2nd DNS Server- Cause Issues on Main Network?

At work there is already a Windows 2003 Domain controller that serves up DNS and DHCP. I want to try and deploy iCal 2, which requires DNS, Open Directory and a FQDN name for my server.
I already have the DNS name. However, will configuring and running DNS cause any issues on the network with the other computers, which get their DHCP address and DNS requests from the Windows server? I'm not going to deploy DHCP, and thus, I won't be introducing a 'rogue' DHCP server on the LAN. However, I'd like to be sure I'm not going to disturb anything before I proceed.

having your own DNS server is not dangerous unless clients get that address. If you are not running DHCP on the new server your clients will not get that as their DNS.

Similar Messages

EA6500 - using other DNS server only applies to Guest network?

I have an EA6500. I use OpenDNS.org as my DNS server to provide additonal filtering. I have added the Guest network option to separate my network access.
When I change DNS server settings on the EA6500 to those for OpenDNS, I've found they only apply to the Guest network. For the 'regular' network, the DNS server provided by Comcast (my cable provider) is used. I have verified this by connecting various devices to both the regular and Guest networks and checking which DNS server is in use.
I assume this is a bug in the firmware? Or am I doing something wrong? Please advise.

You're welcome
Since we're into really in getting this possibly resolve, I suggest you try rolling back the firmware to the classic version then let's see.
Rolling back the Cisco Connect Cloud firmware to the Classic EA Series router web interface
http://homekb.cisco.com/Cisco2/ukp.aspx?vw=1&articleid=25856

'dns' server failed to upgrade the Network Registrar configuration databases!!!

I have problem with installation the Network Registrar 7.2. According to the install log: "The 'dhcp' server failed to upgrade the Network Registrar configuration databases !!! See C:\NetworkRegistrar\Local\temp/dhcp_upgrade_status_log for details." The dhcp_upgrade_status_log is not found on my PC.
Do somebody familar with such problem?
Thank in advance.

Hi Dave,
Any luck on this thread? Where you able to find a work around on this problem? I am encountering also the same problem thou my OCR and Voting Disk are on raw partition.
I have done clean-up using the "dd" command and re-install CRS a couple of times and still with no luck...
Hope RAC gurus can help us on this.
Any help would be much appreciated.
Thanks!

Sbs2008 seems to want to ping everything in IPv6 and cannot see a lot of hosts by DNS name - causing issues with RWW and Connect to My Computer

HI,
we have an SBS2008, has been working fine for a long time, don't know when or why this issue has started.
A user couldn't connect to PC using RWW - so I checked rdp to that pc from the server and also couldn't rdp to pc - checked ping and couldn't find host = no DNS (although there IS an entry in DNS). Ping by IP is fine 192.168.10.114
Added host entry for this PC and all works fine
BUT...
there are other users with the same problem, and when i ping other devices by name from the SBS it either can't see them, or it uses IPv6 - something i think i remeber us disabling (with the help of Microsofdt Support) year sago when the server went in,
and had internet DNS issues.
I have tried flushing dns cache on server to no avail.
All PCs show in the SBS console as status "unknown" which i have seen before with DNS issues.
can anyone help?
Thanks,
JJ

Hi,
Lets make sure we are running Single NIC on the server. DNS pointing to Servers IP Address itself. Disable TaskOffloading and Receive Side Scaling on the NIC and reboot the server.
Note - Don't disable IPV 6
If you have any further queries you can call me - 214-347-7988214-347-7988
Binu Kumar - MCP, MCITP, MCTS , MBA - IT , Director Aarbin Technology Pvt Ltd - Please remember to mark the replies as answers if they help and unmark them if they provide no help.

