Ross [mailto:mr...@ephrataschools.org] 
Sent: Friday, February 17, 2012 9:09 AM
To: NT System Admin Issues
Subject: Re: dns issue with browser (OS X)

Doublecheck the browser/OS proxy settings.

--Matt Ross
Ephrata School District

- Original Message -
From: Jimmy Tran
[mailto:jt...@teachtci.com]
To: NT System Admin Issues
[mailto:ntsysadmin@lyris.sunbelt-software.com]
Sent: Fri, 17 Feb 2012
08:52:56 -0800
Subject: dns issue with browser (OS X)

 Hi All,

 I have one specific user using a Mac who cannot resolve DNS properly
in
 Firefox or Safari on OS X 10.6.8.  They can ping by hostnames just
fine.
 They can get to any website by IP just fine but not by hostname.  Any
 ideas?  I'm stumped and Google hasn't been very helpful this morning.

 Thanks,

 Jimmy

 ~ Finally, powerful endpoint security that ISN'T a resource hog! ~
 ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/  ~

 ---
 To manage subscriptions click here:
 http://lyris.sunbelt-software.com/read/my_forums/
 or send an email to listmana...@lyris.sunbeltsoftware.com
 with the body: unsubscribe ntsysadmin

~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/  ~

---
To manage subscriptions click here:
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin

~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/  ~

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin

Re: dns issue with browser (OS X)

2012-02-17 Thread Steven Peck

Maybe it's just 'artistic sensibilities'.  Someone should just spend more
time with it.

On Fri, Feb 17, 2012 at 9:04 AM, Jimmy Tran jt...@teachtci.com wrote:

 Yes, when the problem originally occurred yesterday, I had her reboot the
 computer.  Worked fine until this morning.  Had her reboot again and it
 worked.  Seems like there is something going on at night but what could it
 be?

 ** **

 *From:* Webster [mailto:webs...@carlwebster.com]
 *Sent:* Friday, February 17, 2012 9:00 AM

 *To:* NT System Admin Issues
 *Subject:* RE: dns issue with browser (OS X)

 ** **

 Has he restarted the computer?

  

  

 Carl Webster

 Consultant and Citrix Technology Professional

 http://www.CarlWebster.com http://www.carlwebster.com/
 --

 *From:* Jimmy Tran [jt...@teachtci.com]
 *Sent:* Friday, February 17, 2012 10:52 AM
 *To:* NT System Admin Issues
 *Subject:* dns issue with browser (OS X)

 Hi All,

  

 I have one specific user using a Mac who cannot resolve DNS properly in
 Firefox or Safari on OS X 10.6.8.  They can ping by hostnames just fine.
 They can get to any website by IP just fine but not by hostname.  Any
 ideas?  I’m stumped and Google hasn’t been very helpful this morning.

 ~ Finally, powerful endpoint security that ISN'T a resource hog! ~

 ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/  ~

 ---
 To manage subscriptions click here:
 http://lyris.sunbelt-software.com/read/my_forums/
 or send an email to listmana...@lyris.sunbeltsoftware.com
 with the body: unsubscribe ntsysadmin

 ~ Finally, powerful endpoint security that ISN'T a resource hog! ~
 ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/  ~

 ---
 To manage subscriptions click here:
 http://lyris.sunbelt-software.com/read/my_forums/
 or send an email to listmana...@lyris.sunbeltsoftware.com
 with the body: unsubscribe ntsysadmin


~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/  ~

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin

Re: dns issue with browser (OS X)

2012-02-17 Thread Richard Stovall

Can you resolve any external hosts from a terminal window using nslookup?
When you said that you could ping by hostname, were you pinging internal
hosts with the same DNS suffix?  (I think Macs call this search domain or
something similar.)

On Fri, Feb 17, 2012 at 12:17 PM, Jimmy Tran jt...@teachtci.com wrote:

  DHCP.  When it wasn’t working, I changed to static info and still
 nothing.  The reboot does fix it temporarily but it just seems to come back
 in 24 hours.

 ** **

 *From:* Steve Ens [mailto:stevey...@gmail.com]
 *Sent:* Friday, February 17, 2012 9:04 AM

 *To:* NT System Admin Issues
 *Subject:* Re: dns issue with browser (OS X)

  ** **

 DHCP or static IP addressing?

 On Fri, Feb 17, 2012 at 10:52 AM, Jimmy Tran jt...@teachtci.com wrote:**
 **

 Hi All,

  

 I have one specific user using a Mac who cannot resolve DNS properly in
 Firefox or Safari on OS X 10.6.8.  They can ping by hostnames just fine.
 They can get to any website by IP just fine but not by hostname.  Any
 ideas?  I’m stumped and Google hasn’t been very helpful this morning.

  

 Thanks,

  

 Jimmy

  

 ~ Finally, powerful endpoint security that ISN'T a resource hog! ~
 ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/  ~

 ---
 To manage subscriptions click here:
 http://lyris.sunbelt-software.com/read/my_forums/
 or send an email to listmana...@lyris.sunbeltsoftware.com
 with the body: unsubscribe ntsysadmin

 ** **

 ~ Finally, powerful endpoint security that ISN'T a resource hog! ~
 ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/  ~

 ---
 To manage subscriptions click here:
 http://lyris.sunbelt-software.com/read/my_forums/
 or send an email to listmana...@lyris.sunbeltsoftware.com
 with the body: unsubscribe ntsysadmin

 ~ Finally, powerful endpoint security that ISN'T a resource hog! ~
 ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/  ~

 ---
 To manage subscriptions click here:
 http://lyris.sunbelt-software.com/read/my_forums/
 or send an email to listmana...@lyris.sunbeltsoftware.com
 with the body: unsubscribe ntsysadmin


~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/  ~

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin

RE: dns issue with browser (OS X)

2012-02-17 Thread Maglinger, Paul

Is there a way to flush the DNS cache on a Mac?

-Original Message-
From: Jimmy Tran [mailto:jt...@teachtci.com] 
Sent: Friday, February 17, 2012 11:30 AM
To: NT System Admin Issues
Subject: RE: dns issue with browser (OS X)

No proxy settings in Firefox or Safari.

-Original Message-
From: Matthew W. Ross [mailto:mr...@ephrataschools.org] 
Sent: Friday, February 17, 2012 9:09 AM
To: NT System Admin Issues
Subject: Re: dns issue with browser (OS X)

Doublecheck the browser/OS proxy settings.

--Matt Ross
Ephrata School District

- Original Message -
From: Jimmy Tran
[mailto:jt...@teachtci.com]
To: NT System Admin Issues
[mailto:ntsysadmin@lyris.sunbelt-software.com]
Sent: Fri, 17 Feb 2012
08:52:56 -0800
Subject: dns issue with browser (OS X)

 Hi All,

 I have one specific user using a Mac who cannot resolve DNS properly
in
 Firefox or Safari on OS X 10.6.8.  They can ping by hostnames just
fine.
 They can get to any website by IP just fine but not by hostname.  Any
 ideas?  I'm stumped and Google hasn't been very helpful this morning.

 Thanks,

 Jimmy

 ~ Finally, powerful endpoint security that ISN'T a resource hog! ~
 ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/  ~

 ---
 To manage subscriptions click here:
 http://lyris.sunbelt-software.com/read/my_forums/
 or send an email to listmana...@lyris.sunbeltsoftware.com
 with the body: unsubscribe ntsysadmin

~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/  ~

---
To manage subscriptions click here:
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin

~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/  ~

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin

~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/  ~

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin

RE: dns issue with browser (OS X)

I was pinging external hosts, not internal.  Google resolved fine from terminal 
but cannot resolve in the browser.  This has been temporarily fixed by 
rebooting the machine but I’m sure it will happen again on Tuesday.

From: Richard Stovall [mailto:rich...@gmail.com] 
Sent: Friday, February 17, 2012 9:44 AM
To: NT System Admin Issues
Subject: Re: dns issue with browser (OS X)

Can you resolve any external hosts from a terminal window using nslookup?  When 
you said that you could ping by hostname, were you pinging internal hosts with 
the same DNS suffix?  (I think Macs call this search domain or something 
similar.)

On Fri, Feb 17, 2012 at 12:17 PM, Jimmy Tran jt...@teachtci.com wrote:

DHCP.  When it wasn’t working, I changed to static info and still nothing.  The 
reboot does fix it temporarily but it just seems to come back in 24 hours.

From: Steve Ens [mailto:stevey...@gmail.com] 
Sent: Friday, February 17, 2012 9:04 AM 

To: NT System Admin Issues

Subject: Re: dns issue with browser (OS X) 

DHCP or static IP addressing?

On Fri, Feb 17, 2012 at 10:52 AM, Jimmy Tran jt...@teachtci.com wrote:

Hi All,

I have one specific user using a Mac who cannot resolve DNS properly in Firefox 
or Safari on OS X 10.6.8.  They can ping by hostnames just fine.  They can get 
to any website by IP just fine but not by hostname.  Any ideas?  I’m stumped 
and Google hasn’t been very helpful this morning.

Thanks,

Jimmy

~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/  ~

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin

~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/  ~

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin

~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/  ~

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin

~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/  ~

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin

~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/  ~

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin

RE: dns issue with browser (OS X)

Yes, instinctively I tried that but it didn't work (dscacheutil
-flushcache).  Since external hostnames were resolving with terminal,
DNS cache wasn't the issue in this case.

-Original Message-
From: Maglinger, Paul [mailto:pmaglin...@scvl.com] 
Sent: Friday, February 17, 2012 10:02 AM
To: NT System Admin Issues
Subject: RE: dns issue with browser (OS X)

Is there a way to flush the DNS cache on a Mac?

-Original Message-
From: Jimmy Tran [mailto:jt...@teachtci.com] 
Sent: Friday, February 17, 2012 11:30 AM
To: NT System Admin Issues
Subject: RE: dns issue with browser (OS X)

No proxy settings in Firefox or Safari.

-Original Message-
From: Matthew W. Ross [mailto:mr...@ephrataschools.org] 
Sent: Friday, February 17, 2012 9:09 AM
To: NT System Admin Issues
Subject: Re: dns issue with browser (OS X)

Doublecheck the browser/OS proxy settings.

--Matt Ross
Ephrata School District

- Original Message -
From: Jimmy Tran
[mailto:jt...@teachtci.com]
To: NT System Admin Issues
[mailto:ntsysadmin@lyris.sunbelt-software.com]
Sent: Fri, 17 Feb 2012
08:52:56 -0800
Subject: dns issue with browser (OS X)

 Hi All,

 I have one specific user using a Mac who cannot resolve DNS properly
in
 Firefox or Safari on OS X 10.6.8.  They can ping by hostnames just
fine.
 They can get to any website by IP just fine but not by hostname.  Any
 ideas?  I'm stumped and Google hasn't been very helpful this morning.

 Thanks,

 Jimmy

 ~ Finally, powerful endpoint security that ISN'T a resource hog! ~
 ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/  ~

 ---
 To manage subscriptions click here:
 http://lyris.sunbelt-software.com/read/my_forums/
 or send an email to listmana...@lyris.sunbeltsoftware.com
 with the body: unsubscribe ntsysadmin

~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/  ~

---
To manage subscriptions click here:
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin

~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/  ~

---
To manage subscriptions click here:
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin

~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/  ~

---
To manage subscriptions click here:
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin

~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/  ~

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin

RE: dns issue with browser (OS X)

2012-02-17 Thread Richard McClary

Check cache settings in the browsers

From: Jimmy Tran [mailto:jt...@teachtci.com]
Sent: Friday, February 17, 2012 12:10 PM
To: NT System Admin Issues
Subject: RE: dns issue with browser (OS X)

I was pinging external hosts, not internal.  Google resolved fine from terminal 
but cannot resolve in the browser.  This has been temporarily fixed by 
rebooting the machine but I’m sure it will happen again on Tuesday.

From: Richard Stovall [mailto:rich...@gmail.com]
Sent: Friday, February 17, 2012 9:44 AM
To: NT System Admin Issues
Subject: Re: dns issue with browser (OS X)

Can you resolve any external hosts from a terminal window using nslookup?  When 
you said that you could ping by hostname, were you pinging internal hosts with 
the same DNS suffix?  (I think Macs call this search domain or something 
similar.)
On Fri, Feb 17, 2012 at 12:17 PM, Jimmy Tran 
jt...@teachtci.commailto:jt...@teachtci.com wrote:
DHCP.  When it wasn’t working, I changed to static info and still nothing.  The 
reboot does fix it temporarily but it just seems to come back in 24 hours.

