2008R2 DC w/ DNS not forwarding some requests

Hi,

I have a 2008R2 DC with ADI DNS. For some reason, the DNS will not resolve
queries for *.gov sites.

For example, www.niaaa.nih.gov will not resolve. If I select a public DNS
server using nslookup, I can resolve that site.

We are using qwest forwarders and those will indeed resolve the
www.niaaa.nih.gov site.

I validated all of the root hints. Both "b" and "l" had to be updated, but
the issue remains.

Thank you for any insight you can offer.

I meant that *.gov sites that seem to be 4 tiers or more do not resolve.
(www.nasa.gov resolves just fine)

"Mr Troy" wrote:

> Hi,
>
> I have a 2008R2 DC with ADI DNS. For some reason, the DNS will not resolve
> queries for *.gov sites.
>
> For example, www.niaaa.nih.gov will not resolve. If I select a public DNS
> server using nslookup, I can resolve that site.
>
> We are using qwest forwarders and those will indeed resolve the
> www.niaaa.nih.gov site.
>
> I validated all of the root hints. Both "b" and "l" had to be updated, but
> the issue remains.
>
> Thank you for any insight you can offer.

Resolution:
http://www.anitkb.com/2010/03/window...ues-edns0.html

"Mr Troy" wrote:

> Hi,
>
> I have a 2008R2 DC with ADI DNS. For some reason, the DNS will not resolve
> queries for *.gov sites.
>
> For example, www.niaaa.nih.gov will not resolve. If I select a public DNS
> server using nslookup, I can resolve that site.
>
> We are using qwest forwarders and those will indeed resolve the
> www.niaaa.nih.gov site.
>
> I validated all of the root hints. Both "b" and "l" had to be updated, but
> the issue remains.
>
> Thank you for any insight you can offer.

"Mr Troy" <> wrote in message newsA58DA0F-4639-4934-94D3-...
> Resolution:
> http://www.anitkb.com/2010/03/window...ues-edns0.html
>

The idea or resolution is not to disable EDNS0 on Windows, rather to allow it on your firewall, which is where it's being blocked. If the firewall is not allowing it, then it is an older firmware that needs to be updated.

However, I would like to also point out, that checking the Root Hints doesn't really do anything if you are using a Forwarder. Forwarders do just that, forward to wahtever Forwarder DNS servers you've specified, and ignores the Root Hints, unless the Forwarder fails.

--
Ace

This posting is provided "AS-IS" with no warranties or guarantees and confers no rights.

Please reply back to the newsgroup or forum for collaboration benefit among responding engineers, and to help others benefit from your resolution.

Ace Fekay, MVP, MCT, MCITP EA, MCTS Windows 2008 & Exchange 2007, MCSE & MCSA 2003/2000, MCSA Messaging 2003
Microsoft Certified Trainer
Microsoft MVP - Directory Services

If you feel this is an urgent issue and require immediate assistance, please contact Microsoft PSS directly. Please check http://support.microsoft.com for regional support phone numbers.