Search the Community
Showing results for tags 'dns'.
-
Hi Everyone, I am looking to migrate our schools DNS and DHCP over the summer holidays - I did think about hosting these on their firewall, but I would like access if needed. I am looking at purchasing a Micro computer/server to host these services on, maybe something like this - https://www.amazon.co.uk/Dell-Optiplex-Desktop-Computer-D10U001/dp/B08SMSFV7R/ref=sr_1_3?crid=31HTKAIGS3BV6&keywords=dell+micro+pc&qid=1688402474&sprefix=dell+micro+pc%2Caps%2C78&sr=8-3 Can anyone see any downsides to this? It will only be used for these two services, and nothing else. TIA.
-
.thumb.jpeg.c4b2ea4e027981376480a5ab518033b7.jpeg)
I can ping addresses of local and remote servers via wifi. I can do an NSLOOKUP and get the correct response BUT when I try and surf the web or ping a device (using names) it cannot be found. (even after a successful NSLOOKUP) NO config or firmware changes in the last month! Wired clients all fine. -
Hi everyone, I'm Chris (a Mac tech at Dudley College of Technology in the UK) and I'm wondering if anyone can shed any light on an issue we experienced yesterday. At around 4pm, several Macs on our network contacted some IP addresses associated with Akamai Technologies (a content delivery network used by Apple, Adobe and many others), but our local DNS couldn't resolve these requests...and, unfortunately, this brought our network down for about an hour until these IP addresses were blocked by our IT team. Has anyone else experienced something similar? If so, how did you resolve it? The IP address in question were: 2.19.117.75 and 2.19.117.100. Thanks in advance for your help :-)
-
Hi all, LTL FTP etc etc. I'm getting out of the education IT game soon, so I unfortunately won't get to finish this PowerShell module I've been working on to allow changes to RM Nameservers for your domain. RM don't document it, but there is an API used by their Connectivity Services site that allows changes to be made to your DNS Records, and your external Firewall. I've not done anything with the Firewall yet, but the authorisation function will work for those API endpoints as well. I had intended on using this to automate internal site certificates using Let's Encrypt, but it should be usable for any changes to your DNS Records. Hopefully this will be of some use to someone else, and I apologise in advance for my lack of comments (I was going to comment once completed but...) RM-DNS.ps1
-
Hi All, I have 2 domain setup (Curriculum and Admin) and am just wondering if this is correct? If I go to 'DNS\Conditional Forwarders\Srv name\Properties\click 'Edit' on the server I can see the Ip address and Server FQDN but get a cross next to the ip address. The server with this IP address is not authoritative for the required zone. Is something wrong between 2 servers? Thanks Shoaib
-
DNS-over-HTTPS and DNS-over-TLS support is coming to Apple devices this fall. https://www.techradar.com/news/apple-devices-will-get-encrypted-dns-in-ios-14-and-macos-11
-
Morning all, we have been having problems for ages now and can't find what the problem is. We use Smoothwall for our filtering, and Watchguard for our Firewall. On a regular basis (daily, sometimes every other day), we loose connectivity from our smooth wall to our watch guard (shown in Smoothwall as "gateway failed"). After 18 minutes, the connection resumes. This resumes without touching Watchguard or Smoothwall - no reboots required. Luckily Smoothwall have set up a failover port, which kicks in and connects to a different port on the Watchguard during the outage so our end users at worse see a 20 second "blip" which is solved by a refresh. The dropouts happen around the same time of day when staff arrive / start to log on en-mass (between 8 and 9am). To cut a long story short, Watchguard say "they can't see anything wrong" and Smoothwall say "Watchguard are dropping DNS packets". I say this is crazy and we need it fixing! The dropouts only appear during term time, so for example over christmas break we didn't have any users logged on to our domain and we didn't see any dropouts in the logs. If i connect a laptop directly on the WAN link then there are no ping drops. So... could the problem be linked to a rogue machine logging in and doing something funky? Is it one user that runs a certain service which throws things off? Do I need to go and hit the Watchguard with a cricket bat and hope the problem goes away? On a separate note, but an example of weird stuff happening, years ago we had a machine running OS X Lion, and every time that machine connected to our SAN, it sent the SAN in to a panic. We patched the SAN and things seemed ok. Now I'm not saying this is SAN related, but it shows how such a small thing can cause a huge problem. ANY help would be muchly appreciated. -