From: Steve Ens [mailto:stevey...@gmail.commailto:stevey...@gmail.com]
Sent: Friday, February 17, 2012 9:04 AM

To: NT System Admin Issues
Subject: Re: dns issue with browser (OS X)

DHCP or static IP addressing?
On Fri, Feb 17, 2012 at 10:52 AM, Jimmy Tran 
jt...@teachtci.commailto:jt...@teachtci.com wrote:
Hi All,

I have one specific user using a Mac who cannot resolve DNS properly in Firefox 
or Safari on OS X 10.6.8.  They can ping by hostnames just fine.  They can get 
to any website by IP just fine but not by hostname.  Any ideas?  I’m stumped 
and Google hasn’t been very helpful this morning.

Thanks,

Jimmy

~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/  ~

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to 
listmana...@lyris.sunbeltsoftware.commailto:listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin

~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/  ~

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to 
listmana...@lyris.sunbeltsoftware.commailto:listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin

~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/  ~

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to 
listmana...@lyris.sunbeltsoftware.commailto:listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin

~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/  ~

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to 
listmana...@lyris.sunbeltsoftware.commailto:listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin

~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/  ~

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to 
listmana...@lyris.sunbeltsoftware.commailto:listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin

The information contained in this e-mail, and any attachments hereto, is from 
The American Society for the Prevention of Cruelty to Animals® (ASPCA®) and is 
intended only for use by the addressee(s) named herein and may contain legally 
privileged and/or confidential information. If you are not the intended 
recipient of this e-mail, you are hereby notified that any dissemination, 
distribution, copying or use of the contents of this e-mail, and any 
attachments hereto, is strictly prohibited. If you have received this e-mail in 
error, please immediately notify me by reply email and permanently delete the 
original and any copy of this e-mail and any printout thereof.
~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/  ~

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin

Re: dns issue with browser (OS X)

2012-02-17 Thread Don Kuhlman

Is there any VPN stuff going on by chance that overwrites some DNS or other 
settings which the reboot clears until the VPN client is started again?

 From: Richard Stovall rich...@gmail.com
To: NT System Admin Issues ntsysadmin@lyris.sunbelt-software.com 
Sent: Friday, February 17, 2012 11:43 AM
Subject: Re: dns issue with browser (OS X)

Can you resolve any external hosts from a terminal window using nslookup?  When 
you said that you could ping by hostname, were you pinging internal hosts with 
the same DNS suffix?  (I think Macs call this search domain or something 
similar.)

On Fri, Feb 17, 2012 at 12:17 PM, Jimmy Tran jt...@teachtci.com wrote:

DHCP.  When it wasn’t working, I changed to static info and still nothing.  The 
reboot does fix it temporarily but it just seems to come back in 24 hours.

From:Steve Ens [mailto:stevey...@gmail.com] 
Sent: Friday, February 17, 2012 9:04 AM 

To: NT System Admin Issues
Subject: Re: dns issue with browser (OS X) 

DHCP or static IP addressing?
On Fri, Feb 17, 2012 at 10:52 AM, Jimmy Tran jt...@teachtci.com wrote:
Hi All,

I have one specific user using a Mac who cannot resolve DNS properly in 
Firefox or Safari on OS X 10.6.8.  They can ping by hostnames just fine.  They 
can get to any website by IP just fine but not by hostname.  Any ideas?  I’m 
stumped and Google hasn’t been very helpful this morning.

Thanks,

Jimmy

~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/  ~

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin

~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/  ~

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin
~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/  ~

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin

~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/  ~

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin
~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/  ~

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin

RE: DNS Issue

2011-03-15 Thread Kim Longenbaugh

Given that you have name resolution, and that you can ping the webserver on the 
172.16.x.x subnet from the 172.17.x.x subnet, I don't believe this is a DNS 
issue at all.
Also, since pings (and likely trace routes) are successful, routing is 
correctly set up.
That leads to the conclusion that it's a rule base or permission issue for the 
VPN.  Your rule set may allow pings but not http, for example.  Check the VPN 
and/or firewall rules.

From: Bob Hartung [mailto:bhart...@wiscoind.com]
Sent: Tuesday, March 15, 2011 10:19 AM
To: NT System Admin Issues
Subject: DNS Issue

I have two locations connected via VPN. The main location LAN is 172.16.x.x and 
the remote location is 172.17.x.x.

I'd like users on the 172.17.x.x end to access a webserver on the 172.16.x.x 
end but it doesn't work and I'm not sure why.

The users at the 172.17.x.x end have their Win2003 server as their DNS server. 
I can ping both the webserver's name and IP address from the 172.17.x.x PCs 
without problem. The webserver's name resolves to the IP address.

All our servers and users are members of a single domain, just on different 
subnets.

What am I missing?

--

Bob Hartung
Wisco Industries, Inc.
736 Janesville St.
Oregon, WI 53575
Tel: (608) 835-3106 x215
Fax: (608) 835-7399
e-mail: bhartung(at)wiscoind.com

~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/  ~

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to 
listmana...@lyris.sunbeltsoftware.commailto:listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin

~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/  ~

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin

Re: DNS Issue

2011-03-15 Thread Ben Scott

On Tue, Mar 15, 2011 at 11:18 AM, Bob Hartung bhart...@wiscoind.com wrote:
 I'd like users on the 172.17.x.x end to access a webserver on the 172.16.x.x
 end but it doesn't work and I'm not sure why.

  Explain doesn't work.  Error message, timeout, what?  What are you
entering as the URL -- name or IP address?  If only one, try the
other.  Have you tried a non-MSIE browser (MSIE tends to give the same
error message for everything)?

  On a client, open a command prompt, and do

TELNET WebServerName 80

If you get a connection, type:

GET /

and hit ENTER twice (blank line).  If name resolution fails, try by IP
address, see if that makes a difference.

 I can ping both the webserver's name and IP address from the
 172.17.x.x PCs without problem.

  What about NSLOOKUP?

-- Ben

~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/  ~

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin

Re: DNS Issue

2011-03-15 Thread Andrew S. Baker

What does doesn't work mean?

What errors?


*ASB *(Find me online via About.Me http://about.me/Andrew.S.Baker/bio)
 *Exploiting Technology for Business Advantage...

 *



On Tue, Mar 15, 2011 at 11:18 AM, Bob Hartung bhart...@wiscoind.com wrote:

  I have two locations connected via VPN. The main location LAN is
 172.16.x.x and the remote location is 172.17.x.x.

 I'd like users on the 172.17.x.x end to access a webserver on the
 172.16.x.x end but it doesn't work and I'm not sure why.

 The users at the 172.17.x.x end have their Win2003 server as their DNS
 server. I can ping both the webserver's name and IP address from the
 172.17.x.x PCs without problem. The webserver's name resolves to the IP
 address.

 All our servers and users are members of a single domain, just on different
 subnets.

 What am I missing?

 --

 Bob Hartung
 Wisco Industries, Inc.
 736 Janesville St.
 Oregon, WI 53575
 Tel: (608) 835-3106 x215
 Fax: (608) 835-7399
 e-mail: bhartung(at)wiscoind.com




~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/  ~

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin

Re: DNS Issue

2011-03-15 Thread Bob Hartung

I've tried entering both the name and IP address of the webserver and get 
connection fail in Internet Explorer. In FireFox, the error is Unable to 
determine IP address from host name.

Telnet gets a connect failed.

--

Bob Hartung
Wisco Industries, Inc.
736 Janesville St.
Oregon, WI 53575
Tel: (608) 835-3106 x215
Fax: (608) 835-7399
e-mail: bhartung(at)wiscoind.com
  _  

From: Ben Scott [mailto:mailvor...@gmail.com]
To: NT System Admin Issues [mailto:ntsysadmin@lyris.sunbelt-software.com]
Sent: Tue, 15 Mar 2011 10:35:12 -0500
Subject: Re: DNS Issue

On Tue, Mar 15, 2011 at 11:18 AM, Bob Hartung bhart...@wiscoind.com wrote:
   I'd like users on the 172.17.x.x end to access a webserver on the 172.16.x.x
   end but it doesn't work and I'm not sure why.
  
Explain doesn't work.  Error message, timeout, what?  What are you
  entering as the URL -- name or IP address?  If only one, try the
  other.  Have you tried a non-MSIE browser (MSIE tends to give the same
  error message for everything)?
  
On a client, open a command prompt, and do
  
   TELNET WebServerName 80
  
  If you get a connection, type:
  
   GET /
  
  and hit ENTER twice (blank line).  If name resolution fails, try by IP
  address, see if that makes a difference.
  
   I can ping both the webserver's name and IP address from the
   172.17.x.x PCs without problem.
  
What about NSLOOKUP?
  
  -- Ben
  
  ~ Finally, powerful endpoint security that ISN'T a resource hog! ~
  ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/  ~
  
  ---
  To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
  or send an email to listmana...@lyris.sunbeltsoftware.com
  with the body: unsubscribe ntsysadmin

~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/  ~

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin

Re: DNS Issue

2011-03-15 Thread Ben Scott

On Tue, Mar 15, 2011 at 11:52 AM, Bob Hartung bhart...@wiscoind.com wrote:
 I've tried entering both the name and IP address of the webserver and get
 connection fail in Internet Explorer. In FireFox, the error is Unable to
 determine IP address from host name.

  The Firefox error indicates a problem with name resolution.  What if
you try by IP address in Firefox?

 Telnet gets a connect failed.

  By IP address, hostname, or both?

  And:

 I can ping both the webserver's name and IP address from the
 172.17.x.x PCs without problem.

 What about NSLOOKUP?

-- Ben

~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/  ~

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin

Re: DNS Issue

2011-03-15 Thread Jonathan Link

I'd be sure to verify what ports are being allowed through your VPN.  What
is your VPN?


On Tue, Mar 15, 2011 at 11:52 AM, Bob Hartung bhart...@wiscoind.com wrote:

  I've tried entering both the name and IP address of the webserver and get
 connection fail in Internet Explorer. In FireFox, the error is Unable to
 determine IP address from host name.

 Telnet gets a connect failed.

 --

 Bob Hartung
 Wisco Industries, Inc.
 736 Janesville St.
 Oregon, WI 53575
 Tel: (608) 835-3106 x215
 Fax: (608) 835-7399
 e-mail: bhartung(at)wiscoind.com

 --
 *From:* Ben Scott [mailto:mailvor...@gmail.com]

 *To:* NT System Admin Issues [mailto:ntsysadmin@lyris.sunbelt-software.com
 ]
 *Sent:* Tue, 15 Mar 2011 10:35:12 -0500
 *Subject:* Re: DNS Issue


 On Tue, Mar 15, 2011 at 11:18 AM, Bob Hartung bhart...@wiscoind.com
 wrote:
  I'd like users on the 172.17.x.x end to access a webserver on the
 172.16.x.x
  end but it doesn't work and I'm not sure why.

 Explain doesn't work. Error message, timeout, what? What are you
 entering as the URL -- name or IP address? If only one, try the
 other. Have you tried a non-MSIE browser (MSIE tends to give the same
 error message for everything)?

 On a client, open a command prompt, and do

 TELNET WebServerName 80

 If you get a connection, type:

 GET /

 and hit ENTER twice (blank line). If name resolution fails, try by IP
 address, see if that makes a difference.

  I can ping both the webserver's name and IP address from the
  172.17.x.x PCs without problem.

 What about NSLOOKUP?

 -- Ben


 ~ Finally, powerful endpoint security that ISN'T a resource hog! ~
 ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~

 ---
 To manage subscriptions click here:
 http://lyris.sunbelt-software.com/read/my_forums/
 or send an email to listmana...@lyris.sunbeltsoftware.com
 with the body: unsubscribe ntsysadmin

  ~ Finally, powerful endpoint security that ISN'T a resource hog! ~
 ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/  ~

 ---
 To manage subscriptions click here:
 http://lyris.sunbelt-software.com/read/my_forums/
 or send an email to listmana...@lyris.sunbeltsoftware.com
 with the body: unsubscribe ntsysadmin


~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/  ~

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin

Re: DNS Issue

2011-03-15 Thread Bob Hartung

Telnet fails with both name and ip address.

NSLOOKUP resolves the name correctly.

FireFox gets The requested URL could not be retrieved when the ip address is 
entered.

