[isalist] Re: Strange Behaviour in ISA2006

  • From: "Jerry Young" <jerrygyoungii@xxxxxxxxx>
  • To: isalist@xxxxxxxxxxxxx
  • Date: Thu, 6 Nov 2008 12:35:51 -0500

Or, you wouldn't happen to have entered DNS servers on both the internal and
external interface connections in Windows on the ISA Server would you?

Also, how do clients in your environment resolve internet-based DNS
records?  Are DNS forwarders set up on your internal DNS servers or are you
using some other method for resolving internet-based DNS records?

Are the internal DNS servers part of the same internal network that your ISA
Server sits on or do those internal queries pass through a router?

You can troubleshoot this by directing nslookup to use specific DNS servers
for each record test case.

For example, if you wanted to query your internal DNS server for an external
DNS record you could use:

nslookup www.yahoo.com <Internal DNS Server>,

Where <Internal DNS Server> is the IP address of your internal DNS server.

To test against an external DNS server, you could use:

nslookup www.yahoo.com <External DNS Server>,

Where <External DNS Server> is the IP address of an external DNS server your
environment uses (usually one provided by your carrier/ISP).

On Thu, Nov 6, 2008 at 12:22 PM, Jim Harrison <Jim@xxxxxxxxxxxx> wrote:

> http://www.ISAserver.org <http://www.isaserver.org/>
> -------------------------------------------------------
>
> The combination of forward access and server login sluggishness point
> squarely at DNS.
> Are you using the same DNS server to handle AD and external DNS queries?
>
> Jim
>
> -----Original Message-----
> From: isalist-bounce@xxxxxxxxxxxxx [mailto:isalist-bounce@xxxxxxxxxxxxx]
> On Behalf Of Ball, Dan
> Sent: Thursday, November 06, 2008 8:30 AM
> To: 'isalist@xxxxxxxxxxxxx'
> Subject: [isalist] Strange Behaviour in ISA2006
>
> http://www.ISAserver.org <http://www.isaserver.org/>
> -------------------------------------------------------
>
> I've noticed an interesting behavior of my ISA2006 box, and was wondering
> if anyone would have an idea of what might be causing it...
>
> Periodically, browsing to websites (from our Intranet) becomes sluggish and
> we experience a lot of time-outs, sometimes it clears itself, but sometimes
> it gets worse.  Tracing this back, it appears to be a DNS-related issue, the
> names cannot be resolved correctly.  I've restarted the internal DNS servers
> when this happens, with little, if any improvement in performance.  So I log
> into the ISA server via Remote Desktop to see what is happening, the login
> takes significantly longer than usual, then right about the time I get
> logged in, everything works perfect again, so I cannot trace it.
>
> I thought it was a coincidence the first few times, but it has happened a
> couple of dozen times now and it is a definite pattern.  Once I log into the
> ISA server via Remote Desktop, it starts working again.  Any ideas?
>
> ------------------------------------------------------
> List Archives: //www.freelists.org/archives/isalist/
> ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp
> ISA Server Articles and Tutorials:
> http://www.isaserver.org/articles_tutorials/
> ISA Server Blogs: http://blogs.isaserver.org/
> ------------------------------------------------------
> Visit TechGenix.com for more information about our other sites:
> http://www.techgenix.com
> ------------------------------------------------------
> To unsubscribe visit http://www.isaserver.org/pages/isalist.asp
> Report abuse to listadmin@xxxxxxxxxxxxx
>
>
> ------------------------------------------------------
> List Archives: //www.freelists.org/archives/isalist/
> ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp
> ISA Server Articles and Tutorials:
> http://www.isaserver.org/articles_tutorials/
> ISA Server Blogs: http://blogs.isaserver.org/
> ------------------------------------------------------
> Visit TechGenix.com for more information about our other sites:
> http://www.techgenix.com
> ------------------------------------------------------
> To unsubscribe visit http://www.isaserver.org/pages/isalist.asp
> Report abuse to listadmin@xxxxxxxxxxxxx
>
>


-- 
Cordially yours,
Jerry G. Young II
Microsoft Certified Systems Engineer

Other related posts:

  1. Home
  2. isalist
  3. Archive
  4. 11-2008