DNS (internal domain has same name as external website)

Our internal domain name is called "abc.com" and our company website is called "abc.com". I have created an "A" record that points to
www.abc.com so staff can browse the website from within the office. The problem is that if people enter "abc.com" from a web browser with the office it does not resolve in an efficient manner. Can someone please
help?
Interflex

Hi Interflex,
I agree with Ace’s option 2 and 3 just like what I thought.
I still consider the idea which Jorge provided about prevent register DC’s A record . This probably cause some un-expected issues,
because this record is used for DFS and GPOs. So I don’t recommend this method.
Meanwhile , I have thought as same as Ace’s second suggestion, if the environment or policy of your company allow deploy IIS on your
DC server , I thought this could be a possible resolution.
And I have a tips for your reference. If client’s browser is IE, by default, when you type web address in address bar,
and press “ Ctrl + Shift +Enter “,IE will auto add Prefix WWW to the beginning of typed web address. In your case , users just type “abc” in address bar, and press “ Ctrl + Shift +Enter “
You can set this at “Prefix and Suffix option” which located at “Internet Options”/ “General”
Tab / ”language” button.
Thank.
Tiger Li
Hi Tiger,
I've actually found by default, just hitting Ctrl + Enter (without the shift key) puts in the 'www' and 'com.' but it only works for the 'com' TLD' by deffault. I guess you could add 'net' in the General tab, Language, suffix option to use ctrl-shift-enter,
or whatever the actual internal TLD name is.
Cheers!
Ace
Ace Fekay, MVP, MCT, MCITP EA, MCTS Windows 2008 & Exchange 2007, MCSE & MCSA 2003/2000, MCSA Messaging 2003, Microsoft Certified Trainer, Microsoft MVP - Directory Services. This posting is provided AS-IS with no warranties or guarantees and confers no
rights.

Similar Messages

Follow up - DNS (internal domain has same name as external website)

Hi,
I am following up with on previous blog entry about resolving an domain internal name to an external website found here:
https://social.technet.microsoft.com/Forums/windowsserver/en-US/4d97325b-ff3a-4f46-ba6e-dc3f4ff978e1/dns-internal-domain-has-same-name-as-external-website
On October 30, 2014
HayashiTech provided a response suggesting the use of netsh interface portproxy on the DC's to resolve this issue. There has been no feedback to this suggestion and I am very curious what opinions are out there for this suggestion as it appears to be the
best option provided yet.
Thank you in advance as well for all the great guidance I have found provided by Ace and his followers.

Interesting question. I've not seen that solution before, but having done a test on my lab setup it certainly seems to work as expected. Eg, using :
netsh interface portproxy add v4tov4 listenport=80 listenaddress=dc1.abc.com connectport=80 connectaddress=www.abc.com
on my DC where I've setup a working external domain name with the www record pointing to the website, and the non-www record pointing to the DC, requests to the non-www address are successfully being redirected to the www address (after confirming it didn't
happen prior to adding the portproxy).
So on the face of it that does look like a workable solution. I haven't used it myself in anger obviously, but the two downsides I can think of immediately to this solution are :
1) This operates as a proxy, so unlike the IIS method that Ace mentioned where it would tell the client to go to the www address instead (so the client connects direct), this method keeps your DC acting as a middle man, eg all communications to that address
go through your DC rather than direct from the client to the website. Depending on what they're doing on the website this may or may not be an issue for you.
2) Since the client is continuing to connect to the DC throughout, if you ever did need the have something on the DC responding to port 80 then you could have issues. That said, according to
https://technet.microsoft.com/en-us/library/cc731068(v=ws.10).aspx the portproxy listenaddress can be a FQDN rather than IP, so that could mitigate any issues there.

Server 2012 - Can't access external website from internal domain with same name. Tried everything.

Hello All.
I have read loads of forums and tried numerous fixes and configurations, but nothing seems to work and I am extremely frustrated at this point.
I have a client where I setup Server 2012 Standard with Exchange 2013. After reading best practice documentation for DNS naming and reasons not to use ".LOCAL" I opted to use ".com.na" in which case the Internal Domain Name and Internet
Website now has the same name.
When attempting to open the extarnal website eg. "www.company.com.na" from a client PC within the internal "company.com.na" Domain, I keep getting error "403 - Forbidden: Access is denied. You do not have permission to view this
directory or page using the credentials that you supplied."
I should also mention, the website is hosted by an ISP and not locally.
I added a "www" Host record in the Forward Lookup Zone, I have added the url and ip address to the Hosts file on a client pc (Windows 7) and even tried setting up Split-Brains DNS. Nothing seems to work.
Running a Tracert takes me to the correct public ip address of the website, but I keep getting this 403 error.
I am so sick and tired of this issue that iI am at the point of backing up the Exchange and re-rolling the entire server with the ".local" DNS domain name. I have a mirror setup in a VMWare environment and simply using "rendom" to rename
the domain seems to cause new issues with Exchange connectivity.
Any pointers and help will be greatly appreciated.
Thanks in advance.
Hentie Loots

I opted to use ".com.na" in which case the Internal Domain Name and Internet Website
now has the same name.
This ends up with a split-DNS stup for internal and external resolution which requires extra administration tasks and attention from the administrators.
When attempting to open the extarnal website eg. "www.company.com.na" from a client PC within the internal "company.com.na" Domain, I keep getting error "403 - Forbidden: Access is denied. You do not have permission to view
this directory or page using the credentials that you supplied."
I should also mention, the website is hosted by an ISP and not locally.
I added a "www" Host record in the Forward Lookup Zone, I have added the url and ip address to the Hosts file on a client pc (Windows 7) and even tried setting up Split-Brains DNS. Nothing seems to work.
Running a Tracert takes me to the correct public ip address of the website, but I keep getting this 403 error.
This means that you are able to reach the Website but it is responding with the access denied error message. That should be checked on the middleware level so if this is IIS running then I would recommend asking them in IIS forum: http://forums.iis.net/
If this is a Website that is completely managed by your ISP then I would recommend checking with them.
This posting is provided AS IS with no warranties or guarantees , and confers no rights.
Ahmed MALEK
My Website Link
My Linkedin Profile
My MVP Profile

Can I run 2 different domains with same name but on 2 different machines?

