Share via

strange DNS query on the fw/gateway

Question

Sunday, January 28, 2018 3:33 PM

I would like to ask what could be wrong with my server. I have a Windows Server 2016 server (DC + DNS server for a local network). It has IPv4 and static routable IPv6 address configured and althoug it has a loopback configured as a DNS server, I can see this on my gateway/firewall:

DNS: query [<<< SERVERS PUBLIC IP ADDRESS >>>]:58414 -> [fec0:0:0:ffff::1]:53 for 1.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.ip6.arpa 
DNS: query [<<< SERVERS PUBLIC IP ADDRESS >>>]:58414 -> [fec0:0:0:ffff::2]:53 for 1.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.ip6.arpa 
DNS: query [<<< SERVERS PUBLIC IP ADDRESS >>>]:58414 -> [fec0:0:0:ffff::3]:53 for 1.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.ip6.arpa

fec0:0:0:ffff::1, fec0:0:0:ffff::2, fec0:0:0:ffff::3 are automatic Windows DNS addresses, which shouldn't be used when I have DNS server configured on my server. Am I right?

All replies (2)

Monday, January 29, 2018 3:13 AM

Hi ,

>>fec0:0:0:ffff::1, fec0:0:0:ffff::2, fec0:0:0:ffff::3 are automatic Windows DNS addresses

Those addresses you see are pretty much the equivalent to the self assigned 169.x.x.x addresses.

Would you please post the result of running ipconfig /all at the command prompt on the computer to let us know the machine’s configuration?

Also, please output the command of nslookup.

Please note:Any private information you share in a public forum might be seen or collected by other persons, please delete/black the private information before you post.

For your reference:

server 2008 standard dhcp giving ipv6 dns and ipv4 ip

https://community.spiceworks.com/topic/1465494-server-2008-standard-dhcp-giving-ipv6-dns-and-ipv4-ip

Please Note: Since the web site is not hosted by Microsoft, the link may change without notice. Microsoft does not guarantee the accuracy of this information.

Best Regards,

Candy

Please remember to mark the replies as answers if they help.
If you have feedback for TechNet Subscriber Support, contact [email protected].

Monday, January 29, 2018 8:36 AM

Thank you for your response!

Here is the ipconfig /all output:

C:\Windows\system32>ipconfig /all

Windows IP Configuration

   Host Name . . . . . . . . . . . . : SERVER
   Primary Dns Suffix  . . . . . . . : domain.local
   Node Type . . . . . . . . . . . . : Hybrid
   IP Routing Enabled. . . . . . . . : No
   WINS Proxy Enabled. . . . . . . . : No
   DNS Suffix Search List. . . . . . : domain.local

Ethernet adapter Embedded LOM 1 Port 4:

   Media State . . . . . . . . . . . : Media disconnected
   Connection-specific DNS Suffix  . :
   Description . . . . . . . . . . . : HP Ethernet 1Gb 4-port 331i Adapter
   Physical Address. . . . . . . . . : XX-XX-XX-XX-XX-XX
   DHCP Enabled. . . . . . . . . . . : Yes
   Autoconfiguration Enabled . . . . : Yes

Ethernet adapter Embedded LOM 1 Port 2:

   Media State . . . . . . . . . . . : Media disconnected
   Connection-specific DNS Suffix  . :
   Description . . . . . . . . . . . : HP Ethernet 1Gb 4-port 331i Adapter #2
   Physical Address. . . . . . . . . : XX-XX-XX-XX-XX-XX
   DHCP Enabled. . . . . . . . . . . : Yes
   Autoconfiguration Enabled . . . . : Yes

Ethernet adapter Embedded LOM 1 Port 3:

   Media State . . . . . . . . . . . : Media disconnected
   Connection-specific DNS Suffix  . :
   Description . . . . . . . . . . . : HP Ethernet 1Gb 4-port 331i Adapter #3
   Physical Address. . . . . . . . . : XX-XX-XX-XX-XX-XX
   DHCP Enabled. . . . . . . . . . . : Yes
   Autoconfiguration Enabled . . . . : Yes

Ethernet adapter vEthernet

   Connection-specific DNS Suffix  . :
   Description . . . . . . . . . . . : Hyper-V Virtual Ethernet Adapter
   Physical Address. . . . . . . . . : XX-XX-XX-XX-XX-XX
   DHCP Enabled. . . . . . . . . . . : No
   Autoconfiguration Enabled . . . . : Yes
   IPv6 Address. . . . . . . . . . . : 2a02:abcd:abcd:abcd:wxyz:wxyz:wxyz:wxyz(Preferred)
   IPv6 Address. . . . . . . . . . . : 2a02:abcd:abcd:abcd:ffff:ffff:ffff:ffff(Preferred)
   Link-local IPv6 Address . . . . . : fe80::xxxx:xxxx:xxxx:xxxx%9(Preferred)
   IPv4 Address. . . . . . . . . . . : 192.168.1.1(Preferred)
   Subnet Mask . . . . . . . . . . . : 255.255.252.0
   Default Gateway . . . . . . . . . : 2a02:abcd:abcd:abcd::1
                                       fe80::xxxx:xxxx:xxxx:xxxx%9
                                       192.168.1.200
   DNS Servers . . . . . . . . . . . : ::1
                                       127.0.0.1
   NetBIOS over Tcpip. . . . . . . . : Enabled

  • 4x Tunnel adapter isatap with Media State : Media disconnected

**
nslookup output looks like this:**

C:\Windows\system32>nslookup
Default Server:  UnKnown
Address:  ::1

>

You are responding to my another thread:

https://social.technet.microsoft.com/Forums/windowsserver/en-US/50ea5c0b-de78-4508-bc08-28d00ed038ab/dnssec-lookups-takes-incredibly-long-time-windows-server

Sorry, I should have merged these topics. It's all about one server and DNS issue ...