DNS quandry

We are having a problem with DNS that I can't figure out. We run our own DNS servers on a couple of xServes. We have two zones set up.
Let's call them:
example.com
company.com
Our website is hosted offsite at www.companyonline.com. It does not have a fixed IP address of its own. We need to make www.company.com forward to the www.companyonline.com website. If I ping www.companyonline.com it pings 111.111.111.111 (fake ip obviously) but if you go to that ip you get a message that there is no website configure there.
I can't figure out a way to add a machine (www) to the company.com zone but send it to a url instead of an ip address.
Help. We really need to get this forwarding set up.

You say companyonline.com does not have a fix IP address, so I guess you use virtual hosting (one IP shared by multiple domains).
If this is the case, you need, beside the DNS modifications, also create a new site using the Server Admin tool (alternatively do so manually using the command line). Go to SA, click on "Web" service, then on the tab "Settings" and on "Sites". Click the "+" button to add a site or edit an existing one.
When calling the IP you got via ping, it depends upon the server's configuration which website to show. As far as I know, it brings up the first site listed at the sites panel of SA (at least in our case it works so).
Should you run your own DNS servers and try to configure a domain over the DNS panel of Server Admin, please stop wasting your time. It is much more convenient to handle this over the command line - a hard lession I had to learn not so long ago as I tried to use SA for managing our domains' DNS records and failed over and over. It simply is too buggy.
By the way, a good online tool to test your domain's DNS entries for being correct (at least according the industry-standard) is DNSreport at http://www.dnsreport.com/

Similar Messages

Open DNS follow-up report

Interestingly, after a very positive experience by adding the open DNS numbers 208.67.222.222 and 208.67.220.220, I found today that every time I tried to open Safari it knocked me offline. So I've now resorted back to the number originally assigned to me.
What's going on with Safari?

Jake,
One Verizon DSL account; one Westell 6100 modem
Check with Verizon and find out what the max download / upload speeds should be.
If this is the plan you purchased: http://www22.verizon.com/residential/highspeedinternet/
*"And we’re constantly looking for ways to make our DSL faster—recently upgrading our Starter plan to 1 Mbps* download and our Turbo plan to 7.1 Mbps."*
1 Mbps download / 7.1 Mbps is hardly high speed.
You can check your upload/download speeds here. http://www.speedtest.net/
To realize faster download and uploads speeds you would need to upgrade your service.
This is more then just a DNS issue.

Problem with DNS and/or Virtual Host (works from inside, not from outside)

I am running several web sites (as virtual hosts) successfully on one Xserve (192.168.200), which are accessible internally and from the Internet (via forwarding port 80 on our firewall).
Now I am trying to add another web site (newmini.domain.com), which however is running on a Mac mini (also on the same subnet as the Xserve) at 192.168.100. What I did is make an additional entry under the Xserve's DNS for the domain (domain.com) (+ Machine..., pointing to 192.168.0.100). (I also made the necessary changes to the Mac mini's httpd and hosts configuration--no problem there).
Now, here's the strange thing: All computers on the subnet, whose DNS points to the Xserve, can see and browse newmini.domain.com fine. No problem. The computers ask the Xserve for the IP of the host in question, the Xserve says, "192.168.100", the request goes to the Mac mini, and it serves the web site as expected.
But this doesn't happen if the request comes from the Internet. Instead of seeing the Mac mini, the client sees the default web site of the Xserve... So it appears that somewhere, the virtual host part of the HTTP request is lost between our firewall and the Xserve.
Any ideas? Thanks.

It's not going to.
You say you've setup port forwarding on the firewall. Port forwarding only cares about the port number (80). It knows nothing about the nature of the request (e.g. the hostname that the web request is for). Therefore all extenal connections on port 80 get sent to the XServe. The newmini doesn't see the traffic at all.
If you only have a single public IP address you can only forward port 80 traffic to a single machine. Your options are to either use a different port number, or configure the XServe to proxy the connection to the mini (so now the traffic goes router -> XServe -> Mini -> XServe -> router), although that might not do what you want since it still places load and dependencies on the XServe.

Open DNS

My very much up-to-date Safari has been exceptionally neurotic. The day begins at lightning speed, then slows down, then, from time to time, Safari simply knocks out my internet connection.
I've seen others here suggesting one could add 208.67.222.222 and 208.67.220.220 in their DNS menu. I haven't done it yet, simply when I click "+" to do so, my current numbers disappear. I was hoping the two series of numbers above could be added rather than substituted, so that if there was a problem with the two suggested numbers, I could revert back to the old ones, provided by, I assume, my internet provider Verizon.
Any thoughts on the above?

