WSA error DNS lookup failed

hi,
When i try to download a file from let say xyz.com i am not able to do so.Policy trace show below result
User Information
User Name: r5893
Group Membership: NBKDOM\r5893, NBKDOM\Limit_Login_Single, NBKDOM\MMS_Access Group, NBKDOM\Screen Saver, NBKDOM\Domain Users, NBKDOM\MMSGroup, NBKDOM\Purchasing&GS-Kuwait, NBKDOM\AllUsers, NBKDOM\Outlook Users, NBKDOM\Administration-Kuwai, NBKDOM\BOUsers, NBKDOM\MYNBKUSERS, NBKDOM\Purchasing Requests - Administration, NBKDOM\EVGROUP001
User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1; WOW64; Trident/5.0)
Custom URL Category: Allow sites
Policy Match
Cisco IronPort Data Security policy: None
Decryption policy: None
Routing policy: Global Routing Policy
Identity policy: Users
Access policy: NBK_Users
Final Result
Request blocked
Details: DNS lookup failed
Trace session complete

Hi Asim,
I would investigate the DNS by establishing an SSH session to the M1 interface. Do an 'nslookup xyz.com' and see if it resolves. If it does not resolve, you may want to check your DNS server.
-Vance

Similar Messages

DNS lookup failed. How to fix with Google chrome?

"The server at _____.com can't be found, because the DNS lookup failed. This error is often caused by having no connection to the internet or a misconfigured network. It can also be caused by an unresponsive DNS server or a firewall preventing google chrome from accessing the network."

Is Safari the same?

DNS lookup failing on Macbook with Fios

Hello all
I've had Verizon Fios for over a year and had no problems connecting wirelessly to my MacBook. Out of the blue today, both my MacBook and my brother's began to have issues accessing the internet. Every attempt would yield the same response:
This webpage is not available
The server at google.com can't be found, because the DNS lookup failed. DNS is the web service that translates a website's name to its Internet address. This error is most often caused by having no connection to the Internet or a misconfigured network. It can also be caused by an unresponsive DNS server or a firewall preventing Google Chrome from accessing the network.
Here are some suggestions:
Reload this web page later.
Check your Internet connection. Reboot any routers, modems, or other network devices you may be using.
Check your DNS settings. Contact your network administrator if you're not sure what this means.
Try disabling network prediction by following these steps: Go to Wrench menu > Preferences > Under the Hood and deselect "Predict network actions to improve page load performance." If this does not resolve the issue, we recommend selecting this option again for improved performance.
Try adding Google Chrome as a permitted program in your firewall or antivirus software's settings. If it is already a permitted program, try deleting it from the list of permitted programs and adding it again.
If you use a proxy server, check your proxy settings or check with your network administrator to make sure the proxy server is working.
If you don't believe you should be using a proxy server, try the following steps: Go to Applications > System Preferences > Network > Advanced > Proxies and deselect any proxies that have been selected.
Error 105 (net::ERR_NAME_NOT_RESOLVED): Unable to resolve the server's DNS address.
I called Verizon for support, and while their reset of my internet has allowed me to connect directly from a ethernet cord from my router, I'm still getting the same result on any attempts to connect via wi-fi. Since Verizon decided it was a Mac issue and not a Verizon issue at this point, they pointed me in the direction of applecare, but I don't have the money to spend right now on a support call.
It seems that the router is connecting to the internet, and I can connect through ethernet, but their is a problem with the wireless communication between my computer and the router. Any suggestions?

That is a different issue. Most likely, your university IT has misconfigured their network and only tested it on Windows where little details like TCP/IP subnets aren't even checked. This sounds pretty typical for university IT. Unfortunately, you will have zero luck getting them to fix the problem because they don't support MACS.
First of all, your question is pretty important and shouldn't be tucked inside a Verizon FiOS thread where no one will see it. I suggest starting a new question so that people looking for this topic in the future can find the answer.
I am familiar with this problem. It is an IT configuration problem. I just rolled my own hack for it. I should probably try to improve my hack since obviously other people are experiencing the same problem.
Before I get started. Why are you even looking? What is the exact problem that you are having? My problem was specific to VPNs but your issue seems even more basic than that. What, exactly, does or does not happen to cause you to search for a fix?
In the Terminal, run the command "scutil list". How many DNS entries are listed? What are they? You should have one that says "State:/Network/Global/DNS". Type "show State:/Network/Global/DNS". What does it return? Are these the DNS servers that you added?
Let me know the respones to the above and then I can craft a command that will correct and possibly override those servers properly.

