RE: Flaky DNS server

  • From: "Thomas W Shinder" <tshinder@xxxxxxxxxxxxxxxxxx>
  • To: "[ISAserver.org Discussion List]" <isalist@xxxxxxxxxxxxx>
  • Date: Mon, 17 Feb 2003 20:00:05 -0600

Hi Mark,

Maybe it's a Win9x thing? IIRC, the other times I've heard this
happening was with 9x. What happens if you put the old PC Card in it?
Does everything work good again?

Thanks!
Tom

Thomas W Shinder
www.isaserver.org/shinder 
ISA Server and Beyond: http://tinyurl.com/1jq1
Configuring ISA Server: http://tinyurl.com/1llp 


-----Original Message-----
From: Mark Strangways [mailto:strangconst@xxxxxxxxxx] 
Sent: Monday, February 17, 2003 7:24 PM
To: [ISAserver.org Discussion List]
Subject: [isalist] RE: Flaky DNS server


http://www.ISAserver.org


Tom,

I think the root of all this evil FW client behavior stems from the fact
I
had to rename the ISA server machine name.
It took some reg hacks and one of Jim's scripts I think.
It really hasn't been the same since then...
But it's been REALLY bad with this new PMCIA network card... don't know
why.
Or perhaps it's a fault on this laptop ? My other little one is fine
with
it's PMCIA nic card, but it's running W98.
Or it's a combination of many things... I just don't know... I'd like to
though.
The TechNet newsgroup has not responded to the post I made so they
aren't
much help either.

Regards,

Mark
----- Original Message -----
From: "Thomas W Shinder" <tshinder@xxxxxxxxxxxxxxxxxx>
To: "[ISAserver.org Discussion List]" <isalist@xxxxxxxxxxxxx>
Sent: Monday, February 17, 2003 8:15 PM
Subject: [isalist] RE: Flaky DNS server


http://www.ISAserver.org


Hi Mark,

The firewall client issue is a weird one, because I have it on a number
of DCHP clients and it works fine. I've heard other people talk about
this issue, but haven't seen it yet. I'll be interesting to see how the
solution finally pans out.

Thanks!
Tom

Thomas W Shinder
www.isaserver.org/shinder
ISA Server and Beyond: http://tinyurl.com/1jq1
Configuring ISA Server: http://tinyurl.com/1llp


-----Original Message-----
From: Mark Strangways [mailto:strangconst@xxxxxxxxxx]
Sent: Sunday, February 16, 2003 9:29 PM
To: [ISAserver.org Discussion List]
Subject: [isalist] RE: Flaky DNS server


http://www.ISAserver.org


Seems to be better.
I knew about the protocol rules of course, but you had specified them. I
did
not want to question why you wanted to know, but felt you had reason :)
I have the proper packet filters in place, and I played with the
recursion.
This seemed to help nslookup's and such. Especially local names etc...
It still has not helped my PMCIA card problems. I still have to disable
the
FW client prior to shut-down. But I am finding that I really don't need
it
all that much anyways.

Regards,

Mark S
----- Original Message -----
From: "Thomas W Shinder" <tshinder@xxxxxxxxxxxxxxxxxx>
To: "[ISAserver.org Discussion List]" <isalist@xxxxxxxxxxxxx>
Sent: Sunday, February 16, 2003 8:31 PM
Subject: [isalist] RE: Flaky DNS server


http://www.ISAserver.org


Hi Mark,

You have everything working now? A tip for ya: since the DNS server is
on the ISA Server itself, protocol rules do not apply. You need to
create packet filters to allow the DNS server to access the protocols it
requires.

HTH,
Tom

Thomas W Shinder
www.isaserver.org/shinder
ISA Server and Beyond: http://tinyurl.com/1jq1
Configuring ISA Server: http://tinyurl.com/1llp


-----Original Message-----
From: Mark Strangways [mailto:strangconst@xxxxxxxxxx]
Sent: Friday, February 14, 2003 4:21 PM
To: [ISAserver.org Discussion List]
Subject: [isalist] RE: Flaky DNS server


http://www.ISAserver.org


see inline
----- Original Message -----
From: "Thomas W Shinder" <tshinder@xxxxxxxxxxxxxxxxxx>
To: "[ISAserver.org Discussion List]" <isalist@xxxxxxxxxxxxx>
Sent: Friday, February 14, 2003 12:43 PM
Subject: [isalist] RE: Flaky DNS server


http://www.ISAserver.org


Hi Mark,

Where is the DNS Server?
    On the ISA box
How is is it configured to resolve internet host names?
    Uses forwarders to ISP's DNS servers
What protocol rules do you have in place to support it?
    - Send / Recieve UDP 53
    - Recieve / Send UDP 53
    - Outbound TCP 53
    - Outbound TCP 43 (whois lookups)
Where are you doing the nslookup queries from?
    Useing a SNAT client machine with admin priveledges.

I played with the recursion and it will do lookups now.

Thanks Thomas..

------------------------------------------------------
List Archives: http://www.webelists.com/cgi/lyris.pl?enter=isalist
ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp
ISA Server FAQ: http://www.isaserver.org/pages/larticle.asp?type=FAQ
------------------------------------------------------
Exchange Server Resource Site: http://www.msexchange.org/
Windows Security Resource Site: http://www.windowsecurity.com/
Windows 2000/NT Fax Solutions: http://www.ntfaxfaq.com
------------------------------------------------------
You are currently subscribed to this ISAserver.org Discussion List as:
tshinder@xxxxxxxxxxxxxxxxxx
To unsubscribe send a blank email to $subst('Email.Unsub')

------------------------------------------------------
List Archives: http://www.webelists.com/cgi/lyris.pl?enter=isalist
ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp
ISA Server FAQ: http://www.isaserver.org/pages/larticle.asp?type=FAQ
------------------------------------------------------
Exchange Server Resource Site: http://www.msexchange.org/
Windows Security Resource Site: http://www.windowsecurity.com/
Windows 2000/NT Fax Solutions: http://www.ntfaxfaq.com
------------------------------------------------------
You are currently subscribed to this ISAserver.org Discussion List as:
strangconst@xxxxxxxxxx
To unsubscribe send a blank email to $subst('Email.Unsub')


------------------------------------------------------
List Archives: http://www.webelists.com/cgi/lyris.pl?enter=isalist
ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp
ISA Server FAQ: http://www.isaserver.org/pages/larticle.asp?type=FAQ
------------------------------------------------------
Exchange Server Resource Site: http://www.msexchange.org/
Windows Security Resource Site: http://www.windowsecurity.com/
Windows 2000/NT Fax Solutions: http://www.ntfaxfaq.com
------------------------------------------------------
You are currently subscribed to this ISAserver.org Discussion List as:
tshinder@xxxxxxxxxxxxxxxxxx
To unsubscribe send a blank email to $subst('Email.Unsub')

------------------------------------------------------
List Archives: http://www.webelists.com/cgi/lyris.pl?enter=isalist
ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp
ISA Server FAQ: http://www.isaserver.org/pages/larticle.asp?type=FAQ
------------------------------------------------------
Exchange Server Resource Site: http://www.msexchange.org/
Windows Security Resource Site: http://www.windowsecurity.com/
Windows 2000/NT Fax Solutions: http://www.ntfaxfaq.com
------------------------------------------------------
You are currently subscribed to this ISAserver.org Discussion List as:
strangconst@xxxxxxxxxx
To unsubscribe send a blank email to $subst('Email.Unsub')


------------------------------------------------------
List Archives: http://www.webelists.com/cgi/lyris.pl?enter=isalist
ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp
ISA Server FAQ: http://www.isaserver.org/pages/larticle.asp?type=FAQ
------------------------------------------------------
Exchange Server Resource Site: http://www.msexchange.org/
Windows Security Resource Site: http://www.windowsecurity.com/
Windows 2000/NT Fax Solutions: http://www.ntfaxfaq.com
------------------------------------------------------
You are currently subscribed to this ISAserver.org Discussion List as:
tshinder@xxxxxxxxxxxxxxxxxx
To unsubscribe send a blank email to $subst('Email.Unsub')


Other related posts: