DNS Management

Hello!
does anybody know if there is a Management Tool for DNS, like IPAM for DHCP?
I have Trouble with static records of the non Windows maschines, so I seek for a solution to add a description to the existing records or somthing like that. So it would be easy to use and free. I already though about to write and update the records with
using the DHCP Server, but maybe there is another solution.
thx
Michael

Hi,
IPAM in the next version of Windows Server will handle DNS records too.
Thanks,
-Greg

Similar Messages

DHCP DNS Management Console Error

Downloaded the DHCP DNS Management Console and logged in......login error
ERROR_INCORRECT_PORT_IP
New to linux.
thanks for your help

Is this a DSfW server? Because on a DSfW server you have to use port
1636 instead of 636 to connect to the Edir side of the server.
Don't try to use port 389 (or 1389 on a DSfW server) as this does only
work on servers which are specifically configured to allow that.
W. Prindl
kvnimrls wrote:
>
>Downloaded the DHCP DNS Management Console and logged in......login
>error
>
>ERROR_INCORRECT_PORT_IP
>
>New to linux.
>
>thanks for your help

Some Hostname is not seen in DNS Manager ( Windows Server 2008 )

Hi All,
DC Server OS - Windows Server 2008 R2 ( Active Directory Integrated DNS Zone ) Client OS - Windows 7
I am unable to understand, why some hostname are not dynamically registered in DNS Manager. For example -My windows7 which is added to corp.abc.com domain. Don't show in DNS manager.
I don't want to create this hostname statically on DNS manager.
I have tried couple of resolution i.e ipconfig /registerdns, restarted DNS Client / DHCP Client server, restarted computer still unable to see hostname name entry in DNS manager. 2 days has passed, still it has not come-up in DNS manager. I have also check
Advanced TCP/IP settings. Please see print-screen of nslookup & Advanced TCP/IP Settings.
Kindly suggest, what should i do, to resolve this problem.
Thanks & Regards,
Param
Thanks & Regards,
Param
www.paramgupta.blogspot.com

I would first recommend checking that Dynamic DNS updates are configured (I would recommend having it set to Secure only).
I started yesterday a Wiki article describing that: http://social.technet.microsoft.com/wiki/contents/articles/21984.how-to-secure-dns-updates-on-microsoft-dns-servers.aspx
Please also check that your primary DNS suffix using ipconfig /all. It should be matching the computer domain name. If anything is wrong, you can change it by using the following: http://social.technet.microsoft.com/Forums/windowsserver/en-US/3720415a-6a9a-4bca-aa2a-6df58a1a47d7/change-primary-dns-suffix?forum=winservercore
If this do not help, you can try to temporary disable your security software installed on your computer, check the network filtering and use Wireshark to see what happens when you run
ipconfig /registerdns.
This posting is provided "AS IS" with no warranties or guarantees , and confers no rights.
Get Active Directory User Last Logon
Create an Active Directory test domain similar to the production one
Management of test accounts in an Active Directory production domain - Part I
Management of test accounts in an Active Directory production domain - Part II
Management of test accounts in an Active Directory production domain - Part III
Reset Active Directory user password

DNS Management in OS 10.6.3 Server

We are currently running Mac OS 10.4.11 server, and we will soon be upgrading to Mac OS 10.6.3 server on a new Xserve, and I have a question about how DNS is managed in Mac OS 10.6.3 server.
We run DNS internally only. On our 10.4.11 server, we switched to manually editing our zone files in command line rather than managing our DNS records in Server Admin because of a couple of problems.
Let's use mydomain.com as our example domain. Server Admin automatically makes the 'A' record of the zone (mydomain.com) as the same IP address as the OS X server itself (host.mydomain.com / 192.168.0.5). Our problem is that our company's website is hosted offsite. So, if someone on our LAN opens a web browser with the domain, mydomain.com, it opens to an error (instead of our website) as our OS X server is not running web services. For a number of reasons, our web developer has the website setup as domain.com and redirects any requests to www.mydomain.com to mydomain.com because the SSL certificate and search engines were setup for the address mydomain.com INSTEAD of www.mydomain.com. We cannot change this until the next overhaul of our website (which could be years).
As a workaround, I went into command line and started editing our zone files manually. So, I changed the 'A' record of mydomain.com to be the IP address of the server that is hosting our website externally. That fixes our problem.
However, editing zone files in command line has its own problems, and I would prefer to do it from Server Manager.
So, does Server Manager in 10.6 have the same problem in that it makes the address for the 'A' record for mydomain.com the same as our OS X server host.mydomain.com?
And secondly, is there another way in our OS X server of directing internal web requests from LAN workstations for mydomain.com on port 80 and 443 to our website that is hosted offsite?
And thirdly, would it be better to register a second domain, mydomaininternal.com (for example), and use this zone on our OS X server rather than using mydomain.com?
Thanks for any advice.
Tyler