DNS lookup failed WRT120N

Hello,
I've been having an issue with my internet connection, which has been getting a lot worse over the past 1 month. I purchased the WRT120N about a year and a half ago, and occasionally observed dropped connections, but it was no big deal. Over teh past month or so, however, it seems like I get the "DNS lookup failed" error about every 15-30 minutes. Every time, I have to disconnect and reconnect my computer to my router. In addition, I will be disconnected from XBox Live. This problem may occur every 5 minutes or every few hours.
I have updated the firmware on the router. I have reset the router, and have reset DNS 1 t0 8.8.8.8 and DNS 2 to 8.8.4.4. THe network is configured as a DHCP. The X-Box has a wired connection, and my laptop experiences this problem whether I use a wired connection or a wireless one.
I've reached the end of my very limited technology skills, so if anyone has a solution, I'd be more than greatful.
Thank you!

To isolate the concern, connect your computer to the modem and observe the connection for a day or a period of time. If the connection is dropping through the modem, contact your ISP. However, if it is stable through the modem, you can adjust the MTU settings of the router. Set the MTU to 1350. Also, reconfigure the wireless settings. Set the channel width to 20 MHz only and select a specific wireless channel. I suggest using 1, 6 or 11.
Another thing you need to consider is the location of the router. It shouldn’t be too close to your modem as it may create interference. It should be on a higher and open location.

Local site blocked - DNS lookup failed

Hitting our webpage from the inside is blocked; the policy trace shows Request blocked: Details: DNS Lookup fails
the local webpage is in the Custom URL Catagory- Allow group...
This fails when leaving the www off the front. www.site.com works but site.com fails...
.site.com and site.com are in the custom URL catagory in an 'allow' group
this is also in the bypass filter

A large amount of sites in the world are unable to resolve domains that do not have www in the front. The easiest example is NASA. Go to nasa.gov and it does not work. www.nasa.gov does work. This is due to the admins configuration. However like chris mentioned I would confirm that your DNS is opperating correctly.
P.S. The nasa test might or might not work. Some browsers automatically change the nasa.gov to www.nasa.gov
Christian Rahl
Customer Support Engineer
Cisco Web Content Security Appliance
Cisco Technical Assistance Center RTP

Post Moved DNS-Lookup-Failed

Post Moved http://community.bt.com/t5/Other-BB-Queries/DNS-Lookup-Failed/td-p/611636
If you want to say thanks for a helpful answer,please click on the Ratings star on the left-hand side If the reply answers your question then please mark as ’Mark as Accepted Solution’

Is Safari the same?

DNS Lookup fail

I have a 20inch iMac that I connect wirelessly in my home network. I never had any problems with the wireless connection until a few months ago.
For the past few months, DNS lookups have been failing when browsing the web. I see "looking up cnn.com" as an example in the status bar. I have to wait for it to fail and then hit reload and then the page will load. Sometimes, certain parts of the page will not load if it has to do a lookup to a new domain e.g. images.cnn.com.
I have several other computers on my network [notebooks wired and wireless as well as wired pcs] with no issues.
Today, I moved my iMac to my office where my router is and plugged it in via an ethernet cable. Looks like there are no issues and I can browse any site without any lookup failures.
I have read a lot of posts about slow wifi, so I'm not sure if this is related. Anyone else have a similar issue? Looks like I'm going to have to run a cable to my kitchen since the wireless is just too flaky.

