Tek-Tips is the largest IT community on the Internet today!

Members share and learn making Tek-Tips Forums the best source of peer-reviewed technical information on the Internet!

  • Congratulations derfloh on being selected by the Tek-Tips community for having the most helpful posts in the forums last week. Way to Go!

DNS - Missing Nameservers 2 Error 1

Status
Not open for further replies.

schase

Technical User
Joined
Sep 7, 2001
Messages
1,756
Location
US
Hi all,

Running MS Small Business Server - the whole bunch of services running on one box - I know not the best idea, but its all I have to work with for the moment.

I've got about 14 DNS zones pointing to various websites inside IIS. Each domain has it's own IP - and I'm acting as Primary DNS for each domain. Secondary I have outsourced.

Lately i've been having email problems, and increasing errors for users trying to view webpages.

When I do a dns check, I am getting the error of:

Missing nameservers 2 - Error one or more of the nameservers listed at the root servers are not listed as NS records at your nameservers. The problem NS Records are:

And then it lists my server - which one of the services running is the primary DNS. I've rebooted recently, restarted IIS and DNS many times - and the problem sometimes goes away - but a few minutes later i'll get the error again.

I do have the reverse DNS set up, and my isp claims to have the reverse DNS set up to us as well (had this problem a few months ago).

Anybody have any ideas on what to check?

Thank you.

"Damn the torpedoes, full speed ahead!"

-Adm. James Farragut

Stuart
 
I think you can ask isp to set up an NS records in their DNS server that points to your primary zones.

Hope, it's not songs very stupid...


Victor K
psas@canada.com
MCSE+I;MCSA;MCSE(w2k);CNE(5.1);MCNE(6);CIWSP;CIWSA.
 
thank you - but that does not seem to be it . I have the reverse mapping set on my server - and I checked with my isp - they do as well.

Bascially my server is not answering all calls for DNS queries. "Damn the torpedoes, full speed ahead!"

-Adm. James Farragut

Stuart
 
so, from (for example) any of your local workstations to quesry your dns hierarchy - no answer?
thus you can seriously view the design of your dns infrastructure....

did you set up forwarding on your DNS'ses queueries that are can not be resolved by your local DNS'ses? Forwarding to ISP...



Victor K
psas@canada.com
MCSE+I;MCSA;MCSE(w2k);CNE(5.1);MCNE(6);CIWSP;CIWSA.
 
No local workstations have no problem going through the server, its outside http requests that random fail. "Damn the torpedoes, full speed ahead!"

-Adm. James Farragut

Stuart
 
hmm..hard problem. :)
do you have some king of firewall?

Victor K
psas@canada.com
MCSE+I;MCSA;MCSE(w2k);CNE(5.1);MCNE(6);CIWSP;CIWSA.
 
Hi Stuart, that error message means that the internet root nameservers are pointing to an NS record (most likely your DNS server) that either doesn't exist in that zone or is pointing somewhere else. In other words, let's say I try to get to your website, The root servers point me to the com servers, and the com servers say "sure, I know who is authoritative for that, it's ns.stuart.com". However, when I get redirected to "ns.stuart.com", that nameserver does one of two things to throw me off:
1) It points me to another nameserver
2) It doesn't contain it's own NS record within that zone

If that's any help....
 
Well that part seems to be set up correctly - I think.

I might have found out what part of the problem is.

Today came in to reboot my server - and I can not check email, or view any webpages on my server. - from my computer.

Freaked, rebooted again, and same result - then I notice someone is checking their email (on the server) - but still nothing from my computer that is outside the network (but on the same T1 line)

It seems the DNS is working ok - except for random failures every now and then (which I still need to figure out) but there appears to be a problem on my computer that is outside the network.

BTW - is MS DNS a recommended software - or is there something a bit more reliable- that I can place on the same server as I do now - with IIS, DHCP, etc running on the same box?

"Damn the torpedoes, full speed ahead!"

-Adm. James Farragut

Stuart
 
yes, those problems you're experiencing would only occur "outside" of your LAN, thus the error message.
As for DNS software, MS is fine, don't go changing mid-stream anyway...

Do you have a website name that I can query to check out the internet servers?
 
By the way, SBS is not a good choise for an organization where more that 50 users, thuthermore, SBS - is a single point of failure...


Victor K
psas@canada.com
MCSE+I;MCSA;MCSE(w2k);CNE(5.1);MCNE(6);CIWSP;CIWSA.
 
Thank you Victor - I am well aware of that - and we are half of the max allowable.

Bronto - for a few.

I noticed on dnsreports.com some will go through with a couple warnings - refresh and it will give the above error, refresh again, it may go away or re-appear.

Further info, on my computer that is outside the network
I could not check email on the server, or view any webpage on the server. I could however browse to webpages not on my server.

Same goes for the server's browser too. Cannot view web pages hosted on server (unless I put in direct IP ) but can view outside webpages.

Workstations connected via DHCP - can view webpages and check email just fine. "Damn the torpedoes, full speed ahead!"

-Adm. James Farragut

Stuart
 
OK. I haven't dug very deep, but initially my queries are showing that you have 3 nameservers for these domains. The first one (elpasohonda.com) is yours, and the other 2 are hosted by MYSERVER.ORG. FYI - the nameservers hosted by MYSERVER.ORG are not doing their job. NS2.MYSERVER.ORG is pointing to HOME.MYSERVER.ORG as the authoritative nameserver, even though the COM servers say it should have the answers I need. That's the first bad. Now, HOME.MYSERVER.ORG believes it's authoritative, but it doesn't appear to contain any of these Another bad. Your server appears to working pretty well, problem is that DNS round robins, so the chances of me hitting you for resolution are not so good....and if I hit one of those other servers first, I'll get a negative cache for 15 minutes and won't be able to access your web site unless i use the IP address. Bottom line is, you need to talk to the folks at MYSERVER.ORG
 
so they have it set up as primary and not secondary "Damn the torpedoes, full speed ahead!"

-Adm. James Farragut

Stuart
 
I'd guess that's correct, if they're supposed to be receiving zone updates from you, it's not happening....
 
gotta love it.

Ok, thank you Bronto, I'll fire off some emails. "Damn the torpedoes, full speed ahead!"

-Adm. James Farragut

Stuart
 
That was indeed it.

They reset their dns servers, and it made home.myserver.org be the primary - so ns2 was looking for home. for updates.

corrected, working great - thanks for the help. "Damn the torpedoes, full speed ahead!"

-Adm. James Farragut

Stuart
 
Status
Not open for further replies.

Part and Inventory Search

Sponsor

Back
Top