Thanks.
I should have mentioned that I already have an 'A' Record setup for www which points to the external IP of the site. The problem is our web hosting company has an internal redirect on the server hosting our website directing 'www' to 'yourcompanysite.com' (for the reasons I mentioned in the previous post) so of course when the workstations on our LAN query the DNS server (If we were to use Server Manager) it would automatically set the IP address for 'yourcompanysite.com' to the IP address of the OS X Server. So in Mac OS 10.6 server is it possible to manage DNS using Server Manager without it automatically making the A record for 'yourcompanysite.com.' the same address as the server?
My xserve is scheduled to ship out next week, so I am just doing some prelimary thinking and planning.
Thanks!

I want to point my pre-existing GoDaddy domain to my BC site, but I just don't know what to put in the GoDaddy DNS Manager.

I want to point my GODADDY Domain to my Muse site. I don't know what to put in the DNS information. I go on vacation tomorrow and I really need to fix this before hand. Thanks

If you have already added the domain to your site then please point the domain to BC name servers ;
ns1.worldsecuresystems.com
ns2.worldsecuresystems.com
ns3.worldsecuresystems.com
This document include the steps :
http://helpx.adobe.com/business-catalyst/using/change-site-domain.html
Thanks,
Sanjit

External DNS server not replicating records to secondary after migration from 2003 to 2012

Hi
I have a query relating to 2012 Server and DNS.
Last week we de-commissioned our primary external DNS server (Windows 2003 Server) and moved the role over to a new Windows 2012 server.
Since this point replication to our secondary server (3rd party hosted) does not seem to occur and our DNS records seem to have expired on the secondary server as we cannot look these up via nslookup.
I cannot see any failures in the event log of the server; I have checked our external firewall logs and nothing is being blocked inbound/ outbound as far as I can see. And the server’s local firewall has been disabled.
The server is a standalone server in a workgroup with a standard filebased primary zone, with no AD integration and recursion disabled.
When I created the zone I copied the .dns file from the old server and selected this in the interface during the creation of the zone on the new server. The new server has the same internal and external IP as the old server and the old server is off-line.
I have also manually increased the serial number of the zone and still no joy.
One thing that I have noticed is when I open the zones properties/Name Servers and click edit on the external nameserver I get the infamous "The server with this IP address is not authoritative for the required zone" error.
Any help Would be appreciated, thanks in advance

Nice to hear that you are close in finding the problem. So in short:
You have enabled Zone transfers in DNS management console for the applicable zone
You have verified that your DNS is listening to the correct interfaces
You have enabled firewall rules to accept TCP and UDP traffic to port 53
You have checked if "BIND secondaries" option is applicable to your case
You have initiated a zone transfer from the secondary server
Lefteris Karafilis
MCSE, MCTS, SEC+
LinkedIn: http://www.linkedin.com/in/lkarafilis
Mail: [email protected]
Blog: http://www.karafilis.net

DNS and Active Directory error 4000 server 2008

Hello all,
My network skills aren't very good and I'm facing a dilemma. First off we have two Windows servers on the network. The newest is 2008 Standard (named Vader) and the other is 2000 (dells3). Obviously I'd like to get rid of the 2000, but the people in charge
of my budget haven't given me the option to do so and it's the only back up we have.
Earlier in the week we had lots of problems. One of our nas boxes locked everyone out who was mapped to it and it would only let me log in through the web portal. Two of our Macs our marketing department uses suddenly locked up and wouldn't let them back
in (both were part of the Active Directory). A second nas box won't let certain people map to it and for awhile I had issues logging into Vader itself.
I believe all of these problems are connected to some issues on Vader and possibly in conduction with dells3. In Server Manager under DNS I get error 4000 "The DNS server was unable to open Active Directory.
This DNS server is configured to obtain and use information from the directory for this zone and is unable to load the zone without it. Check that the Active Directory is functioning properly and reload the zone. The event data is the error code."
Then under Active Directory Domain Services I get error 2042 "It has been too long since this machine last replicated with the named source machine. The time between replications with this source has exceeded
the tombstone lifetime. Replication has been stopped with this source."
Followed by more text I can post if needed.
Under File Services error 1202 "The DFS Replication service failed to contact domain controller to access configuration information. Replication is stopped. The service will try again during the
next configuration polling cycle, which will occur in 60 minutes. This event can be caused by TCP/IP connectivity, firewall, Active Directory Domain Services, or DNS issues."
And finally if I try to open Active Directory Domains and Trusts "The configuration information describing this enterprise is not available. The server is not operational."
I'm not sure where to start or what to post that might help. Any and all help is appreciated.
Edit: Also I can only add dells3 as the DNS on Vader in the DNS Manager if I try to add Vader to itself I get an error.