Hello Guys, I don't know if anyone can help me, but we have 2 DC's here which the First is Windows Server 2008 R2, and the second domain controller is Windows Server 2003 R2. Both have DNS installed however some sites take ages to resolve. I have no idea what to set the Root Hints or forwarders to, can you guys give me some idea? Also, on the first Domain Controller, IP Configuration: IP Address: 192.168.0.16 Subnet Mask: 255.255.255.0 Default Gateway: 192.168.0.1 Preferred DNS Server: 192.168.0.17 Alternate DNS Server: 127.0.0.1 On the second Domain Controller, IP Configuration: IP Address: 192.168.0.17 Subnet Mask: 255.255.255.0 Default Gateway: 192.168.0.1 Preferred DNS Server: 192.168.0.16 Alternate DNS Server: 127.0.0.1 Is this configuration ok? Its just some sites, for example Facebook, it takes ages to resolve I dont know why. Thanks Guys, James
-
TCP and DNS Address for windows 8 update 8.1
Guest posted a topic in Network and Classroom Management
Need some advice folks! Got a few Surface tablets in school that are running windows 8! ive ran all the windows updates apart from windows update 8.1 from the app store. when i go to run this update it fails, long story short our authority have web filtering in place and we think that either that or the firewall is blocking access to this update. we need to find out the ip address / dns name of the address that this update app program is trying to contact out on. ive downloaded sysinternals "TCPView" program and tried to run the "Tcpvcon" command line to export to a csv file but no luck can anyone else give me any advice to any other program that will record and log to a file what address a program will try and contact out on. thanks -
Hi, Can anyone point me in the right direction with this? We're using new DNS filtering system which needs me to add new DNS forwarders on our internal DNS servers. If I add in Google (8.8.8.8) or our ISP's DNS addresses they resolve and validate instantly, but if I add in the filtering system I get a "Validation error, please try again later" error and external DNS resolution stops working. I've spoken to our ISP who say they have allowed us access to the new DNS IPs but it's still not working. The filtering company and ISP are just passing the buck between each other. Does anyone know what is likely causing this error so I can go back to them with something solid? Thanks -
The FACTS: Server 2008 R2 Primary and Secondary DNS Servers Third Party controlled Router and web hosting New piece of hardware - CCTV system with network connection Man - Exploring DNS for the first time. I have set a static IP address on the CCTV box So i have been passed a CCTV box which the school i am with wishes to be able to access externally, as this was an option when sold to them. I have set a static IP address on the CCTV box and then i was required to open 3 ports on he firewall pointing at the IP address to allow this to work internally and externally. I spoke with the company who manufacture this kit and they recommended the ports to open and so this has happened. Being a school, we have our router and web hosting all managed by an external company. I sent them a change request and they have set these tasks and also have added internal and external DNS Records. Now, this is where i am stuck as i believe I have to make changes to our internal DNS. Set up a New Zone? A records? CNAME? It is all a little bit mind blowing and i am reading frantically but, could really do with some help. Here hoping. Look forward to hearing from anyone. It's a cold and lonely place out there.
-
Hello, I've just installed Windows 7 64-bit and applied all updates (took me an eternity) including SP1. Joined it to our domain using the Network ID wizard. Restarted. Computer boots up and is joined to domain. Computer appears in our All Computers OU properly named. I log on and all drives are mapped... ...but when i run a gpupdate /force from the command line it tells me: The processing of Group Policy failed. Windows could not resolve the computer name. This could be caused by one of more of the following: a) Name resolution failure on the current Domain controller b) Active Directory Replication Latency (an account created on another domain controller has not replicated to the current Domain controller) We don't have another domain controller. Does anyone know why the Computer Configuration settings from Group Policy aren't being applied? It's applying the User Config settings... We are running 2008 R2 as our Domain Controller
-
Hi all. I have a bit of an issue with DNS, over the summer it decided to delete all its records (it might have had something to do with me, I couldn;t possible say either way!!!). Since then, it looks like all the Servers have a DNS record back in the DNS Sevrers however, when we try to go to a intranet site, like http://sv-app01, we get a DNS error where the address cannot be resolved? Any ideas on what I need to put into DNS? I have a static entry to the IP Address in the forward lookup zone and a entry in the reverse lookup zone..... but really at a loss now?
