DNS resolve problem
Dear All,
I have setup a Primary DNS zone on mac os server 10.6.3 server for testing name bolt.com but when I ping it. It's showing me error ping: cannot resolve the bolt.com: unknown host. I don't know what I have done mistake. I setup up the DNS on mac first time that's why I have not configure it properly please guys help me to enter the mac os x server world.
Regards,
Khalid
You probably don't realize it, but just did the same thing. You're again using a domain that you do not have registered. You don't have example.com registered. Please read the article I linked to. (If something in that article doesn't make sense, please ask.) Either use a completely bogus domain (and that's tougher to construct, if you don't know the DNS domain name formatting rules and how the names are assembled) or (better, easier, safer) get yourself a real and registered domain.
I generally don't use the command line for setting up DNS, I prefer to use Server Admin. Which is what is described in the linked article. I'd let Server Admin guide you to a working configuration.
If you do decide to manage DNS manually, you probably won't be able to use Server Admin in the future.
If you want to follow the command-line path for managing DNS, then please read the available ISC BIND9 documentation or (better) get yourself a copy of Cricket Liu's DNS and BIND book and start reading. The fifth edition of the book was current, when last I looked.
DNS works because folks follow a set of shared practices and guidelines. Not because folks might pick domains or IP address spaces in an uncoordinated fashion. DNS server configuration errors and IP routing errors are among the very few things that one Internet site can do that can screw up access or routing for other Internet sites, too. Hopefully your ISP will have limited the damage you can cause here, though.
If you don't have access to a subdomain of a domain that you have registered or have permission to use, and strictly so you don't have to spend a few currency-units to register a test domain, then.. If you want a completely bogus domain name to test with, then something like myhost.test.khalidinzi is probably safe. test.khalidinzi is your bogus domain, and myhost is a host name within that domain.
Similar Messages
-
Host fingerprint always changing, possibly dns resolve problem?
Hello,
I have a server that i try to connect which key fingerprint changes form time to time, and it stops me to connect (i get wrong password disconnect, although i am using an RSA key). Since its a physical machine lets exclude the part of any traffic shaping by the VPS provider. Also normally when i cant connect i cant see anything on the sshd logs of the machine. So this probably is a dns resolve problem ? Any recommendation or knowledge that you can share with me to help me solve this problem ?presumbly the previous stats were from the test socket as new stats are just the same
any exchnage problems http://usertools.plus.net/exchanges/mso.php
http://usertools.plus.net/exchanges/?
http://btbusiness.custhelp.com/app/service_status
http://bt.custhelp.com/app/answers/detail/a_id/15036
http://community.plus.net/exchange-information/
If you like a post, or want to say thanks for a helpful answer, please click on the Ratings star on the left-hand side of the post.
If someone answers your question correctly please let other members know by clicking on ’Mark as Accepted Solution’. -
Background:
VCSC and VCSE are using same dns domain name
e.g. VCSC.ipt.example.com
VCSE.ipt.example.com
SIP domain name : example.com
When a internet VC endpoint call a internal endpoint which is registered to VCSC, dial string is [email protected] ( both SIP and H.323)
Problem:
vcsc and vcse are using same DNS servers. All dns servers are assigned public ip addresses.
Since last week, VCSE cannot resolve any public domain name. It can only resolve vcse.ipt.example.com and vcsc.ipt.example.com
But VCSC can resolve internet domain name like cisco.com
VCSE can ping internet ip address like 8.8.8.8 (google dns)
Both VCSE and VCSC could resolve public domain name a week ago. The only changes to both VCSC and VCSE were just search rules and transforms. Both of these rules should not affect the domain name resolution.
Because VCSE cannot resolve public domain name, sip uri dialing and enum dialing to internet endpoints fail due to resolution issue.
Are there any other settings on VCSE except dns server ip addresses can lead to resolution problem?
ThanksYour question would be better off in the TelePresence section of the forums, where these devices are more actively discussed and people can help get you the answers you need. You can move your question to the correct section by editing it and changing the categories at the bottom.