Manually provided DNS server addresses are higher priority than DHCP's

Disclaimer: Apple does not necessarily endorse any suggestions, solutions, or third-party software products that may be mentioned in the topic below. Apple encourages you to first seek a solution at Apple Support. The following links are provided as is, with no guarantee of the effectiveness or reliability of the information. Apple does not guarantee that these links will be maintained or functional at any given time. Use the information below at your own discretion.
With the recent revelation of DNS server security issues, many have expressed a desire to use DNS servers they know to be secure rather than the servers specified by their routers via DHCP, which often are those of a particular ISP.
When you manually enter a DNS server address in Mac OS X Leopard's Network preference pane, the manually entered address(es) appear below any DHCP-provided addresses (which are shown in grey as they are unchangeable), leading one to assume that DHCP-provided addresses always have priority over any a user may specify.
However, a check of the /etc/resolv.conf file generated by Mac OS X shows that in fact user-provided DNS addresses will supercede any provided by DHCP.
As an example, if your router promotes itself as a DHCP server, its IP address, say "192.168.0.253," will appear, greyed out, in the Network->Advanced->DNS preferences pane.
If you then add, say, OpenDNS' addresses of "208.67.222.222" and "208.67.220.220," the preferences window will show:
192.168.0.253 (greyed out)
208.67.222.222
208.67.220.220
But the generated /etc/resolv.conf will show the order Mac OS X will actually reference the servers is:
nameserver 208.67.222.222
nameserver 208.67.220.220
nameserver 192.168.0.253
While this is non-intuitive, given how the addresses are displayed in the preference pane, it is exactly the way a user would hope things would work - allowing one to specify DNS servers to be used in lieu of any a router provides, especially handy if the router propagates the address of a DNS server that is having issues, that is untrusted or is simply overloaded or offline.
Do you want to provide feedback on this User Contributed Tip or contribute your own? If you have achieved Level 2 status, visit the User Tips Library Contributions forum for more information.

That's very good to KNOW.
I figured it as such as I have some manual entries for the office and I don't use profiles, so it stays there when I go home.
I notice a slow-down when office DNS entries are used at home -as one would suspect.
I do like KNOWING that it's the case though - thanks for the info!
Scott

NIS+, DNS server, DHCP

I have installed Solaris 2.8 with all the patches on a PC. I installed NIS+ populating the tables from the files included into the folder /nis+files. Now I want to install DNS server for a small local network made up by two hosts: a Window2000PC and a Solaris 2.8 PC. I want to use DNS server of Solaris 2.8 to test the functionality of a DNS client of the PC. And after I want to install DHCP to test the same funcionality . I should like to make things step by step, first with DNS server and after with DNS server together to DHCP server too, both installed on Solaris 2.8, coexisting .
On the network i have another host ,a router, that gives me the acces to Internet
How do i install DNS server on Solaris 2.8, and DHCP server ? Can someone help me ?
Thank you in advance
Marcello

Hi Guys,
I want to thank all for the valuable information.
I thought of sharing my own comments.
I have two SunSparc Ultra10 machines. I want to network them together using a Linksys router (Cisco) so they could communicate and also to be able to access the Internet. I let the router to do the (DHCP) work, however; since the routher doesn't send hostname I always got 'unknown' and I need to have proper hostname to do my training work. So, I've read this page and I thought I could contribute the result of my work.
(assuming my hostname= sys41)
On Solaris 10, all what I did,
1. On /etc/hostname.hme0 .. I've added,
inet sys41
2. I've created /etc/nodename .. and added,
sys41
3. On /etc/default/dhcpagent .. added,
REQUEST_HOSTNAME=yes
actualy, it was there, I just removed the comment (#) and changed it from no to yes
and double checked that I have ,
PARAM_LIST=1,3,6,12,15,28,43
That's all, I didn't need to change anything else nor add any script file or anything.
The following files where not there on my Solaris10 machine,
/etc/init.d/network
/etc/init.d/inetsvc
On Solaris 9,
1. On /etc/hostname.hme0 .. I've added,
inet sys41
2. I've created /etc/nodename .. and added,
sys41
3. On /etc/default/dhcpagent .. added,
REQUEST_HOSTNAME=yes
actualy, it was there, I just removed the comment (#) and changed it from no to yes
and double checked that I have ,
PARAM_LIST=1,3,6,12,15,28,43
I had to add 15,6,28 on my Solaris 9
4. /etc/init.d/network
changed all 'unknown' to 'sys41' which is my hostname
5. couldn't find /etc/init.d/inetsvc !
Then I've deleted /etc/nodename on Solaris 9.0 and still worked fine ..
On Solaris 10, I've deleted /etc/nodename and it didn't work.
So, I guess for Solaris 10 /etc/nodename is very important .. For the Solaris 9, /etc/inet.d/network did the job !!
Hope my comments were helpful... Regards ..

