[27885] in resnet


home	help	back	first	fref	pref	prev	next	nref	lref	last	post
Odd Windows 2008 Server DNS issue

daemon@ATHENA.MIT.EDU (Brian Gibson)
Tue Aug 7 14:07:35 2012

MIME-Version: 1.0
Content-Type: multipart/alternative; boundary="------------010201090001000004000702"
Message-ID:  <502158E1.2070700@wheatoncollege.edu>
Date:         Tue, 7 Aug 2012 14:05:21 -0400
Reply-To: Resnet Forum <RESNET-L@listserv.nd.edu>
From: Brian Gibson <gibson_brian@wheatoncollege.edu>
To: RESNET-L@listserv.nd.edu

This is a multi-part message in MIME format.
--------------010201090001000004000702
Content-Type: text/plain; charset=ISO-8859-1; format=flowed
Content-Transfer-Encoding: 7bit

Hi All,

We are noticing a strange DNS issue and I need some help 
troubleshooting. For some reason we are having issues delivering email 
to a specific domain (partners.org) and it traces back to our Windows 
2008 Domain Controller 'sometimes' not being able to resolve their MX 
record. Sometimes just clearing the DNS cache on this DNS server will do 
the trick. Whenever I do the nslookup for the MX record against our 
secondary DNS server (also Windows 2008) it works fine. I spoke with one 
of their techs and she seemed to think that since they have 2 DNS 
servers (auth2.dns.partners.org and auth1.dns.partners.org) and the 
second one shares the same first octet in the IP address as our DNS 
server that there is a subnet mask or routing issue somewhere. What I 
don't understand is our backup DNS server has that same first octet so I 
would think I would see it from that server as well.

If I use dig on a linux box (that also has the same first starting 
octet) it always seems to work but I think in the way I am using it, it 
asks our DNS server for the root servers then performs the recursive 
query on its own from there, it doesn't rely on our domain controller to 
handle all of if. Here is the output (I bolded the matching starting 
octets).

[root@doodle ~]# dig @155.47.64.174 -t MX partners.org +trace

; <<>> DiG 9.3.6-P1-RedHat-9.3.6-16.P1.el5 <<>> @*155*.47.64.174 -t MX 
partners.org +trace
; (1 server found)
;; global options:  printcmd
.                       74061   IN      NS      e.root-servers.net.
.                       74061   IN      NS      d.root-servers.net.
.                       74061   IN      NS      j.root-servers.net.
.                       74061   IN      NS      c.root-servers.net.
.                       74061   IN      NS      i.root-servers.net.
.                       74061   IN      NS      m.root-servers.net.
.                       74061   IN      NS      b.root-servers.net.
.                       74061   IN      NS      a.root-servers.net.
.                       74061   IN      NS      l.root-servers.net.
.                       74061   IN      NS      f.root-servers.net.
.                       74061   IN      NS      g.root-servers.net.
.                       74061   IN      NS      h.root-servers.net.
.                       74061   IN      NS      k.root-servers.net.
;; Received 497 bytes from 155.47.64.174#53(155.47.64.174) in 1 ms

org.                    172800  IN      NS c0.org.afilias-nst.info.
org.                    172800  IN      NS b0.org.afilias-nst.org.
org.                    172800  IN      NS b2.org.afilias-nst.org.
org.                    172800  IN      NS d0.org.afilias-nst.org.
org.                    172800  IN      NS a2.org.afilias-nst.info.
org.                    172800  IN      NS a0.org.afilias-nst.info.
;; Received 432 bytes from 192.203.230.10#53(e.root-servers.net) in 87 ms

partners.org.           86400   IN      NS auth1.dns.partners.org.
partners.org.           86400   IN      NS auth2.dns.partners.org.
;; Received 106 bytes from 199.19.53.1#53(c0.org.afilias-nst.info) in 15 ms

partners.org.           900     IN      MX      20 phsmgmx.partners.org.
;; Received 54 bytes from *155*.52.254.30#53(auth1.dns.partners.org) in 6 ms




++++++++++++++++++++++++++++
Brian Gibson
Systems Administrator
Wheaton College


___________________________________________________
You are subscribed to the ResNet-L mailing list.

To subscribe, unsubscribe or search the archives,
go to http://LISTSERV.ND.EDU/archives/resnet-l.html
___________________________________________________

--------------010201090001000004000702
Content-Type: text/html; charset=ISO-8859-1
Content-Transfer-Encoding: 7bit

