DNS Update Issue
-
What does nslookup tell you?
-
@scottalanmiller it tells me it's requesting from the primary dc and that the dc doesn't know what the address is.
Can't find, non-existent domain
Should've been resolved by fixing the forwarders
-
@wirestyle22 said in DNS Update Issue:
@scottalanmiller it tells me it's requesting from the primary dc and that the dc doesn't know what the address is.
Can't find, non-existent domain
Should've been resolved by fixing the forwarders
Nope. The local DNS server likely "owns" domain.com
So you will have to put in records for the public sutff on domain.com. This is perfectly normal "split brain" DNS setup typical in almost every Windows shop on the planet.
-
@JaredBusch said in DNS Update Issue:
@wirestyle22 said in DNS Update Issue:
@scottalanmiller it tells me it's requesting from the primary dc and that the dc doesn't know what the address is.
Can't find, non-existent domain
Should've been resolved by fixing the forwarders
Nope. The local DNS server likely "owns" domain.com
So you will have to put in records for the public sutff on domain.com. This is perfectly normal "split brain" DNS setup typical in almost every Windows shop on the planet.
Bingo!
-
So the reference to the website is on a local dns server and since the local server has no A record it's never hitting the forwarders because it's assuming it doesn't exist
-
@wirestyle22 said in DNS Update Issue:
So the reference to the website is on a local dns server and since the local server has no A record it's never hitting the forwarders because it's assuming it doesn't exist
If it's a Primary Zone (which it probably is) it will never go to forwarders from itself. It just assumes it knows everything about the Zone.
-
@wirestyle22 said in DNS Update Issue:
So the reference to the website is on a local dns server and since the local server has no A record it's never hitting the forwarders because it's assuming it doesn't exist
Correct.
To fix this, you need to add the records for that domain to your local DNS. The main issue you will likely run into is the no host domain name. i.e. microsoft.com... this would belong to your AD servers I believe, and you don't want to change that to point to your web server.
-
Simple case of me never doing this wrong I guess. What a weird thing to screw up. Didn't really have time to sift through it all.
-
@wirestyle22 said in DNS Update Issue:
Simple case of me never doing this wrong I guess. What a weird thing to screw up. Didn't really have time to sift through it all.
What do you normally use for your top level domain on an AD build?
-
@Dashrender said in DNS Update Issue:
@wirestyle22 said in DNS Update Issue:
Simple case of me never doing this wrong I guess. What a weird thing to screw up. Didn't really have time to sift through it all.
What do you normally use for your top level domain on an AD build?
ad.domain.com theoretically. Everything I've ever touched is already in place. Although i'd love to rebuild my families infrastructure from the ground up.
-
@Dashrender said in DNS Update Issue:
@wirestyle22 said in DNS Update Issue:
Simple case of me never doing this wrong I guess. What a weird thing to screw up. Didn't really have time to sift through it all.
What do you normally use for your top level domain on an AD build?
He's too young to know the old days.
-
@JaredBusch said in DNS Update Issue:
@Dashrender said in DNS Update Issue:
@wirestyle22 said in DNS Update Issue:
Simple case of me never doing this wrong I guess. What a weird thing to screw up. Didn't really have time to sift through it all.
What do you normally use for your top level domain on an AD build?
He's too young to know the old days.
wat explain old man
-
@wirestyle22 said in DNS Update Issue:
@Dashrender said in DNS Update Issue:
@wirestyle22 said in DNS Update Issue:
Simple case of me never doing this wrong I guess. What a weird thing to screw up. Didn't really have time to sift through it all.
What do you normally use for your top level domain on an AD build?
ad.domain.com theoretically. Everything I've ever touched is already in place. Although i'd love to rebuild my families infrastructure from the ground up.