Have you tried to revert the changes you made and see if DNS starts working again? -
DNS Resolver not working with JDK 1.5.0_6 and Windows 2003
I have a Windows Server 2003 machine which now has Java JDK 1.5.0_6 installed on it. Somehow the DNS resolver doesn't work - every call to InetAddress.getByName("host") throws an UnknownHostException. I've tried de-installed java and re-installing, but the problem remains. No traffic seems to be generated (i.e. no packets to port 53) when getByName() is called. I don't have any kind of firewall on the Windows Server 2003 machine.
Has anyone ever seen this kind of behaviour / problem before and know of a solution?
Thanks,
PeterOk, I finally managed to solve this problem. What was happening was that IPv6 was installed on this computer, and as a result Java was trying to do a DNS lookup using a IPv6 socket and failing. With the help of TracePlus Winsock, I discovered that internall Java's InetAddress.getByName does this:
WSAStartup
socket(INET6)
getaddrinfo
WSACleanup
Two solutions are possible - either set the system preference java.net.preferIPv4Stack to true, or uninstall the IPv6 stack. Since I couldn't find a way to set the system preference in a persistent manner (apart from passing in an argument on the java command line), I uninstalled the IPv6 stack.
Hope this helps someone else.
Peter -
why do i have connection issues. using wireless connection on my omni 10 win8.1. running hp trouble shooter all the time. to reconnect. i t resolves by purging DNS RESOLVER CACHE. error code 312. nne of my other wireless equipment as this problem such as my hp laptop win 7.
Hi richmcconn2014, I understand you are having connection issues with your Omni 10. I am not sure exactly what the error was you mentioned, but I have found a document which shows you how to flush and reset your resolver Cache.
DNS Resolver Cache - Flush and Reset in Windows
Beyond that, try the steps outlined in this document: Troubleshooting Wireless Network and Internet (Windows 8)
Let me know how it turns out.
TwoPointOh
I work on behalf of HP
Please click “Accept as Solution ” if you feel my post solved your issue, it will help others find the solution.
Click the “Kudos, Thumbs Up" on the bottom to say “Thanks” for helping! -
Open dns resolver issues on windows server 2008 R2
my client is running a windows 2008 r2 server with dns and dhcp roles. it's not a domain controller, just a workgoup server.
got a notification from my client's isp:
"These attacks have been facilitated through DNS
amplification attacks. AT&T has detected these attacks and has confirmed
that the IP address x.x.x.x allocated to your Internet access account is
accessible from the Internet as an open DNS resolver. "
tried disabling recursion, but then there is no access to the internet.
tried disabling the firewall rule for dns udp, and no access to the internet.
does anyone have any idea how to correct this? do i need to add a public dns server to my dhcp scope for internet access? if i do, then what good is a dns server and it doesn't resolve internet addresses?
GaryJust to add, I was wondering why you had port 53 opened to your DNS servers. And just to point out, that rule you created is a port translation rule that allows access to your DNS server from the internet, just as if you had created a rule to allow access
to an internal web server for public use, or for allowing webmail (OWA) access from the internet to your internal mail server.
What you did, as Keith said, will stop that, but to further point out, the rules are not really needed again, I would just remove the rules completely. For internet access, such as allowing your users to access websites, your DNS to resolve external names
(whether using Root hints or a Forwarder), just about any firewall will allow that out-of-the-box. In some firewalls, you have to create a rule to the outside untrusted interface to "allow established" meaning when an internal request goes to an outside resource,
such as a website, to allow the response back in.
The only time you want to create rules is either you want to allow inbound traffic with a port translation rule (such as what you originally unknowingly did for TCP & UDP 53) to a web server, OWA, SMTP traffic to a mail server, etc.), otherwise,
leave it out of the box.
As for what the ISP is concerned about regarding DNS amplification attacks, is that they are a fairly recent method for attackers to create a DOS (denial of service). You can read up at a couple of recent discussions about what all that means in
the following threads, with ways to stop or mitigate them.
Best way to reduce or disable DNS amplification for external DNS?,
Sunday, June 16, 2013 6:08 PM
http://social.technet.microsoft.com/Forums/windowsserver/en-US/d087a768-2075-49e4-afec-4fd23b50af0a/best-way-to-reduce-or-disable-dns-amplification-for-external-dns
Protecting Windows DNS Server from being abused for DNS amplification attacks,
Wednesday, April 10, 2013 8:05 AM
http://social.technet.microsoft.com/Forums/windowsserver/en-US/fac86dc7-779d-48eb-a113-9c06c2222af9/protecting-windows-dns-server-from-being-abused-for-dns-amplification-attacks
Ace Fekay
MVP, MCT, MCITP/EA, MCTS Windows 2008/R2 & Exchange 2007, Exchange 2010 EA, MCSE & MCSA 2003/2000, MCSA Messaging 2003
Microsoft Certified Trainer
Microsoft MVP - Directory Services
Technical Blogs & Videos: http://www.delawarecountycomputerconsulting.com/
This post is provided AS-IS with no warranties or guarantees and confers no rights. -
Apple tv is giving me a meesage that says... There is a billing problem with a previous purchase. Go to the iTunes Store on your computer and click Purchase History to resolve problem. I have gone to my purchase history but can't seem to fix this issue.
You can contact the iTunes Store Customer Service department at no charge using the form on their Support page (select the category and subcategory closest to the issue you're reporting and you'll find an "Email Us" button) and explain your problem to them.
Copied from Varjak Paw in :https://discussions.apple.com/thread/2598671 -
What, exactly, are 'encoded assets'? Why does removing them resolve problems? How can they be avoided in the first place?
As I understand it, encoding fomats your digital video clips and photos (assets) into Standard DVD mp2 format so that it can be burned to a DVD. If there has been an error in the encoding process, then you remove the old encoded assets and start over. There are numberous reasons why there can be errors in the encoding process.
-
TS1627 Mail on iPad is stuck. Cannot sync or evenrevert to resolve problem.
1. Mail on iPad2 is stuck, really stuck, for days. Cannot sync or even 'revert' to resolve problem. Error message on iMac insists mail is in use.
How can I get it out of use?
2. Mail on iMac OSX 10.5.8 is missing from applications file, although it remains in the dock and I can launch and use it normally.
Finder is unable to locate it.
Tried Apple support, but nothing available to restore mail app. Possibly, this is reason mail cannot sync with iPad2?
3. In separate issue, I downloaded update for wife's newer iMac OS X 10.6 machine. Immediately, download created a problem for Mail 4.5 on her machine.
Error message complained that Mail 4.5 was (no longer) compatible with this computer. Seemed impossible.
Tried Apple support, but nothing available to restore mail app.
Blogger indicated file to download and that appeared to install (or activate) Mail 4.6.
Mail service was restored, but it has a number of problems problems. For one, it does not open certain emails, but gives the last message viewed.
Has anyone had this experience? If so, can it be resolved?
We have happily used Apple Mail for years and are surprised to encounter so many diverse difficulties at one time.
As usual, I assume that the fault lies with my ignorance and mismanagement.
I have recently purchased and installed a new (Netgear) modem. Mail has worked on all devices prior to this breakdown.
Thanks for helping the handicapped.
JohnGood stuff...
For any other applications you may have trouble with... running in Vista Compatibility mode is done by locating the programs installation directory and then locating the .exe file in your system...then right click on that .exe and a window will appear...goto the compatibility tab and then choose either XP or Vista as the compatibility mode...
See this link for visual help...
http://www.howtogeek.com/howto/windows-vista/using-windows-vista-compatibility-m ode/ -
my network only consists of the AX, my macbook, and my PC (which is rarely used anymore). At least once a week, sometimes more often, my AX reports a DNS server problem. I've plugged it in to the ethernet and the settings are they same and there is no other router involved. The AX is connected directly from the cable modem. I confirmed with my ISP that the DNS server numbers are correct and they show up in the proper fields as well. What may cause this and how can I fix it?