--

Bob Hartung
Wisco Industries, Inc.
736 Janesville St.
Oregon, WI 53575
Tel: (608) 835-3106 x215
Fax: (608) 835-7399
e-mail: bhartung(at)wiscoind.com
  _  

From: Ben Scott [mailto:mailvor...@gmail.com]
To: NT System Admin Issues [mailto:ntsysadmin@lyris.sunbelt-software.com]
Sent: Tue, 15 Mar 2011 10:56:02 -0500
Subject: Re: DNS Issue

On Tue, Mar 15, 2011 at 11:52 AM, Bob Hartung bhart...@wiscoind.com wrote:
   I've tried entering both the name and IP address of the webserver and get
   connection fail in Internet Explorer. In FireFox, the error is Unable to
   determine IP address from host name.
  
The Firefox error indicates a problem with name resolution.  What if
  you try by IP address in Firefox?
  
   Telnet gets a connect failed.
  
By IP address, hostname, or both?
  
And:
  
   I can ping both the webserver's name and IP address from the
   172.17.x.x PCs without problem.
  
   What about NSLOOKUP?
  
  -- Ben
  
  ~ Finally, powerful endpoint security that ISN'T a resource hog! ~
  ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/  ~
  
  ---
  To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
  or send an email to listmana...@lyris.sunbeltsoftware.com
  with the body: unsubscribe ntsysadmin

~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/  ~

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin

Re: DNS Issue

2011-03-15 Thread Andrew S. Baker

Then the problem is likely an access list issue between the two subnets, not
a name resolution issue.


*ASB *(Find me online via About.Me http://about.me/Andrew.S.Baker/bio)
 *Exploiting Technology for Business Advantage...

 *



On Tue, Mar 15, 2011 at 12:02 PM, Bob Hartung bhart...@wiscoind.com wrote:

  Telnet fails with both name and ip address.

 NSLOOKUP resolves the name correctly.

 FireFox gets The requested URL could not be retrieved when the ip address
 is entered.

 --

 Bob Hartung
 Wisco Industries, Inc.
 736 Janesville St.
 Oregon, WI 53575
 Tel: (608) 835-3106 x215
 Fax: (608) 835-7399
 e-mail: bhartung(at)wiscoind.com

 --
 *From:* Ben Scott [mailto:mailvor...@gmail.com]
 *To:* NT System Admin Issues [mailto:ntsysadmin@lyris.sunbelt-software.com
 ]
 *Sent:* Tue, 15 Mar 2011 10:56:02 -0500
 *Subject:* Re: DNS Issue

 On Tue, Mar 15, 2011 at 11:52 AM, Bob Hartung bhart...@wiscoind.com
 wrote:
  I've tried entering both the name and IP address of the webserver and get
  connection fail in Internet Explorer. In FireFox, the error is Unable to
  determine IP address from host name.

 The Firefox error indicates a problem with name resolution. What if
 you try by IP address in Firefox?

  Telnet gets a connect failed.

 By IP address, hostname, or both?

 And:

  I can ping both the webserver's name and IP address from the
  172.17.x.x PCs without problem.
 
  What about NSLOOKUP?

 -- Ben



~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/  ~

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin

Re: DNS Issue

2011-03-15 Thread Richard Stovall

IP address restrictions on the site itself?  Firewall rules?

On Tue, Mar 15, 2011 at 12:02 PM, Bob Hartung bhart...@wiscoind.com wrote:

  Telnet fails with both name and ip address.

 NSLOOKUP resolves the name correctly.

 FireFox gets The requested URL could not be retrieved when the ip address
 is entered.

 --

 Bob Hartung
 Wisco Industries, Inc.
 736 Janesville St.
 Oregon, WI 53575
 Tel: (608) 835-3106 x215
 Fax: (608) 835-7399
 e-mail: bhartung(at)wiscoind.com

  --
 *From:* Ben Scott [mailto:mailvor...@gmail.com]
 *To:* NT System Admin Issues [mailto:ntsysadmin@lyris.sunbelt-software.com
 ]
 *Sent:* Tue, 15 Mar 2011 10:56:02 -0500
 *Subject:* Re: DNS Issue

 On Tue, Mar 15, 2011 at 11:52 AM, Bob Hartung bhart...@wiscoind.com
 wrote:
  I've tried entering both the name and IP address of the webserver and get
  connection fail in Internet Explorer. In FireFox, the error is Unable to
  determine IP address from host name.

 The Firefox error indicates a problem with name resolution. What if
 you try by IP address in Firefox?

  Telnet gets a connect failed.

 By IP address, hostname, or both?

 And:

  I can ping both the webserver's name and IP address from the
  172.17.x.x PCs without problem.
 
  What about NSLOOKUP?

 -- Ben

 ~ Finally, powerful endpoint security that ISN'T a resource hog! ~
 ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~

 ---
 To manage subscriptions click here:
 http://lyris.sunbelt-software.com/read/my_forums/
 or send an email to listmana...@lyris.sunbeltsoftware.com
 with the body: unsubscribe ntsysadmin

  ~ Finally, powerful endpoint security that ISN'T a resource hog! ~
 ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/  ~

 ---
 To manage subscriptions click here:
 http://lyris.sunbelt-software.com/read/my_forums/
 or send an email to listmana...@lyris.sunbeltsoftware.com
 with the body: unsubscribe ntsysadmin


~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/  ~

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin

RE: DNS Issue

2011-03-15 Thread Kim Longenbaugh

Like Jonathan and I've been saying, check your VPN rules.

You've already stated that name resolution works, per this comment:
 I can ping both the webserver's name and IP address from the
 172.17.x.x PCs without problem.

From: Bob Hartung [mailto:bhart...@wiscoind.com]
Sent: Tuesday, March 15, 2011 11:03 AM
To: NT System Admin Issues
Subject: Re: DNS Issue

Telnet fails with both name and ip address.

NSLOOKUP resolves the name correctly.

FireFox gets The requested URL could not be retrieved when the ip address is 
entered.

--

Bob Hartung
Wisco Industries, Inc.
736 Janesville St.
Oregon, WI 53575
Tel: (608) 835-3106 x215
Fax: (608) 835-7399
e-mail: bhartung(at)wiscoind.com

From: Ben Scott [mailto:mailvor...@gmail.com]
To: NT System Admin Issues [mailto:ntsysadmin@lyris.sunbelt-software.com]
Sent: Tue, 15 Mar 2011 10:56:02 -0500
Subject: Re: DNS Issue

On Tue, Mar 15, 2011 at 11:52 AM, Bob Hartung 
bhart...@wiscoind.commailto:bhart...@wiscoind.com wrote:
 I've tried entering both the name and IP address of the webserver and get
 connection fail in Internet Explorer. In FireFox, the error is Unable to
 determine IP address from host name.

The Firefox error indicates a problem with name resolution. What if
you try by IP address in Firefox?

 Telnet gets a connect failed.

By IP address, hostname, or both?

And:

 I can ping both the webserver's name and IP address from the
 172.17.x.x PCs without problem.

 What about NSLOOKUP?

-- Ben

~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to 
listmana...@lyris.sunbeltsoftware.commailto:listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin

~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/  ~

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to 
listmana...@lyris.sunbeltsoftware.commailto:listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin

~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/  ~

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin

Re: DNS Issue

2011-03-15 Thread Bob Hartung

We use a couple of Instagates (eSoft) for VPN.

Looking at the VPN rules, they indicate All services are allowed.

I suspect the issue is related to rules as well. I've got a call into eSoft 
tech support.

I'll update when I find out more.

Thanks.

--

Bob Hartung
Wisco Industries, Inc.
736 Janesville St.
Oregon, WI 53575
Tel: (608) 835-3106 x215
Fax: (608) 835-7399
e-mail: bhartung(at)wiscoind.com
  _  

From: Jonathan Link [mailto:jonathan.l...@gmail.com]
To: NT System Admin Issues [mailto:ntsysadmin@lyris.sunbelt-software.com]
Sent: Tue, 15 Mar 2011 10:59:56 -0500
Subject: Re: DNS Issue


I'd be sure to verify what ports are being allowed through your VPN.  What is 
your VPN?  
 

  
On Tue, Mar 15, 2011 at 11:52 AM, Bob Hartung bhart...@wiscoind.com wrote:

  
I've tried entering both the name and IP address of the webserver and get 
connection fail in Internet Explorer. In FireFox, the error is Unable to 
determine IP address from host name.
  
Telnet gets a connect failed.

  
--

Bob Hartung
Wisco Industries, Inc.
736 Janesville St.
Oregon, WI 53575
Tel: (608) 835-3106 x215
  Fax: (608) 835-7399
e-mail: bhartung(at)wiscoind.com
_  

  From: Ben Scott [mailto:mailvor...@gmail.com]   

To: NT System Admin Issues [mailto:ntsysadmin@lyris.sunbelt-software.com]
Sent: Tue, 15 Mar 2011 10:35:12 -0500
  Subject: Re: DNS Issue   


On Tue, Mar 15, 2011 at 11:18 AM, Bob Hartung bhart...@wiscoind.com wrote:
  
 I'd like users on the 172.17.x.x end to access a webserver on the 172.16.x.x
 end but it doesn't work and I'm not sure why.

  
Explain doesn't work. Error message, timeout, what? What are you
entering as the URL -- name or IP address? If only one, try the
other. Have you tried a non-MSIE browser (MSIE tends to give the same
  error message for everything)?

On a client, open a command prompt, and do

TELNET WebServerName 80

If you get a connection, type:

GET /

and hit ENTER twice (blank line). If name resolution fails, try by IP
  address, see if that makes a difference.

  
 I can ping both the webserver's name and IP address from the
 172.17.x.x PCs without problem.

What about NSLOOKUP?

-- Ben   


~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~
  
---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
  with the body: unsubscribe ntsysadmin
  
  

~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/  ~
  
---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
  with the body: unsubscribe ntsysadmin


~ Finally, powerful endpoint security that ISN'T a resource hog! ~
  ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/  ~
  
  ---
  To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
  or send an email to listmana...@lyris.sunbeltsoftware.com
  with the body: unsubscribe ntsysadmin  
~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/  ~

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin

Re: DNS Issue - Forward IP's not matching Reverse

2010-10-18 Thread Andrew S. Baker

What info are you getting back for the reverse zones?

Can you provide examples (appropriately sanitized, of course)?


*ASB *(My XeeSM Profile) http://XeeSM.com/AndrewBaker
*Exploiting Technology for Business Advantage...*
* *



2010/10/18 Wilhelm, Scott swilh...@mcs.k12.ny.us

 Hello Everyone:



 I noticed an issue with our DNS the other day where the IP address for our
 workstations in the HOST (A) records in the forward lookup zones are not
 matching in the reverse lookup zones.  The reverse zone contains accurate
 IP’s for each machine.



 We have AD setup on a Windows 2008 R2 server with DHCP also AD-integrated.



 Has anyone else seen something like this, or have any ideas on how to
 correct it?  Would it have something to do with scavenging the records, or
 something with DHCP not set right?



 TIA!

 Scott







 ---

 Scott Wilhelm

 Computer Technician

 Massena Central School District

 St. Lawrence-Lewis BOCES

 (315) 764-3700 ext. 3046



 *“The harder I work, the luckier I get. “*  -Samuel Goldwyn

 * *

 *‎**Individual commitment to a group effort - that is what makes a team
 work, a company work, a society work, a civilization work. -*Vince
 Lombardi






~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/  ~

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin

Re: DNS issue

2009-09-25 Thread andy

With the current DNS poisoning, trojans, and other malicious activity 
ISP's are only allowing certain DNS servers to resolve.  Check with 
Comcast and make sure that you have the right Comcast DNS server for your area.


At 04:38 PM 9/24/2009, you wrote:
Good morning folks,

Recently, at a new customer who just upgraded from dial-up to cable, 
they havn't been able to use the cable connection - it just didn't 
work. Apparently Comcast wasn't able to help them, so I got the 
call. Anyway, what I found was that ipconfig/all showed that it had 
an appropriate IP address, SNM, DG and DNS servers listed. IE or 
FireFox couldn't find any sites on the web. From the workstation I 
could ping the DNS servers and any other site I knew the address of 
but could not ping anything by name. Suggesting that DNS wasn't working.

So, I installed their new firewall/router and after a call to 
Comcast to get them to reset the cable modem, (the router refused to 
accept the connection from the modem) the router started working. As 
this modem also has the voice channel in it, when they reset the 
modem we lost our phone call with them. Anyway the modem and the 
router were functional after that. My laptop worked fine and could 
surf without problems. Their PC however was like before, even after 
reboots and ipconfig/all showing the DHCP configuration from the 
router that worked with my laptop.

My conclusion is that something is wrong with the IP installation. 
It was here that the owner mentioned the possibility of virus 
infection as their Kaspersky subscription has expired. I thought 
about trying to unload and reload the IP stack, but then realized 
that I have never done that to an XP box, just done it with a 
rebuild. And with an unknown virus condition that is still my 
preferred option. They are going to move all data files to an 
external hard drive, plus they found all the OEM disks so a rebuild 
is likely in the near future

Bottom line: At this point, I believe there is something wrong with 
the IP stack on the PC. But I am curious as to where to go to just 
refresh the IP stack, never having done just that. In my XP pro sp3 
desk machine here, the option to uninstall IP from within the 
Network applet in Control Panel is greyed out.

Any thoughts would be appreciated, before I nuke the client machine 
to start over. Although that is probably my best option considering 
the unknown virus condition; especially since they could not tell my 
why they think it is possible to have a virus (or whatever). It's so 
cluttered that it runs slow enough to justify a refresh on that point alone.


Len Hammond
CSI:Hartland
mailto:lenhamm...@gmail.comlenhamm...@gmail.com








Andy-Ofalt---863-3449--405-Ag-Admin-Bldg--for more 
information go  to http://ict.cas.psu.edu/Contacts.html  -- 
My little blurb to eat up bandwidth and make your mail box even larger
+++
  The real problem is that IP, a connectionless protocol, was never 
developed to be the universal protocol. ATM was developed to serve 
that purpose and failed.
+++

~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/  ~

Re: DNS issue

2009-09-25 Thread Stephan Barr

Is this an AD environment or peer to peer?
You didn't mention local DNS servers so I'm assuming it's peer to peer.
Anyway, what I found was that ipconfig/all showed that it had an
appropriate IP address, SNM, DG and DNS servers listed  Comcast DNS servers
listed as DNS pri/sec on the LAN clients?  Really?  Why not a local DNS
server on the LAN for resolution?

Cheers.

On Thu, Sep 24, 2009 at 3:38 PM, Len Hammond lenhammo...@gmail.com wrote:

  Good morning folks,

 Recently, at a new customer who just upgraded from dial-up to cable, they
 havn't been able to use the cable connection - it just didn't work.
 Apparently Comcast wasn't able to help them, so I got the call. Anyway, what
 I found was that ipconfig/all showed that it had an appropriate IP address,
 SNM, DG and DNS servers listed. IE or FireFox couldn't find any sites on the
 web. From the workstation I could ping the DNS servers and any other site I
 knew the address of but could not ping anything by name. Suggesting that DNS
 wasn't working.

 So, I installed their new firewall/router and after a call to Comcast to
 get them to reset the cable modem, (the router refused to accept the
 connection from the modem) the router started working. As this modem also
 has the voice channel in it, when they reset the modem we lost our phone
 call with them. Anyway the modem and the router were functional after that.
 My laptop worked fine and could surf without problems. Their PC however was
 like before, even after reboots and ipconfig/all showing the DHCP
 configuration from the router that worked with my laptop.

 My conclusion is that something is wrong with the IP installation. It was
 here that the owner mentioned the possibility of virus infection as their
 Kaspersky subscription has expired. I thought about trying to unload and
 reload the IP stack, but then realized that I have never done that to an XP
 box, just done it with a rebuild. And with an unknown virus condition that
 is still my preferred option. They are going to move all data files to an
 external hard drive, plus they found all the OEM disks so a rebuild is
 likely in the near future

 Bottom line: At this point, I believe there is something wrong with the IP
 stack on the PC. But I am curious as to where to go to just refresh the IP
 stack, never having done just that. In my XP pro sp3 desk machine here, the
 option to uninstall IP from within the Network applet in Control Panel is
 greyed out.

 Any thoughts would be appreciated, before I nuke the client machine to
 start over. Although that is probably my best option considering the unknown
 virus condition; especially since they could not tell my why they think it
 is possible to have a virus (or whatever). It's so cluttered that it runs
 slow enough to justify a refresh on that point alone.


 Len Hammond
 CSI:Hartland
 lenhamm...@gmail.com







~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/  ~

Re: DNS issue

2009-09-25 Thread Len Hammond

Thanks!  I'll try all these before I rebuild it.  Probably get around to
that task middle of next week. It's a residential box and they are moving
their data and picture files to another drive in preparation for the
rebuild. I'd kinda like to see if I can fix it before I decide to rebuild.
They sort of thought that maybe a virus (or some kind of malware) got into
the box and that was what precipitated the first call to me. If I can buy
them enough time to wait for Windows 7 release on Oct 22, that might be a
good thing, too.
I'll keep you posted on the progress - may take a week or so as this is not
one of my 'high priority' projects.

The funny part is that it DOES ping things, both inside and outside of the
LAN by address. But not outside by name. It does ping both of the Comcast
DNS servers listed by address so I know it an get there - just no name
resolution. My laptop on the same LAN resolves just fine even using the same
ports and wires that fail on their desk machine. So it definitely is in
their box where the problem is.

Oh, well! I'll either fix it or wipe  reinstall and fix it.  my motto: It
ain't over 'til I win!!

Len Hammond
CSI:Hartland
lenhamm...@gmail.com


On Thu, Sep 24, 2009 at 4:47 PM, Don Kuhlman drkuhl...@yahoo.com wrote:

 This is a long shot, but is there a chance that the IE settings went into
 Work Offline under tools\ when the computer couldn't connect to anything,
 and now that you have a valid ip config, maybe it's only IE having issues -
 that is as long as the only thing that isn't working is IE and surfing. If
 you can't ping the default gateway (router) or the cable modem, then
 something may be wrong with the Nic's settings too.

 Don K

  --
 *From:* Len Hammond lenhammo...@gmail.com
 *To:* NT System Admin Issues ntsysadmin@lyris.sunbelt-software.com
 *Sent:* Thursday, September 24, 2009 3:38:27 PM
 *Subject:* DNS issue

  Good morning folks,

 Recently, at a new customer who just upgraded from dial-up to cable, they
 havn't been able to use the cable connection - it just didn't work.
 Apparently Comcast wasn't able to help them, so I got the call. Anyway, what
 I found was that ipconfig/all showed that it had an appropriate IP address,
 SNM, DG and DNS servers listed. IE or FireFox couldn't find any sites on the
 web. From the workstation I could ping the DNS servers and any other site I
 knew the address of but could not ping anything by name. Suggesting that DNS
 wasn't working.

 So, I installed their new firewall/router and after a call to Comcast to
 get them to reset the cable modem, (the router refused to accept the
 connection from the modem) the router started working. As this modem also
 has the voice channel in it, when they reset the modem we lost our phone
 call with them. Anyway the modem and the router were functional after that.
 My laptop worked fine and could surf without problems. Their PC however was
 like before, even after reboots and ipconfig/all showing the DHCP
 configuration from the router that worked with my laptop.

 My conclusion is that something is wrong with the IP installation. It was
 here that the owner mentioned the possibility of virus infection as their
 Kaspersky subscription has expired. I thought about trying to unload and
 reload the IP stack, but then realized that I have never done that to an XP
 box, just done it with a rebuild. And with an unknown virus condition that
 is still my preferred option. They are going to move all data files to an
 external hard drive, plus they found all the OEM disks so a rebuild is
 likely in the near future

 Bottom line: At this point, I believe there is something wrong with the IP
 stack on the PC. But I am curious as to where to go to just refresh the IP
 stack, never having done just that. In my XP pro sp3 desk machine here, the
 option to uninstall IP from within the Network applet in Control Panel is
 greyed out.

 Any thoughts would be appreciated, before I nuke the client machine to
 start over. Although that is probably my best option considering the unknown
 virus condition; especially since they could not tell my why they think it
 is possible to have a virus (or whatever). It's so cluttered that it runs
 slow enough to justify a refresh on that point alone.


 Len Hammond
 CSI:Hartland
 lenhamm...@gmail.com












~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/  ~

Re: DNS issue

2009-09-25 Thread Len Hammond

Quote: Comcast DNS servers listed as DNS pri/sec on the LAN clients?
Really?  Why not a local DNS server on the LAN for resolution?
This is a residential PC. There is only the single box on the cable modem
and before I got there, there wasn't a firewall/router in the system. That
was why the machine had a direct connection to the cable modem and
subsequently received it's IP etc straight from the cable modem. Now, with a
router in place, it will use the router as the local DNS and gets passed out
to the Comcast DNS servers after that.

As for wondering if the DNS servers listed in ipcnfig/all are correct, I
believe they are; as they are the same DNS servers my residential Comcast
cable modem gets as well as at least two other clients in the area gets from
Comcast. None of the other clients are experiencing this issue, so that
leads me back to the specific box being corrupted in some way. Stilla prime
candidate for a wipe  rebuild. Probably later next week I'll get around to
doing it.

Len Hammond
CSI:Hartland
lenhamm...@gmail.com


On Fri, Sep 25, 2009 at 11:02 AM, Stephan Barr
stephanbarr.li...@gmail.comwrote:

 Is this an AD environment or peer to peer?
 You didn't mention local DNS servers so I'm assuming it's peer to peer.
 Anyway, what I found was that ipconfig/all showed that it had an
 appropriate IP address, SNM, DG and DNS servers listed  Comcast DNS servers
 listed as DNS pri/sec on the LAN clients?  Really?  Why not a local DNS
 server on the LAN for resolution?

 Cheers.

 On Thu, Sep 24, 2009 at 3:38 PM, Len Hammond lenhammo...@gmail.comwrote:

  Good morning folks,

 Recently, at a new customer who just upgraded from dial-up to cable, they
 havn't been able to use the cable connection - it just didn't work.
 Apparently Comcast wasn't able to help them, so I got the call. Anyway, what
 I found was that ipconfig/all showed that it had an appropriate IP address,
 SNM, DG and DNS servers listed. IE or FireFox couldn't find any sites on the
 web. From the workstation I could ping the DNS servers and any other site I
 knew the address of but could not ping anything by name. Suggesting that DNS
 wasn't working.

 So, I installed their new firewall/router and after a call to Comcast to
 get them to reset the cable modem, (the router refused to accept the
 connection from the modem) the router started working. As this modem also
 has the voice channel in it, when they reset the modem we lost our phone
 call with them. Anyway the modem and the router were functional after that.
 My laptop worked fine and could surf without problems. Their PC however was
 like before, even after reboots and ipconfig/all showing the DHCP
 configuration from the router that worked with my laptop.

 My conclusion is that something is wrong with the IP installation. It was
 here that the owner mentioned the possibility of virus infection as their
 Kaspersky subscription has expired. I thought about trying to unload and
 reload the IP stack, but then realized that I have never done that to an XP
 box, just done it with a rebuild. And with an unknown virus condition that
 is still my preferred option. They are going to move all data files to an
 external hard drive, plus they found all the OEM disks so a rebuild is
 likely in the near future

 Bottom line: At this point, I believe there is something wrong with the IP
 stack on the PC. But I am curious as to where to go to just refresh the IP
 stack, never having done just that. In my XP pro sp3 desk machine here, the
 option to uninstall IP from within the Network applet in Control Panel is
 greyed out.

 Any thoughts would be appreciated, before I nuke the client machine to
 start over. Although that is probably my best option considering the unknown
 virus condition; especially since they could not tell my why they think it
 is possible to have a virus (or whatever). It's so cluttered that it runs
 slow enough to justify a refresh on that point alone.


 Len Hammond
 CSI:Hartland
 lenhamm...@gmail.com












~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/  ~

Re: DNS issue

2009-09-24 Thread Don Kuhlman

This is a long shot, but is there a chance that the IE settings went into Work 
Offline under tools\ when the computer couldn't connect to anything, and now 
that you have a valid ip config, maybe it's only IE having issues - that is as 
long as the only thing that isn't working is IE and surfing. If you can't ping 
the default gateway (router) or the cable modem, then something may be wrong 
with the Nic's settings too.

Don K





From: Len Hammond lenhammo...@gmail.com
To: NT System Admin Issues ntsysadmin@lyris.sunbelt-software.com
Sent: Thursday, September 24, 2009 3:38:27 PM
Subject: DNS issue


Good morning folks,

Recently, at a new customer who just upgraded from dial-up to cable, they 
havn't been able to use the cable connection - it just didn't work. Apparently 
Comcast wasn't able to help them, so I got the call. Anyway, what I found was 
that ipconfig/all showed that it had an appropriate IP address, SNM, DG and DNS 
servers listed. IE or FireFox couldn't find any sites on the web. From the 
workstation I could ping the DNS servers and any other site I knew the address 
of but could not ping anything by name. Suggesting that DNS wasn't working. 

So, I installed their new firewall/router and after a call to Comcast to get 
them to reset the cable modem, (the router refused to accept the connection 
from the modem) the router started working. As this modem also has the voice 
channel in it, when they reset the modem we lost our phone call with them. 
Anyway the modem and the router were functional after that. My laptop worked 
fine and could surf without problems. Their PC however was like before, even 
after reboots and ipconfig/all showing the DHCP configuration from the router 
that worked with my laptop.  

My conclusion is that something is wrong with the IP installation. It was here 
that the owner mentioned the possibility of virus infection as their Kaspersky 
subscription has expired. I thought about trying to unload and reload the IP 
stack, but then realized that I have never done that to an XP box, just done it 
with a rebuild. And with an unknown virus condition that is still my preferred 
option. They are going to move all data files to an external hard drive, plus 
they found all the OEM disks so a rebuild is likely in the near future

Bottom line: At this point, I believe there is something wrong with the IP 
stack on the PC. But I am curious as to where to go to just refresh the IP 
stack, never having done just that. In my XP pro sp3 desk machine here, the 
option to uninstall IP from within the Network applet in Control Panel is 
greyed out.

Any thoughts would be appreciated, before I nuke the client machine to start 
over. Although that is probably my best option considering the unknown virus 
condition; especially since they could not tell my why they think it is 
possible to have a virus (or whatever). It's so cluttered that it runs slow 
enough to justify a refresh on that point alone.

Len Hammond
CSI:Hartland
lenhamm...@gmail.com


  
~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/  ~

RE: DNS issue

2009-09-24 Thread Jay Dale

Do a google search for Winsock XP Fix.  Use that tool and see if it
helps at all.  I've used it in similar scenarios, typically when a virus
or malware has damaged network settings, and it seems to help.

 

Jay

 

From: Len Hammond [mailto:lenhammo...@gmail.com] 
Sent: Thursday, September 24, 2009 3:38 PM
To: NT System Admin Issues
Subject: DNS issue

 

Good morning folks,

 

Recently, at a new customer who just upgraded from dial-up to cable,
they havn't been able to use the cable connection - it just didn't work.
Apparently Comcast wasn't able to help them, so I got the call. Anyway,
what I found was that ipconfig/all showed that it had an appropriate IP
address, SNM, DG and DNS servers listed. IE or FireFox couldn't find any
sites on the web. From the workstation I could ping the DNS servers and
any other site I knew the address of but could not ping anything by
name. Suggesting that DNS wasn't working. 

 

So, I installed their new firewall/router and after a call to Comcast to
get them to reset the cable modem, (the router refused to accept the
connection from the modem) the router started working. As this modem
also has the voice channel in it, when they reset the modem we lost our
phone call with them. Anyway the modem and the router were functional
after that. My laptop worked fine and could surf without problems. Their
PC however was like before, even after reboots and ipconfig/all showing
the DHCP configuration from the router that worked with my laptop.  

 

My conclusion is that something is wrong with the IP installation. It
was here that the owner mentioned the possibility of virus infection as
their Kaspersky subscription has expired. I thought about trying to
unload and reload the IP stack, but then realized that I have never done
that to an XP box, just done it with a rebuild. And with an unknown
virus condition that is still my preferred option. They are going to
move all data files to an external hard drive, plus they found all the
OEM disks so a rebuild is likely in the near future

 

Bottom line: At this point, I believe there is something wrong with the
IP stack on the PC. But I am curious as to where to go to just refresh
the IP stack, never having done just that. In my XP pro sp3 desk machine
here, the option to uninstall IP from within the Network applet in
Control Panel is greyed out.

 

Any thoughts would be appreciated, before I nuke the client machine to
start over. Although that is probably my best option considering the
unknown virus condition; especially since they could not tell my why
they think it is possible to have a virus (or whatever). It's so
cluttered that it runs slow enough to justify a refresh on that point
alone.

 


Len Hammond
CSI:Hartland
lenhamm...@gmail.com

 

 

~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/  ~

RE: DNS issue

2009-09-24 Thread Free, Bob

netsh ip reset has proved most helpful for me in the past. 

 

How to reset Internet Protocol (TCP/IP)
http://support.microsoft.com/kb/299357
http://support.microsoft.com/kb/299357  

How to reset Internet Protocol (TCP/IP) in Windows Server 2003
http://support.microsoft.com/kb/317518
http://support.microsoft.com/kb/317518  

 

 

Also the winsock can get sideways  causing networking problems and netsh
winsock reset can work wonders. If you are about to reinstall anyway
either of them couldn't really hurt. 

 

How to determine and to recover from Winsock2 corruption in Windows
Server 2003, in Windows XP, and in Windows Vista
http://support.microsoft.com/kb/811259

 

From: Len Hammond [mailto:lenhammo...@gmail.com] 
Sent: Thursday, September 24, 2009 1:38 PM
To: NT System Admin Issues
Subject: DNS issue

 

Good morning folks,

 

Recently, at a new customer who just upgraded from dial-up to cable,
they havn't been able to use the cable connection - it just didn't work.
Apparently Comcast wasn't able to help them, so I got the call. Anyway,
what I found was that ipconfig/all showed that it had an appropriate IP
address, SNM, DG and DNS servers listed. IE or FireFox couldn't find any
sites on the web. From the workstation I could ping the DNS servers and
any other site I knew the address of but could not ping anything by
name. Suggesting that DNS wasn't working. 

 

So, I installed their new firewall/router and after a call to Comcast to
get them to reset the cable modem, (the router refused to accept the
connection from the modem) the router started working. As this modem
also has the voice channel in it, when they reset the modem we lost our
phone call with them. Anyway the modem and the router were functional
after that. My laptop worked fine and could surf without problems. Their
PC however was like before, even after reboots and ipconfig/all showing
the DHCP configuration from the router that worked with my laptop.  

 

My conclusion is that something is wrong with the IP installation. It
was here that the owner mentioned the possibility of virus infection as
their Kaspersky subscription has expired. I thought about trying to
unload and reload the IP stack, but then realized that I have never done
that to an XP box, just done it with a rebuild. And with an unknown
virus condition that is still my preferred option. They are going to
move all data files to an external hard drive, plus they found all the
OEM disks so a rebuild is likely in the near future

 

Bottom line: At this point, I believe there is something wrong with the
IP stack on the PC. But I am curious as to where to go to just refresh
the IP stack, never having done just that. In my XP pro sp3 desk machine
here, the option to uninstall IP from within the Network applet in
Control Panel is greyed out.

 

Any thoughts would be appreciated, before I nuke the client machine to
start over. Although that is probably my best option considering the
unknown virus condition; especially since they could not tell my why
they think it is possible to have a virus (or whatever). It's so
cluttered that it runs slow enough to justify a refresh on that point
alone.

 


Len Hammond
CSI:Hartland
lenhamm...@gmail.com

 

 

~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/  ~

Re: DNS issue

2009-09-24 Thread Ben Scott

On Thu, Sep 24, 2009 at 4:38 PM, Len Hammond lenhammo...@gmail.com wrote:
 My conclusion is that something is wrong with the IP installation.

  Obviously.  :)

 But I am curious as to where to go to just refresh the IP
 stack, never having done just that.

  I am of the belief that once Windows gets screwed up like this there
is no way to fix it.  The registry is huge and complicated, there are
hundreds upon hundreds of files in system32, and documentation on how
it all ties together varies from incomplete to non-existent.  There's
no authoritative way to say the system is intact.  So there really
isn't a way to fix things once they're broken.  You have to blow
everything away and reinstall it all.  This is probabbly my number one
complaint about Windows: You can't fix it when it breaks.

  That said:

NETSH INTERFACE IP RESET c:\ipreset.log
NETSH WINSOCK RESET

will reset stuff in the IP stack.  (What stuff?  Nobody knows,
exactly.  Mysterious, Microsoft voodoo stuff.  But it often works (for
sufficiently loose definitions of works).)

 In my XP pro sp3 desk machine here, the option to uninstall IP
 from within the Network applet in Control Panel is greyed out.

  With Win XP and later, Microsoft decided one shouldn't be able to
uninstall the IP stack.  Too bad, so sad.

 Any thoughts would be appreciated, before I nuke the client machine to start
 over.

  That's the recommended action for good reason.

 Although that is probably my best option considering the unknown virus
 condition ...

  Indeed.  For *any* OS, once you suspect the system is compromised,
the *only* safe course of action is to wipe and reload from trusted
media.  (Unless you have detailed IDS signatures from before the
compromise, but if you had that you wouldn't be asking these
questions. :)  )

-- Ben

~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/  ~

RE: DNS issue

2009-09-24 Thread Phillip Partipilo

With XP you can't uninstall TCP/IP, however you can reset the XP TCP/IP
stack with the following command:
 
netsh int ip reset c:\logfile.txt
 
 
 
Phillip Partipilo
Parametric Solutions Inc.
Jupiter, Florida
(561) 747-6107
 
 
 

  _  

From: Len Hammond [mailto:lenhammo...@gmail.com] 
Sent: Thursday, September 24, 2009 4:38 PM
To: NT System Admin Issues
Subject: DNS issue


Good morning folks,

Recently, at a new customer who just upgraded from dial-up to cable, they
havn't been able to use the cable connection - it just didn't work.
Apparently Comcast wasn't able to help them, so I got the call. Anyway, what
I found was that ipconfig/all showed that it had an appropriate IP address,
SNM, DG and DNS servers listed. IE or FireFox couldn't find any sites on the
web. From the workstation I could ping the DNS servers and any other site I
knew the address of but could not ping anything by name. Suggesting that DNS
wasn't working. 

So, I installed their new firewall/router and after a call to Comcast to get
them to reset the cable modem, (the router refused to accept the connection
from the modem) the router started working. As this modem also has the voice
channel in it, when they reset the modem we lost our phone call with them.
Anyway the modem and the router were functional after that. My laptop worked
fine and could surf without problems. Their PC however was like before, even
after reboots and ipconfig/all showing the DHCP configuration from the
router that worked with my laptop.  

My conclusion is that something is wrong with the IP installation. It was
here that the owner mentioned the possibility of virus infection as their
Kaspersky subscription has expired. I thought about trying to unload and
reload the IP stack, but then realized that I have never done that to an XP
box, just done it with a rebuild. And with an unknown virus condition that
is still my preferred option. They are going to move all data files to an
external hard drive, plus they found all the OEM disks so a rebuild is
likely in the near future

Bottom line: At this point, I believe there is something wrong with the IP
stack on the PC. But I am curious as to where to go to just refresh the IP
stack, never having done just that. In my XP pro sp3 desk machine here, the
option to uninstall IP from within the Network applet in Control Panel is
greyed out.

Any thoughts would be appreciated, before I nuke the client machine to start
over. Although that is probably my best option considering the unknown virus
condition; especially since they could not tell my why they think it is
possible to have a virus (or whatever). It's so cluttered that it runs slow
enough to justify a refresh on that point alone.


Len Hammond
CSI:Hartland
lenhamm...@gmail.com


 


 


  _  

If this email is spam, report it here:
http://www.OnlyMyEmail.com/ReportSpam
http://www.onlymyemail.com/view/?action=reportSpamId=ODEzNjQ6OTY5MTY2MTY4O
nBqcEBwc25ldC5jb20%3D  


THIS ELECTRONIC MESSAGE AND ANY ATTACHMENTS ARE CONFIDENTIAL
AND PROPRIETARY PROPERTY OF THE SENDER. THE INFORMATION IS 
INTENDED FOR USE BY THE ADDRESSEE ONLY. ANY OTHER INTERCEPTION,
COPYING, ACCESSING, OR DISCLOSURE OF THIS MESSAGE IS PROHIBITED.
IF YOU HAVE RECEIVED THIS MESSAGE IN ERROR, PLEASE IMMEDIATELY
NOTIFY THE SENDER AND DELETE THIS MAIL AND ALL ATTACHMENTS. DO NOT
FORWARD THIS MESSAGE WITHOUT PERMISSION OF THE SENDER. 

~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/  ~

RE: DNS issue

I'll take a look at that. Thanks. We've recommended logging but the client
is still balking at the costs to log/analyze. But they'll pay us to
break/fix it daily. LOL...

***
Charlie Kaiser
charl...@golden-eagle.org
Kingman, AZ
***  

 -Original Message-
 From: Richard Stovall [mailto:richard.stov...@researchdata.com] 
 Sent: Wednesday, April 29, 2009 5:24 PM
 To: NT System Admin Issues
 Subject: RE: DNS issue
 
 It's been a good while, but I've fixed certain lookup 
 problems in the past by disabling edns on 2k3 DNS servers 
 behind older pixes.
 
 dnscmd /config /enableednsprobes 0
 
 Just a thought.
 
