RE: Interesting problem...

  • From: Paul van Geldrop <paul.van.geldrop@xxxxxxxxxxxxx>
  • To: "'[ISAserver.org Discussion List]'" <isalist@xxxxxxxxxxxxx>
  • Date: Wed, 2 Mar 2005 23:19:16 +0100

.. wow.
You've got some serious DNS issue going on there.
Clearing the cache means removing all the entries that the DNS server in
question looked up for which itself could not find an entry. The SRV records
etc in the DNS database are not supposed to be affected by this.
Is this server actually part of the DNS application partition ? Or is it
looking up records on other DNS servers for your clients ?

-----Original Message-----
From: Ball, Dan [mailto:DBall@xxxxxxxxxxx] 
Sent: woensdag 2 maart 2005 23:09
To: [ISAserver.org Discussion List]
Subject: [isalist] RE: Interesting problem...

http://www.ISAserver.org

I'm right-clicking on server and selecting "Clear Cache", is this not
the proper way?

If I had to guess what is happening, when I clear the cache, it also
removes the entries for the domain controllers and other servers, even
though they are static IPs.  Thus, the ISA server cannot find a DC to
authenticate users, and they get blocked.  (Due to Federal requirements,
we cannot have any Firewall Policies that allow unauthenticated access
to the Internet.)

If I log onto each DC and do a "repair" of the network connection, it
shows back up in the DNS server.  Otherwise, I have to either wait for
it to refresh itself or reboot the server.

-----Original Message-----
From: Steve Moffat [mailto:steve@xxxxxxxxxx] 
Sent: Wednesday, March 02, 2005 16:30
To: [ISAserver.org Discussion List]
Subject: [isalist] RE: Interesting problem...

http://www.ISAserver.org

I still don't understand this Dan.

The cache on the DNS servers is for resolved names outwith your
Organization. The AD holds all your domain info. When you clear the
cache, it shouldn't be interfering with name resolution in your AD
zones.

You are right clicking on the dns server and selecting clear cache, or
ipconfig / flushdns??


Steve

------------------------------------------------------
List Archives: http://www.webelists.com/cgi/lyris.pl?enter=isalist
ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp
ISA Server FAQ: http://www.isaserver.org/pages/larticle.asp?type=FAQ
------------------------------------------------------
Other Internet Software Marketing Sites:
World of Windows Networking: http://www.windowsnetworking.com
Leading Network Software Directory: http://www.serverfiles.com
No.1 Exchange Server Resource Site: http://www.msexchange.org
Windows Security Resource Site: http://www.windowsecurity.com/
Network Security Library: http://www.secinf.net/
Windows 2000/NT Fax Solutions: http://www.ntfaxfaq.com
------------------------------------------------------
You are currently subscribed to this ISAserver.org Discussion List as:
paul.van.geldrop@xxxxxxxxxxxxx
To unsubscribe visit http://www.webelists.com/cgi/lyris.pl?enter=isalist
Report abuse to listadmin@xxxxxxxxxxxxx

This e-mail and any attachment is for authorised use by the intended 
recipient(s) only. It may contain proprietary material, confidential 
information and/or be subject to legal privilege. It should not be copied, 
disclosed to, retained or used by, any other party. If you are not an intended 
recipient then please promptly delete this e-mail and any attachment and all 
copies and inform the sender. Thank you.


Other related posts: