Re: strange DNS behavior over the last 2 days

From: Chris Wilkes <cwilkes(at)ladro.com>
Date: Thu Mar 27 2003 - 21:18:15 EST

On Thu, Mar 27, 2003 at 01:06:31PM -0500, steve baker wrote:
> For some odd reason, periodically our clients will visit a site, only to

What sites?

> Nslookup resolves the correct IP address, but ping returns 64.251.66.2 for

What DNS servers are you asking? Your own? If so, I would take a look at the logs to see:

-what query came in
-what server your DNS server asked for the correct response
-what query your DNS server sent to that server

> The problem occurs intermittently as well, which makes it even harder to

Does NT4's DNS server have any sort of logging on there? You might want to look at that.

What DNS servers do you have listed for your clients? You can do a "ipconfig /all" to find out what ones are in there.

You can also install http://www.ethereal.org on your Windows box and find out what queries it is sending out. You might think your asking for the DNS entry for "example.com" but really you're asking for "example.com.mylocaldomain.com" I have a feeling that could be your problem.

Chris

---

Powerful Anti-Spam Management and More... SurfControl E-mail Filter puts the brakes on spam, viruses and malicious code. Safeguard your business critical communications. Download a free 30-day trial: http://www.surfcontrol.com/go/zsfihl1 Received on Fri Mar 28 00:02:14 2003