How did you add them?
If you are using a single computer: Open System Preferences/Network. Double click on your connection type, or select it in the drop-down menu, and in the box marked 'DNS Servers' add the following two numbers:
208.67.222.222
208.67.220.220
(You can also enter them if you click on Advanced and then DNS)
Sometimes reversing the order of the DNS numbers can be beneficial in cases where there is a long delay before web pages start to load, and then suddenly load at normal speed:
http://support.apple.com/kb/TS2296
If your computer is part of a network: please refer to this page: http://www.opendns.com/start/bestpractices/#yournetwork and follow the advice given.
(An explanation of why using Open DNS is both safe and a good idea can be read here: http://www.labnol.org/internet/tools/opendsn-what-is-opendns-why-required-2/2587 /
Open DNS also provides an anti-phishing feature: http://www.opendns.com/solutions/homenetwork/anti-phishing/ )
Wikipedia also has an interesting article about Open DNS:
http://en.wikipedia.org/wiki/OpenDNS

Open DNS and internet sharing

I am seeing strange behavior, and wondering if anyone has a thought about what is going on.
I am at a hotel with fast internet service over ethernet, but, for whatever reason, DNS seems very slow if I use DHCP to connect (timeouts of 5-10 secs to get to a new site). If I switch to DHCP with fixed DNS, and use the Open DNS servers (208.67.222.222, 208.67.220.220) the latency issues go away.
The interesting thing is that I am sharing the internet connection over Airport to my wife's computer (she connecting thru DHCP). If I use a fixed DNS for MY computer, then her computer cannot connect thru internet sharing. But if I use the (slow) DHCP connection, then she can connect through mine. I have not tried setting up her computer with a fixed DNS, as she really doesn't like me to change settings on her computer
Is this a known limitation of internet sharing, or is there something I should know?
TIA

In more detail, if my ethernet (the computer that is doing the sharing), is set up with Configure: Using DHCP, and DNS Server: 208.67.222.222, 208.67.220.220 (in Network Panel for Ethernet), then the computer connecting thru Internet Sharing in Sharing Panel is not able to access some or all resources thru http (ie, pages fail to load, or do not fully load).
However, if I clear the DNS Server part in the Network Panel, thereby using the the DNS Servers supplied by the hotel, then my computer's connection to the internet is slower, with long waits (presumably due to a slow DNS server), but computers accessing the internet via Airport thru my shared connection are able to browse the internet successfully.
I suspect that when I have a fixed DNS server in my computer, that fact is not broadcast to computers using the shared connection. But I am not an expert in TCP/IP, and may well be confused about how DHCP, DNS, and Apple's Internet Sharing work together.
Thanks for any ideas you have
A

Open DNS & Airport Question

I have a wireless network (Airport Extreme and Airport Express for range in the back of my house). Have 4 Macs on the network. All have Open DNS set in System Prefs>Network>Airport>Advanced>DNS.
Should I set one or both of the Airports to Open DNS also? If so, how? I looked at Airport Utility and see no ready way to do it.
If I should add OPen DNS to Airport, can someone tell me how in an easy to follow fashion?
Thanks in advance!

No, sorry.
All my machines are individually set for Open DNS: System Prefs>Network>Airport>Advanced>DNS: 208.67.222.222; 208.67.220.220.
The machines have been set this way for a long time.
My Q: Can/Should I set my Airports (Express and Extreme) somehow for Open DNS?
My general configuration is:Cable>Modem>Airport>4 Macs.
The hardware configuration is Cable into Router (Cox), Ethernet into Extreme, broadcast to Express 5 rooms away (to serve 2 of the 4 Macs); Ch 1 all.
Perfect connection - so don't want to mess with that.
Just want to know (if I can to speed up download time) --
Would (if possible) setting the Airport settings to Open DNS help my speed? If so, how in the world would one do that - - > set the actual base station to have Open DNS settings?
Make sense? Hope so!
Thanks!
Message was edited by: pcbjr

Follow up - DNS (internal domain has same name as external website)

Hi,
I am following up with on previous blog entry about resolving an domain internal name to an external website found here:
https://social.technet.microsoft.com/Forums/windowsserver/en-US/4d97325b-ff3a-4f46-ba6e-dc3f4ff978e1/dns-internal-domain-has-same-name-as-external-website
On October 30, 2014
HayashiTech provided a response suggesting the use of netsh interface portproxy on the DC's to resolve this issue. There has been no feedback to this suggestion and I am very curious what opinions are out there for this suggestion as it appears to be the
best option provided yet.
Thank you in advance as well for all the great guidance I have found provided by Ace and his followers.