Welcome to the discussion area!
Since the Express can only use the information that it receives from the ISP,
you might want to try the Open DNS settings to see if that will help. Just be sure to make note of your current settings in case you need to revert to them.
208.67.222.222 and 208.67.220.220
http://www.opendns.com/ -
[SOLVED] Problem with Iptables and DNS-resolving
So I'm changing my iptables default policy from ALLOW to DROP, and are tightening up the rules too.
However, I'm having troubles with allowing DNS-queries, while keeping things as locked down as possible.
/etc/resolv.conf
domain home
nameserver 192.168.1.1
Relevant rules:
# Allow HTTP
$CMD -A OUTPUT -o wlan0 -p tcp --dport 80 -m conntrack --ctstate NEW,ESTABLISHED -j ACCEPT
$CMD -A INPUT -i wlan0 -p tcp --dport 80 -m conntrack --ctstate ESTABLISHED -j ACCEPT
# Allow HTTPS
$CMD -A OUTPUT -o wlan0 -p tcp --dport 443 -m conntrack --ctstate NEW,ESTABLISHED -j ACCEPT
$CMD -A INPUT -i wlan0 -p tcp --dport 443 -m conntrack --ctstate ESTABLISHED -j ACCEPT
# DNS-related rules
$CMD -A INPUT -i wlan0 -s 192.168.1.1 -p tcp --sport 53 -m conntrack --ctstate ESTABLISHED -j ACCEPT
$CMD -A INPUT -i wlan0 -s 192.168.1.1 -p udp --sport 53 -m conntrack --ctstate ESTABLISHED -j ACCEPT
$CMD -A OUTPUT -o wlan0 -d 192.168.1.1 -p tcp --dport 53 -m conntrack --ctstate NEW,ESTABLISHED -j ACCEPT
$CMD -A OUTPUT -o wlan0 -d 192.168.1.1 -p udp --dport 53 -m conntrack --ctstate NEW,ESTABLISHED -j ACCEPT
What am I missing here?
Last edited by graph (2012-03-20 18:36:23)Gcool wrote:I'm assuming you just want to allow that box to surf the net?
Yepyep. Sorry for not mentioning that.
192.168.1.1 is my router, and when I'm disabling the firewall, everything is working perfectly. This is with 192.168.1.1 as nameserver in /etc/resolv.conf.
I tried changing my rules to your rules, but I still can't get it to work.
The following is the output while I'm connecting to www.xkcd.com using elinks:
Output of tcpdump -n '(port 80 or 443 or 53)'
without iptables running: pastebin.com
with iptables running: pastebin.com
It seems to me that DNS is working properly, and that iptables is blocking port 80, right?
Last edited by graph (2012-03-20 08:20:44) -
DNS resolving a name... for a minute!
We are having problems with office.microsoft.com ceasing to resolve through our NW6.5 SP8 within a few minutes of named loading. I can unload and load named again and office.microsoft.com will resolve fine... for a few minutes and then it stops resolving again. All other microsoft.com domains seem to be resolving fine.
I'm completely baffled. Any ideas?Originally Posted by osbornerd
We are having problems with office.microsoft.com ceasing to resolve through our NW6.5 SP8 within a few minutes of named loading. I can unload and load named again and office.microsoft.com will resolve fine... for a few minutes and then it stops resolving again. All other microsoft.com domains seem to be resolving fine.
I'm completely baffled. Any ideas?
Are the other microsoft.com zones running on the same server? Is the daemon dying? If all zones are on the same box, and you are only having issues with the one zone, I would backup the db and jnl files (SYS:\ETC\DNS I think) and then delete the ones for this zone and reload named. That will force named to recreate the db files from edirectory. -
Hello.
I'm having a lot of issues when resolving DNS names on Linux.
I've 2 computers, one is running Windows XP SP2, the other is running Arch Linux. I connect to the internet using the Windows machine, and I have ICS turned on so I can connect through my linux box as well.
Whenever I connect to a host of any sort through the linux box, I often recieve "Unknown Host" messages. If I refresh several times then it works.
My linux box has dual boot with Windows XP SP2. If I use Windows on this machine, I'm having no DNS issues at all.
So I believe the problem is with the way my Arch is configured.
This is the relevant part from my /etc/rc.conf:
lo="lo 127.0.0.1"
#eth0="dhcp"
eth0="eth0 192.168.0.2 netmask 255.255.255.0 broadcast 192.168.0.255"
INTERFACES=(lo eth0)
# Routes to start at boot-up (in this order)
# Declare each route then list in ROUTES
# - prefix an entry in ROUTES with a ! to disable it
gateway="default gw 192.168.0.1"
ROUTES=(gateway)
Can anyone help me rid of this annoying problem?This is what it says:
nameserver 192.168.0.1
search mshome.net
192.168.0.1 is the IP address of the Windows machine.
MSHOME is the name of the workgroup my Windows machine is in. -
Hi,
unfortunately I have a strange problem.
When I try to connect to our file share via NetBios Name everything goes smooth. For example explorer -> enter -> \\abc\test$
When doing the same thing with \\abc.domain.com\test$ there is a long delay. After some time waiting it then goes fast as well.
After closing the explorer, waiting some time and entereing
\\abc.domain.com\test$ again, I have to wait.
abc.domain.com is in registered on our local dns servers
abc.domain.com can be correctly solved by nslookup on the server
On the network adapter I have configured the default Wins Netbios settings.
Actually the file share sould be correctly resolved by dns and displayed in explorer...
Hope I can get some help! RegardsHi,
Please go head and delete the records from following location.
Dnsmgmt.msc [Dns Management]
A.Expand the forward lookup zones\_msdcs folder
i. Make sure only the actual domain controllers are listed, delete wrong Alias recordsremove wrong name server
records
ii. Select the container [forward lookup zones\_msdcs.domain.com\dc\_sites_\sitename\_tcp] > delete incorrect
_ldap and _kerberos records are listed.
iii. Select the container [forward lookup zones\_msdcs.domain.com\dc\_tcp] and delete incorrect _ldap and
_kerberos records
iv. Expand the [forward lookup zones\_msdcs.domain.com\domains\guid\_tcp] and delete incorrect _ldap entries
v. Select [forward lookup zones\_msdcs.domain.com\gc] – delete incorrect HostA records
vi. Expand the [forward lookup zones\_msdcs.domain.com\gc\_sites\sitename\_tcp] – delete incorrect _ldap entries
vii.Select the [forward lookup zones\_msdcs.domain.com\gc\_tcp] – delete incorrect _ldap entries
viii. Select the [forward lookup zones\_msdcs.domain.com\pdc\_tcp] – delete incorrect _ldap entries
B.Expand the forward lookup zones\domain.com folder
i.Delete Host(A) records of dc’s which are non-existant.
ii.Correct the NameServer (NS) records
iii. Follow steps similar to ’ A ii ‘ >> ‘ A viii’
· Dssite.msc [Sites and Services]
A.Expand the [Sites\Sitename\Servers] – delete incorrect server’s
B.Delete incorrect subnet configurations [Sites\Subnets]
C.Delete incorrect site links [Sites\IP]
· Make sure the domain controllers are pointing to the correct dns servers in tcp\ip settings.