Cisco 877W acting a a DNS server. Does it answer external DNS queries coming from the WAN

Hello,
I have a Cisco 877W running on my ADSL2+ service at home.
It is setup to act as a DNS server to answer DNS queries for my LAN and has the below commands as part of its configuration
ip dns server
ip dhcp pool LAN
network 192.168.2.0 255.255.255.0
default-router 192.168.2.254
dns-server 8.8.8.8
My question is, when I scan my WAN IP for open ports, port 53 (DNS) is open. Does this mean my router will be acting as a DNS server for anyone on the internet who directs DNS queries to my WAN IP?
If so, am I able to turn off port 53 towards the Internet, or do I need to add an an access-list to only accept queries from my internal network.
Thanks for your feedback.

That's correct. The "ip dns server" command will answer queries on any interface.
Given that your DHCP server is telling your clients to use Google DNS and not your router, I would just turn the router's DNS server off with the "no ip dns server" command.
Setting up an ACL (and/or inspection or zone-based firewalling) on your Internet-facing interface is the best practice to protect your network in general, not just to prevent external DNS queries.

DNS Server Having Intermittent Issues with Open Directory

I work for a school and we're undertaking the large task of moving from Xserves running 10.6.8 to Mac Minis running 10.9. I have a lot of experience with OS X Server (I held ACSA up until they ditched it, and ACTC through the current OS) but I've hit a fairly large snag in configuring our DNS server. We currently run DNS via an AD server that is being retired at the end of the summer, so this is the first time our DNS will be Mac-based. That said, our network is ridiculously simple as we are a very small school. For the most part it's a flat network using the same IP range for our wired and wireless internal clients (we do have a vlan for guests but that's through Aerohive). I configured the DNS by hand, recreating the entries in our AD server (there were only about a dozen) and then adding in things that should have been there in the first place (e.g. printers and some other devices with static IPs that I'd like FQDNs for). Everything seemed to be working fine...until trying to log into Open Directory accounts.
For some background, the DNS server running 10.9 was the first server we upgraded and it was a completely clean install. We run DHCP on another Mac Server currently running 10.6.8 and it does have the proper OD server listed. All DNS entries for the OD server match our current DNS server. The issue is that it's taking some users 5-6 tries to log in with their network accounts. The errors they receive range from the login window shaking to it stating the user cannot log in at this time. This seems to be worse on client machines running 10.9. but it's appearing on machines running 10.6.8-10.9.3.
In my troubleshooting, I found that if I log in as a local user to one of those machines and do a dig for the OD server the results vary, this is where it gets weird. For example, if I dig ourodserver.ourdomain.org it will sometimes return host not found or it will sometimes resolve. If I ping the same thing it will sometimes work (even after stating it cannot resolve the host) and it will sometimes fail. If I then try a dig for the .local (e.g. ourodserver.local) it also yields the same varied results. However, on every machine that I've tested if I then open a Finder window and navigate to the server via the "Shared" menu and connect I have no trouble connecting and then magically my digs and pings in terminal work. If I revert DNS back to point to our old Windows server the issue goes away. I have meticulously combed through that server many many times now and am not seeing any missed entries. Any idea what could be causing this?

You must have a working DNS service, and the server's hostname must match its fully-qualified domain name. To confirm, select the server by name in the sidebar of the Server application window, then select the Overview tab. Click the Edit button on the Host Name line. On the Accessing your Server sheet, Domain Name should be selected. Change the Host Name, if necessary. The server must have at least a three-level name (e.g. "server.yourdomain.com"), and the name must not be in the ".local" top-level domain, which is reserved for Bonjour.
The primary DNS server used by the server must be 127.0.0.1 (that is, itself) unless you're using another server for internal DNS. The only DNS server set on the clients should be the internal one, which they should get from DHCP if applicable.

