Note
Access to this page requires authorization. You can try signing in or changing directories.
Access to this page requires authorization. You can try changing directories.
Question
Friday, July 23, 2010 9:56 AM
I'm in the process of migrating SBS 2003 to Windows Server 2008 R2 + Exchange server 2010 and am experiencing numerous problems which may or may not be related. It strikes me that my DNS problem could be causing some of the other issues I'm seeing, so I'll tackle that first...
Both SBS 2003 & WS2008 machines are in the same domain. Note that my network is an internal network which is isolated from the Internet.
I've run dcpromo on the WS2008 machine and the DNS Best Practices Analyzer returns no issues (all 38 checks are compliant).
When I do an nslookup on my WS2008 machine (mpppdc), it times out...
C:\Users\Administrator.AREA5>nslookup delldt74502
DNS request timed out.
timeout was 2 seconds.
Server: UnKnown
Address: fe85:4a2b::1f3f
DNS request timed out.
timeout was 2 seconds.
DNS request timed out.
timeout was 2 seconds.
*** Request to UnKnown timed-out
C:\Users\Administrator.AREA5>
Strangely it can ping the same host...
C:\Users\Administrator.AREA5>ping delldt74502
Pinging delldt74502.windows.area5.cgs.com [2002:c025:f8d8::c025:f8d8] with 32 by
tes of data:
Reply from 2002:c025:f8d8::c025:f8d8: time<1ms
Reply from 2002:c025:f8d8::c025:f8d8: time<1ms
Reply from 2002:c025:f8d8::c025:f8d8: time<1ms
Reply from 2002:c025:f8d8::c025:f8d8: time<1ms
Ping statistics for 2002:c025:f8d8::c025:f8d8:
Packets: Sent = 4, Received = 4, Lost = 0 (0% loss),
Approximate round trip times in milli-seconds:
Minimum = 0ms, Maximum = 0ms, Average = 0ms
BTW the delldt74502 is a Vista client.
I get the same result if I run nslookup and ping of a machine which doesn't have IPv6...
C:\Users\Administrator.AREA5>nslookup pic2025
DNS request timed out.
timeout was 2 seconds.
Server: UnKnown
Address: fe85:4a2b::1f3f
DNS request timed out.
timeout was 2 seconds.
DNS request timed out.
timeout was 2 seconds.
*** Request to UnKnown timed-out
C:\Users\Administrator.AREA5>ping pic2025
Pinging pic2025.area5.cgs.com [192.37.248.190] with 32 bytes of data:
Reply from 192.37.248.190: bytes=32 time<1ms TTL=255
Reply from 192.37.248.190: bytes=32 time<1ms TTL=255
Reply from 192.37.248.190: bytes=32 time<1ms TTL=255
Reply from 192.37.248.190: bytes=32 time<1ms TTL=255
Ping statistics for 192.37.248.190:
Packets: Sent = 4, Received = 4, Lost = 0 (0% loss),
Approximate round trip times in milli-seconds:
Minimum = 0ms, Maximum = 0ms, Average = 0ms
I get the same timeout message if I just type 'nslookup' (to go into interactive mode).