I am trying to setup 2 domains with same name (sharedcds1) on 2 different machines (Machine1 and Machine2).
          When I start the weblogic managed server 1 (sharedcds1managedserver1) on Machine2, it throws an error saying it has some conflicts with the managed server 1 running on Machine1. How did the managed server of one machine know about the other server. Can I run 2 different domains with same name but on 2 different machines?
          Here is the error in the log -
          <Jun 14, 2005 10:53:29 AM EDT> <Error> <Cluster> <BEA-000123> <Conflict start: You tried to bind an
          object under the name weblogic.transaction.coordinators.sharedcds1managedserver1 in the JNDI tree.
          The object from 4596206652609838848S:130.170.61.153:[9505,9505,-1,-1,9505,-1,-1,0,0]:sharedcds1:s
          haredcds1managedserver1 is non-clusterable, and you have tried to bind more than once from two or m
          ore servers. Such objects can only be deployed from one server.>
          <Jun 14, 2005 10:53:29 AM EDT> <Error> <Cluster> <BEA-000123> <Conflict start: You tried to bind an
          object under the name weblogic.transaction.coordinators.sharedcds1managedserver1 in the JNDI tree.
          The object from 8842351474821025197S:130.170.61.154:[9505,9505,-1,-1,9505,-1,-1,0,0]:sharedcds1:s
          haredcds1managedserver1 is non-clusterable, and you have tried to bind more than once from two or m
          ore servers. Such objects can only be deployed from one server.>
          Thanks
          Satish

Yes you can. Make sure that domains configured to use different multicast address. WLS uses multicast for communications between nodes in domain.
          although your configuration will work, you could have troubles if you going to execute inter-domain calls between domains/servers with the same names.

Can i rejoin ny SCVMM 2012 server to domain with same name & IP address?

Dear all..
I am in situation where i have to rejoin my scvmm server to domain with same name & ip address.one of the fool admin has deleted my SCVMM's computer object from AD. I have recreated the object & tried to log on but no luck.. i have to rejoin
the server.
Does it have any risks involved or its just fine?

Hi,
First the behavior is normal. If an computer accounts is deleted, you cannot continue using the server without rejoining.
SCVMM it's not depending (integration) on active directory in such way as Exchange.
So, if the computer accounts has been deleted, there is no issue in creating a new one and rejoin the server. As long as the application on the server is able to look up any required directory services, it should be happy again.
Best Regards,
Jesper Vindum, Denmark
Systems Administrator
Help the forum: Monitor(alert) your threads and vote helpful replies or mark them as answer, if it helps solving your problem.

Two soa domain with same name "TestSOADomain" sharing same SOA schema ?

I tried creating two soa domain with same name "TestSOADomain" (different path) sharing same SOA schema .However one domain came UP to Running mode and other domain going to AdminMode and "soa-infra" application of that domain is not active.
I do want to understand can this be possible with SOA ,ie. two soa domain sharing same SOA schema ?
If possible what are all the problems might come
1. While executing soa composites with asyncronous behaviour ?
2. How the polling services will work ?
3. will the XREF_DATA table ROW_NUMBER column inserted uniquely while inserting data from two different domain into same SOA schema ?
4. Other issues ?
Thanks

Each domain is expected to refer to its own unique database schema. Same SOA schema should not be shared by multiple SOA clusters/domains. It is technically possible though, I suppose, and still can run fine any one SOA environment at any given time with the other SOA environments/domains (sharing the same SOA schema) shutdown. It is not the general/recommended practice to share SOA schema across domains and there could be potential implications and unexpected behavior, particularly when the SOA environments pointing to the same schema are all running at a time.

Migrating multiple domains with same name - how? Rename? Migrate through temporary domain?

Hi,
we have acquired another company, and they have multiple, separate domains with the same name (every site has a domain with NetBIOS name "COMPANY" and DNS name "company.local"). Now we want to migrate all these domains into ours using
ADMT.
Unfortunately, we did not manage to migrate one of these domains completely, so the trust must remain established for some time. But we have to continue with the second domain - which normally would require a trust, but of course we can't establish a trust
to two domains with the same name at the same time.
I found two potential solutions for the dilemma, but I'm not sure if both are reasonable:
1) Rename the domain with RENDOM.EXE to COMPANY2 and company2.local and then migrate with ADMT
2) Migrate COMPANY to a temporary domain such as COMPANYTEMP and then migrate from COMPANYTEMP to our domain
Given that there are roughly 100 users, 2 domain controllers and 8 other servers, what would be the better approach? Is option 2 possible at all, so would I be able to use the sidHistory attribute migrated from the original COMPANY domain in our domain at
all?
There is also an Exchange 2007 server, which seems to make option 1 impossible unless we find another way to migrate it (like, export all mailboxes to PST before migration) ...