It's the other way around. Overall, I'm advising ripping the 2008 server out of AD and adding it back . Let's look at this as a series of steps:
1.) You do a force demote of the 2008 server because it's tombstoned. This means the 2008 server is no longer a DC. You are doing a force because it doesn't have the ability to replicate. If it could replicate, we'd just do a graceful demotion
and be done with it.
2.) Once the 2008 server is demoted, we go to the 2000 server which holds the only good copy of AD. From that server we run a metadata cleanup using the ntdsutil utility. We use that utility to clean out references to the 2008 server which is
no longer a DC.
3.) Once you have a clean AD, you can then promote the 2008 server back into Active Directory. Make sure Vader is pointing to Dells3 as its primary DNS server before promoting or you'll run into issues.
Hopefully that clarifies things.

Microsoft Windows Server DNS Monitoring v7.1.10100.0 High CPU Usage on Windows Server 2012 R2

Hello!
I've a big problem with this MP. When the zone monitoring is enabled (by default) the MonitoringHost.exe takes up all the CPU. I've put the zones in Maintenance mode.
I've got this problem only with a new Windows 2012 R2 server. Other Windows Servers (2003 R2, 2008 & 2008 R2) with DNS Server Role they don't have this problem.
Any ideas?
Thank you!
The configuration is:
SCOM 2012 R2
Microsoft Windows Server DNS Monitoring v7.1.10100.0 Management Pack
DNS Management Pack Action Account has been configured
"Act as proxy..." is enabled
The monitored server config:
Windows Server 2012 R2 (standalone)
DNS Server Role installed
DNS Management Pack Action Account is a member of the "Administrators" group
The only events I've are the following but I'm not sure if they're related (because of the ...DNSSEC...):
Log Name:      Operations Manager
Source:        Health Service Modules
Date:          8/11/2013 11:16:21
Event ID:      11903
Task Category: None
Level:         Error
Keywords:      Classic
User:          N/A
Computer:      NS2...
Description:
The Microsoft Operations Manager Expression Filter Module could not convert the received value to the requested type.
Property Expression: Property[@Name='QueriesResponded']
Property Value: Property[@Name='QueriesResponded']
Conversion Type: DataItemElementTypeInteger(5)
Original Error: 0x80FF005A
One or more workflows were affected by this.
Workflow name: Microsoft.Windows.Server.DNS.2012R2.Monitor.DNSSEC.NameResolutionQueries
Instance name: <zone-name> on NS2...
Instance ID: {4BCB4738-1287-2E6F-E0AA-1FF8D66DDB0B}
Management group: <grp-name>
Event Xml:
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
<System>
    <Provider Name="Health Service Modules" />
    <EventID Qualifiers="49152">11903</EventID>
    <Level>2</Level>
    <Task>0</Task>
    <Keywords>0x80000000000000</Keywords>
    <TimeCreated SystemTime="2013-11-08T09:16:21.000000000Z" />
    <EventRecordID>9602</EventRecordID>
    <Channel>Operations Manager</Channel>
    <Computer>NS2...</Computer>
    <Security />
</System>
<EventData>
    <Data><grp-name></Data>
    <Data>Microsoft.Windows.Server.DNS.2012R2.Monitor.DNSSEC.NameResolutionQueries</Data>
    <Data><zone name> on NS2...</Data>
    <Data>{4BCB4738-1287-2E6F-E0AA-1FF8D66DDB0B}</Data>
    <Data>Property[@Name='QueriesResponded']</Data>
    <Data>Property[@Name='QueriesResponded']</Data>
    <Data>DataItemElementTypeInteger(5)</Data>
    <Data>0x80FF005A</Data>
</EventData>
</Event>

Glad to see you found the solution and thanks for your sharing.
Niki Han
TechNet Community Support

Sharepoint 2013 config, DNS, Intranet Users... Please Help!

