On Tue, Aug 14, 2012 at 10:42 AM, John Hornbuckle <[email protected]> wrote: > Okay, DNS wizards… I need some input. > > > > One of my DNS servers (Server 2008) is failing to resolve > www.studyisland.com like so: > > > > C:\>nslookup > > Default Server: aoc-pet300.taylor.k12.fl.us > > Address: 10.11.7.13 > > > >> www.studyisland.com. > > Server: aoc-pet300.taylor.k12.fl.us > > Address: 10.11.7.13 > > > > DNS request timed out. > > timeout was 2 seconds. > > DNS request timed out. > > timeout was 2 seconds. > > *** Request to aoc-pet300.taylor.k12.fl.us timed-out > > > > But I can point nslookup at one of my other servers (also Server 2008), and > it resolves fine. Which kind of sounds like a server problem--but this > server has resolved every other name I’ve thrown at it, though. Only this > one is failing. > > > > I can point nslookup at the Norton DNS server that my failing server uses as > a forwarding server (198.153.192.1), and it resolves fine. All of my other > servers use that same forwarding address, too. > > > > I’m kind of going crazy here… My users desperately need to get to this site. > I can’t figure out what’s wrong, but that’s no surprise because I’m not an > expert when it comes to DNS. > > > > Can anyone offer any troubleshooting pointers?
Yes - if recycling the DNS Server service fixes the problem, there are some known issues with DNS on 2003, 2008 and 2008 R2. One is EDNS - see this link: http://support.microsoft.com/kb/832223 and/or this link: http://weblogs.asp.net/owscott/archive/2009/09/15/windows-server-2008-r2-dns-issues.aspx Also, it's possible, but unlikely, that your firewall is filtering these extended DNS records - especially if your firewall doesn't understand/like TCP returns on queries. These links has some info on that: http://www.cisco.com/web/about/security/intelligence/dnssec.html http://www.icann.org/en/groups/ssac/documents/sac-016-en.htm Kurt ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ <http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/> ~ --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to [email protected] with the body: unsubscribe ntsysadmin