-
This Summer, I will be installing a new server at a large middle school which is currently transitioning into a secondary school. Can anyone offer me some advice on what I should be including in the setup? I will have two host servers to play with. Both will run Server 2012R2 with Hyper-V VMs. My initial thoughts as to how to divide the roles needed are as follows: [TABLE=class: outer_border, width: 500, align: center] [TR] [TD]Host 01[/TD] [TD]vDC 01: AD, DHCP, DNS, DFS etc[/TD] [/TR] [TR] [TD][/TD] [TD]vUTL 01: WDS/MDT, WSUS[/TD] [/TR] [TR] [TD]Host 02[/TD] [TD]vDC 02: Secondary Domain controller [/TD] [/TR] [TR] [TD][/TD] [TD]vUTL 02: Sophos, Printers[/TD] [/TR] [/TABLE] Host 01 will be the new server with 64GB RAM. Host 02 will be the current server, rebuilt from 2008R2 to 2012R2 and 24GB RAM. My initial thoughts are that I should be configuring DHCP failover. Are there any other redundancy features I should be building into the system? Or even any additional features that, whilst not necessarily offering redundancy, offer extra functionality to the domain? I also have two NAS devices to hold some form of backup. I was thinking of using the free version of Veeam to backup VMs (subject to storage space) to one NAS and then use the existing Macrium Reflect software they have to backup data to the other.
-
We are having an intermittent problem with the user profile service on Windows 7 machines. The message "The User Profile Service failed the logon. User profile cannot be loaded." is appearing on seemingly random machines (around 10% of all machines daily, and not the same ones). The problem started a few days ago, after 4 months of successful Windows 7 use. The only note worthy change to the network was turning on scavenging on some of our DNS zones (the action was subsequently rolled back). When investigating the event log of the machine the only notable error in the logs was a Distributed Com Error (EventID 10016) with the following text: The application-specific permission settings do not grant Local Launch permission for the COM Server application with CLSID {24FF4FDC-1D9F-4195-8C79-0DA39248FF48} and APPID {B292921D-AF50-400C-9B75-0C57A7F29BA1} to the user NT AUTHORITY\SYSTEM SID (S-1-5-18) from address LocalHost (Using LRPC). This security permission can be modified using the Component Services administrative tool. This appears to be referring to the NAP service, but I haven't been able to identify any correlation between the two. We have found that repeated re-boots will eventually allow the machines to login. We have also found some of the machines do not have matching forward and reverse lookup DNS entries, and when these are edited to match and the machine reboot it will start working, but neither is a permanent fix, as some of the machines we have done this to are repeating the problem later. Oh, before the question comes up, we are working with Roaming profiles with folder redirection. Can anyone suggest anything? Our staff and students are losing patience, and we are running out of ideas. -
Hello all, I have a strange strange problem that I can't find a solution to on the internet. We have just setup a new 2008 domain, all member servers are 2k8. All client machines are win7. However, all clients are registering a forward lookup, but nothing for the reverse. DHCP is set to Dynamically update DNS A and PTR records and to discard when lease is deleted. As a test, I have set group policy to tell the clients to manually register their PTR in computer configuration > Administrative templates > Network > DNS Client > Register PTR Record but this hasn't worked either. In the (A) record, Update associated pointer is ticked. There is also nothing in the DNS event logs, so I am at a loss as to what could be causing this issue. Has anyone had experience of this issue?