Interesting question. I've not seen that solution before, but having done a test on my lab setup it certainly seems to work as expected. Eg, using :
netsh interface portproxy add v4tov4 listenport=80 listenaddress=dc1.abc.com connectport=80 connectaddress=www.abc.com
on my DC where I've setup a working external domain name with the www record pointing to the website, and the non-www record pointing to the DC, requests to the non-www address are successfully being redirected to the www address (after confirming it didn't
happen prior to adding the portproxy).
So on the face of it that does look like a workable solution. I haven't used it myself in anger obviously, but the two downsides I can think of immediately to this solution are :
1) This operates as a proxy, so unlike the IIS method that Ace mentioned where it would tell the client to go to the www address instead (so the client connects direct), this method keeps your DC acting as a middle man, eg all communications to that address
go through your DC rather than direct from the client to the website. Depending on what they're doing on the website this may or may not be an issue for you.
2) Since the client is continuing to connect to the DC throughout, if you ever did need the have something on the DC responding to port 80 then you could have issues. That said, according to
https://technet.microsoft.com/en-us/library/cc731068(v=ws.10).aspx the portproxy listenaddress can be a FQDN rather than IP, so that could mitigate any issues there.

Having trouble setting up Open DNS with mac.

When I try to set up Open DNS I get the following error message:
Safari can’t open the page “http://192.168.1.1/Basic.tri” because the server unexpectedly dropped the connection. This sometimes occurs when the server is busy. Wait for a few minutes, and then try again.
I have a Linksys router. I can get the router so save the settings using my Microsoft laptop, but I get an "oops" error message from Open DNS saying I am not set up on their site and just sends me back to step one. Does this sound familiar to anyone?

No, you cannot put the router in front of the modem.
You might look for any information your ISP gave you for your modem, such as a user guide. Or use the instructions at OpenDNS for a Motorola router, it should be similar. Remove the router and directly connect just one computer to the modem and try to access the modem's built in utility, as you have with your Linksys router. Motorola's default address appears to be "http://192.168.10.1/", the default username is "admin", and the password "password". If you encounter a question about obtaining the DNS service dynamically, check NO, then handset the OpenDNS servers, save and possibly restart the modem.
If you are successful in configuring the modem, go back to the router and leave the DNS settings blank, as well as on each computer. Then the computers should receive the service dynamically from the modem.
After all that, hopefully the OpenDNS website detects you using their service and allows you to proceed with setting up your account.
Dah•veed

Help setting up Open DNS with new airport extreme

I cant seem to get Open DNS to work with a new airport extreme. The status says I am not using Open DNS and its not filtering anything. I have followed the exact steps for set up listed on their website, checked the dns settings, cleared both caches and restarted the computer, modem and router with no success. I set the airport up in bridged mode, although I tried the other option under setup, but not sure what I was doing? I picked up this router because I wanted easy set up and the apple store assured me it would work with Open DNS. Oh, and I also downloaded the latest firmware update on the router. Can anyone help me with the settings or what else I need to check?

Sorry, I am not familiar with this product, so I checked online to pick up some information. Here I am referring to the information found here:
http://www.dslreports.com/faq/6096
I found that your device is mentioned as follows in the intro under Section 1 of this document:
The BellSouth supplied Westell 2100, 2200 and 6100 models (Models A90-210030-04, B90-220030-04, and B90-610030-06/C90-610030-06, respectively) share many features and functions.
Next, I am referring to the information under Section 2, under the heading of Standard Default Mode Connection (separate hub or switch present). Unless you have changed the configuration on the Westell, this is how your device is operating. In this mode, the Westell device is acting both as a modem and router in one unit.
So, an attached router (AirPort Extreme) must be configured as a switch to work correctly. That is what Bridge Mode is....the AirPort Extreme is operating as a switch when it is in Bridge Mode (which would be the correct setting to use when the Westell is set to its Standard Default Mode).
Any changes that you want to make regarding DNS settings would need to be made on the Westell device, since it is acting as the main router on your network.
In Bridge Mode, the AirPort Extreme simply passes that information through to its connected devices. You will not be able to make any DNS related changes on the AirPort Extreme since it receives that info from the Westel device. Some service providers force you to use their DNS servers, so you might want to check with Bell South or AT&T for more information in this regard.
If you want to be able to configure the AirPort Extreme as the main router on your network, and instruct it to use the DNS information that you want, you will need to refer to the section under the heading of Bridged Ethernet Mode ( separate router present).
Please note that the first item under this heading specifies that "This is the preferred configuration when using a separate external router..." (which would be the AirPort Extreme in your case)
So, it appears to me that this would be the way that you must reconfigure the Westell device to allow the AirPort Extreme to function as the "main" router on your network. In this type of setup, you will be able to enter the DNS information that you want to use under the setup for the AirPort Extreme and it will act as you instruct.
The AirPort Extreme would not be configured in Bridge Mode for this....it would be configured to "Share a public IP address".
The next item in the article specifies that you "Must use a PPPoE client on the Router." This means that the AirPort Extreme would be configured to Connect Using = PPPoE as follows:
AirPort Utility - Manual Setup
Click the Internet icon
Click the Internet Connection tab
Connect Using = PPPoE
You would enter your user name (probably your email address), password, etc in this area. Leave the Service Area box completely blank. Set Connection to Always On, and Disconnect if Idle to Never
Click Update to save the new settings. Power off the Westell device after this and then restart it so that it will pick up the new information that you have programmed into the AirPort Extreme.
I want to stress that this is how I would try to configure the Westell and AirPort Extreme. But, as I said, have not used a Westell device, so I cannot say that this will work correctly for you.
It might be an excellent idea to contact Bell South or AT&T Support to ask for their opinion on this before you decide to change the configuration of the Westel device and the AirPort Extreme.
This type of thing can be intimidating for users, so you might elect to use the services of someone like the Geek Squad at Best Buy, or a similar service from a local computer firm. Perhaps the Apple store could help as well.
If it is not critical that you use Open DNS, you might want to simply leave things "as is", with the AirPort Extreme in Bridge Mode.

