Open dns Killed AD

[nicholab]

Hi I got a question I put open dns servers into the forward look up zone and AD died. What did I do wrong?

 

Impressive in your 1st week!!

[ChrisH]

You must have crippled the DNS SRV records and such in some way.

[nicholab]

I don't know how as I did exactly what it says on the opendns website.

[mattx]

I don't know how as I did exactly what it says on the opendns website.

 

On a live network ? Hmmmmm

[nicholab]

Yes but my on site dns should know everything it should and any other requests should go off site.

 

client> My DNS> Open DNS = Stops working

client> My DNS> ISP dns = works

[mattx]

and any other requests should go off site.

 

That should be set in the 'forwarders' section on your DNS server.

[nicholab]

That what I did I put it in the forwards section of the dns and some how that killed it.

[mattx]

What did you put in the forwarders section ? That should be your gateway or box that points to the outside world...

[webman]

What do you mean by 'killed' AD? What exactly doesn't work?

[nicholab]

NO logon, server not Pinging, connection to shares lost.

[mattx]

Whats in the DNS event logs ?

[webman]

Is DHCP still handing out the correct DNS IP (your DNS server) to the clients? (Check with ipconfig /all on clients).

[eejit]

That what I did I put it in the forwards section of the dns and some how that killed it.

 

That's exactly right. That's what we do and it works fine. Like webman, I'd be looking at DHCP - what are your scope options?

[davidu]

Shoot us an email at contact opendns.com so we can 1: figure it out and get it working for you and 2: see if there is anything we need to do to fix our modify our instructions for some edge cases or different configuration.

 

We know a bunch of people who use AD w/ OpenDNS without any issue so I'd love to figure out how to work with you to make it work with your setup.

 

I'm not our AD expert though, so I'll definitely have to route this through contact opendns.com.

 

Happy Thanksgiving.

 

Thanks,

David Ulevitch (from OpenDNS)

[Geoff]

Have you checked if your ISP blocks access to any DNS server(s) other than it's own. I know that's the case with our LEA WAN.