Browser issue.

[shannanl]

I am not sure if I posted this in the correct place.

We have a website that is hosted by an outside company. Until a few days ago when we upgraded our firewall o.s. we could access this website. Now we can't. I can access it from outside our LAN so I know it is up and running. We run a DNS server here. I only get the "page cannot be displayed" error. What could be causing this?

Thanks in advance,

Shannan

 

[elgrandeperro]

You get the same ip return from external as internal?

Do other outgoing web sites work?

Is the external site truly external or do you have a backdoor VPN or site to site VPN?

gene

 

[shannanl]

I am not sure on the same i.p. I will check that. I can give you the website. It is

http://www.lhhs.org.

When I try to ping it from work it says that "Ping request could not find host...". I can ping other sites fine.

Other outgoing websites work fine. This seems to be the only problem.

It is truly external. This company hosts our website and forwards other traffic to us.

Thanks,

Shannan

 

[chipk]

Perform an nslookup against the hostname. If you get a "can't find hostname: Non-existent domain" that means your DNS record is not registered. If you know the IP, try to ping it by IP. If you can, it is a problem with name resolution. If you can't, it's probably firewall related.

 

[elgrandeperro]

So you should be able to ping 66.235.209.103, which is your web server.

Since you can't get resolve

http://www.lhhs.org

(with your own DNS server), I would look at that server to see if it had lhhs.org configured as a domain, and how that is configured.
(because you can resolve other things, then I believe there must be some magic with lhhs.org.)

gene

 

[shannanl]

I can ping it by i.p. but not by name. So it has to be the DNS server correct? LHHS.ORG is not configured as our domain.

 

[elgrandeperro]

Try this:

nslookup
>set type=ns
> lhhs.org.

It should return:

> lhhs.org.
Server: rwc-dns-2.openwave.com
Address: 10.16.4.50

Non-authoritative answer:
lhhs.org nameserver = ns2.mediamarketers.com
lhhs.org nameserver = ns1.mediamarketers.com

Authoritative answers can be found from:
ns2.mediamarketers.com internet address = 66.235.209.103
ns1.mediamarketers.com internet address = 66.235.209.103
>

gene

 

[shannanl]

Gene,

When I run this it shows my domain server as the i.p. address and it shows my other DNS servers. It does not show the 10.16.4.50 and it does not show anything about mediamarketers.

Thanks,

Shannan

 

[elgrandeperro]

Sorry, that 10.16.4.50 is my DNS server.

Since your DNS says your own server is the NS server, I believe your DNS server is configured to be authoritative
for lhhs.org. That is your problem. If you don't need any special records for lhhs.org, I would disable that zone so that you get pure external resolution.

gene

 

[shannanl]

Okay I am about to show my ignorance here. How do I disable the zone? I am running Win 2k3.

Thanks,

Shannan

 

[elgrandeperro]

So I want to make sure.

When you issue:

nslookup
>set type=ns
> lhhs.org.



The servers returned are your servers, after the
"answers" line?

gene

 

[elgrandeperro]

I will have to defer to a W2k3 person to show how to peruse your DNS. My expertise is in Unix/Bind.

gene

 

[shannanl]

Yes that is correct. My servers are returned in the "answer" line.

Shannan

 

[elgrandeperro]

Yes, then they think they are the authoritative servers for the lhhs.org domain. Unless you have a good reason to do this (usually it is called split dns domaining) this is wrong.

I am using this link, which is neither endorsed or reviewed.

http://www.oucs.ox.ac.uk/windows/active/dns/index.xml.ID=Configuring

What you want to see is what you have configured as a Forward Lookup Zone. See if lhhs.org is configured here.

gene

 

[shannanl]

Thank you very much. I will try the link and see if this fixes the problem. I will let you guys know.

Shannan