Problems setting up open DNS

I have been trying for several days to get open dns set up on my home network and imac and am running into a wall. I have installed the correct numbers on my router and even added them to my modem. I checked on my imac ethernet network settings and the dns numbers are displayed there correctly. I have been in contact with Open DNS through a service ticket and been on their forum and tried multiple solutions. I appear to be using the open dns connections but even after multiple attempts to adjust my settings, I cant get it to filter Adult sites (I did set up an account as directed). Im about ready to give up on the service but thought I would try hear to see if this might be a common issue and if anyone has recommendations??

If you goto http://opendns.com
if you are using their service you should see in your browser.
If you are able to access a pron site that you accessed prior to turning on filtering then this problem may be due to the browsers caching the information.
I would suggest you clear your browsers caches.
also clear the dns cache on your mac use the following command in your terminal
dscacheutil -flushcache
also use the following command to list what dns servers your mac is using and post the results so I can check them.
/usr/sbin/scutil --dns | grep nameserver

DNS set up when not distributing dns

Ok it's not clear but let me try, I am in a place where they give me an ip address and my domain names come from godaddy and are directed from there. sorry I'm french. Here's my question,
Do I need to setup DNS on leopard server if I want to use all the services, open dir, qtss , podcast producer ect. or since I don't distribute dns, can I not use the dns service.
I'm not sure I expressed my self properly so ask questions if you need to know more.

Do I need to setup DNS on leopard server if I want to use all the services, open dir, qtss , podcast producer ect. or since I don't distribute dns, can I not use the dns service.
If you want to run your own directory service for your clients then you SHOULD run your own DNS server. This is essential if you're setting up your server in a private-class network (e.g. 10.1.x.x or 192.168.x.x) since GoDaddy are not going to be able to resolve your internal hostname(s).
The fact that no external users will ever query your server for DNS lookups doesn't matter - your own machine will and that's what counts.

DNS set up

I have problem setting up a correct DNS. This is a possible cause Open Dir doesn't work, in-fact I'm unable to create an Open Directory Master; while all the other services (web, mail, ical) work fine.
The server name on ServAdmin top left side is macweb.local; the machine IP is 192.168.115.24.
From term the command changeip -checkhostname, prompts the following:
"Primary address = 192.168.115.24
Current HostName = macweb.server.com
The DNS hostname is not available, please repair DNS and re-run this tool.
dirserv:success = "success""
So far I created under the DNS function of ServAdmin a primary zone with:
zone name=server.com
nameserver-hostname (fqdn)=macweb.server.com.
Then a record machine named=macweb
with two IP addresses under it: 127.0.0.1 and 192.168.115.24
obtaining two reverse zones mapping macweb.server.com on the two ip.
Re-running the changip command the result doesn't change.
Any suggestion is very well appreciated.
Alberto.
Message was edited by: albfran
Message was edited by: albfran