Here's an ipconfig /all on my WS2008 machine:
C:\Users\Administrator.AREA5>ipconfig /all
Windows IP Configuration
Host Name . . . . . . . . . . . . : MPPPDC
Primary Dns Suffix . . . . . . . : windows.area5.cgs.local
Node Type . . . . . . . . . . . . : Hybrid
IP Routing Enabled. . . . . . . . : No
WINS Proxy Enabled. . . . . . . . : No
DNS Suffix Search List. . . . . . : area5.cgs.com
windows.area5.cgs.com
Ethernet adapter Local Area Connection:
Connection-specific DNS Suffix . : windows.area5.cgs.com
Description . . . . . . . . . . . : Broadcom BCM5716C NetXtreme II GigE (NDIS
VBD Client)
Physical Address. . . . . . . . . : 00-26-B9-4B-B6-80
DHCP Enabled. . . . . . . . . . . : No
Autoconfiguration Enabled . . . . : Yes
Link-local IPv6 Address . . . . . : fe80::f4a5:70de:249c:2d43%11(Preferred)
Link-local IPv6 Address . . . . . : fe85:4a2b::1f3f%11(Preferred)
IPv4 Address. . . . . . . . . . . : 192.37.248.2(Preferred)
Subnet Mask . . . . . . . . . . . : 255.255.255.0
Default Gateway . . . . . . . . . : ::
192.37.248.194
DHCPv6 IAID . . . . . . . . . . . : 234890937
DHCPv6 Client DUID. . . . . . . . : 00-01-00-01-12-F9-BF-C0-00-26-B9-4B-B6-80
DNS Servers . . . . . . . . . . . : fe85:4a2b::1f3f%11
192.37.248.2
192.37.248.193
192.37.248.166
NetBIOS over Tcpip. . . . . . . . : Enabled
Ethernet adapter Local Area Connection 2:
Media State . . . . . . . . . . . : Media disconnected
Connection-specific DNS Suffix . :
Description . . . . . . . . . . . : Broadcom BCM5716C NetXtreme II GigE (NDIS
VBD Client) #2
Physical Address. . . . . . . . . : 00-26-B9-4B-B6-81
DHCP Enabled. . . . . . . . . . . : Yes
Autoconfiguration Enabled . . . . : Yes
Tunnel adapter isatap.windows.area5.cgs.com:
Media State . . . . . . . . . . . : Media disconnected
Connection-specific DNS Suffix . : windows.area5.cgs.com
Description . . . . . . . . . . . : Microsoft ISATAP Adapter
Physical Address. . . . . . . . . : 00-00-00-00-00-00-00-E0
DHCP Enabled. . . . . . . . . . . : No
Autoconfiguration Enabled . . . . : Yes
Tunnel adapter Teredo Tunneling Pseudo-Interface:
Media State . . . . . . . . . . . : Media disconnected
Connection-specific DNS Suffix . :
Description . . . . . . . . . . . : Teredo Tunneling Pseudo-Interface
Physical Address. . . . . . . . . : 00-00-00-00-00-00-00-E0
DHCP Enabled. . . . . . . . . . . : No
Autoconfiguration Enabled . . . . : Yes
Tunnel adapter 6TO4 Adapter:
Connection-specific DNS Suffix . : windows.area5.cgs.com
Description . . . . . . . . . . . : Microsoft 6to4 Adapter #2
Physical Address. . . . . . . . . : 00-00-00-00-00-00-00-E0
DHCP Enabled. . . . . . . . . . . : No
Autoconfiguration Enabled . . . . : Yes
IPv6 Address. . . . . . . . . . . : 2002:c025:f802::c025:f802(Preferred)
Default Gateway . . . . . . . . . :
DNS Servers . . . . . . . . . . . : fe85:4a2b::1f3f%11
192.37.248.2
192.37.248.193
192.37.248.166
NetBIOS over Tcpip. . . . . . . . : Disabled
Tunnel adapter isatap.{48EA0AFB-8858-4872-8715-DF735D40421A}:
Media State . . . . . . . . . . . : Media disconnected
Connection-specific DNS Suffix . :
Description . . . . . . . . . . . : Microsoft ISATAP Adapter #3
Physical Address. . . . . . . . . : 00-00-00-00-00-00-00-E0
DHCP Enabled. . . . . . . . . . . : No
Autoconfiguration Enabled . . . . : Yes
I read somewhere that I needed a reverse lookup zone for nslookup to work.
It already had an IPv4 RLZ (with lots of PTR records) but didn't have an IPv6 RLZ, so I created one manually...
IPv6 Address Prefix: fe85:4a2b::/120
Reverse Lookup Zones
0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.b.2.a.4.5.8.e.f.ip6.arpa
Allow only secure dynamic updates
That didn't help.
BTW, the IPv6 still has no PTR records although I've rebooted the WS2008 machine and I would have expected that to have forced a dynamic update.
Note that DNS server is listening on all IP addresses:
fe80::f4a5:70de:249c:2d43
fe85:4a2b::1f3f
192.37.248.2
I can't help but think that it's an IPv6 issue.
Quite a few forums I've seen suggest disabling IPv6 which after wasting about a week, I'm really tempted to do, but http://technet.microsoft.com/en-us/magazine/2009.07.cableguy.aspx recommends that you leave IPv6 enabled (and it disabling it seems like a cop-out).
A couple of other bits of information which may or may not be of interest/relevent - a) WSUS is failing with numerous errors and b) I don't have DHCP installed (all of the nodes on my network use static IP addresses - required by one of our applications).
Any help would be most gratefully received.
Many thanks,
Gary Cooper
All replies (6)
Monday, July 26, 2010 12:46 PM âś…Answered
I think I've got this sorted.
The windows machines are configured on my network (area5.cgs.com) as a sub-domain (windows.area5.cgs.com).
First I moved windows.area5.cgs.com up the list of DNS suffixes to append (above area5.cgs.com).
I then had to configure DNS on my WS2008 machine to use my Unix DNS server as a forwarder to resolve the area5.cgs.com stuff.
So it looks like it was a reasonably straight forward DNS problem and IPv6 maybe wasn't to blame after all.
I think as it is, I'm going to leave IPv6 disabled - at least for the time being.
Many thanks for your help.
Gary
Friday, July 23, 2010 10:49 AM | 1 vote
Hello,
if i understand you correct, you don't use IPv6 so please disable it on the Windows server 2008 R2:
http://blogs.dirteam.com/blogs/paulbergson/archive/2009/03/19/disabling-ipv6-on-windows-2008.aspx
Also post an unedited ipconfig /all from the SBS server.
Best regards Meinolf Weber Disclaimer: This posting is provided "AS IS" with no warranties or guarantees , and confers no rights.
Monday, July 26, 2010 9:28 AM
Thanks for the response Meinolf.
As requested, here's the ipconfig /all from mt SBS 2003 machine...
C:\Documents and Settings\Administrator>ipconfig /all
Windows IP Configuration
Host Name . . . . . . . . . . . . : area5pdc
Primary Dns Suffix . . . . . . . : windows.area5.cgs.local
Node Type . . . . . . . . . . . . : Unknown
IP Routing Enabled. . . . . . . . : Yes
WINS Proxy Enabled. . . . . . . . : Yes
DNS Suffix Search List. . . . . . : windows.area5.cgs.com
area5.cgs.com
Ethernet adapter Server Local Area Connection:
Connection-specific DNS Suffix . : windows.area5.cgs.com
Description . . . . . . . . . . . : Intel(R) PRO/1000 MT Network Connection
Physical Address. . . . . . . . . : 00-C0-9F-2A-C7-5F
DHCP Enabled. . . . . . . . . . . : No
IP Address. . . . . . . . . . . . : 192.37.248.193
Subnet Mask . . . . . . . . . . . : 255.255.255.0
Default Gateway . . . . . . . . . : 192.37.248.194
DNS Servers . . . . . . . . . . . : 192.37.248.193
Primary WINS Server . . . . . . . : 192.37.248.193
C:\Documents and Settings\Administrator>
Best regards,
Gary
Monday, July 26, 2010 10:45 AM | 1 vote
Hello,
what is the x.x.x.166 listed as DNS server on the Windows server 2008 machine NIC for a DNS server, not the SBS and not itself? Did you disable IPv6 at least for testing?
Best regards Meinolf Weber Disclaimer: This posting is provided "AS IS" with no warranties or guarantees , and confers no rights.
Monday, July 26, 2010 10:55 AM
OK, I've now disbled IPv6 as suggested, but I'm still having problems...
C:\Users\Administrator.AREA5>ipconfig /all
Windows IP Configuration
Host Name . . . . . . . . . . . . : MPPPDC
Primary Dns Suffix . . . . . . . : windows.area5.cgs.local
Node Type . . . . . . . . . . . . : Hybrid
IP Routing Enabled. . . . . . . . : No
WINS Proxy Enabled. . . . . . . . : No
DNS Suffix Search List. . . . . . : area5.cgs.com
windows.area5.cgs.com
Ethernet adapter Local Area Connection:
Connection-specific DNS Suffix . : windows.area5.cgs.com
Description . . . . . . . . . . . : Broadcom BCM5716C NetXtreme II GigE (NDIS
VBD Client)
Physical Address. . . . . . . . . : 00-26-B9-4B-B6-80
DHCP Enabled. . . . . . . . . . . : No
Autoconfiguration Enabled . . . . : Yes
IPv4 Address. . . . . . . . . . . : 192.37.248.2(Preferred)
Subnet Mask . . . . . . . . . . . : 255.255.255.0
Default Gateway . . . . . . . . . : 192.37.248.194
DNS Servers . . . . . . . . . . . : 192.37.248.2
127.0.0.1
192.37.248.193
192.37.248.166
NetBIOS over Tcpip. . . . . . . . : Enabled
C:\Users\Administrator.AREA5>
C:\Users\Administrator.AREA5>nslookup mpppdc
Server: mpppdc.windows.area5.cgs.com
Address: 192.37.248.2
DNS request timed out.
timeout was 2 seconds.
DNS request timed out.
timeout was 2 seconds.
*** Request to mpppdc.windows.area5.cgs.com timed-out
C:\Users\Administrator.AREA5>nslookup mpppdc.area5.cgs.com
Server: mpppdc.windows.area5.cgs.com
Address: 192.37.248.2
DNS request timed out.
timeout was 2 seconds.
DNS request timed out.
timeout was 2 seconds.
DNS request timed out.
timeout was 2 seconds.
DNS request timed out.
timeout was 2 seconds.
*** Request to mpppdc.windows.area5.cgs.com timed-out
C:\Users\Administrator.AREA5>nslookup mpppdc.area5.cgs.local
Server: mpppdc.windows.area5.cgs.local
Address: 192.37.248.2
DNS request timed out.
timeout was 2 seconds.
DNS request timed out.
timeout was 2 seconds.
DNS request timed out.
timeout was 2 seconds.
DNS request timed out.
timeout was 2 seconds.
*** Request to mpppdc.windows.area5.cgs.local timed-out
C:\Users\Administrator.AREA5>nslookup mpppdc.windows.area5.cgs.com
Server: mpppdc.windows.area5.cgs.com
Address: 192.37.248.2
DNS request timed out.
timeout was 2 seconds.
DNS request timed out.
timeout was 2 seconds.
Name: mpppdc.windows.area5.cgs.com
Address: 192.37.248.2
C:\Users\Administrator.AREA5>
At least it's picking up an IPv4 server address now.
Any more suggestions?
Thanks,
Gary
Monday, July 26, 2010 11:03 AM
I tried putting nslookup in 'd2' mode...
C:\Users\Administrator.AREA5>nslookup
Default Server: mpppdc.windows.area5.cgs.local
Address: 192.37.248.2
> set d2
> mpppdc
Server: mpppdc.windows.area5.cgs.local
Address: 192.37.248.2
SendRequest(), len 38
HEADER:
opcode = QUERY, id = 6, rcode = NOERROR
header flags: query, want recursion
questions = 1, answers = 0, authority records = 0, additional = 0
QUESTIONS:
mpppdc.area5.cgs.com, type = A, class = IN
DNS request timed out.
timeout was 2 seconds.
timeout (2 secs)
SendRequest failed
SendRequest(), len 38
HEADER:
opcode = QUERY, id = 7, rcode = NOERROR
header flags: query, want recursion
questions = 1, answers = 0, authority records = 0, additional = 0
QUESTIONS:
mpppdc.area5.cgs.com, type = AAAA, class = IN
DNS request timed out.
timeout was 2 seconds.
timeout (2 secs)
SendRequest failed
*** Request to mpppdc.windows.area5.cgs.local timed-out
>
Regards,
Gary