 Have you enabled detailed packet logging on your DNS servers 
 to look into exactly what replies you're getting?
 
 Good luck with it.


~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/  ~

RE: DNS issue

The domains in question do have MX records, but the DNS lookup failures end
up giving us A records only, and then exchange tries to deliver to the A
record address, which accepts mail for a different domain.

We've offered logging; we need them to approve the costs first... No bind in
this org.

Someone sent me a note about a known issue with the Watchguards. I'm going
to look at that today...

***
Charlie Kaiser
charl...@golden-eagle.org
Kingman, AZ
***  

 -Original Message-
 From: Ben Scott [mailto:mailvor...@gmail.com] 
 Sent: Wednesday, April 29, 2009 7:34 PM
 To: NT System Admin Issues
 Subject: Re: DNS issue
 
   If a domain name has no MX records, but does have A 
 records, then SMTP MTAs are supposed to treat the domain as 
 if it had specified the hosts at those A records as the mail 
 exchangers.  This is per the relevant RFC.
 
   Does it happen for all domains, or just some?
 
   As someone else said, query logging would be good.  Another 
 thing to try is a packet sniffer.  (Sometimes that's even 
 better, because you might see stuff that the person 
 programming an application's logging routines didn't think 
 was relevant.)
 
   In the NT 4.0 days, I sometimes fixed deficiencies in the 
 NT 4.0 DNS server by having it forward all DNS queries to a 
 local ISC BIND named resolver which then did the 
 Internet-facing stuff.  The MS DNS server was much improved 
 in Win 2000, but it's a thought if you get desperate.
 
  What I'm trying to find out is this: Is there a way to prevent 
  server-side caching of negative replies to remote DNS queries?
 
   The normal control for this is the minimum TTL field from 
 the SOA record of the zone being queried.
 
   Microsoft's documentation seems to imply that they just use that:
 The Windows 2000 DNS server caches negative responses 
 according to the minimum TTL in the SOA record. However, it 
 cannot be less than one minute or greater than 15 minutes.
 
 (http://technet.microsoft.com/en-us/library/cc959309.aspx)
 
 -- Ben
 
 ~ Finally, powerful endpoint security that ISN'T a resource 
 hog! ~ ~ 
 http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/  ~


~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/  ~

RE: DNS issue

2009-04-30 Thread Kennedy, Jim

Also consider testing with someone else's DNS or your forwarders. OpenDNS 
perhaps.

 -Original Message-
 From: Charlie Kaiser [mailto:charl...@golden-eagle.org]
 Sent: Thursday, April 30, 2009 9:41 AM
 To: NT System Admin Issues
 Subject: RE: DNS issue

 The domains in question do have MX records, but the DNS lookup failures
 end
 up giving us A records only, and then exchange tries to deliver to the
 A
 record address, which accepts mail for a different domain.

 We've offered logging; we need them to approve the costs first... No
 bind in
 this org.

 Someone sent me a note about a known issue with the Watchguards. I'm
 going
 to look at that today...

 ***
 Charlie Kaiser
 charl...@golden-eagle.org
 Kingman, AZ
 ***

  -Original Message-
  From: Ben Scott [mailto:mailvor...@gmail.com]
  Sent: Wednesday, April 29, 2009 7:34 PM
  To: NT System Admin Issues
  Subject: Re: DNS issue

If a domain name has no MX records, but does have A
  records, then SMTP MTAs are supposed to treat the domain as
  if it had specified the hosts at those A records as the mail
  exchangers.  This is per the relevant RFC.

Does it happen for all domains, or just some?

As someone else said, query logging would be good.  Another
  thing to try is a packet sniffer.  (Sometimes that's even
  better, because you might see stuff that the person
  programming an application's logging routines didn't think
  was relevant.)

In the NT 4.0 days, I sometimes fixed deficiencies in the
  NT 4.0 DNS server by having it forward all DNS queries to a
  local ISC BIND named resolver which then did the
  Internet-facing stuff.  The MS DNS server was much improved
  in Win 2000, but it's a thought if you get desperate.

   What I'm trying to find out is this: Is there a way to prevent
   server-side caching of negative replies to remote DNS queries?

The normal control for this is the minimum TTL field from
  the SOA record of the zone being queried.

Microsoft's documentation seems to imply that they just use that:
  The Windows 2000 DNS server caches negative responses
  according to the minimum TTL in the SOA record. However, it
  cannot be less than one minute or greater than 15 minutes.

  (http://technet.microsoft.com/en-us/library/cc959309.aspx)

  -- Ben

  ~ Finally, powerful endpoint security that ISN'T a resource
  hog! ~ ~
  http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/  ~

 ~ Finally, powerful endpoint security that ISN'T a resource hog! ~
 ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/  ~

~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/  ~

Re: DNS issue

2009-04-30 Thread Jeff Bunting

Here's an article about changing the negative caching:
http://windowsitpro.com/article/articleid/48528/controlling-positive-and-negative-caching.html

Jeff

On Wed, Apr 29, 2009 at 7:25 PM, Charlie Kaiser
charl...@golden-eagle.orgwrote:

I'm running into a problem at one of our clients. W2K3 AD, running E2K3.
When SMTP mail goes out, we're seeing DNS problems that result in NDRs.
This
type of problem has been documented here:

http://social.technet.microsoft.com/forums/en-US/exchangesvrtransport/thread
/178b88bb-bbdb-4cc2-896b-711fdeeb36d8/http://social.technet.microsoft.com/forums/en-US/exchangesvrtransport/thread%0A/178b88bb-bbdb-4cc2-896b-711fdeeb36d8/

Bottom line is that DNS lookups are failing, and mail is going to the A
record for the remote domain instead of the MX record. Apparently this is
by
design with E2K3/W2K3 when a negative reply comes back.

What I'm trying to find out is this: Is there a way to prevent server-side
caching of negative replies to remote DNS queries? Or at least reduce their
life to a few seconds? I've seen articles that show how to do it for the
client side, but that doesn't affect the DNS server cache.

We're using ISP forwarders (ATT). I think there may be a firewall
(watchguard) or other external issue causing the DNS lookup failures. I'm
trying to get the client to authorize that kind of troubleshooting, but in
the meantime, we're looking for a fix from another angle. Right now, I've
created an AT job to clear the DNS server cache every 5 minutes. That's an
ugly workaround, but when the CEO gets NDRs, you get creative. :-)

Any ideas?

Thanks...

***
Charlie Kaiser
charl...@golden-eagle.org
Kingman, AZ
***

~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~

RE: DNS issue

Yeah; I saw that one, but it's a client-side setting only. I set that on the
Exchange server, but it doesn't affect the DNS server's caching of outside
lookups... And that's where the issue lies...

***
Charlie Kaiser
charl...@golden-eagle.org
Kingman, AZ
***  

 -Original Message-
 From: Jeff Bunting [mailto:bunting.j...@gmail.com] 
 Sent: Thursday, April 30, 2009 6:52 AM
 To: NT System Admin Issues
 Subject: Re: DNS issue
 
 Here's an article about changing the negative caching:
 http://windowsitpro.com/article/articleid/48528/controlling-po
 sitive-and-negative-caching.html
 
 Jeff


~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/  ~

RE: DNS issue

2009-04-30 Thread Bill Songstad (WCUL)

Charlie, I developed a similar problem yesterday when I replaced the
SMTP proxy on my Watchgaurd X500 with the SMTP filter.  With just the
proxy enabled, DNS resolves fine.  But when I enable the SMTP filter,
DNS queries run amok and the firewall logs fill up with DNS traffic.
Web browsing slows to a crawl and exchange queues back up.  I blame
Watchguard, but I haven't been able to find a solution yet other than
sticking with the Proxy which has to go for an unrelated reason.

Bill 



-Original Message-
From: Charlie Kaiser [mailto:charl...@golden-eagle.org] 
Sent: Thursday, April 30, 2009 7:22 AM
To: NT System Admin Issues
Subject: RE: DNS issue

Yeah; I saw that one, but it's a client-side setting only. I set that on
the
Exchange server, but it doesn't affect the DNS server's caching of
outside
lookups... And that's where the issue lies...

***
Charlie Kaiser
charl...@golden-eagle.org
Kingman, AZ
***  

 -Original Message-
 From: Jeff Bunting [mailto:bunting.j...@gmail.com] 
 Sent: Thursday, April 30, 2009 6:52 AM
 To: NT System Admin Issues
 Subject: Re: DNS issue
 
 Here's an article about changing the negative caching:
 http://windowsitpro.com/article/articleid/48528/controlling-po
 sitive-and-negative-caching.html
 
 Jeff


~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/  ~

~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/  ~

RE: DNS issue

Hi Bill. We're going to try this today (method 2) and see what happens...

http://support.microsoft.com/kb/828263

Seems like it attacks the problem from the server side... This is the DNS
server-based change I was looking for...

***
Charlie Kaiser
charl...@golden-eagle.org
Kingman, AZ
***  

 -Original Message-
 From: Bill Songstad (WCUL) [mailto:administra...@waleague.org] 
 Sent: Thursday, April 30, 2009 10:21 AM
 To: NT System Admin Issues
 Subject: RE: DNS issue
 
 Charlie, I developed a similar problem yesterday when I 
 replaced the SMTP proxy on my Watchgaurd X500 with the SMTP 
 filter.  With just the proxy enabled, DNS resolves fine.  But 
 when I enable the SMTP filter, DNS queries run amok and the 
 firewall logs fill up with DNS traffic.
 Web browsing slows to a crawl and exchange queues back up.  I 
 blame Watchguard, but I haven't been able to find a solution 
 yet other than sticking with the Proxy which has to go for an 
 unrelated reason.
 
 Bill 


~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/  ~

RE: DNS issue

2009-04-29 Thread Richard Stovall

It's been a good while, but I've fixed certain lookup problems in the
past by disabling edns on 2k3 DNS servers behind older pixes.

dnscmd /config /enableednsprobes 0

Just a thought.

Have you enabled detailed packet logging on your DNS servers to look
into exactly what replies you're getting?

Good luck with it.

-Original Message-
From: Charlie Kaiser [mailto:charl...@golden-eagle.org] 
Sent: Wednesday, April 29, 2009 7:26 PM
To: NT System Admin Issues
Subject: DNS issue

I'm running into a problem at one of our clients. W2K3 AD, running E2K3.
When SMTP mail goes out, we're seeing DNS problems that result in NDRs.
This
type of problem has been documented here:
http://social.technet.microsoft.com/forums/en-US/exchangesvrtransport/th
read
/178b88bb-bbdb-4cc2-896b-711fdeeb36d8/

Bottom line is that DNS lookups are failing, and mail is going to the A
record for the remote domain instead of the MX record. Apparently this
is by
design with E2K3/W2K3 when a negative reply comes back. 

What I'm trying to find out is this: Is there a way to prevent
server-side
caching of negative replies to remote DNS queries? Or at least reduce
their
life to a few seconds? I've seen articles that show how to do it for the
client side, but that doesn't affect the DNS server cache.

We're using ISP forwarders (ATT). I think there may be a firewall
(watchguard) or other external issue causing the DNS lookup failures.
I'm
trying to get the client to authorize that kind of troubleshooting, but
in
the meantime, we're looking for a fix from another angle. Right now,
I've
created an AT job to clear the DNS server cache every 5 minutes. That's
an
ugly workaround, but when the CEO gets NDRs, you get creative. :-)

Any ideas?

Thanks...

***
Charlie Kaiser
charl...@golden-eagle.org
Kingman, AZ
*** 


~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/  ~

~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/  ~

Re: DNS issue

2009-04-29 Thread Ben Scott

On Wed, Apr 29, 2009 at 7:25 PM, Charlie Kaiser
charl...@golden-eagle.org wrote:
 Bottom line is that DNS lookups are failing, and mail is going to the A
 record for the remote domain instead of the MX record. Apparently this is by
 design with E2K3/W2K3 when a negative reply comes back.

  If a domain name has no MX records, but does have A records, then
SMTP MTAs are supposed to treat the domain as if it had specified the
hosts at those A records as the mail exchangers.  This is per the
relevant RFC.

  Does it happen for all domains, or just some?

  As someone else said, query logging would be good.  Another thing to
try is a packet sniffer.  (Sometimes that's even better, because you
might see stuff that the person programming an application's logging
routines didn't think was relevant.)

  In the NT 4.0 days, I sometimes fixed deficiencies in the NT 4.0 DNS
server by having it forward all DNS queries to a local ISC BIND
named resolver which then did the Internet-facing stuff.  The MS DNS
server was much improved in Win 2000, but it's a thought if you get
desperate.