New HP LaserJet Pro MFP M127fw network connection impacts DNS server of my ISP

Hi,
i am not well with english, so please sorry
I have deliverd new HP LaserJet Pro M127fw to my client who have 3 PC-s Win7 64bit, one 4 port switch, and one TP-link ISDN modem-router.
I have installed the printer over network and everything is done well. Printer is working in printing/scanning/fax/ and copy.
In few hurs local ISP has called and said that his DNS server is impacted by something from local LAN. After investigating, i have fount that printer is doing impact to DNS of ISP. When i remove LAN cable from printer, everything is fine with network
I have installed new frimware from HP.com. also I have change Admin pass. The new up to date software is installed.
Still have problem, and no solution. For now printer is working with USB connection, but that is not a option.
HP please help!

Hi @ITMračunari ,
I see that you are having issues with the printer connected by a Ethernet cable to the network, the printer is impacting the DNS of ISP. I would like to help.
Turn the IPv6 off on the printer to see if that will help.
Go to Setup, Network Setup, Network Services, IPv6 and turn it off.
This is a Consumer product and has been proving to work with a direct connection to a router.
I noticed in your post that you are also using a switch, which could possible cause other conflicts.
Hope this helps.
Have a nice day!
Thank You.
Please click “Accept as Solution ” if you feel my post solved your issue, it will help others find the solution.
Click the “Kudos Thumbs Up" on the right to say “Thanks” for helping!
Gemini02
I work on behalf of HP

Main Server cannot ping the 2nd server in another location but the 2nd server can ping the main server

I have 3 servers : Main server, and 2 file servers in another country.
My main server can only ping the 2nd file server.
But both of our 2 file servers from another country can ping the main server.
In short, I cannot remote to the first file server.
The settings on both file servers are the same. And I don't have issues in accessing the 2nd file server using the Main server.
Can somebody have the patience to help me figure out the issue?

Being able to ping the server does not mean that you remotely access it.
If you are trying to RDP a server then you need to check that RDP is enabled on the server and that traffic to port 3389 is not blocked or filtered. You can use PortQryUI for checking.
For testing, you can temporary disable security software running on the servers and try again. Also, check the filtering done on network equipment in between your servers.
This posting is provided AS IS with no warranties or guarantees , and confers no rights.
Ahmed MALEK
My Website Link
My Linkedin Profile
My MVP Profile

Known Issue: "DNS server could not be reached" when creating or updating a RemoteApp collection using template images for some locales

When trying to create or update Azure RemoteApp collections that use a template image for some non-EN-US locales, it might fail with error "DNS server could not be reached". You might also see error code "DnsNotReachable".

Cause: There was a issue in Azure in which decimal punctuation was not treated properly if the locale of the template image used a comma (,) instead of a period (.).
Workaround: Before a fix was applied, the workaround was to use template images based on a locale that uses a period to delimit decimals, such as EN-US.
Resolution: As of March 19, 2015, a fix for this issue has been applied to Azure. You should once again be able to create collections from template images that use non-EN-US locales. If you continue to have this problem, please
try the workaround. If that works and the only difference in the template images is the locale, please email remoteappforum (at Microsoft). If the workaround does not work, the issue is likely caused by a DNS configuration issue such as:
No valid forwarders to public DNS servers configured on your internal DNS server(s).
A valid internal DNS server is not specified on your Azure RemoteApp VNet.
A VNet or internal network configuration issue is preventing the internal DNS servers from be reached by the VMs in the RemoteApp collection.

Internal DNS server and NAT routing issue.