HI--
I guess it's better, but not 100% fixed.
If you're using a router, I'd suggest putting your router's address into the DNS field in your TCP/IP settings. I've found, especially when running an Airport base station behind my Netgear router, that helps out quite a bit. In my case, I couldn't get get internet access from my wireless laptop without that.
I didn't try the 4.xxxx DNS suggestion. No offense,
but that sounds really hokey.
No, Eric's right, that's a great way to get around poor ISP DNS performance. I use those servers when my ISP has trouble keeping their DNS servers running.
Also, you can time different servers if you want, using the dig utility in the Terminal application:
<pre class="command">dig [email protected]</pre>You should get the query time near the bottom of the output. There are lists of publicly accessible DNS servers on the internet. Run some time tests and see if you can find some faster ones. Here's what I got:
<pre class="command">; <<>> DiG 9.3.2 <<>> [email protected]
;; global options: printcmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 12531
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;www.apple.com\@4.2.2.1. IN A
;; AUTHORITY SECTION:
. 900 IN SOA A.ROOT-SERVERS.NET. NSTLD.VERISIGN-GRS.COM. 2006120100 1800 900 604800 86400
;; Query time: 37 msec
;; SERVER: 192.168.1.1#53(192.168.1.1)
;; WHEN: Fri Dec 1 17:05:21 2006
;; MSG SIZE rcvd: 114</pre>
charlie

Since changing to Firefox as my internet browser I cannot use Dell Datasafe Online to back up my PC. I get an error code BuEng_2816 Internet DNS lookup failed for'{1}'

It suggests I check my Internet connection and/or my Internet Security settings. I cannot see how to do this on Firefox.

{Ctrl + P} and select your printer in the Printer - Name box near the top of that window.
http://kb.mozillazine.org/Problems_printing_web_pages

DNS lookup failed

When I attempt to access certain websites my DNS look up fails to translate the website to an ip address

Need more info. Are you using a public DNS server? if so which one?
Which website are you struggling to resolve?

TC7.3.0 codec fails after reset and power cycle - failed: dns lookup failed (CUCM registered)

Have a couple of codec's in the lab here that will work sometimes, and sometimes won't. They're running the latest 7.3.0 code and registering to CUCM 10.5.1SU1. I've tried factory resetting them and get the same result. I've manually configured the CUCM provisioning address in the system, and it immediately pulls down the correct SIP URI. Sometimes power cycling the unit will allow it to register. I have DNS running in this lab, A records created for all relevant hosts.
Anybody seen this before?

This was for two C20's. I think I found the issue. About 1 out of every 3 reset/power cycles they would work the rest they would not.
Basically, I was using DHCP to assign IP, but manually assigning DNS. You are able to do this on most machines, but the way the Codec handles this is different. It simply appends your manual DNS configuration, including the DNS domain, to the list obtained from DHCP. In a packet capture I was able to see where it would query all 3 DNS servers (1 manual 2 from DHCP) and it would query based on my manual domain and the DHCP domain. It appears to round-robin the response it uses, as all DNS servers responded in one fashion or another, it just picked one to listen to. In this manner, it had about a 33% chance of picking the correct response.
After statically assigning the IP address, the problem went away as the only DNS server was the one manually assigned.
I take this all with a grain of salt though, as our internal team is using the TC7.2.1 code and they get the DNS issue every once in a while regardless of the DHCP/DNS configuration. There may be more to this, but I can say with certainty that using DHCP and manual DNS configuration at the same time is not recommended.

DNS Lookups Failing

Ahh sorry, missed that. Glad you got it solved :)

We recently updated a static CNAME entry in our 2008 R2 DNS server (days ago, successfully replicated to the other DNS server), but the entry only resolves correctly if we use the FQDN on some machines. IE: ping pizza.bat.man pulls the correct address, but ping pizza pulls the old address.
We've tried ipconfig /flush, rebooting, and double checking that the DNS settings are set to append the parent suffix of the primary dns suffic in the TCP/IP v4 properties of the adapter. Addresses and DNS servers are all handled via DHCP and are correct.
Any ideas? Thanks!
This topic first appeared in the Spiceworks Community

Reverse DNS Lookup Failed!