Ok, that's what I expected. Still, I have servers in the old domain, so if I do these steps:
first create a new temporary domain i.e COMPANYTEMP and
create trust between COMPANYTEMP -
COMPANY(Right)
then do the migration with sidHistory from COMPANY(right) --> COMPANYTEMP ,
disconnect the domain COMPANY(right) ,
users will lose connectivity to any servers in the domain. I understand that it does not work with all domains connected? Of course I can't make OURCOMPANY's domain controllers see the DCs of COMPANY (right) in DNS (though I could achieve it the other way
round).
My original plan was:
first create a new temporary domain i.e COMPANYTEMP and
create trust between COMPANYTEMP -
COMPANY(Right)
then do the migration with sidHistory from COMPANY(right) --> COMPANYTEMP ,
create trust between OURDOMAIN and COMPANYTEMP
then do the migration with sidHistory from
COMPANYTEMP --> OURDOMAIN,
Migrate users
Migrate computers
Migrate servers
remove trusts and old domain
But I see that this will not work out, right? So, my only option would be:
first create a new temporary domain i.e COMPANYTEMP and
create trust between COMPANYTEMP -
COMPANY(Right)
then do the migration with sidHistory from COMPANY(right) --> COMPANYTEMP ,
Migrate computers and servers to COMPANYTEMP
Install new Exchange server in COMPANYTEMP
migrate mailboxes to COMPANYTEMP
disconnect / abandon COMPANY(right)
create trust between OURDOMAIN and COMPANYTEMP
then do the migration with sidHistory from COMPANYTEMP
--> OURDOMAIN,
Migrate users
Migrate computers
Migrate servers
Migrate mailboxes
remove trusts and old domain
And to minimize user impact, all this would have to be done in one go (over night), which is hardly possible .........................

Changing a DC in Domain, with Same name and IP

hey we have a domain with 3DC (srv1, DC Operation Master and GC ; srv2 DC and GC ; and srv3 only DC)
srv3 is a file server with many shares like //srv3/folder/myfiles
so i really want to keep the name and IP!!
my plan is to degrade the srv3 to normal server and add to a workgroup.
Delete it from ad under domain controllers. So my domain only works with my two domain controllers.
Wait 1 or 2 Days. perhaps do a manuel replication ... so be clear tat the srv3 is really removed from the domain.
And after all i would take my brand new Server give him same name and ip an add him to the domain. level him up to a dc and i hope all would be fine :)

Greetings!
Just demote the DC successfully (No Force Removal!)and check the replication between two domain controllers. If everything were in good condition you can use the same IP and Name in a new server. No need to wait for couple of days.
Regards.
Mahdi Tehrani |
|
www.mahditehrani.ir
Please click on Propose As Answer or to mark this post as
and helpful for other people.
This posting is provided AS-IS with no warranties, and confers no rights.
How to query members of 'Local Administrators' group in all computers?

Import of transport from a system that has same name as target system

Hi,
We have an ECC6.0 SPS10 system with SID as "RD2" and the transport
number range on this system is from RD2K900000 to RD2K999999.
If we import a transport into our ECC system(SID is RD2)from an
external system(vendor system) which has the same SID (RD2) and this
external system transport number is RD2K9A0505, does the transprot
number range change in our system?
After the import of the transport(RD2K9A0505) into our system, if we
create new transport request, what would be the transport number
assigned to it?
will it change to RD2K9AXXXX or will it be the same number range it has
before as RD2K9XXXXX.?
Appreciate your answers.
Thanks,
Vinod.

Hi,
This was very unusual to see, anyways let me put my answers
1. the systems has to be configured in landscape to import the transport requests, and in landscape no two systems can have same SID.
2. The transport system has a specific order tht need to be followed, DEV>QAS>PRD, so you did not mentioned the scenario here(please put doenthe scenario if you are importing from DEV of vendor to your DEV), and the SP level and kernel and everything need to be maintained on same level between source and Target else there is possibility for import error or chnages donot meet the criteria in target.
3. Usually when you do imports between the DEV and QAS or PRD the Change request numbers in DEV are usually high but by importing this into QAS the number range for CR will not change,( here the SID are different). In your case i was uncertain since SID are same and number range format is different.
4. Kindly note that SAP recommends no two SID in landscape can be same, so your source system should be from different landscape where transports can be done only through manually from OS level using tp command, and im in doubt wether tp can recognize the change request that was different in format as a change request number.
Regards....
Edited by: Sita Rr Uppalapati on Dec 8, 2008 8:32 PM
Edited by: Sita Rr Uppalapati on Dec 8, 2008 8:34 PM

DNS not querying/ recognizing/ resolving internal domain name using nslookup

I've setup a virtual lab for practice purpose on VMware 8 workstation.
I have already asked this question in vm community but still got no answers hence asking it here.
In my vmware workstation 8, for practice lab purpose my setup is as follows:-
1] Win 2k8R2 Enetrprise edi.vm as my DC with DNS & DHCP configured and working perfect. DNS is getting resolved internally via NSLOOKUP. Server has manual ip assigned...192.168.1.xx series.
2] Win xp vm as my Client and getting dhcp lease address from the above DC and also the DNS is getting resolved internally via NSLOOKUP.
Now that these two vms are communicating perfectly with each other, I thought about connecting them to my physical internet.
So, in the Virtual network editor, I added a Host-only type network named
VMnet 04 with Use local dhcp service checkbook Disabled and on each of these vms, in network adapter settings, selected specific virtual network and pointed it to
VMnet 04 in both vms.
Now, in both the vms, an additional network connection got added and hence was successfully able to browse internet from both vms.
Now the REAL problem:--
After the above configuration, when I do NSLOOKUP on the DC, the DNS doesnt resolves external sites on the internet.
I havent specified any kind of conditional forwarding etc.., its a simple DNS setup.
I want it to resolve to the internal domain and also be connected to the internet .
What setting do I need to do in DNS or in VM network?
I tried almost all types of settings in vm virtual network editor by specifying dns manually and so on but none worked.

Sorry my bad.... slight mistake in my question...Here is my corercted query--
After successfully connecting to the internet, when I do NSLOOKUP on the DC, the DNS doesnt resolve my internal domain/site but instead resolves external sites on the internet.
My computer FQDN is nri.wwe.com
Domain dns name is wwe.com
The above should get resolve internally but it searches on the internet.
This is how it should work
& it works perfect when I disable the other NAT network adapter (i.e. disable internet connectivity on my virtual DC)
C:\>nslookup nri.wwe.com
Server: nri.wwe.com
Address: 192.168.1.11
Name:    nri.wwe.com
Address: 192.168.1.11
But when I again enable internet connectivity, this it what happens.
C:\nslookup www.wwe.com
DNS request timed out.
    timeout was 2 seconds.
Server: UnKnown
Address: 192.168.12.2
DNS request timed out.
    timeout was 2 seconds.
Non-authoritative answer:
DNS request timed out.
    timeout was 2 seconds.
Name:    www.wwe.com.nsatc.net
Address: 64.152.0.124
Aliases: www.wwe.com
And when I again nslookup, this is what I get,
C:\>nslookup www.wwe.com
DNS request timed out.
    timeout was 2 seconds.
Server: UnKnown
Address: 192.168.12.2
DNS request timed out.
    timeout was 2 seconds.
DNS request timed out.
    timeout was 2 seconds.
DNS request timed out.
    timeout was 2 seconds.
*** Request to UnKnown timed-out
Now this 192.168.12.2 is VM assigned DNS via VM Natting with its own DHCP. If we do it manually, none of the virtual machines can connect to the internet. So I cannot fiddle with it anymore as I have already that as well.

Joining to domain on same computer account name

Hi,
I have a critical server. I need to reinstall it with clean installation an same name. I don't have permissions to delete computer account from AD, but I have permissions to add to domain. If I remove server from domain reinstall it and will join to domain
with same name. Does this can cause any issues? Do I have to delete server computer account before joining to domain?
thank you,

Hi
If you are reinstalling server and do not want to delete the existing computer account, you'll get error "Computer account usually exists already, and security on that account does not allow you to join — usually because the computer was joined
previously by using different computer account credentials."(Assuming you did not joined it to domain in present case). So you must first delete the existing account or get full permissions on the account.
If you receive the error "Failure to create a computer account," it usually means that either the account already exists or that there are insufficient access rights available to the user who is trying to join. Table 10.8 shows the error codes
that come under this category.
Table 10.8 "
Failure to create a computer account " Error Codes
Description
Actual Error
Error Code
Computer account usually exists already, and security on that account does not allow you to join — usually because the computer was joined previously by using different computer account credentials.
ERROR_ACCESS_DENIED
5
The user has joined so many computers that he has exceeded the default per user computer quota (by default, 10).
ERROR_DS_MACHINE_ACCOUNT_QUOTA_EXCEEDED
8557
The specified user already exists.
ERROR_USER_EXISTS
2224
Also pls refer the article for in-depth details :
Join and Authentication Issues
http://technet.microsoft.com/en-us/library/cc961817.aspx
Hope this helps. :)
Thanks