Hi -- I am not terribly experienced with DNS and I am running into an issue that I can't seem to resolve. My company.com DNS information is hosted by an outside ISP for email, web, etc... but I have configured an A record there to point to the public IP to my mac os x server (server.company.com).
We have a cisco router configured with one to one NAT from the public IP to the internal IP for our server in a 192.168.15.x subnet. The same router is running DHCP and and NAT on that subnet under a different public IP provided by our ISP.
Our server is running DNS with recursion and has a "company.private" zone set up for internal services and machine names. Thus, the server is accessible via "server.company.com" from the outside and "server.company.private" from the private LAN.
The problem is that I would like to be able to access some services simply via "server.company.com" both inside and outside the private network. Now, accessing the "server.company.com" services from the private lan does not work because the name resolves to the external IP and the external IP cannot be used internally due to NAT.
Is there a way to configure my internal DNS server to respond with the appropriate private address when receiving a query only to "server.company.com" and forward requests on for anything else on "company.com"?
I know that I could manually duplicate all entries for our domain from my ISP and host the same entries for internal clients, but it would be much easier to only have our server handle requests for itself. The server is running OS X Server 10.4.11.
Thanks

Is there a way to configure my internal DNS server to respond with the appropriate private address when receiving a query only to "server.company.com" and forward requests on for anything else on "company.com"?
Ordinarily, no. Once your server thinks it is responsible for a zone (e.g. company.com) then it will answer all queries for that domain and never pass them upstream. Therefore you'd have to replicate all the zone data, including all the public records, and maintain them both.
The one possible exception to this (I haven't tried) is to create a zone for server.company.com that has your internal address. In theory (like I said, I haven't tried this), the server should respond to 'server.company.com' lookups with its own zone data and defer all other lookups (including other company.com names since they're not in a zone it controls). Might be worth trying.

DNS Router & Server Setup Issues

I'm running a Mac OS X Server on my local network. I have a D-Link 655 router that connects the machines and conencts to the internet.
I'd like to use OS X Server's DNS instead of my ISP's. In the D-Link Router I've set the DNS to the OSX server in the WAN section. Unfortunately it doesn't allow my clients on the network to connect to the internet when I do this.
If I set the DNS on the client to the OS X server it works fine. Or if I set the DNS on the router to my ISP's (or Google's) it works fine too.
Is this a route configuration issue? Or is this an OS X Server issue?
Any thoughts on how I might figure out where the problem lies and how to solve it?
Thanks in advance

Your DHCP server needs to pass out the IP address of your DNS server (only).
In general, you should not include any references your ISP DNS servers anywhere on your network. Not in your DHCP server, not in your clients, and not as a forwarder within your own DNS server configuration.
When you make the change, renew the leases of the devices that have the old address if needed, and alter the hard-set DNS server settings in the devices that don't use DHCP.
The one sort-of exception to this: your DNS server should have its Network settings DNS server address set as 127.0.0.1; as the localhost address. Not as its IP address.
And in general, routers don't do DNS. (Though it's common for folks to refer to devices that provide routing, NAT firewall, potentially VPN servers and other services as a "router", technically routers don't typically include DNS services. And very few gateway devices - even the fancy ones and expensive ones - implement DNS services.) Routers (and particularly the usual sorts of network gateways) can generallty have a DNS configuration for two reasons; to forward DNS requests to an upstream DNS server(s), and to have a DNS server address for an embedded DHCP server to pass out to DHCP clients.
In your particular case, the IP network connectivity is very likely present in both of your test configurations, it's that your clients aren't getting DNS translations.
Probably more than you ever cared to learn about setting up DNS services on OS X Server.