I started this thread weeks ago in the mail category, because it was related to sending e-mails to certain accounts. If you could please look at this thread I would greatly appreciate it so I don't have to re-explain the whole situation. I need to get this resolved as soon as possible and I don't know what else to do. I have had tons of help on the subject, yet no one can figure out why it's not working. You can do reverse resolution to my server just fine and my service provider shows it's pointing to my dns servers but somewhere in the mix it won't resolve any other way except directly to mine.
http://discussions.apple.com/thread.jspa?threadID=323884&tstart=0
I have read every article on here that has revserse DNS in it, yet still no luck. Thanks.

Zone File:
$TTL 86400
funsunstudio.com. IN SOA ns1.funsunstudio.com. marshall.funsunstudi
o.com. (
2006013000 ; serial
3h ; refresh
1h ; retry
1w ; expiry
1h ) ; minimum
funsunstudio.com. IN NS ns1.funsunstudio.com.
funsunstudio.com. IN NS ns2.funsunstudio.com.
funsunstudio.com. IN A 12.146.245.40
ns1 IN A 12.146.245.40
ns2 IN A 12.146.245.41
mail IN A 12.146.245.34
funsunstudio.com. IN MX 0 mail
www IN A 12.146.245.42
* IN A 12.146.245.42
oms IN A 12.146.245.42
named.conf
zone "funsunstudio.com." in {
file "funsunstudio.com.zone";
type master;
zone "245.146.12.in-addr.arpa" IN {
file "db.12.146.245";
type master;
db.12.146.245 file:
$TTL 86400
245.146.12.in-addr.arpa. IN SOA ns1.245.146.12.in-addr.arpa. mar$
2006013000 ; serial
3h ; refresh
1h ; retry
1w ; expiry
1h ) ; minimum
245.146.12.in-addr.arpa. IN NS ns1.funsunstudio.com.
245.146.12.in-addr.arpa. IN NS ns2.funsunstudio.com.
32/28.245.146.12.in-addr.arpa. IN PTR ns1.funsunstudio.com.
32/28.245.146.12.in-addr.arpa. IN PTR ns2.funsunstudio.com.
34.245.146.12.in-addr.arpa. IN PTR mail.funsunstudio.com.
42.245.146.12.in-addr.arpa. IN PTR www.funsunstudio.com.
Yes I know I am resolving it for the whole C-Class, but should not affect my issue. Thanks for the help Camelot. BTW I am basing this all off the e-mail AT&T sent me about the setup, so if it's totally wrong please don't yell too bad.

TS1398 How do you rectify "DNS lookup failed" on an iPad?

I cannot access certain web sites and get the above message. I have managed to find instructions on how to fix the problem for a Windows based PC but not an iPad.
Can anyone help? I am not technically minded. We have a BT home hub wireless router.

Hi makc1!
Here is an article for you that talks about DNS settings and can help you troubleshoot this issue:
Non-responsive DNS server or invalid DNS configuration can cause long delay before webpages load
http://support.apple.com/kb/ts2296
Thanks for coming to the Apple Support Communities!
Cheers,
Braden