· Force replication – ‘repadmin /syncall’ -
Hi , Recently i configure cisco881w Router, i am facing this problem , whenever i connected to the network, I am not able to resolve the DNS, i had tried to put in ip address of google in the browser, it works charm, but when i type in "www.google.com" , it is unable to resolve DNS, can any experts here point me whats is wrong with my config ? I am using Static for WAN connection
version 15.2
service timestamps debug datetime msec
service timestamps log datetime msec
no service password-encryption
hostname vertu
boot-start-marker
boot-end-marker
no aaa new-model
service-module wlan-ap 0 bootimage autonomous
ip cef
--More-- !
ip dhcp excluded-address 10.208.117.201 10.208.117.254
ip dhcp pool my DHCPpool
import all
network 10.208.117.0 255.255.255.0
default-router 10.208.117.1
lease infinite
no ipv6 cef
multilink bundle-name authenticated
license udi pid C881W-E-K9 sn FCZ1712C7GK
vtp domain vertudomain
--More-- vtp mode transparent
vtp version 2
vlan 2
name VTU0SG03-INTERNAL
vlan 3
name VTU0SG03-VOICE
vlan 4
name VT-WIRELESS
vlan 5
name VT-CONSOLE
vlan 6
name VT-EPOS
vlan 7
--More-- name VT-BRIGHTS
csdb tcp synwait-time 30
csdb tcp idle-time 3600
csdb tcp finwait-time 5
csdb tcp reassembly max-memory 1024
csdb tcp reassembly max-queue-length 16
csdb udp idle-time 30
csdb icmp idle-time 10
csdb session max-session 65535
interface FastEthernet0
switchport mode trunk
no ip address
--More-- interface FastEthernet1
switchport mode trunk
no ip address
interface FastEthernet2
switchport mode trunk
no ip address
interface FastEthernet3
switchport mode trunk
no ip address
interface FastEthernet4
ip address 182.16.233.102 255.255.255.0
ip nat outside
ip virtual-reassembly in
duplex auto
speed auto
interface Wlan-GigabitEthernet0
description Internal switch interface connecting to the embedded AP
no ip address
--More-- interface wlan-ap0
description Embedded Service module interface to manage the embedded AP
no ip address
shutdown
interface Vlan1
ip address 10.208.117.1 255.255.255.0
ip nat inside
ip virtual-reassembly in
ip forward-protocol nd
no ip http server
no ip http secure-server
ip nat inside source list 1 interface FastEthernet4 overload
ip route 0.0.0.0 0.0.0.0 182.16.233.1
access-list 1 permit 10.208.117.0 0.0.0.255
control-plane
--More-- !
line con 0
password vertumbs
no modem enable
line aux 0
line 2
no activation-character
no exec
transport preferred none
transport input all
stopbits 1
line vty 0 4
login
transport input all
scheduler allocate 20000 1000
endHi,
Do you want to use Internal or External dns? You need to add dns to your dhcp pool as below for google dns:
ip dhcp pool my DHCPpool
import all
network 10.208.117.0 255.255.255.0
dns-server 8.8.8.8 8.8.4.4
default-router 10.208.117.1
lease infinite
Thanks
John
Maybe you are looking for
-
Can i get my money back if a song i bought from itunes doesn't work
I bought beauty and a beat on itunes and it doesn't work I was wondering if I can get my money back so that i can buy a different song that works. It works on the computer but it doesn't work on my ipod touch 4g. My friend had this same problem an
-
There were errors installing the software
Mac Mini G4 1.25GHz / 512MB / 40GB / Combo / Modem. Ser: YM6***TAB <Edited by Moderator: Personal Info - Please See Terms of Use> Originally Mum's Mini was "doing strange things", so I had to drive 150 miles to try to sort it out. First I downloaded
-
Some interview Question?
hello all, as this forum has many brilliant minds, i have some interview question, if you mind please let me know the answer.... q1. default level at which validation accurs? q2. in which case property pallet display **** as a property value, what it
-
Does N8 support TV out to non-HDTV ?
If N8 supports TV out thru composite cables where can i get it? Solved! Go to Solution.
-
Song from iTunes doesn't play in full
Recently downloaded an album from iTunes but track 1 of said album doesn't play in full. I've downloaded the album as well as the track in question; nothing changed. Anyone else have this problem? If so how did you solve it?