Sorry to bother you people but this pb has got us stumped and two NT forums didn't even reply. Thanks, Len ========= An ISP I'm helping out has a mailserver (don't ask) on an NT4 machine, SP6a, with a public ip. On the same LAN, also with public ip's, we have an NT4 machine running BIND8.2.2p5 and W2K running its DNS. From a FreeBSD machine off-site, I can dig into both LAN nameservers, which are found as nameservers, and get perfect query results. Cyberkit www.CyberKit.net, has two modes for doing DNS lookups: one use NT Winsock GetHostByName call, and the other seems to talk to the tcp/ip stack directly. On the LAN, using CyberKit 2.5 on the mailserver machine and NOT using Winsock calls, I can do lookups to the two LAN nameservers just fine (indicating they are working and contactable from the LAN), mirroring my successes with off-site dig's. But, also on the mailserver machine, the mailserver pgm and NT command line nslookup both fail to the two LAN ns's when NT's network:protocol:tcpip:dns is set to either of the LAN ns's. And CyberKit fails when its DNS lookup mode is set to "Winsock GetHostByName". So we have great consistency of successes and failures, we just don't know why!! vbg Why can't the mail machine use NT dns lookups to two perfectly functioning DNS's (BIND and W2K) on the same LAN? The mailserver's log just mentions "DNS timeout" and moves down the NT DNS list to one that works. We've also set the NT DNS setting to only one LAN ns, and the mailserver's ns lookups fail, mail isn't delivered. From the mailserver machine to the two NS's, ping works fine, so there isn't a subnetting pb. If we set the mail machine's NT network:tcpip:dns to his upstream's DNS, it works fine and the mail server can deliver mail. So the mailserver seems ok. Both LAN ns's, w2k as master and BIND as slave, have "allow-transfer" restricted to each other's ip address. But this "shouldn't" bother simple queries. There's something wrong with Winsock in that mailserver machine, is my guess, but how to fix it? Any ideas? tia, Len Please visit http://www.ipswitch.com/support/mailing-lists.html to be removed from this list.