Oracle vm 2.2.1 domain has crashed

Hello
We are facing actually a problem. We have installed ovm 2.2.1 and installed 3 (A15, A16, A17) windows virtual machines on a HP Proliant DL380 G7 server.
A17 machine restart unexpectedly when the load is high on the network
Part of logs are:
/var/log/messages:
Sep 25 15:22:18 xxxxx avahi-daemon[7250]: Interface tap23.0.IPv6 no longer relevant for mDNS.
Sep 25 15:22:18 xxxxx avahi-daemon[7250]: Leaving mDNS multicast group on interface tap23.0.IPv6 with address fe80::c40f:d1ff:fe14:ce79.
Sep 25 15:22:18 xxxxx avahi-daemon[7250]: Withdrawing address record for fe80::c40f:d1ff:fe14:ce79 on tap23.0.
Sep 25 15:22:18 xxxxx kernel: xenbr1: port 2(tap23.0) entering disabled state
Sep 25 15:22:18 xxxxx kernel: device tap23.0 left promiscuous mode
Sep 25 15:22:18 xxxxx kernel: type=1700 audit(1348586538.915:90): dev=tap23.0 prom=0 old_prom=256 auid=4294967295 ses=4294967295
Sep 25 15:22:18 xxxxx kernel: xenbr1: port 2(tap23.0) entering disabled state
Sep 25 15:22:20 xxxxx kernel: xenbr1: port 3(vif23.0) entering disabled state
/var/log/xen/xend.log:
[2012-09-25 15:22:18 8235] WARNING (image:490) domain 10_xxxxx: device model failure: pid 11149: died due to signal 11; see /var/log/xen/qemu-dm-10_xxxxx.log
[2012-09-25 15:22:19 8235] WARNING (XendDomainInfo:1907) Domain has crashed: name=10_xxxxx id=23.
[2012-09-25 15:22:19 8235] DEBUG (XendDomainInfo:2757) XendDomainInfo.destroy: domid=23
[2012-09-25 15:22:20 8235] DEBUG (XendDomainInfo:2230) Destroying device model
[2012-09-25 15:22:20 8235] DEBUG (XendDomainInfo:2237) Releasing devices
[2012-09-25 15:22:20 8235] DEBUG (XendDomainInfo:2250) Removing vif/0
[2012-09-25 15:22:20 8235] DEBUG (XendDomainInfo:1144) XendDomainInfo.destroyDevice: deviceClass = vif, device = vif/0
[2012-09-25 15:22:20 8235] DEBUG (XendDomainInfo:2250) Removing vbd/768
[2012-09-25 15:22:20 8235] DEBUG (XendDomainInfo:1144) XendDomainInfo.destroyDevice: deviceClass = vbd, device = vbd/768
[2012-09-25 15:22:20 8235] DEBUG (XendDomainInfo:2250) Removing vbd/832
[2012-09-25 15:22:20 8235] DEBUG (XendDomainInfo:1144) XendDomainInfo.destroyDevice: deviceClass = vbd, device = vbd/832
[2012-09-25 15:22:20 8235] DEBUG (XendDomainInfo:2250) Removing vbd/5696
[2012-09-25 15:22:20 8235] DEBUG (XendDomainInfo:1144) XendDomainInfo.destroyDevice: deviceClass = vbd, device = vbd/5696
[2012-09-25 15:22:20 8235] DEBUG (XendDomainInfo:2250) Removing vbd/2048
[2012-09-25 15:22:20 8235] DEBUG (XendDomainInfo:1144) XendDomainInfo.destroyDevice: deviceClass = vbd, device = vbd/2048
[2012-09-25 15:22:20 8235] DEBUG (XendDomainInfo:2250) Removing vbd/5632
[2012-09-25 15:22:20 8235] DEBUG (XendDomainInfo:1144) XendDomainInfo.destroyDevice: deviceClass = vbd, device = vbd/5632
[2012-09-25 15:22:20 8235] DEBUG (XendDomainInfo:2250) Removing vfb/0
[2012-09-25 15:22:20 8235] DEBUG (XendDomainInfo:1144) XendDomainInfo.destroyDevice: deviceClass = vfb, device = vfb/0
[2012-09-25 15:22:20 8235] DEBUG (XendDomainInfo:2250) Removing console/0
[2012-09-25 15:22:20 8235] DEBUG (XendDomainInfo:1144) XendDomainInfo.destroyDevice: deviceClass = console, device = console/0
[2012-09-25 15:22:20 8235] DEBUG (XendDomainInfo:117) XendDomainInfo.create_from_dict({'vcpus_params': {'cap': 0, 'weight': 256}, 'PV_args': '', 'features': '', 'cpus': [[], [], [], [], [], [], [], [], [], [], [], []], 'paused': 0, 'domid': 23, 'shutdown': 0, 'VCPUs_live': 12, 'PV_bootloader': '/usr/bin/pygrub', 'actions_after_crash': 'restart', 'vbd_refs': ['0b8eb7e0-91cb-1dd8-93ba-92b1a3ff26b3', 'cd42c91a-1f15-053e-78c4-d2ea9876e6d9', '16e4af8e-048d-7be9-5fc1-e14070ff3551', '4b836ae6-2352-73f0-94e8-b570764113b4', '9a5ce3cb-8a63-60ed-c8b1-ef00d666fe06'], 'PV_ramdisk': '', 'memory_dynamic_min': 8589934592L, 'name_label': '10_xxxxx', 'VCPUs_at_startup': 1, 'HVM_boot_params': {'order': 'c'}, 'platform': {'videoram': '4', 'hpet': '0', 'stdvga': '0', 'vnclisten': '0.0.0.0', 'loader': '/usr/lib/xen/boot/hvmloader', 'vncconsole': '1', 'serial': 'pty', 'vncunused': '1', 'xen_platform_pci': '1', 'monitor': '0', 'boot': 'c', 'rtc_timeoffset': -967, 'vncpasswd': 'XXXXXXXX', 'pci': [], 'pae': '1', 'vpt_align': '1', 'hap': '1', 'viridian': '0', 'acpi': '1', 'localtime': '0', 'timer_mode': '0', 'vnc': '1', 'nographic': '0', 'pci_msitranslate': '1', 'apic': '1', 'usb': '0', 'guest_os_type': 'default', 'device_model': '/usr/lib/xen/bin/qemu-dm', 'keymap': 'fr', 'pci_power_mgmt': '0', 'xauthority': '//.Xauthority', 'isa': '0'}, 'PV_kernel': '', 'console_refs': ['db501a0b-36a5-a080-dab2-d42bace0b21b', 'eba3a0c2-a3ff-00cf-4e40-7c6b433801a1'], 'online_vcpus': 12, 'blocked': 0, 'on_xend_stop': 'ignore', 'memory_static_min': 0, 'HVM_boot_policy': 'BIOS order', 'shutdown_reason': 3, 'VCPUs_max': 12, 'start_time': 1348534061.3324931, 'memory_static_max': 8589934592L, 'actions_after_shutdown': 'destroy', 'on_xend_start': 'ignore', 'crashed': 0, 'memory_dynamic_max': 8589934592L, 'actions_after_suspend': '', 'is_a_template': False, 'PV_bootloader_args': '-q', 'is_control_domain': False, 'uuid': 'c33d113b-46b3-91d3-0984-8c8b192e23c3', 'cpu_time': 22146.567213627, 'shadow_memory': 76, 'dying': 0, 'vcpu_avail': 4095, 'notes': {'SUSPEND_CANCEL': 1}, 'other_config': {}, 'auto_power_on': False, 'running': 0, 'actions_after_reboot': 'restart', 'vif_refs': ['ee5890ab-345b-479b-1504-f3a9405d4dbf'], 'target': 0, 'vtpm_refs': [], 's3_integrity': 1, 'devices': {'cd42c91a-1f15-053e-78c4-d2ea9876e6d9': ('vbd', {'uuid': 'cd42c91a-1f15-053e-78c4-d2ea9876e6d9', 'bootable': 0, 'devid': 832, 'driver': 'paravirtualised', 'dev': 'hdb', 'uname': 'file:/var/ovs/mount/58F85FD535AC460495D6CD8D56EF0E94/running_pool/10_xxxxx/JDEdwards.img', 'mode': 'w'}), 'eba3a0c2-a3ff-00cf-4e40-7c6b433801a1': ('console', {'location': '14', 'devid': 0, 'protocol': 'vt100', 'uuid': 'eba3a0c2-a3ff-00cf-4e40-7c6b433801a1', 'other_config': {}}), 'ee5890ab-345b-479b-1504-f3a9405d4dbf': ('vif', {'bridge': 'xenbr1', 'mac': '00:16:3E:03:AF:B3', 'devid': 0, 'type': 'ioemu', 'uuid': 'ee5890ab-345b-479b-1504-f3a9405d4dbf'}), '4b836ae6-2352-73f0-94e8-b570764113b4': ('vbd', {'uuid': '4b836ae6-2352-73f0-94e8-b570764113b4', 'bootable': 0, 'devid': 2048, 'driver': 'paravirtualised', 'dev': 'sda', 'uname': 'file:/var/ovs/mount/58F85FD535AC460495D6CD8D56EF0E94/running_pool/10_xxxxx/Backup.img', 'mode': 'w'}), 'db501a0b-36a5-a080-dab2-d42bace0b21b': ('vfb', {'vncunused': 1, 'other_config': {'vncunused': 1, 'vncpasswd': 'XXXXXXXX', 'vnclisten': '0.0.0.0', 'vnc': '1'}, 'vnc': '1', 'uuid': 'db501a0b-36a5-a080-dab2-d42bace0b21b', 'vnclisten': '0.0.0.0', 'vncpasswd': 'XXXXXXXX', 'location': '0.0.0.0:5901', 'devid': 0}), '0b8eb7e0-91cb-1dd8-93ba-92b1a3ff26b3': ('vbd', {'uuid': '0b8eb7e0-91cb-1dd8-93ba-92b1a3ff26b3', 'bootable': 1, 'devid': 768, 'driver': 'paravirtualised', 'dev': 'hda', 'uname': 'file:/var/ovs/mount/58F85FD535AC460495D6CD8D56EF0E94/running_pool/10_xxxxx/System.img', 'mode': 'w'}), '16e4af8e-048d-7be9-5fc1-e14070ff3551': ('vbd', {'uuid': '16e4af8e-048d-7be9-5fc1-e14070ff3551', 'bootable': 0, 'devid': 5696, 'driver': 'paravirtualised', 'dev': 'hdd', 'uname': 'file:/var/ovs/mount/58F85FD535AC460495D6CD8D56EF0E94/running_pool/10_xxxxx/MSSQL.img', 'mode': 'w'}), '9a5ce3cb-8a63-60ed-c8b1-ef00d666fe06': ('vbd', {'uuid': '9a5ce3cb-8a63-60ed-c8b1-ef00d666fe06', 'bootable': 0, 'devid': 5632, 'driver': 'paravirtualised', 'dev': 'hdc:cdrom', 'uname': '', 'mode': 'r'})}, 'PV_superpages': 0})
[2012-09-25 15:22:20 8235] DEBUG (XendDomainInfo:2327) XendDomainInfo.constructDomain
[2012-09-25 15:22:20 8235] DEBUG (balloon:181) Balloon: 3208900 KiB free; need 4096; done.
[2012-09-25 15:22:20 8235] DEBUG (XendDomain:452) Adding Domain: 24
[2012-09-25 15:22:20 8235] DEBUG (XendDomainInfo:2528) XendDomainInfo.initDomain: 24 256
Any idea ???