Hello all, first of all thank you for reading this post. Please bare with me, I am new with this environnement. I have had several problems in past week trying to configure a local sharepoint server 2013, most of it went well but now I am stuck and I badly
need help! I intend to make sharepoint available through the Ethernet connection in my office.
Here is my config:
Sharepoint 2013 (local)
Microsoft SQL 2012
Microsoft Server 2012
I am able to access the sub-site I created in the Sharepoint Central Administration Web Application.
My first problem is, I created another Web Application with the following URL config http://intranet.[domain].com but I am not able to access it through my browser. It seems to point to bad IP I probably configured accidentally a CNAME on my hosting Cpanel
with the IP 192.168.1.199. So, When I ping the URL I do not get any connection. Just that it couldn't connect to 192.168.1.199. Now I added a CNAME on my CPANEL for the URL http://intranet.[domain].com --> 127.0.0.1. Is this the correct way to do it?
But then, this will only allow to connect to the server in local. I want all the LAN users at my office to be able to connect to this intranet.
More information: The DNS manager has been configured following this tutorial:
Create SharePoint 2013 Web Application
http://www.youtube.com/watch?v=yW7LT99eUMs
I am not too sure of the proper configuration for the IIS Manager.
Anomymous Authentication is enabled
Windows Authentication is enabled
Everything else is disabled.
My second problem is that I cannot invite any user to the site. Even the one that have the email corresponding to our domain. Will I be able to invite parent domain users if the Web Apllication is properly configured with the CNAME on the Cpanel?
I tried to activate the External user invitation feature from Site Collection Features but it's not in the list. I am logged in as an administrator but next to the wrench it says "System Account" (with an arrow pointing down) so I guess this is the
"logged in user as..."? Am I missing something here?
Any advices would be greatly welcomed. I've run out of ideas.
Much appreciated,
Herb

Thank you so much for your reply Amr, this helps a lot.
Thank you for the link, I have a few questions with regards to adding users.
Quote Amr.: For the dns record it depends on whether you are willing to expose your intranet to external
users If your interanet will be used internally just add a record inyour internal DNS server to bind the address intranet.domain.com
For now, we plan only to make the SP for internal purposes.
Question: So as I understand it, even if my corporate hosting website domain is not linked through a CNAME to my local SP server, it shouldn't be a problem to invite local users with the email they have hosted
with the same domain as the intranet domain I plan to use right (Ex.: intranet.mydomain.com / myusers.mydomain.com)?
Am I gonna have problem adding users with an email under the same domain?
I tried to allow external users invite last week but I couldn't find the Activate External User function in the list for that purpose. I was logged in as a system admin and was looking that thing for hours.
My only hope inviting user with the same domain as the intranet url will be to configure my SP using your recommendation with the link given (Configure alternate access mappings for SharePoint 2013).
Much appreciated,
Herb

How to configure DNS to support ipv4 and ipv6

I have a 2008 r2 domain controller in my lab.
i'm doing Exchange 2007, 2010 and 2013. I have mix Windows 2008 r2 servers for other applications.
i'm running into issues where i'm thinking it is time to have both IPV4 & IPV6 to run on all lab machines.
I can't get a clear picture on how to accomplish a mix environment. in the DNS administrator do I create a new "reverze lookup zone" with only the IPV6? or do I have to create a new record in the "forward lookup zone" to with both IPV4
& IPV6 which the later points to the new "reverse lookup zone".
I see a lot of internet article but little on "how to".
or on the DC should I enable the DHCP role to support the IPV6?

1. You assign an IPv6 address to the domain controller/DNS server
One method is letting this site (legitimate) create a random private IPv6 range for you:
http://www.simpledns.com/private-ipv6.aspx
For example:
fd06:fcde:8b4e:d6bd:xxxx:xxxx:xxxx:xxxx
You can configure the x's like this (you cannot leave the x's there):
fd06:fcde:8b4e:d6bd:0000:0000:0000:0001
If you close and open IPv6 properties, or do an "ipconfig /all" you'll see that the IPv6 is abbreviated as follows:
fd06:fcde:8b4e:d6bd::1
That's normal.
If you look in your forward lookup zone, you'll now see this IPv6 address (you may have to register that manually - ipconfig /registerdns - but it seemed to happen automatically for me.
So there is no need to create a separate forward lookup zone for IPv6.
OK, but what about the reverse zone?
2. Create reverse lookup
In DNS Manager (what you call administrator), right-click on reverse lookup zone, select New Zone, click, Next, Next (default values are fine) until you choose between IPv6 and IPv4. Selecft IPv6 of course.
Then enter your prefix as shown here:
That's it. The reverse lookup information is configured automatically (your prefix " backwards").
Now, unlike with the forward lookup zone, my domain controller does not seem to be registering its name in the reverse IPv6 zone: there's only the SOA and NS record.
But that's another question.
Please mark as helpful if you find my contribution useful or as an answer if it does answer your question. That will encourage me - and others - to take time out to help you.

