Share via


DNS Time out error faced while using conditional forwarder.

Question

Monday, July 15, 2019 9:15 AM

 

While resolving conditional forwarder domain url, DNS Timeout is being faced.

There is a single forest with root domain name as Forestdomain.com and tree with name Treedomain.in

forestdomain.com conditional forwarder is created in DNS Server of Treedomain.in

mail.forestdomain.com is being looked up from DNS server of Treedomain.in and below are the results. 

Unable to find the reason of time-out. Its intermittent and not continues. 

C:\>nslookup
Default Server:  Server1.Treedomain.in
Address:  10.250.10.226

> mail.forestdomain.com

Non-authoritative answer:
DNS request timed out.
    timeout was 2 seconds.
Name:    mail.forestdomain.com
Address:  10.250.200.21
C:\>nslookup
Default Server:  Server1.Treedomain.in
Address:  10.250.10.226

> set d2
> set debug
> mail.forestdomain.com
Server:  Server1.Treedomain.in
Address:  10.250.10.226


SendRequest(), len 47
    HEADER:
        opcode = QUERY, id = 2, rcode = NOERROR
        header flags:  query, want recursion
        questions = 1,  answers = 0,  authority records = 0,  additional = 0

    QUESTIONS:
        mail.forestdomain.com.Treedomain.in, type = A, class = IN



Got answer (113 bytes):
    HEADER:
        opcode = QUERY, id = 2, rcode = NXDOMAIN
        header flags:  response, auth. answer, want recursion, recursion avail.
        questions = 1,  answers = 0,  authority records = 1,  additional = 0

    QUESTIONS:
        mail.forestdomain.com.Treedomain.in, type = A, class = IN
    AUTHORITY RECORDS:
    ->  Treedomain.in
        type = SOA, class = IN, dlen = 45
        ttl = 3600 (1 hour)
        primary name server = Server1.Treedomain.in
        responsible mail addr = hostmaster.Treedomain.in
        serial  = 6526951
        refresh = 900 (15 mins)
        retry   = 600 (10 mins)
        expire  = 86400 (1 day)
        default TTL = 3600 (1 hour)



SendRequest(), len 47
    HEADER:
        opcode = QUERY, id = 3, rcode = NOERROR
        header flags:  query, want recursion
        questions = 1,  answers = 0,  authority records = 0,  additional = 0

    QUESTIONS:
        mail.forestdomain.com.Treedomain.in, type = AAAA, class = IN



Got answer (113 bytes):
    HEADER:
        opcode = QUERY, id = 3, rcode = NXDOMAIN
        header flags:  response, auth. answer, want recursion, recursion avail.
        questions = 1,  answers = 0,  authority records = 1,  additional = 0

    QUESTIONS:
        mail.forestdomain.com.Treedomain.in, type = AAAA, class = IN
    AUTHORITY RECORDS:
    ->  Treedomain.in
        type = SOA, class = IN, dlen = 45
        ttl = 3600 (1 hour)
        primary name server = Server1.Treedomain.in
        responsible mail addr = hostmaster.Treedomain.in
        serial  = 6526951
        refresh = 900 (15 mins)
        retry   = 600 (10 mins)
        expire  = 86400 (1 day)
        default TTL = 3600 (1 hour)



SendRequest(), len 37
    HEADER:
        opcode = QUERY, id = 4, rcode = NOERROR
        header flags:  query, want recursion
        questions = 1,  answers = 0,  authority records = 0,  additional = 0

    QUESTIONS:
        mail.forestdomain.com, type = A, class = IN



Got answer (53 bytes):
    HEADER:
        opcode = QUERY, id = 4, rcode = NOERROR
        header flags:  response, want recursion, recursion avail.
        questions = 1,  answers = 1,  authority records = 0,  additional = 0

    QUESTIONS:
        mail.forestdomain.com, type = A, class = IN
    ANSWERS:
    ->  mail.forestdomain.com
        type = A, class = IN, dlen = 4
        internet address = 10.250.200.21
        ttl = 5 (5 secs)


Non-authoritative answer:

SendRequest(), len 37
    HEADER:
        opcode = QUERY, id = 5, rcode = NOERROR
        header flags:  query, want recursion
        questions = 1,  answers = 0,  authority records = 0,  additional = 0

    QUESTIONS:
        mail.forestdomain.com, type = AAAA, class = IN


DNS request timed out.
    timeout was 2 seconds.
timeout (2 secs)
SendRequest failed
Name:    mail.forestdomain.com
Address:  10.250.200.21

All replies (12)

Tuesday, July 16, 2019 2:29 AM

Hello,

Thank you for posting in this forum.