[Here is a DNS server set-up sequence|http://labs.hoffmanlabs.com/node/1436]. That's end-to-end.
Are you strictly referencing this DNS server from your LAN and from your DHCP server, or are there references to any other DNS servers mixed here?
Assuming your server here is your DNS server, is your DNS server here referencing itself (in the guise of the 127.0.0.1 loopback address) via System Preferences > Network controller > static IP, static DNS server setting? Or is it referencing some other DNS server?
Your other clients on your LAN can refer to your DNS server via its static IP address, but the DNS server here should use the loopback address.
Post the output of the Terminal.app commands +dig server.example.com+ and +dig -x server.ip.address.here+ in its entirety, and I'll have a look at the data returned. (If you want to obfuscate your domain there, that's fine, but don't obfuscate the 192.168.0.0/24 addresses anywhere in what's returned, and the obfuscation of the host names needs to be consistent for the output to be useful in diagnosing this.)
And FWIW, you probably aren't the organization that has registered the server.com domain name, so please stop using that domain either for real in your configuration, or using it as your example domain name. If your intent is to obfuscate your domain name (and which is fine by me) then use example.com, example.net or example.org as your domain name. These are RFC-reserved example domains. This usage both avoids referencing a domain you don't have registered, and it makes your intent here clear. It means I don't have to ask you "is that your real domain, or are you obfuscating?".

DNS: reverse zone comes back after remove and some follow up issues

hello community,
after installation of OSL i had setup dns with a primary zone.
the automatically created reverse zone for my internal network is fine.
whenever i enter a new system the default for the ip address is 10.0.0.1 and the reverse zone is automatically setup for this ip address.
whenever i remove this reverse zone it come back automatically after saving the dns configuration.
with this come some follow up error.
server admin claim that there is no name server configured for this reverse zone.
when i configure it the configured name server entry vanished after clicking the save button.
when i try to configure settings i can not. i get the error message that the configuration can not be saved cause of the missing name server for the reverse zone i am not using ....
in the log file i can see that the file for reverse zone can not be found.
when i check the dns configuration in the shell i can see that the reverse zone file is not there.
someone has an idea
- whats the best way to fix this?
- why is the gui still showing the reverse zone i am not using?
- is the dns configuration also in the ldap db with wrong entries?
regards
christian

Clean out your zone definitions, and start over. Server Admin is unfortunately seemingly fussy around the authoritative server stuff and the order stuff gets entered, and it seems you can get into a sequence where it doesn't have what it needs. I had encountered couple of cases when I was in a similar state as you're in now, and I ended up clearing and deleting the primary zone and re-adding the zone and the hosts, being careful to add the authoritative server as the first step of adding a zone.

DNS configuration for webhosting - follow-up question

In regard to my previous inquiry I want to add another question affiliated with that.
We want to use our own DNS servers for domain registration. For this purpose, I need two DNS servers - ns1.domain.com and ns2.domain.com.
domain.com is a domain owned by us that should get also managed at the Xserve's DNS service.
For that reason I would need to add two sub-domain records to the DNS entry for the zone domain.com, wouldn't ?
But how do I achieve this ?
When trying to add another "machine" (comparable to "CNAME" ?), server admin requires me to use a different IP address (it won't let me save two machines for one zone with the same IP; see my previous inquiry, I created a machine for "www"). And I see no other way to do this (therefore it also seems not to be possible to create a sub-domain like meat.domain.com).
Maybe someone can direct me to the right solution.
It appears to me that Apple uses different terminology in their DNS system; at least although I'm a bit experienced with DNS, I totally hang here.
I look forward your assistance
Mac OS X (10.4.8)

Hi there,
Have you seen or thought about using Tenon iTools?
http://www.tenon.com/products/itools-osx/
Seems like the way to go for virtual hosting on a mac.
Aloha,
Tony

Open DNS - For Home Wireless

Is openDNS be an advantage to my home wireless serving all wireless devices & up internet speed and faster identification?

There are always pros and cons for everything. If you want to go with OpenDNS consider some of these things:
Please don’t expect huge gains in browsing speed since OpenDNS only improves the cycle between your computer and the DNS server.
I got this from this site:
OpenDNS: the Good, the Bad and the Ugly
" OpenDNS is fast and reliable, more than the service offered by any ISP I have used. In addition, it offers a host of other features: Content Filtering, Phishing Protection, Domain Blocking, Adult Site Blocking, Web Proxy Blocking, Domain Whitelisting, Statistics, Typo Correction, Web Shortcuts.
When you type in a domain that does not exist, OpenDNS resolves it to it’s own servers and shows search results (powered by Yahoo!) that they hope will help you find the site you were looking for."
To read more about this, pelase go to this link:
http://www.grok.in/blog/2008/03/17/opendns-the-good-the-bad-and-the-ugly/

DNS quandry

Similar Messages

Maybe you are looking for