If it looks like this, then it owns domain.com
-
@JaredBusch said in DNS Update Issue:
@wirestyle22 said in DNS Update Issue:
@Dashrender said in DNS Update Issue:
@wirestyle22 said in DNS Update Issue:
Simple case of me never doing this wrong I guess. What a weird thing to screw up. Didn't really have time to sift through it all.
What do you normally use for your top level domain on an AD build?
ad.domain.com theoretically. Everything I've ever touched is already in place. Although i'd love to rebuild my families infrastructure from the ground up.
If it looks like this, then it owns domain.com
It does
-
The red box not masking, is the A record for domain.com
Everything here is subdomain.domain.com and has matching records on CloudFlare for when not in the office...
-
Are these Active Directory based domain controllers with AD integrated DNS set up?
Then DNS0 on all DCs should point to itself only. By default no other DNS server IP entry should be set on the NIC other than 127.0.0.1. Ever.
AD integrated DNS takes care of replicating changes and IDs among the DCs in a given forest/domain.
Never, ever, put a public DNS server anywhere but in the Forwarders location on an AD integrated DNS server.
DHCP should be handing out DNS entries for the AD DC DNS servers local to them or a tertiary if need-be for redundancy.
It sounds like whomever set things up had no idea how DNS works.
-
@PhlipElder totally.
-
@JaredBusch said in DNS Update Issue:
@wirestyle22 said in DNS Update Issue:
@Dashrender said in DNS Update Issue:
@wirestyle22 said in DNS Update Issue:
Simple case of me never doing this wrong I guess. What a weird thing to screw up. Didn't really have time to sift through it all.
What do you normally use for your top level domain on an AD build?
ad.domain.com theoretically. Everything I've ever touched is already in place. Although i'd love to rebuild my families infrastructure from the ground up.
If it looks like this, then it owns domain.com
Oh man, what a mess.
-
@PhlipElder said in DNS Update Issue:
@JaredBusch said in DNS Update Issue:
@wirestyle22 said in DNS Update Issue:
@Dashrender said in DNS Update Issue:
@wirestyle22 said in DNS Update Issue:
Simple case of me never doing this wrong I guess. What a weird thing to screw up. Didn't really have time to sift through it all.
What do you normally use for your top level domain on an AD build?
ad.domain.com theoretically. Everything I've ever touched is already in place. Although i'd love to rebuild my families infrastructure from the ground up.
If it looks like this, then it owns domain.com
Oh man, what a mess.
Meh, not bad actually. Perfect? No. But small enough to not be a problem really.
Definitely not what I would do now if I set it up new.
-
@JaredBusch said in DNS Update Issue:
@PhlipElder said in DNS Update Issue:
@JaredBusch said in DNS Update Issue:
@wirestyle22 said in DNS Update Issue:
@Dashrender said in DNS Update Issue:
@wirestyle22 said in DNS Update Issue:
Simple case of me never doing this wrong I guess. What a weird thing to screw up. Didn't really have time to sift through it all.
What do you normally use for your top level domain on an AD build?
ad.domain.com theoretically. Everything I've ever touched is already in place. Although i'd love to rebuild my families infrastructure from the ground up.
If it looks like this, then it owns domain.com
Oh man, what a mess.
Meh, not bad actually. Perfect? No. But small enough to not be a problem really.
Definitely not what I would do now if I set it up new.
Okay, the masking threw me off.
_msdcs.domain.local
domain.com
domain.local
^^Zones?Why domain.com?
When we split DNS we usually leave domain.com to Internet DNS even if Location.Domain.Com is internal.
Then we set up the required internal DNS FLZs for services:
Remote.Domain.Com
SharePoint.Domain.Com
Mail.Domain.Com
LoB.Domain.ComApplication Request Routing (ARR) is used to parlay incoming HTTPS calls to their respective owners (RDS, Exchange, SharePoint, LoB) so we only require one WAN IP address with Internet DNS A records for the above pointing to the WAN IP address.
EDIT: To get around the AutoDiscover.Domain.Com we use the _autodiscover SRV record method.