What's the result if you nslookup ( mail.forestdomain.com. )?

This is a post similar to your question. Please check the content of this post to see if it helps you.

Internal DNS nslookup error timeout was 2 second

Best Regards,

Leon

Please remember to mark the replies as answers if they help and unmark them if they provide no help.
If you have feedback for TechNet Subscriber Support, contact [email protected].


Tuesday, July 16, 2019 5:26 AM

Yes the issue is same but even after adding a . in trailing fqdn its giving 2 sec time out.

C:\>nslookup
Default Server:  Server1.Treedomain.in
Address:  10.250.10.226

> mail.forestdomain.com

Non-authoritative answer:
DNS request timed out.
    timeout was 2 seconds.
Name:    mail.forestdomain.com
Address:  10.250.200.21

Tuesday, July 16, 2019 6:45 AM

Hello,

From the content you posted, you did not add a ".".

If the query of FQDN is still the same result, please change the value in the figure below to be larger.

Best Regards,

Leon

Please remember to mark the replies as answers if they help and unmark them if they provide no help.
If you have feedback for TechNet Subscriber Support, contact [email protected].


Friday, July 19, 2019 2:09 AM

Hi,

Just checking in to see if the information provided was helpful. 
Please let us know if you would like further assistance.

Best Regards,
Leon

Please remember to mark the replies as answers if they help and unmark them if they provide no help.
If you have feedback for TechNet Subscriber Support, contact [email protected].


Friday, July 19, 2019 6:53 AM

with addition of dot "." also reply is same. and i tried to increase the time out to 6 still no help.

C:\>nslookup
Default Server:  Server1.Treedomain.in
Address:  10.250.10.226

> mail.forestdomain.com.

Non-authoritative answer:
DNS request timed out.
    timeout was 2 seconds.
Name:    mail.forestdomain.com
Address:  10.250.200.21

Friday, July 19, 2019 7:04 AM

Hello,

What's the result if you uncheck IPv6 in NIC properties?

Best Regards,

Leon

Please remember to mark the replies as answers if they help and unmark them if they provide no help.
If you have feedback for TechNet Subscriber Support, contact [email protected].


Friday, July 19, 2019 7:34 AM

Its Unchecked we are not using IPV6


Friday, July 19, 2019 7:58 AM

Hello,

Please set d2 and debug to see the complete process of querying FQDN.

Best Regards,

Leon

Please remember to mark the replies as answers if they help and unmark them if they provide no help.
If you have feedback for TechNet Subscriber Support, contact [email protected].


Friday, July 19, 2019 8:54 AM

Already shared above in my first post, it has D2 and Debug.


Friday, July 19, 2019 9:21 AM

Hello,

I mean the complete process of querying FQDN.

Your first post is the process of querying (mail.forestdomain.com) instead of querying (mail.forestdomain.com.).

Best Regards,

Leon

Please remember to mark the replies as answers if they help and unmark them if they provide no help.
If you have feedback for TechNet Subscriber Support, contact [email protected].


Tuesday, July 23, 2019 9:45 AM

Hi,

Just checking the current situation of your problem.
Was your issue resolved?

Best regards,
Leon

Please remember to mark the replies as answers if they help and unmark them if they provide no help.
If you have feedback for TechNet Subscriber Support, contact [email protected].


Wednesday, July 31, 2019 2:45 AM

Hi,
Was your issue resolved? 
If you resolved it using our solution, please "mark it as answer" to help other community members find the helpful reply quickly.
If you resolve it using your own solution, please share your experience and solution here. It will be very beneficial for other community members who have similar questions.
If no, please reply and tell us the current situation in order to provide further help.
Best Regards,
Leon

Please remember to mark the replies as answers if they help and unmark them if they provide no help.
If you have feedback for TechNet Subscriber Support, contact [email protected].