if it is really urgent, contact Oracle support. you are paying for it.
here you are not paying for any body. so be patient for volunteers responses.
we cannot simply understand why performance will be degraded after upgrade.there could be many factors involving.
metalink provides good doc to debug this problem. please go through it.
about memory increasing and all, we cant decide on that.
generate AWR report and use ADDM and follow those recommendations.
If you dont know how to generate statspack report or AWR report dont ask here,instead search in this forum (before asking) or in google.

Can't send email from internal server, same domain name as external.

We have a domain "example.com", hosted externally, for email and a website. We are thinking of hosting email 'inhouse' and have setup a dedicated subdomain on a 'fixed' IP, "mini.example.com" for AFP services mainly. mini.example.com provides DNS internally, its primary zone is also example.com. All access to the external web goes thru' a modem/router that the server is connected to. We have to set an A record for www access to our website.
In our testing to migrate email, the internal setup works fine, until the switch over. Now we can receive mail to the mini server, but can't send any out.
We instructed our webhost provider to set the CNAME mail.example.com to point to mini.example.com and created a cPanel MX extry mail.example.com, 10 priority. Previously, the external host had CNAME as mail.example.com to example.com and MX as example.com, 10 priority.
Since the implementation of the CNAME change, we can't send emails out and they get stuck at the outbox waiting. Client Mail app, says to check for port and SSL and account settings.
Any idea where we went wrong here and what we can do to get emails out? We could go to each computer and point-off the DNS to office IP, but we rather not.
Thanks!

Thank you Camelot and MrHoffman for your replies.
I got in this am to find Mail.app could actually send out emails and I'm stratching my head wondering what happened yesterday.
SMTP server addresss was manually set to mail.example.com for all accounts. In trying to get things to work, the mail setup was redone again by "Accounts", in Systems Preferences, when Login is clicked on, and mail was automatically given a SMTP as mini.example.com instead of mail.example.com. I'm guessing that that could be where the initial 'inside' problems were, given that it had a 0 answer to the MX query. Or then again I wasn't patient enough.
Just for completeness, and if there's something to learn from here, these are the dig results for example.com as seen from within the office network.
============================
~ dig mx mini.example.com :
; <<>> DiG 9.6-ESV-R4-P3 <<>> mx mini.example.com
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 1791
;; flags: qr aa rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;mini.example.com. IN MX
;; AUTHORITY SECTION:
example.com.                    10800          IN          SOA          mini.example.com. dnsadmin.example.com.example.com. 2011120603 86400 3600 604800 345600
============================
~ dig mx mail.example.com :
; <<>> DiG 9.6-ESV-R4-P3 <<>> mx mail.example.com
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 36128
;; flags: qr aa rd ra; QUERY: 1, ANSWER: 1, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;mail.example.com.                    IN          MX
;; ANSWER SECTION:
mail.example.com.          10800          IN          CNAME          mini.example.com.
============================
~ dig mail.example.com :
; <<>> DiG 9.6-ESV-R4-P3 <<>> mail.example.com
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 35095
;; flags: qr aa rd ra; QUERY: 1, ANSWER: 2, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;mail.example.com.                    IN          A
;; ANSWER SECTION:
mail.example.com.          10800          IN          CNAME          mini.example.com.
mini.example.com.          10800          IN          A          10.0.0.34
;; AUTHORITY SECTION:
example.com.                    10800          IN          NS          mini.example.com.
============================
~ dig mx example.com :
; <<>> DiG 9.6-ESV-R4-P3 <<>> mx example.com
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 47951
;; flags: qr aa rd ra; QUERY: 1, ANSWER: 1, AUTHORITY: 1, ADDITIONAL: 1
;; QUESTION SECTION:
;example.com.                              IN          MX
;; ANSWER SECTION:
example.com.                    10800          IN          MX          10 mail.example.com.
;; AUTHORITY SECTION:
example.com.                    10800          IN          NS          mini.example.com.
;; ADDITIONAL SECTION:
mini.example.com.          10800          IN          A          10.0.0.34