How to create a App domain in sharepoint 2013 without using DNS Manger

Can we create AppDomain for Sharepoint Hosted App without using DNS Manager ? In short I have to create App Domain for my local sharepoint environment.

You cannot create a APPdomain without DNS manager.
You can install DNS role on a machine and update your sharepoint server's DNS to consume from this DNS server. APPdomain cannot work without DNS

Need a suggestion for a DNS server (BIND etc...)

I am a student in college. I got a little job to help improve the internal DNS management in the college.
Right now they use BIND with nothing else. They edit the zone files by hand. Since the network is quite large, it's sometimes hard to maintain these files.
There are three possibilities:
1) use webmin.
2) use DLZ (still BIND, but uses a database backend)
3) use another DNS server software.
I would really appreciate your advice about:
1) lets assume webmin doesn't support a particular record of the DNS, and I update it manually via directly editing the files, will it interfere with webmin?
2) did you try DLZ? I don't know if it worth the work. Does it noticeably change the performance? Is there a decent GUI for editing the records when using a database?
3) I've heard many good things about PowerDNS. Is it really the best DNS server around? What GUI options does it have? Do you want to recommend another solution?
Thank you!

dnsmasq is hands down the easiest DNS (and DHCP!) solution if it works for your network setup. If you let it handle both DHCP and DNS it will dynamically add DHCP client host names to the DNS so you can look up local DHCP clients by DNS.
I am by no means a DNS expert, but dnsmasq just makes it all so easy.

DNS failing to register

Background
all Server 2012 VMs...1 domain controller, multiple member servers. I have only one member server that is having DNS issues. The problem was first discovered while trying to gpupdate /force, which failed stating there's a lack of network connectivity
with the domain controller, event ID 1129. I looked in the event logs further and there were event ID 8020 "the system failed to register host (A AAA) resource records for network adapter with settings....", there were also events where the
time service could not sync with the DC.
From there I dropped the server from the domain, and then rejoined it without issue. It still was having the same errors. I looked in the DNS Manager on the DC, and the record with that IP address had the wrong host name. I deleted it,
and attempted to have the server register the record. I followed ipconfig /flushdns, and ipconfig /registerdns. Still having the same issues.
It is part of the domain, trust relationships seem fine. Any thoughts? I can't find anything anywhere on that event ID.

Seems like too few info to decide what is your problem. My very first guess is that there is error in VM settings. Make sure that VMs has disabled time synchronization with host. Secon problem may stem from possible port blocking (try without fw) and third
problem in VM may be caused by wrongly setting IP DNS in NIC parameters.
Also start with dcdiag to find the health of AD. Do not remember to delete DNS cache whenever you do any chnages is DNS settings.
Here are references that may help:
https://technet.microsoft.com/en-us/library/cc727335(v=ws.10).aspx
If you use DHCP from network router (which is wrong configuration):
https://support.microsoft.com/en-us/kb/2459530
HTH
Milos

Windows Server 2008 R2 DNS Entry Auto remove not working

Dear All,
I have configured DNS Ageing for 30 days removal of unwanted host entry.but it will not work.
Active directory DNS having all unwanted host in forward lookup zone and as well as reverse lookup zone.
how to solve this ?
pls help
Sunil
SUNIL PATEL SYSTEM ADMINISTRATOR

Hi,
This is a rather common problem when configuring Scavenging and Aging of stale DNS entries. This has to be set in two spots, not just one as so many admins have difficulties with. It isn't very obvious.
Aging and Scavenging must be set on both the DNS Server and on the Zone
that you want to clean. In addition, DNS needs to be Active Directory integrated and resource records need to be dynamically registered. Static entries are ignorned.
First step:
To set aging and scavenging properties for the DNS Zones using the Windows interface
Open DNS Manager.
In the console tree, right-click the applicable DNS server, and then click
Set Aging/Scavenging for all zones.
Select the Scavenge stale resource records check box.
Modify other aging and scavenging properties as needed.
Second Step:
To set aging and scavenging properties for the DNS Server using the Windows interface
Open DNS Manager.
In the console tree, right-click the applicable DNS server, and then click
Properties.
Select the Advanced tab,and then enable Enable automatic scavenging of stale records
check box. Once done, specify the Scavenging period (That is recurring
interval for Scavenging on a DNS server) and click on OK
That will do it. Your DNS entries will then start auto scavenging based on the times you have determined. Word of caution - do not set your aging too aggressively - I have seen where an admin had set aging down to 1 day and when it finally kicked
off, nearly brought the company to a halt.