-
Hi All, I'm about to perform total IP Addressing reformation from my current class B (1.2.3.0-255) into class A (10.x.x.x), I've got two DNS Server: Server A - 1st DNS + DHCP Server B - 2nd DNS the current situation is: a client workstation is named uniquely then given A record for each IP address assigned to them. a server is given A record for each IP address and also CNAME record if necessary. Example: * Workstation name: MyLaptop * A record: MyLaptop.domain.com * IP: 1.2.3.100 now I'd like to be creative for easy maintenance and identifying a network device for the future by doing the following changes: a client workstation is named uniquely in the A record for each IP address assigned to them. a server is given A record for each IP address and also CNAME record if necessary. Example: * Workstation name: MyLaptop * A record: 100-office1.domain.com * CNAME: MyLaptop.domain.com * IP: 1.2.3.100 is there any way to make the company wide changes without affecting the Active Directory information ? I was thinking of going through one by one on the DNS entry in the console to make the changes but this is will be cumbersome. The reason is of course that I'm using publicly routable address currently in my two office location. I wonder if this is a good way in managing the Windows AD domain by assigning a PC descriptive A record (LSB_of_the_IP_address.officelocation.domain.com) and then creating CNAME which is the same as the current machine name. What I'm also worrying about is that i have to rename all of the machine company wide to become LSB_of_the_IP_address.officelocation.domain.com and then manually assigning CNAME on to it. any idea would be greatly appreciated. Thanks. -
A school has just named their domain to the same address as their email server. All attempts to get to the email server from the LAN now take them to the AD server instead. What do you set to forward to the email server? Both are names are schoolname-hs.powys.sch.uk From within the school you reach the domain controller. From the WAN you reach the exim server. WS2003/ Slackware Linux Exim email server thx A bit difficult for me to resolve as I no longer have access to an AD DC to play with -
Hi all, is anyone any good with DNS/DHCP. Our DHCP server was showing as out of IP addresses. In the scope there were 60 excluded IP addresses which weren't being used for anything anymore so I edited the exclusions to include those 60 addresses. That looked like it was working and two new devices appeared in DHCP but I was then getting the error Forward record registration for IPV4 addresses and FQDN failed with error 9017 (DNS bad key). After reading some help guides online I changed the option on the scope to Always dynamically update DNS records. After I restarted the scope I'm now getting the message DHCP scope is out of addresses despite adding some earlier and those IP addresses haven't been allocated. Tried deleting one PC's DNS records but when you try to get it to pick up and IP address the PC says unable to contact your DHCP server. Anyone any ideas? -
Hi All I need to give my staff a static IP to enable them access to Office 365, our office 365 is setup to only allow access from specific IP's, so far I've tried to use a VPN using "Perimeter 81" but it seems the laptops I have for staff although new they are struggling and also with the VON usage and their slow home internet its becoming almost impossible to use, so I need something like a smart DNS provider that masks the home IP's of my staff, is there anything that does that ? by using a smart DNS their internet speed will not be effected and I can whitelist a single IP on O365 but I can't find anything useful online most of the smart DNS I'm finding is for personal use and most of them are for people wanting to use netflix etc I can't use my own vpn as I neither have the bandwidth onsite nor will it solve the slow connection issues, any advise is much appreciated. -
Hi, Our network is running Windows and macOS clients all of which are joined to Active Directory. The Macs are all running Windows via Bootcamp. We were having issues which were being caused by our macOS clients because they were not registering PTR records. We were also having issues with stale records. I spent a lot of time researching DNS and DHCP configuration to try to resolve these problems and ended up thinking I had solved it with the following configuration. But I have now realised that we still have problems which I will explain after the configuration. Servers 2 x Windows Server 2016 VM's Both Domain Controlers Both running DNS Both running DHCP DHCP Config Failover mode: Load balance Enable DNS dynamic updates: Always dynamically update DNS records Discard A and PTR records when lease is deleted: Enabled Dynamically update DNS records for DHCP clients that do not request updates: Enabled Disable dynamic updates for DNS PTR Records: Disabled DHCP name protection: Disabled Lease duration: 2 days Dynamic DNS credentials are configured. Account is only a Domain User DNS Config Active Directory Integrated Zones Dynamic updates: Secure only Replication: All domain controllers in this domain No-refresh interval: 1 days Refresh interval: 1 days Scavenging period: 3 days Group Policy Computer\Administrative Templates\Network\DNS Client\Dynamic update: Set to Disabled Current Problems My aim was to get the DHCP servers to handle all DNS registration to solve the problem of macOS not registering PTR records. The PTR records are now being created but it looks like the macs are still creating their own A records as the permissions list the client instead of the DNS registration user. The macs obviously use the same ethernet or wireless card in macOS and Windows so the MAC address won't change. I assume when each OS requests an IP it will be given the same IP due to the MAC address and the DHCP server will update the client name. I'm not sure about DNS though; Will the DHCP server create a new A record because the client name is different? resulting in duplicate records for a single IP; OR will the the DHCP server try to change the client name on the A record with the matching IP in which case it will fail if the mac has already registered its own record. I don't know if/how I can tell the mac to let the DHCP server register the records for it (Our mac technician decided to pursue a different career path leaving us Windows tech's scratching our heads ). The second problem I'm having is that for some reason even the Windows clients aren't always registering correctly. I have a Windows only device which has received an IP from DHCP but has no A or PTR records. This device is affected by the Group Policy mentioned above, so it would be relying on the DHCP server to register the records for it. But I can't see anything in the DHCP-Server or DNS-Server logs in Event Viewer on the our servers which relate to this client name. The third problem, albeit minor is that any clients with statically assigned IP's don't register in DNS due to the setting in Group Policy. There are only a handful of these and we occasionally assign IP's temporarily for various tasks (as DHCP clients require proxy for Internet) If I have missed any important information please ask. Any help would be greatly appreciated.