 What I'm trying to find out is this: Is there a way to prevent server-side
 caching of negative replies to remote DNS queries?

  The normal control for this is the minimum TTL field from the SOA
record of the zone being queried.

  Microsoft's documentation seems to imply that they just use that:
The Windows 2000 DNS server caches negative responses according to
the minimum TTL in the SOA record. However, it cannot be less than one
minute or greater than 15 minutes.

(http://technet.microsoft.com/en-us/library/cc959309.aspx)

-- Ben

~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/  ~

Re: DNS issue?

2008-12-03 Thread Eric Brouwer

How do you mean?  Should we just set up an options on a splash screen  
where visitors can choose Flash or HTML versions of the site?


On Dec 2, 2008, at 6:15 PM, Micheal Espinola Jr wrote:


You are only invisable if you do not also supply standard content.
You dont need to trash the Flash to accomplish that.

--
ME2



On Tue, Dec 2, 2008 at 5:25 PM, Eric Brouwer [EMAIL PROTECTED]  
wrote:
Believe me, I hear you on the anti-flash stuff.  That was the first  
thing I
told them when I started.  We are invisible to search engines.   
With our
work, form always trumps function.  Our designers need to have  
total control
over how things look down to specifying exactly what font the user  
sees.


I'm trying to get a hold of our hosting company.  According to their
website, we should be able to use the IIS Remote Manager, but I'm  
not sure
of the connection information.  I think I can set the redirect that  
way.


On Dec 2, 2008, at 1:37 PM, Ben Scott wrote:

On Tue, Dec 2, 2008 at 1:06 PM, Eric Brouwer  
[EMAIL PROTECTED] wrote:


... using Flash ...


There's your problem.  (Ha Ha Only Serious.)

FYI: A website which consists of nothing but Flash -- like yours --
is essentially invisible to search engines (like Google).  So you're
hurting your search engine rankings considerably.


When you go to www.forestpost.com, everything works fine.   ...
If you go to forestpost.com, the XML never loads ...


I see the same here.  Firefox 3.0 and MSIE 6.0, both Flash 9.


Can I do anything through DNS?


Both www.forestpost.com. and forestpost.com. return the same A
record (209.237.151.15), so it is not a DNS problem.


Some way to force all traffic destined for
forestpost.com to redirect to www.forestpost.com?


That's HTTP, not DNS.  It can be done using most web servers.  I
don't know how to do it in IIS 7.0 (which you're apparently using),
but I bet Google would tell you.

But that would really just be working around a bug.  I'd suggest
fixing the bug.  I'm guessing you've got a request (Flash or
JavaScript) that's triggering a cross-domain security check somehow.
Most web client technologies try to limit web pages to requests  
within
their domain (so that visiting http://www.example.com/exploit.js  
won't
mean giving up your eBay login cookies).  The specifics I have no  
idea

on.

-- Ben

~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/  ~



Eric Brouwer
IT Manager
www.forestpost.com
[EMAIL PROTECTED]
248.855.4333





~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/  ~



~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/  ~



Eric Brouwer
IT Manager
www.forestpost.com
[EMAIL PROTECTED]
248.855.4333





~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/  ~

RE: DNS issue?

2008-12-03 Thread Sean Rector

Exactly...that should be your home page - you can seed it with keywords,
make a proper title, and it will give the added benefit of allowing your
site to be listed in search engines.

Sean Rector, MCSE

-Original Message-
From: Eric Brouwer [mailto:[EMAIL PROTECTED] 
Sent: Wednesday, December 03, 2008 9:50 AM
To: NT System Admin Issues
Subject: Re: DNS issue?

How do you mean?  Should we just set up an options on a splash screen  
where visitors can choose Flash or HTML versions of the site?

On Dec 2, 2008, at 6:15 PM, Micheal Espinola Jr wrote:

 You are only invisable if you do not also supply standard content.
 You dont need to trash the Flash to accomplish that.

 --
 ME2

 On Tue, Dec 2, 2008 at 5:25 PM, Eric Brouwer [EMAIL PROTECTED]  
 wrote:
 Believe me, I hear you on the anti-flash stuff.  That was the first  
 thing I
 told them when I started.  We are invisible to search engines.   
 With our
 work, form always trumps function.  Our designers need to have  
 total control
 over how things look down to specifying exactly what font the user  
 sees.

 I'm trying to get a hold of our hosting company.  According to their
 website, we should be able to use the IIS Remote Manager, but I'm  
 not sure
 of the connection information.  I think I can set the redirect that  
 way.

 On Dec 2, 2008, at 1:37 PM, Ben Scott wrote:

 On Tue, Dec 2, 2008 at 1:06 PM, Eric Brouwer  
 [EMAIL PROTECTED] wrote:

 ... using Flash ...

 There's your problem.  (Ha Ha Only Serious.)

 FYI: A website which consists of nothing but Flash -- like yours --
 is essentially invisible to search engines (like Google).  So you're
 hurting your search engine rankings considerably.

 When you go to www.forestpost.com, everything works fine.   ...
 If you go to forestpost.com, the XML never loads ...

 I see the same here.  Firefox 3.0 and MSIE 6.0, both Flash 9.

 Can I do anything through DNS?

 Both www.forestpost.com. and forestpost.com. return the same A
 record (209.237.151.15), so it is not a DNS problem.

 Some way to force all traffic destined for
 forestpost.com to redirect to www.forestpost.com?

 That's HTTP, not DNS.  It can be done using most web servers.  I
 don't know how to do it in IIS 7.0 (which you're apparently using),
 but I bet Google would tell you.

 But that would really just be working around a bug.  I'd suggest
 fixing the bug.  I'm guessing you've got a request (Flash or
 JavaScript) that's triggering a cross-domain security check somehow.
 Most web client technologies try to limit web pages to requests  
 within
 their domain (so that visiting http://www.example.com/exploit.js  
 won't
 mean giving up your eBay login cookies).  The specifics I have no  
 idea
 on.

 -- Ben

 ~ Finally, powerful endpoint security that ISN'T a resource hog! ~
 ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/  ~

 Eric Brouwer
 IT Manager
 www.forestpost.com
 [EMAIL PROTECTED]
 248.855.4333

 ~ Finally, powerful endpoint security that ISN'T a resource hog! ~
 ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/  ~

 ~ Finally, powerful endpoint security that ISN'T a resource hog! ~
 ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/  ~

Eric Brouwer
IT Manager
www.forestpost.com
[EMAIL PROTECTED]
248.855.4333

~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/  ~
Virginia Opera's 2008-2009 Season ... Viva la passione!
IL TROVATORE - THE ELIXIR OF LOVE - TOSCA - THE BARBER OF SEVILLE
Visit us online at www.vaopera.org or call 1-866-OPERA-VA (1-866-673-7282).
Subscribe or purchase tickets online now!

This e-mail and any attached files are confidential and intended solely for the 
intended recipient(s). Unless otherwise specified, persons unnamed as 
recipients may not read, distribute, copy or alter this e-mail. Any views or 
opinions expressed in this e-mail belong to the author and may not necessarily 
represent those of Virginia Opera. Although precautions have been taken to 
ensure no viruses are present, Virginia Opera cannot accept responsibility for 
any loss or damage that may arise from the use of this e-mail or attachments.

~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/  ~

Re: DNS issue?

2008-12-03 Thread Ben Scott

On Wed, Dec 3, 2008 at 9:50 AM, Eric Brouwer [EMAIL PROTECTED] wrote:
 How do you mean?  Should we just set up an options on a splash screen where
 visitors can choose Flash or HTML versions of the site?

  You can do it that way, but I think the better way to do it is to
build your web site using HTML, and use Flash as *parts* of each page.
 With CSS, you can get fairly good control over how things appear.
When Flash is needed for a cool effect, build in alternate HTML links
on the same page.

  Your home page, for example, doesn't really need Flash.  The
carousel for staff (which I admit is neat) does, but you could run a
strip of HTML names across the side/bottom and still have it look
nice.

  Take a look at Yahoo's or Microsoft's home pages.  Lots of layout,
dynamic effects, menus, etc..  Very little Flash, other than for
video.

  This does, of course, require web designers who have both artistic
skill and technical skill.  I personally think that would be a
requirement to be called a web designer, but I guess most of the
world doesn't agree with me.

-- Ben

~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/  ~

RE: DNS issue?

2008-12-03 Thread Andy Ognenoff

The SEO argument against all flash sites has changed recently.

 

http://googlewebmastercentral.blogspot.com/2008/06/improved-flash-indexing.h
tml

 

http://www.yourseoplan.com/google-flash.html

 

I personally prefer a nice xhtml page that can degrade gracefully but at
least Google has taken some steps to index Flash better.

 

 

 - Andy O.

 

-Original Message-

From: Sean Rector [mailto:[EMAIL PROTECTED]

Sent: Wednesday, December 03, 2008 8:55 AM

To: NT System Admin Issues

Subject: RE: DNS issue?

 

Exactly...that should be your home page - you can seed it with keywords,

make a proper title, and it will give the added benefit of allowing your

site to be listed in search engines.

 


~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/  ~

Re: DNS issue?

2008-12-03 Thread Klint Price - ArizonaITPro

+1

keep the flash in a specific area, wrapped by content/html

Personally I would change the site so each topic had its own page, 
non-flash navigation (coupled with flash navigation if you wish), and 
use flash to highlight media aspects of a page, not be the page.

Each page should have an initial page load  70 kb

Put the content of the site in HTML; use flash to pretty up diagrams, 
flow charts, photos, etc

flash should be used to draw your eye to selling points, but the content 
of the site should still be in natural/seo-optimized form.



Ben Scott wrote:
 On Wed, Dec 3, 2008 at 9:50 AM, Eric Brouwer [EMAIL PROTECTED] wrote:
   
 How do you mean?  Should we just set up an options on a splash screen where
 visitors can choose Flash or HTML versions of the site?
 

   You can do it that way, but I think the better way to do it is to
 build your web site using HTML, and use Flash as *parts* of each page.
  With CSS, you can get fairly good control over how things appear.
 When Flash is needed for a cool effect, build in alternate HTML links
 on the same page.

   Your home page, for example, doesn't really need Flash.  The
 carousel for staff (which I admit is neat) does, but you could run a
 strip of HTML names across the side/bottom and still have it look
 nice.

   Take a look at Yahoo's or Microsoft's home pages.  Lots of layout,
 dynamic effects, menus, etc..  Very little Flash, other than for
 video.

   This does, of course, require web designers who have both artistic
 skill and technical skill.  I personally think that would be a
 requirement to be called a web designer, but I guess most of the
 world doesn't agree with me.

 -- Ben

 ~ Finally, powerful endpoint security that ISN'T a resource hog! ~
 ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/  ~
   


~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/  ~

Re: DNS issue?

2008-12-03 Thread Ben Scott

On Wed, Dec 3, 2008 at 10:57 AM, Andy Ognenoff [EMAIL PROTECTED] wrote:
 The SEO argument against all flash sites has changed recently.

  Yah, I've seen that news before.  I'm not in a position to have a
representative sample, but I can provide an ancedote: On the public
web site for a small-to-mid-sized company I'm involved with, within
the past three months, we switched from mostly Flash to mostly
HTML/CSS.  We promptly saw a significant increase in web site traffic
from search engines, and better page matching in Google.

  I don't know know how or why.  Maybe not all Flash files index
equally well.  Maybe it was luck.  Whatever.  We're happy for the
increased business.  We're willing to sacrifice having lots of Flash
if it means we make more money.

-- Ben

~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/  ~

RE: DNS issue?

2008-12-03 Thread Andy Ognenoff

  I don't know know how or why.  Maybe not all Flash files index
equally well.  Maybe it was luck.  Whatever.  We're happy for the
increased business.  We're willing to sacrifice having lots of Flash
if it means we make more money.

Agreed.  When I'm tackling a web site I go from the angle that search
engines are like blind users using screen readers.  Make the site work for
that audience by following Section 508 and WCAG and your search engine
rankings are likely to go up. Non-degradable flash elements usually cause
problems if you're going for section 508 compliance.

 - Andy O.



~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/  ~

RE: DNS issue?

2008-12-02 Thread Kennedy, Jim


I am only addressing the specific question below, I did not have much luck 
trying to hit your site. You already are doing that through DNS, both point to 
the same IP address.

So now make sure the web server is set to answer to the requests for that 
header.

Don't know if that is your problem, but that is the basics on getting 
forestpost.com and www.forestpost.com to hit the same website. Same DNS (you 
have that) and the web server itself answering both header requests.