Forum FAQ: How to troubleshoot DNS Event 5504 error

Symptom
A DNS server may frequently record the Event ID 5504 error in the event log:
Event Type: Warning
Event Source: DNS
Event Category: None
Event ID: 5504
User: N/A
Computer: Computer_name
Description: The DNS server encountered an invalid domain name in a packet from IP_Address .
The packet is rejected.
Cause
Event ID 5504 is logged when a DNS Server receives a packet containing an invalid domain name. There are many possible causes.
1.      The DNS cache becomes corrupt with invalid domain names.
2.      The DNS Server receives a spoofed response.
3.      The DNS response contains domain names with characters other than 0-9, a-z, A-Z, . (Period), and - (Hyphen).
4.      The DNS Server has been configured with invalid forwarders
5.      The network the DNS server resides on is busy or not working properly.
Resolution
The following are general troubleshooting steps for this issue:
1. Secure the DNS cache against pollution.
a)     Open DNS Management snap-in and then open the Properties dialog for the DNS server.
b)     Click the Advanced tab, check the Secure Cache against Pollution option, and then click OK.
c)      After enabling this setting, right-click the applicable DNS server and select Clear Cache, then restart the DNS Server service.
2. Verify that the forwarder list on the DNS server is pointing to recursive DNS servers. To view the forwarders, please perform the following steps:
a)     Open DNS Management snap-in and then open the Properties dialog for the DNS server.
b)     Click the Forwarders tab, you can view the existing forwarders.
3. Some third party DNS servers may be using records of a type that aren’t supported by Windows DNS servers, such as the DNAME resource record.
920162     Event 5504 is logged when a Windows Server 2003-based DNS server receives a packet that contains a DNAME resource record
http://support.microsoft.com/default.aspx?scid=kb;EN-US;920162
4. Another example where DNS will produce the Event ID 5504 error is when Extended DNS (EDNS) packets are received but the server that is attempting to resolve the EDNS traffic doesn’t support EDNS or have it enabled. An easy workaround is to disable EDNS.
dnscmd /Config /EnableEDnsProbes 0
More Information
Troubleshooting DNS
http://technet2.microsoft.com/WindowsServer/en/library/de2aa69d-1155-4dc9-a651-e836
2f6a81c81033.mspx?mfr=true
DNS Best Practices
http://technet2.microsoft.com/WindowsServer/en/library/59d7a747-48dc-42cc-8986-c73d
b47398a21033.mspx?mfr=true
Applies to
Windows Server® 2003 operating system
Windows Server® 2008 operating system
Windows Server® 2008 R2 operating system

I'm not sure whether this is the appropriate place to add this but - a (possible) cause that I have seen which is not mentioned above is a request for an AAAA record (IPv6 address)
being responded to with an A record (IPv4 address).
DNS debug logging (Windows 2008 R2 SP1) captured requests to
192.225.156.200 and the corresponding responses. In each case the response was followed in the debug log by the event “The DNS server encountered an invalid domain name
in a packet from 192.225.156.200. The packet will be rejected. The event data contains the DNS packet.”
The domain name in the response was the same as that in the query, and looks OK.
The logged query shows an AAAA record (IPv6 address) request and the logged response returned an A record (IPv4 address).
http://www.rfc-editor.org/rfc/rfc4074.txt “Common
Misbehavior Against DNS Queries for IPv6 Addresses” says, under “Expected Behavior”:
   Suppose that an authoritative server has an A RR but has no AAAA RR
   for a host name. Then, the server should return a response to a
   query for an AAAA RR of the name with the response code (RCODE) being
   0 (indicating no error) and with an empty answer section (see
   Sections 4.3.2 and 6.2.4 of [1]). Such a response indicates that
   there is at least one RR of a different type than AAAA for the
   queried name, and the stub resolver can then look for A RRs.

DNS Management

Similar Messages

Maybe you are looking for