<html>
  <head>

    <meta http-equiv="content-type" content="text/html; charset=ISO-8859-1">
  </head>
  <body bgcolor="#FFFFFF" text="#000000">
    Hi All,<br>
    <br>
    We are noticing a strange DNS issue and I need some help
    troubleshooting. For some reason we are having issues delivering
    email to a specific domain (partners.org) and it traces back to our
    Windows 2008 Domain Controller 'sometimes' not being able to resolve
    their MX record. Sometimes just clearing the DNS cache on this DNS
    server will do the trick. Whenever I do the nslookup for the MX
    record against our secondary DNS server (also Windows 2008) it works
    fine. I spoke with one of their techs and she seemed to think that
    since they have 2 DNS servers (auth2.dns.partners.org and
    auth1.dns.partners.org) and the second one shares the same first
    octet in the IP address as our DNS server that there is a subnet
    mask or routing issue somewhere. What I don't understand is our
    backup DNS server has that same first octet so I would think I would
    see it from that server as well.<br>
    <br>
    If I use dig on a linux box (that also has the same first starting
    octet) it always seems to work but I think in the way I am using it,
    it asks our DNS server for the root servers then performs the
    recursive query on its own from there, it doesn't rely on our domain
    controller to handle all of if. Here is the output (I bolded the
    matching starting octets).<br>
    <br>
    [root@doodle ~]# dig @155.47.64.174 -t MX partners.org +trace<br>
    <br>
    ; &lt;&lt;&gt;&gt; DiG 9.3.6-P1-RedHat-9.3.6-16.P1.el5
    &lt;&lt;&gt;&gt; @<b>155</b>.47.64.174 -t MX partners.org +trace<br>
    ; (1 server found)<br>
    ;; global options:&nbsp; printcmd<br>
    .&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; 74061&nbsp;&nbsp; IN&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; NS&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; e.root-servers.net.<br>
    .&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; 74061&nbsp;&nbsp; IN&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; NS&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; d.root-servers.net.<br>
    .&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; 74061&nbsp;&nbsp; IN&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; NS&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; j.root-servers.net.<br>
    .&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; 74061&nbsp;&nbsp; IN&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; NS&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; c.root-servers.net.<br>
    .&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; 74061&nbsp;&nbsp; IN&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; NS&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; i.root-servers.net.<br>
    .&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; 74061&nbsp;&nbsp; IN&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; NS&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; m.root-servers.net.<br>
    .&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; 74061&nbsp;&nbsp; IN&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; NS&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; b.root-servers.net.<br>
    .&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; 74061&nbsp;&nbsp; IN&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; NS&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; a.root-servers.net.<br>
    .&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; 74061&nbsp;&nbsp; IN&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; NS&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; l.root-servers.net.<br>
    .&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; 74061&nbsp;&nbsp; IN&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; NS&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; f.root-servers.net.<br>
    .&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; 74061&nbsp;&nbsp; IN&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; NS&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; g.root-servers.net.<br>
    .&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; 74061&nbsp;&nbsp; IN&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; NS&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; h.root-servers.net.<br>
    .&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; 74061&nbsp;&nbsp; IN&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; NS&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; k.root-servers.net.<br>
    ;; Received 497 bytes from 155.47.64.174#53(155.47.64.174) in 1 ms<br>
    <br>
    org.&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; 172800&nbsp; IN&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; NS&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;
    c0.org.afilias-nst.info.<br>
    org.&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; 172800&nbsp; IN&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; NS&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;
    b0.org.afilias-nst.org.<br>
    org.&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; 172800&nbsp; IN&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; NS&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;
    b2.org.afilias-nst.org.<br>
    org.&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; 172800&nbsp; IN&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; NS&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;
    d0.org.afilias-nst.org.<br>
    org.&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; 172800&nbsp; IN&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; NS&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;
    a2.org.afilias-nst.info.<br>
    org.&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; 172800&nbsp; IN&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; NS&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;
    a0.org.afilias-nst.info.<br>
    ;; Received 432 bytes from 192.203.230.10#53(e.root-servers.net) in
    87 ms<br>
    <br>
    partners.org.&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; 86400&nbsp;&nbsp; IN&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; NS&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;
    auth1.dns.partners.org.<br>
    partners.org.&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; 86400&nbsp;&nbsp; IN&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; NS&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;
    auth2.dns.partners.org.<br>
    ;; Received 106 bytes from 199.19.53.1#53(c0.org.afilias-nst.info)
    in 15 ms<br>
    <br>
    partners.org.&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; 900&nbsp;&nbsp;&nbsp;&nbsp; IN&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; MX&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; 20
    phsmgmx.partners.org.<br>
    ;; Received 54 bytes from <b>155</b>.52.254.30#53(auth1.dns.partners.org)
    in 6 ms<br>
    <br>
    <br>
    <br>
    <br>
    <div class="moz-signature">++++++++++++++++++++++++++++<br>
      Brian Gibson<br>
      Systems Administrator<br>
      Wheaton College<br>
      <br>
    </div>
  </body>
</html>
___________________________________________________
You are subscribed to the ResNet-L mailing list.
<p>
To subscribe, unsubscribe or search the archives,
go to http://LISTSERV.ND.EDU/archives/resnet-l.html
___________________________________________________

--------------010201090001000004000702--

home	help	back	first	fref	pref	prev	next	nref	lref	last	post
[27885] in resnet

Odd Windows 2008 Server DNS issue

daemon@ATHENA.MIT.EDU (Brian Gibson)Tue Aug 7 14:07:35 2012

daemon@ATHENA.MIT.EDU (Brian Gibson)
Tue Aug 7 14:07:35 2012