DNS and other issues with SBS Server 2003

I see a lot of excellent information out here in the discussion group but I understand little of it. I am technology savvy but not an IT man, so please be patient when I ask questions to clarify your responses.
My first question should be an easy one to answer. Has anyone told you all that they appreciate your help today?
I DO !!! Thank you for your kind nature and your choice to help others (like me)!
Our 2003 SBS server has multiple issues. The server has two NICs; one for the WAN connection and one for the LAN.
Windows IP Configuration
Host Name . . . . . . . . . . . . : mathewsserver01
Primary Dns Suffix . . . . . . . : MathewsElectricalInc.local
Node Type . . . . . . . . . . . . : Unknown
IP Routing Enabled. . . . . . . . : Yes
WINS Proxy Enabled. . . . . . . . : Yes
DNS Suffix Search List. . . . . . : MathewsElectricalInc.local
Ethernet adapter Mathews Local Area Connection:
Connection-specific DNS Suffix . :
Description . . . . . . . . . . . : Broadcom NetXtreme Gigabit Ethernet #1
Physical Address. . . . . . . . . : 00-1E-C9-CE-C5-E7
DHCP Enabled. . . . . . . . . . . : No
IP Address. . . . . . . . . . . . : 192.168.16.2
Subnet Mask . . . . . . . . . . . : 255.255.255.0
Default Gateway . . . . . . . . . :
DNS Servers . . . . . . . . . . . : 192.168.16.2
Primary WINS Server . . . . . . . : 192.168.16.2
Ethernet adapter Network Connection to Router:
Connection-specific DNS Suffix . :
Description . . . . . . . . . . . : Broadcom NetXtreme Gigabit Ethernet #2
Physical Address. . . . . . . . . : 00-1E-C9-CE-C5-E6
DHCP Enabled. . . . . . . . . . . : No
IP Address. . . . . . . . . . . . : 10.yyy.xxx.10
Subnet Mask . . . . . . . . . . . : 255.255.255.0
Default Gateway . . . . . . . . . : 10.yyy.xxx.1
DNS Servers . . . . . . . . . . . : 192.168.16.2
Primary WINS Server . . . . . . . : 192.168.16.2
NetBIOS over Tcpip. . . . . . . . : Disabled
#1 In Event Viewer (Local) Application I have recurring event Source=Userenv Event 1053 every 9 minutes.
#2 In Event Viewer Directory Service I have recurring event Source=NTDS General Event 1126 every hour.
#3 In Event Viewer DNS Server I have recurring event Source=DNS Event 6702.
Also, I am surprised that the LAN NIC #1 is not set up as DHCP!
What information may you require to assist me?
tmath2 in Houston

Hi,
Could you type “route print“ on CMD, and post the result here?
It would be helpful if you may describe the phenomenon of the problem? such as changes before the problem occurs, any prompt error message, related operations except for these logged Event ID.
You may reference the link below for reference.
Event Source Userenv and Event ID 1503:
http://www.microsoft.com/technet/support/ee/transform.aspx?ProdName=Windows+Operating+System&ProdVer=5.2&EvtID=1053&EvtSrc=Userenv&LCID=1033
Event Source NTDS and Event ID 1126：
http://support.microsoft.com/kb/305837
DNS 6702：
http://technet.microsoft.com/en-us/library/cc735806(v=WS.10).aspx
Best Regards,
Eve Wang
Thanks Eve! I appreciate your attempt to help. I inadvertently posted my reply for the Route table without quoting you first. Sorry about that.
As far as the problems go, time to logon to server > 5 minutes. Group Policy issues abound. DNS issues (as mentioned). Thought I had an easy one for you. Sorry about that.
I have one client computer running Windows 7x64 (call it My Workstation) that I back the server and other client PC's up to. The clients have no problem, but after a day or two, the server can no longer "see" the My Workstation and the backup fails.
But then when I reboot the My Workstation, the server "sees" it again!
Furthermore, I backup a 10TB RAID 6 array on
My Workstation to yet another client for redundancy (Call it WORKSTATION2-PC), but if I try to click on the computer icon in Windows Explorer for WORKSTATION2-PC, I get the error "Windows cannot access \\WORKSTATION2-PC. However if I type in
the ip address or WORKSTATION2-PC, I have no problems.
tmath2 in Houston

Global query block is causing a DNS server to fail a query with error code Name Error exists in the DNS database for WPAD

Global query block is causing a DNS server to fail a query with error code Name Error exists in the DNS database for WPAD on a Windows 2008 server.

The global query block list is a feature that prevents attacks on your network by blocking DNS queries for specific host names. This feature has caused the DNS server to fail a query with error code NAME ERROR for wpad.contoso.com. even though data
for this DNS name exisits in the DNS database. Other queries in all locally authoritative zones for other names that begin with labels in the block list will also fail, but no event will be logged when further queries are blocked until the DNS server
service on this computer is restarted.

2nd DNS Server- Cause Issues on Main Network?

Similar Messages

Maybe you are looking for