Internal & external Domain the same Cannot resolve Website

Since moving my website from internal to a external hosting provider, I cannot browse the website from inside my LAN
I have created the necessary A record with www and added the Public IP for the my website.
I have created a Delegation for the Zone in DNS and set it to my SOA dns server reported to me because the above would work.
I have seen this setup many times in other networks but i canot figure this one out.
I verified there was no RDNS record anymore from the ISP as that was causing a issue before
From PC outside the LAN
C:\>dig -x 64.129.116.22
; <<>> DiG 9.3.2 <<>> -x 64.129.116.22
;; global options: printcmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 138
;; flags: qr rd ra; QUERY: 1, ANSWER: 2, AUTHORITY: 0, ADDITIONAL: 0
;; QUESTION SECTION:
;22.116.129.64.in-addr.arpa. IN PTR
;; ANSWER SECTION:
22.116.129.64.in-addr.arpa. 86400 IN PTR mail.evolutionimpressions.com.
22.116.129.64.in-addr.arpa. 86400 IN PTR ftp.evolutionimpressions.com.
;; Query time: 93 msec
;; SERVER: 24.92.226.40#53(24.92.226.40)
;; WHEN: Tue May 08 07:11:29 2012
;; MSG SIZE rcvd: 105
C:\>dig evolutionimpressions.com a
; <<>> DiG 9.3.2 <<>> evolutionimpressions.com a
;; global options: printcmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 1120
;; flags: qr rd ra; QUERY: 1, ANSWER: 1, AUTHORITY: 0, ADDITIONAL: 0
;; QUESTION SECTION:
;evolutionimpressions.com. IN A
;; ANSWER SECTION:
evolutionimpressions.com. 36945 IN A 184.168.26.1
;; Query time: 21 msec
;; SERVER: 24.92.226.40#53(24.92.226.40)
;; WHEN: Tue May 08 07:13:18 2012
;; MSG SIZE rcvd: 58
From the DNS Server
C:\>ipconfig /all
Windows IP Configuration
   Host Name . . . . . . . . . . . . : EIS03
   Primary Dns Suffix . . . . . . . : evolutionimpressions.com
   Node Type . . . . . . . . . . . . : Hybrid
   IP Routing Enabled. . . . . . . . : No
   WINS Proxy Enabled. . . . . . . . : No
   DNS Suffix Search List. . . . . . : evolutionimpressions.com
Ethernet adapter Local Area Connection:
   Connection-specific DNS Suffix . :
   Description . . . . . . . . . . . : Broadcom BCM5708C NetXtreme II GigE (NDIS
VBD Client)
   Physical Address. . . . . . . . . : 00-19-B9-BC-3D-1E
   DHCP Enabled. . . . . . . . . . . : No
   IP Address. . . . . . . . . . . . : 172.16.1.5
   Subnet Mask . . . . . . . . . . . : 255.255.0.0
   Default Gateway . . . . . . . . . : 172.16.1.177
   DNS Servers . . . . . . . . . . . : 172.16.1.5
C:\>ping www.evolutionimpressions.com
Pinging www.evolutionimpressions.com [184.168.26.1]
with 32 bytes of data:
Reply from 184.168.26.1: bytes=32 time=67ms TTL=59
Reply from 184.168.26.1: bytes=32 time=66ms TTL=59
Reply from 184.168.26.1: bytes=32 time=61ms TTL=59
Reply from 184.168.26.1: bytes=32 time=89ms TTL=59
Ping statistics for 184.168.26.1:
    Packets: Sent = 4, Received = 4, Lost = 0 (0% loss),
Approximate round trip times in milli-seconds:
    Minimum = 61ms, Maximum = 89ms, Average = 70ms
C:\>nslookup
Default Server: eis03.evolutionimpressions.com
Address: 172.16.1.5
> www.evolutionimpressions.com
Server: eis03.evolutionimpressions.com
Address: 172.16.1.5
Name:    www.evolutionimpressions.com
Address: 184.168.26.1
>
I can make the users put the www in front of the domain name but i cannot for the life of me figure out why this isnt working...