GWIA doing DNS lookup for local address

Hello,
I am running GW8.0.2 on Netware 6.5sp8. I have a server that our recreation department uses to send out confirmation emails when a customer signs up for a class. The recreation server and the GWIA are on the same subnet.
Here's the problem: When the Rec server sends out the first email confirmation, it gets sent out successfully. Subsequent emails after that fail. After about twenty minutes the next email will go out OK again but subsequent emails will fail.
The verbose logs on the GWIA don't tell me much but the diagnostic logs show what looks like a reverse DNS lookup happening at the GWIA for my local IP address of 10.0.0.3 (the Rec server). This reverse DNS lookup fails (probably a timeout) and subsequent emails from this local Rec server get dropped by the GWIA without the DNS lookup.
DNS is being done by DNS proxy on Bordermanager 9.2. I've bypassed the Bordermanager DNS and the same thing happens. I've made entries for the local Rec server into a route.cfg file but the GWIA seems to want to ignore these entries and keeps doing the DNS lookup.
The wierdest part of the puzzle is that if I restart the proxy on the Bordermanager the next email will go out with, of course, subsequent emails failing. I've looked at the proxy dns cache and can't even find an entry for my Rec server.
Attached are the entries from the Diagnostic logs of the GWIA. Novell tech support has assured me that the GWIA and the BM are working fine. I am also having this problem with a scanner that scans then emails but all other email and Bordermanager are functioning fine. This server and scanner were not having this problem before upgrading to GW8.0.2.
I don't understand why GWIA is doing DNS lookups for a local address and I don't know what I can do to stop it. Any help would be greatly appreciated.
This is a successful transfer right after restarting the proxy: 10.0.0.3 is the Rec server, 10.0.0.130 is the GWIA and 10.0.0.1 is the Bordermanager.
16:04:13 D15 NgwResQuery(3.0.0.10.in-addr.arpa, 1, 12)
16:04:13 D15 Querying server (# 1) address = 10.0.0.1
16:04:13 D15 HEADER:
16:04:13 D15 opcode = QUERY, id = 17615, rcode = SERVFAIL, flags: qr aa rd
16:04:13 D15 query = 1, answer = 0, authority = 0, additional = 0
16:04:13 D15
16:04:13 D15 QUESTIONS:
16:04:13 D15 3.0.0.10.in-addr.arpa, type = PTR, class = IN
16:04:13 D15
16:04:13 D15 rcode = 2, ancount=0
16:04:13 D15 NgwResQuery failed
16:04:13 D15 DMN: MSG 2000909 Accepted connection: [10.0.0.3] ()
16:04:13 D15 Successful login with client/server access: 10.0.0.130:1677
16:04:13 D15 DMN: MSG 2000909 Receiving file: ECMAIL/SYS:\PROGRAMS\GRPWISE\WPGATE\GWIA\3RD\receive\df30 fad4.221
16:04:13 D15 DMN: MSG 2000909 SMTP session ended: [10.0.0.3] ()
This is an unsuccessful transfer:
16:06:08 D04 timeout
16:06:08 D04 NgwResQuery: send error
16:06:08 D04 NgwResQuery failed
16:06:08 D04 DMN: MSG 2000933 Accepted connection: [10.0.0.3] ()
16:06:08 D04 DMN: MSG 2000933 SMTP session ended: [10.0.0.3] ()
Then the successful email comes back into the system:
16:06:26 AA8 MSG 2000909 Processing inbound message: ECMAIL/SYS:\PROGRAMS\GRPWISE\WPGATE\GWIA\receive\DF30FAD4 .221
16:06:26 AA8 MSG 2000909 Sender: [email protected]
16:06:26 AA8 MSG 2000909 Recipient: [email protected]
16:06:26 AA8 MSG 2000909 Queuing to MTA
16:06:26 AA8 MSG 2000909 File: ECMAIL/SYS:\PROGRAMS\GRPWISE\WPGATE\GWIA\wpcsin\4\4daf048 2.8m1 Message Id: (4DAF66F2.B67:244:35687) Size: 163.3 Kb

Thanks Massimo. I could have swore I already did that but when I did it again just to make sure it solved the problem. Appreciate the help. Have a good one.
Originally Posted by mrosen
On 02.05.2011 21:06, avanrav wrote:
>
> Hello,
>
> I am running GW8.0.2 on Netware 6.5sp8. I have a server that our
> recreation department uses to send out confirmation emails when a
> customer signs up for a class. The recreation server and the GWIA are on
> the same subnet.
>
> Here's the problem: When the Rec server sends out the first email
> confirmation, it gets sent out successfully. Subsequent emails after
> that fail. After about twenty minutes the next email will go out OK
> again but subsequent emails will fail.
>
> The verbose logs on the GWIA don't tell me much but the diagnostic logs
> show what looks like a reverse DNS lookup happening at the GWIA for my
> local IP address of 10.0.0.3 (the Rec server). This reverse DNS lookup
> fails (probably a timeout) and subsequent emails from this local Rec
> server get dropped by the GWIA without the DNS lookup.
>
> DNS is being done by DNS proxy on Bordermanager 9.2. I've bypassed the
> Bordermanager DNS and the same thing happens. I've made entries for the
> local Rec server into a route.cfg file but the GWIA seems to want to
> ignore these entries and keeps doing the DNS lookup.
>
> The wierdest part of the puzzle is that if I restart the proxy on the
> Bordermanager the next email will go out with, of course, subsequent
> emails failing. I've looked at the proxy dns cache and can't even find
> an entry for my Rec server.
The reverse DNS done by GWIA is normal, and can't be stopped or tricked.
That it fails in such odd ways must be a bug with the reverse DNS proxy
of Bordermanager though. Apparently on the second lookups, it doesn't
answer in a timely manner (the type of answer is irrelevant, just it
*has* to answer). Use a different, "real" DNS server for your GWIA.
CU,
Massimo Rosen
Novell Product Support Forum Sysop
No emails please!
Untitled Document