 -Original Message-
 From: Eric Brouwer [mailto:[EMAIL PROTECTED]
 Sent: Tuesday, December 02, 2008 1:07 PM
 To: NT System Admin Issues
 Subject: DNS issue?


 Some way to force all traffic destined
 for forestpost.com to redirect to www.forestpost.com?


~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/  ~

Re: DNS issue?

2008-12-02 Thread Klint Price - ArizonaITPro

DNS on the outside resolves the same for both www.forespost.com and 
forestpost.com


Can you post the code that loads the xml?

Klint



It may not be

Eric Brouwer wrote:

Good afternoon,

I've run into an issue at work related to our web site that I can't 
figure out.  Our site was developed in house using Flash by another 
individual who can't explain the issue, either.


When you go to www.forestpost.com, everything works fine.  If you 
click on of the links on the left, you'll see a carousel featuring our 
staff.  This data is XML driven.  If you go to forestpost.com, the XML 
never loads, so you don't see the carousels.  While we look at a long 
term solution, I'm trying to find a quick fix.


Can I do anything through DNS?  Some way to force all traffic destined 
for forestpost.com to redirect to www.forestpost.com?


Thanks,

Eric Brouwer
IT Manager
www.forestpost.com
[EMAIL PROTECTED]
248.855.4333





~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/  ~



~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/  ~

Re: DNS issue?

2008-12-02 Thread Ben Scott

On Tue, Dec 2, 2008 at 1:06 PM, Eric Brouwer [EMAIL PROTECTED] wrote:
 ... using Flash ...

  There's your problem.  (Ha Ha Only Serious.)

  FYI: A website which consists of nothing but Flash -- like yours --
is essentially invisible to search engines (like Google).  So you're
hurting your search engine rankings considerably.

 When you go to www.forestpost.com, everything works fine.   ...
 If you go to forestpost.com, the XML never loads ...

  I see the same here.  Firefox 3.0 and MSIE 6.0, both Flash 9.

 Can I do anything through DNS?

  Both www.forestpost.com. and forestpost.com. return the same A
record (209.237.151.15), so it is not a DNS problem.

 Some way to force all traffic destined for
 forestpost.com to redirect to www.forestpost.com?

  That's HTTP, not DNS.  It can be done using most web servers.  I
don't know how to do it in IIS 7.0 (which you're apparently using),
but I bet Google would tell you.

  But that would really just be working around a bug.  I'd suggest
fixing the bug.  I'm guessing you've got a request (Flash or
JavaScript) that's triggering a cross-domain security check somehow.
Most web client technologies try to limit web pages to requests within
their domain (so that visiting http://www.example.com/exploit.js won't
mean giving up your eBay login cookies).  The specifics I have no idea
on.

-- Ben

~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/  ~

Re: DNS issue?


We don't host the site internally.

When I contact them, what do I tell them I need done?  That I need the  
header requests for the two domains answered the same?


On Dec 2, 2008, at 1:23 PM, Kennedy, Jim wrote:



I am only addressing the specific question below, I did not have  
much luck trying to hit your site. You already are doing that  
through DNS, both point to the same IP address.


So now make sure the web server is set to answer to the requests for  
that header.


Don't know if that is your problem, but that is the basics on  
getting forestpost.com and www.forestpost.com to hit the same  
website. Same DNS (you have that) and the web server itself  
answering both header requests.





-Original Message-
From: Eric Brouwer [mailto:[EMAIL PROTECTED]
Sent: Tuesday, December 02, 2008 1:07 PM
To: NT System Admin Issues
Subject: DNS issue?




Some way to force all traffic destined
for forestpost.com to redirect to www.forestpost.com?



~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/  ~



Eric Brouwer
IT Manager
www.forestpost.com
[EMAIL PROTECTED]
248.855.4333





~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/  ~

Re: DNS issue?


It's a simple line of Actionscript in the Flash file:

xml.load(editorialicons.xml);

On Dec 2, 2008, at 1:27 PM, Klint Price - ArizonaITPro wrote:

DNS on the outside resolves the same for both www.forespost.com and  
forestpost.com


Can you post the code that loads the xml?

Klint



It may not be

Eric Brouwer wrote:

Good afternoon,

I've run into an issue at work related to our web site that I can't  
figure out.  Our site was developed in house using Flash by another  
individual who can't explain the issue, either.


When you go to www.forestpost.com, everything works fine.  If you  
click on of the links on the left, you'll see a carousel featuring  
our staff.  This data is XML driven.  If you go to forestpost.com,  
the XML never loads, so you don't see the carousels.  While we look  
at a long term solution, I'm trying to find a quick fix.


Can I do anything through DNS?  Some way to force all traffic  
destined for forestpost.com to redirect to www.forestpost.com?


Thanks,

Eric Brouwer
IT Manager
www.forestpost.com
[EMAIL PROTECTED]
248.855.4333





~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/  ~



~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/  ~



Eric Brouwer
IT Manager
www.forestpost.com
[EMAIL PROTECTED]
248.855.4333





~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/  ~

RE: DNS issue?

2008-12-02 Thread Kennedy, Jim

That should do it.

 -Original Message-
 From: Eric Brouwer [mailto:[EMAIL PROTECTED]
 Sent: Tuesday, December 02, 2008 2:55 PM
 To: NT System Admin Issues
 Subject: Re: DNS issue?

 We don't host the site internally.

 When I contact them, what do I tell them I need done?  That I need the
 header requests for the two domains answered the same?

~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/  ~

Re: DNS issue?

2008-12-02 Thread Klint Price - ArizonaITPro

can you change that line of code so it loads from 
www.yoursite.com/editorialicons.xml ?




Eric Brouwer wrote:

It's a simple line of Actionscript in the Flash file:

xml.load(editorialicons.xml);

On Dec 2, 2008, at 1:27 PM, Klint Price - ArizonaITPro wrote:

DNS on the outside resolves the same for both www.forespost.com and 
forestpost.com


Can you post the code that loads the xml?

Klint



It may not be

Eric Brouwer wrote:

Good afternoon,

I've run into an issue at work related to our web site that I can't 
figure out.  Our site was developed in house using Flash by another 
individual who can't explain the issue, either.


When you go to www.forestpost.com, everything works fine.  If you 
click on of the links on the left, you'll see a carousel featuring 
our staff.  This data is XML driven.  If you go to forestpost.com, 
the XML never loads, so you don't see the carousels.  While we look 
at a long term solution, I'm trying to find a quick fix.


Can I do anything through DNS?  Some way to force all traffic 
destined for forestpost.com to redirect to www.forestpost.com?


Thanks,

Eric Brouwer
IT Manager
www.forestpost.com
[EMAIL PROTECTED]
248.855.4333





~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/  ~



~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/  ~



Eric Brouwer
IT Manager
www.forestpost.com
[EMAIL PROTECTED]
248.855.4333





~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/  ~



~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/  ~

Re: DNS issue?

2008-12-02 Thread Klint Price - ArizonaITPro

no, what you want it to have yoursite.com redirect via IIS to 
www.yoursite.com

Although you could do it the way Jim suggested, many search engines will 
ding rankings for duplicate content.

Klint


Kennedy, Jim wrote:
 That should do it.


   
 -Original Message-
 From: Eric Brouwer [mailto:[EMAIL PROTECTED]
 Sent: Tuesday, December 02, 2008 2:55 PM
 To: NT System Admin Issues
 Subject: Re: DNS issue?

 We don't host the site internally.

 When I contact them, what do I tell them I need done?  That I need the
 header requests for the two domains answered the same?
 


 ~ Finally, powerful endpoint security that ISN'T a resource hog! ~
 ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/  ~
   


~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/  ~

Re: DNS issue?

2008-12-02 Thread Angus Scott-Fleming

On 2 Dec 2008 at 13:06, Eric Brouwer  wrote:

 Good afternoon,
 
 I've run into an issue at work related to our web site that I can't  
 figure out.  Our site was developed in house using Flash by another  

[gag].  I'm on DSL and it takes a L-O-N-G T-I-M-E to load the home page and 
move between pages (and I have to disable NoScript's protections), dump the 
Flash ASAP.  You could also create a non-flash version of the site which loads 
when your vistors don't have Flash available (for example, iPhone users have no 
Flash capabilities). You could certainly offer the Flashy version to everyone, 
just have a no-Flash version also.

 individual who can't explain the issue, either.
 
 When you go to www.forestpost.com, everything works fine.  If you  
 click on of the links on the left, you'll see a carousel featuring our  
 staff.  This data is XML driven.  If you go to forestpost.com, the XML  
 never loads, so you don't see the carousels.  While we look at a long  
 term solution, I'm trying to find a quick fix.
 
 Can I do anything through DNS?  Some way to force all traffic destined  
 for forestpost.com to redirect to www.forestpost.com?

Would this work for your site?

--- Included Stuff Follows ---
Force www vs non-www to avoid duplicate content on Google

Recently, it has been talked a lot about Google and duplicate content as 
well as Google Canonical problems.That is, when you have your site 
accessible both under your_domain.com and www.your_domain.com. To avoid 
such problems you can use the following lines in your .htaccess file to 
force only the www version of your web site:

RewriteEngine on
RewriteCond %{HTTP_HOST} !^www.your_domain.com$
RewriteRule ^(.*)$ http://www.your_domain.com/$1 [R=301]

Please, note that the .htaccess should be located in the web site main 
folder.

This will redirect all requests to the non-www version of your site to the 
www version using 301 Permanent redirect which will make the search 
engines to index your site only using the www.your_domain.com URL. In this 
way you will avoid a duplicate content penalty.

- Included Stuff Ends -
More here with links:
http://www.besthostratings.com/articles/force-www-htaccess.html

Another version that also suggests a different approach:

--- Included Stuff Follows ---
  How To Force www (or no-www) In Domain Name | ProgramimiCOM


If you don´t have access to .htaccess, you could also accomplish the same 
thing through php with a simple script at the top of every page that will 
try to find www in the URL and redirect if found. Not the most elegant 
solution, but it does what it needs to do for those who can´t edit 
.htaccess for some reason.   

if(!substr($_SERVER[´HTTP_HOST´], `www´)) //check if www exists in URL
{ header(´Location: http://www.programimi.com/´); //redirect to 
www.programimi.com }

Or for those using wordpress, you could simply install a plugin that does 
all this for you! One example plugin is WWW-Redirect.   

- Included Stuff Ends -
More here with links:
  http://www.programimi.com/2008/04/02/how-to-force-www-or-no-www-in-domain-
name/

--
Angus Scott-Fleming
GeoApps, Tucson, Arizona
1-520-290-5038
+---+




~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/  ~

Re: DNS issue?

Believe me, I hear you on the anti-flash stuff.  That was the first  
thing I told them when I started.  We are invisible to search  
engines.  With our work, form always trumps function.  Our designers  
need to have total control over how things look down to specifying  
exactly what font the user sees.


I'm trying to get a hold of our hosting company.  According to their  
website, we should be able to use the IIS Remote Manager, but I'm not  
sure of the connection information.  I think I can set the redirect  
that way.


On Dec 2, 2008, at 1:37 PM, Ben Scott wrote:

On Tue, Dec 2, 2008 at 1:06 PM, Eric Brouwer [EMAIL PROTECTED]  
wrote:

... using Flash ...


 There's your problem.  (Ha Ha Only Serious.)

 FYI: A website which consists of nothing but Flash -- like yours --
is essentially invisible to search engines (like Google).  So you're
hurting your search engine rankings considerably.


When you go to www.forestpost.com, everything works fine.   ...
If you go to forestpost.com, the XML never loads ...


 I see the same here.  Firefox 3.0 and MSIE 6.0, both Flash 9.


Can I do anything through DNS?


 Both www.forestpost.com. and forestpost.com. return the same A
record (209.237.151.15), so it is not a DNS problem.


Some way to force all traffic destined for
forestpost.com to redirect to www.forestpost.com?


 That's HTTP, not DNS.  It can be done using most web servers.  I
don't know how to do it in IIS 7.0 (which you're apparently using),
but I bet Google would tell you.

 But that would really just be working around a bug.  I'd suggest
fixing the bug.  I'm guessing you've got a request (Flash or
JavaScript) that's triggering a cross-domain security check somehow.
Most web client technologies try to limit web pages to requests within
their domain (so that visiting http://www.example.com/exploit.js won't
mean giving up your eBay login cookies).  The specifics I have no idea
on.

-- Ben

~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/  ~



Eric Brouwer
IT Manager
www.forestpost.com
[EMAIL PROTECTED]
248.855.4333





~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/  ~

Re: DNS issue?