Running either an nslookup or a DIG on my part shows the following:
==========================================
c:\DIG>dig evolutionimpressions.com
; <<>> DiG 9.8.0 <<>> evolutionimpressions.com
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 37852
;; flags: qr rd ra; QUERY: 1, ANSWER: 1, AUTHORITY: 0, ADDITIONAL: 0
;; QUESTION SECTION:
;evolutionimpressions.com.      IN      A
;; ANSWER SECTION:
evolutionimpressions.com. 86400 IN      A       184.168.26.1
==========================================
c:\DIG>dig www.evolutionimpressions.com
; <<>> DiG 9.8.0 <<>>
www.evolutionimpressions.com
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 55452
;; flags: qr rd ra; QUERY: 1, ANSWER: 2, AUTHORITY: 0, ADDITIONAL: 0
;; QUESTION SECTION:
;www.evolutionimpressions.com. IN      A
;; ANSWER SECTION:
www.evolutionimpressions.com. 86400 IN
CNAME   evolutionimpressions.com.
evolutionimpressions.com. 86400 IN      A       184.168.26.1
==========================================
A reverse on 64.129.116.22:
c:\DIG>dig -x 64.129.116.22
; <<>> DiG 9.8.0 <<>> -x 64.129.116.22
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 34360
;; flags: qr rd ra; QUERY: 1, ANSWER: 2, AUTHORITY: 0, ADDITIONAL: 0
;; QUESTION SECTION:
;22.116.129.64.in-addr.arpa.    IN      PTR
;; ANSWER SECTION:
22.116.129.64.in-addr.arpa. 86305 IN    PTR
ftp.evolutionimpressions.com.
22.116.129.64.in-addr.arpa. 86305 IN    PTR     mail.evolutionimpressions.com.
==========================================
A reverse on 184.168.26.1
c:\DIG>dig -x 184.168.26.1
; <<>> DiG 9.8.0 <<>> -x 184.168.26.1
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 52143
;; flags: qr rd ra; QUERY: 1, ANSWER: 1, AUTHORITY: 0, ADDITIONAL: 0
;; QUESTION SECTION:
;1.26.168.184.in-addr.arpa.     IN      PTR
;; ANSWER SECTION:
1.26.168.184.in-addr.arpa. 3600 IN      PTR     p3nlhg290c1290.shr.prod.phx3.secureserver.net.
==========================================
In summary, it appears 184.168.26.1 is the record for both
http://evolutionimpressions.com/ and
www.evolutionimpressions.com.
But I noticed, is that when I typed in
www.eveolutionimpressions.com, it redirects it to
http://evolutionimpressions.com/ .
This is because www.evolutionimpressions.com is a
CNAME for http://evolutionimpressions.com/ (without the www).
Therefore that concludes me to believe that's why internally you can't access the site. This is because no matter what you do, since evolutionimpressions.com, and the CNAME is always reverting it
http://evolutionimpressions.com, and your AD name is
evolutionimpressions.com, you are always accessing one of the internal DCs' LdapIpAddress. Note: each DC creates this record. You can't alter it!
How do you get around that? Not so simple. What I would normally suggest (disregarding the security implications), is to install IIS on each DC, then in the default website properties, create a redirect to
www.evolutionimpressions.com. HOWEVER, because the website is always redirecting to
http://evolutionimpressions.com due to the CNAME, it won't work, and will create a redirect loop.
I haven't seen this scenario before.
The simple fix I would believe and suggest to ask whomever created the public records for the site to
eliminate the CNAME and simply create two A records:
evolutionimpressions.com            A     184.168.26.1
www.evolutionimpressions.com    A     184.168.26.1
Then either always only use www in front of it, or do the IIS trick/workaround above. Here'a little tidbit - in the browser, simply type in
evolutionimpressions (without www or com), and then hit CTRL & <enter>, and the browser will add the WWW and COM to it.
Here's more on that DC IIS trick/workaround:
Can't Access Website with Same Name (Split Zone or no Split Brain)
Published by Ace Fekay, MCT, MVP DS on Sep 4, 2009 at 12:11 AM 1278 0
For no WWW in front of URL, scroll down to "So you don't want to use WWW in front of the domain name"
http://msmvps.com/blogs/acefekay/archive/2009/09/04/split-zone-or-no-split-zone-can-t-access-internal-website-with-external-name.aspx
Ace Fekay
MVP, MCT, MCITP EA, MCTS Windows 2008/R2, Exchange 2007 & Exchange 2010, Exchange 2010 EA, MCSE & MCSA 2003/2000, MCSA Messaging 2003
Microsoft Certified Trainer
Microsoft MVP - Directory Services
Complete List of Technical Blogs: http://www.delawarecountycomputerconsulting.com/technicalblogs.php
This post is provided AS-IS with no warranties or guarantees and confers no rights.

DNS - external DNS internal - Domainname?

Hello, I have the following problem:
Private IP network (192.168.0.0) behind router, which has a fixed external IP and an ADSL connection.
The Leo server on the internal network has a fixed IP: 192.168.0.20.
The Domain Name "firma.com" is hosted on a external provider, there is also a external web server running, which can be and should be accessible under "firma.com" and "www.firma.com".
I have set up a subdomain in the external provider’s DNS, "intranet.firma.com". This is resolving to the external IP of my router. The router is configured that it routes all requests from the external IP to the internal address "192.168.0.20".
The Mailxchange (MX) record also redirects on "intranet.firma.com."
And now the DNS server on the Leo-server? Which are the correct entries?
IP address: 192.168.0.20
subnet mask: 255.255.255.0
router : 192.168.0.1
Primary DNS: 192.168.0.20
DNS Secondary: I 192.168.0.1
Which has to be primary zone name: "firma.com" or "intranet.firma.com"? I mean, can there be "firma.com", when there is a external webserver which needs that name?
When I use "firma.com" for the Leo DNS and the server’s name is "intranet ", the it resolves to the internal server very well. But how can I get my externally hosted web "firma.com" or "www.firma.com", if I DNS server "firma.com" as the primary zone there? Which is the right configuration that I can send mails internal, external and from external? And use the external webserver as is?
Thank you
Willi

First using a 192.168.0.0/24 or 192.168.1.0/24 network on your LAN is a bad thing if you are going to use VPN later.
"I have set up a subdomain in the external provider’s DNS, "intranet.firma.com". This is resolving to the external IP of my router. The router is configured that it routes all requests from the external IP to the internal address "192.168.0.20". "
You can use this if you want but you probably don't want the mail to require a an address like:
<user/mailaccount-name>@intranet.firma.com do you? The MX pointer can use firma.com with an address of intranet.firma.com:
firma.com MX 10 intranet.firma.com
You could also look at intranet(.firma.com) as a hostname instead of a subdomain.
(Maybe you should use an other domainname internally: firma.private or firma.internal)
If you want to use the same domainname (firma.com) internally setup "all" the public names/IPs in the internal DNS and use only the server (private IP) DNS (with forwarders to your ISP DNS IPs) not the router DNS proxy for all internal machines.
If you want to run an intranet webserver why not call it intranet.firma.com and the public one keeps it's name www.firma.com.

DNS (internal domain has same name as external website)

Similar Messages

Maybe you are looking for