-
Hello everyone, I need to make two public IP addresses to be resolved with particular FQDNs that do not belong to us and our domain. As an example: 10.0.0.1 - our.domain1.com 11.0.0.1 - customer.subdomain1.domain2.com 12.0.0.1 - customer.subdomain2.domain2.com From what I know, the customers made firewall rules for our office public IP address to be accessible. customer.subdomain1.domain2.com and customer.subdomain2.domain2.com are not propagated world-wide, only the public IP addresses seem to be working. I understand that instead of manually change all etc\hosts files on our company laptops, I can make a change on our DNS server to point to 11.0.0.1 and 12.0.0.1 when our employees try to access customer.subdomain1.domain2.com and customer.subdomain2.domain2.com, respectively. I just don't know how to do it. The employees aren't going to access the sites outside of our network. We have Windows Server 2008 as a DNS server. Any help (especially, with instructions) is much appreciated as I have basic understanding of DNS server configuration. P.S. I tried adding "Stab zone" and then adding "Secondary zone" by adding the zone names for FQDNs and adding public IPs, in both cases I got the same error (attached). Any ideas what I am doing wrong? As I mentioned earlier, these are not world-wide propagated sites. There is only an exception in the firewall rules, to allow only our office public IP. And again, as I mentioned earlier, this should work with the same idea as etc\hosts file, but for everyone accessing our DNS server, not to change the files themselves (etc\hosts) on every machine. Thanks
-
Morning, Hope everyone had a good Christmas and NY. We have recently switched internet providers on both our primary and high school sites and we have a GRE tunnel between them. We want to use this tunnel so that we can share network drives between sites and RDP. We have tested RDPing into our primary site which works but we have to use a IP address because both sites have there own Windows DNS. Can we set DNS forwarders on each send to be able to resolve each other's computer hostnames or is it more complicated then that? Ideally I presume it would be better to have one set of DNS servers and point both sites to them but for now this is not a possibility. Thanks Corey
-
Just wondering if someone can help me understand this. We're using a DNS filtering server -- a bit like OpenDNS. I've replaced the forwarders on our internal DNS servers. My question is, should I need to do anything else to get the browser to connect to the Internet? I've set the browser to automatically detect settings and removed any proxy settings. Should this just work with the DNS forwarder or do I need to do anything like set WPAD settings. Thanks
-
Hi Guys, We have just moved BB away from the LA to SchoolsBroad band and also we have a smoothie install as filter,gateway etc Since we moved we are having a couple if little issues that are really annoying 1) we keep getting "Revocation information for the security certificate for this site is not available Click Yes, No or View Certificate. This does not happen on every machine or every user and it happens on different https sites. we have the smoothie wall certificate for https inspection install at GPO could it be this has not installed on the machine??? Do we need to open any port/ip's on smoothwall to all for checking. We are a bit stuck. The other issue is when we first open an internet page it can take up to 5 mins for the website to appear once on all is okay. We have dns setup okay we think people have looked at and said all seems okay. Is there anyway of tracing the exact route a webpage is taking for dns so we can see if it is bottle necking/looping etc as this is starting really effect the daily flow. THanks Stuart