DNS lookups timing out

Hello,
I am attempting to deactivate an old DNS server from our network and whenever I turn it off, DNS lookups fail for all clients and the other two DNS servers that I am keeping.
I have checked that the zones have properly replicated and that pointer records exist for both DNS servers. I have run nslookup on the name servers and the lookup times out twice and then provides the correct IP for the name. The primary DNS
server is 2008 R2 and the secondary is 2012. The old server I am trying to deactivate is 2003 and was previously the primary. I can ping DNS names and IP addresses for both servers with no errors and even ping external names as well. Yet,
in a browser, dns lookups still fail. I am sure I am missing something obvious here, but any advice or suggestions on what to look at here would be appreciated.
Thank you,
Josh

So you're saying that if no machines are using the 2003 DNS, meaning that DC/DNS's IP address is not in any machine's NIC, and you remove the server, that you can't resolve any internal resources?
Is your AD domain name 2 levels or more (not including the TLD), such as domain1.domain2.domain3.com? If it is, does the search suffix reflect the multiple levels up to the AD level?
The reason I ask is due to the way 2008 and newer devolves the domain levels to the forest root. Nslookup will use that.
For example, one guy had the same problem in the following discussion (https://social.technet.microsoft.com/Forums/windowsserver/en-US/cf1c0434-3545-4a50-8774-38416e11c417/windows-server-2008-nslookup-request-time-out).
His ipconfig /all looks like the following:
Host Name . . . . . . . . . . . . : server
   Primary Dns Suffix . . . . . . . : test.co.in
   Node Type . . . . . . . . . . . . : Hybrid
   IP Routing Enabled. . . . . . . . : No
   WINS Proxy Enabled. . . . . . . . : No
   DNS Suffix Search List. . . . . . : test.co.in
Note that the search list is three level. When he added co.in to it, the problem went away.
Another possibility is to increase the timeout period. One poster noted that in that discussion. The default is 3 seconds. Some have bumped it up much higher using dnscmd:
dnscmd servername /config /recursiontimeout X
Where "X" is in seconds.
I assume you have all the Windows 2008 R2 DNS hotfixes and updates, too. If not, checkout the following. Run them. If you have them, it will tell you.
DNS Server service does not use root hints to resolve external names in Windows Server 2008 R2
Post Windows 2008 R2 SP1 HOTFIX available.
APPLIES TO •Windows 2008 R2 Datacenter •Windows 2008 R2 Ent •Windows 2008 R2 Std.
Requires a restart.
http://support.microsoft.com/kb/2616776
DNS Server service does not resolve some external DNS names after it works for a while in Windows Server 2008 R2
Hotfix release - (released 4/15/2011)
http://support.microsoft.com/kb/2508835
DNS server stops responding to DNS queries from client computers in in Windows Server 2003, in Windows Server 2008 or in Windows Server 2008 R2 - Post Service Pack Hotfix available.
Does not require a restart.
http://support.microsoft.com/kb/2655960
Ace Fekay
MVP, MCT, MCSE 2012, MCITP EA & MCTS Windows 2008/R2, Exchange 2013, 2010 EA & 2007, MCSE & MCSA 2003/2000, MCSA Messaging 2003
Microsoft Certified Trainer
Microsoft MVP - Directory Services
Complete List of Technical Blogs: http://www.delawarecountycomputerconsulting.com/technicalblogs.php
This posting is provided AS-IS with no warranties or guarantees and confers no rights.

WSA error DNS lookup failed

Similar Messages

Maybe you are looking for