DNS/FQDN same as external website domain


Recommended Posts

Hey all,

Signed up over here to start participating in the awesome discussions... have an issue thats had me stumped for a few days now at one of my customer's office and I'm hoping someone can lead me in the right direction.

They have a Windows Server (2003) that is hosting DNS... and when people access their site domain.com internally it brings them to the server (named edge)'s local IIS site and not the external website.

They aren't even on a domain! And there is a www. record pointing to the externally hosted website's IP but even www. brings you to the local edge IIS site.

Thanks for your help!!

You don't need to be on a domain to use a local DNS server. The computer will use whatever DNS server it is configured to use, either manually or via DHCP.

If you have a problem with the DNS server resolving the correct IP address for a zone you should check the DNS server's configuration. Do you have a single A (or AAAA if you're using IPv6) record for the external IP in the forward lookup zone configured on the DNS server?

And why are they hosting DNS on this server if not using AD? Clearly they want people to resolve stuff using this server, so who admins the server? Have them fix the records for what they are resolving if its not right?

They're using the server for file sharing... I see an smtp record and some IP reservations... I just setup a Watchguard for VPN. My next option was to disable DNS on the server and put those entries in the firewall... but didn't want to accidentally take down their mail entry (maybe having to reconfigure all 40 clients with new mail settings) so I was wondering if there was a quick fix. I'm against even having 40 clients use server in a workgroup environment but they're not paying for licensing and half the computers are home premium clients :/

you need a redirect to direct them to the external ip if the external ip is not part of your network. an A record redirecting www should work just fine. This is why we do not configure internal domains with external domain names. It creates issues like this.

Hey all,

Signed up over here to start participating in the awesome discussions... have an issue thats had me stumped for a few days now at one of my customer's office and I'm hoping someone can lead me in the right direction.

They have a Windows Server (2003) that is hosting DNS... and when people access their site domain.com internally it brings them to the server (named edge)'s local IIS site and not the external website.

They aren't even on a domain! And there is a www. record pointing to the externally hosted website's IP but even www. brings you to the local edge IIS site.

Thanks for your help!!

Remove all references to the external domain from the DNS server AND TCP/IP settings on the workstations and servers (especially primary DNS suffix settings in the TCP/IP and System settings where the computer names are set).

Remove all references to the external domain from the DNS server AND TCP/IP settings on the workstations and servers (especially suffix settings in the TCP/IP tab).

and what happens when the internal domain is named the same as the external then you delete everything...you just fubar'd your network.

and what happens when the internal domain is named the same as the external then you delete everything...you just fubar'd your network.

There is no internal domain, as referenced by the OP. I'm assuming external DNS is coming from the ISP, removing the entries will make the internal network go to the ISP for the info.

There was no parent A record... I created one with the external IP, that didn't work either. I'll admit, I am a DNS n00b but I'm assuming it should be hitting the external site with parent A record and www A record... let me remote in and screenshot the DNS so you guys can check me if you wouldn't mind.

There was no parent A record... I created one with the external IP, that didn't work either. I'll admit, I am a DNS n00b but I'm assuming it should be hitting the external site with parent A record and www A record... let me remote in and screenshot the DNS so you guys can check me if you wouldn't mind.

Send a dump of ipconfig /all from the server and a workstation too.

then delete the domain in the dns server. if you aren't on a domain, why are you using dns unless you need to redirect locally....even still you can use host file to redirect.

what is the order of operations...

host file first - do you have an entry in your host file (c:\windows\system32\drivers\etc\hosts - open in notepad)

is here a screwed up entry in lmhosts?

dns would be next.

do a nslookup for the website in a dos prompt this will query the dns server and find out what it thinks, nslookup will not use host files it is a query against the dns server.

open a command prompt

nslookup www.google.com

put in your domain vs google and see what it comes up with

what is the order of operations...

host file first - do you have an entry in your host file (c:\windows\system32\drivers\etc\hosts - open in notepad)

is here a screwed up entry in lmhosts?

dns would be next.

I think it's lmhosts, hosts, WINS, then DNS for 2003. But the problem would be on the workstations, so it might be something else.

Wow... that did it... posting the screenshot made me take a second look and it was pretty obvious after nslookup there were two A records... you guys are the ****. After seeing DNS config should I leave everything how it is or disable DNS because we're not really using it (from what I see)?

Wow... that did it... posting the screenshot made me take a second look and it was pretty obvious after nslookup there were two A records... you guys are the ****. After seeing DNS config should I leave everything how it is or disable DNS because we're not really using it (from what I see)?

If all you're doing is duplicating the ISP's records, then you shouldn't have entries in DNS. It's really not recommended.

Well crap... I just ping'ed each entry and the IPs match the external IPs (from my ISP, not from their server) so you're right... I don't need DNS. Can I delete the whole reverse/forward DNS zone?

Also, second question... if anyone is familiar with Watchguard/VPN... the branch office I setup is on a different subnet. When I ping edge (server name) or any clients... it doesn't resolve. I fixed with host files.. but is there a way to have WINS resolve over the VPN? So we can ping without manual hosts file mapping?

you can fully uninstall dns.

You will need a common wins server that handles all wins resolution, but yes you can. point all to 1 wins server. it would be much better if you enabled active directory, that would solve your issues and have a common user base, which it is easier to share with and setup common mappings.

Well crap... I just ping'ed each entry and the IPs match the external IPs (from my ISP, not from their server) so you're right... I don't need DNS. Can I delete the whole reverse/forward DNS zone?

Also, second question... if anyone is familiar with Watchguard/VPN... the branch office I setup is on a different subnet. When I ping edge (server name) or any clients... it doesn't resolve. I fixed with host files.. but is there a way to have WINS resolve over the VPN? So we can ping without manual hosts file mapping?

What I think you want is something like "office.domain.com" then your internal office servers and workstations are computername.office.domain.com. That way you can keep your DNS resolution for the VPN and also have WINS lookup thru DNS. If you add office.domain.com to the dns suffix search on the workstations and enable dynamic DNS updates, then honestly you won't even need WINS.

Recommended practice for internal networks is not to use a internet extension like .com or .org, etc. .local, .lan, .internal, etc is recommended and preferred. This way if you do register externally your dns server won't get confused or need to put in manual entries.

This topic is now closed to further replies.
  • Recently Browsing   0 members

    • No registered users viewing this page.
  • Posts

    • The flaw with this analysis is that this laptop has a cellphone CPU in it. In the Intel world, that would be an N150 and those are everywhere, even in low end laptops. You can get an N150 based NUC with 16GB RAM and 256GB-512GB SSD... NOT soldered in... for < $500 Canadian (around US$360). The problem is two fold: tech bloggers/writers on most tech site (like this one, ironically) overvalue Apple and apparently aren't in the same earnings class as most regular people. As a result, we get breathless articles about how everyone needs a folding phone when most people just cannot afford one... or really need one. And we get Apple used as the baseline metric regardless of whether that comparison makes any sense. If Dell or HP released a retail laptop with a cellphone motherboard, you'd be all over them for doing that - but Apple does it and it's genius. I see articles suggesting what Samsung - a company that basically started the foldable phone market and has built them for eight years - needs to do to compete with Apple's unreleased, unspecced and unseen folding phone. Sorry, no - if the Neo (really creative name there BTW - still, better than the Go, the other "creative" product name everyone's using) encourages PC makers to make cellphone laptops using lower end ARM processors, we all lose. It's a step backwards and a capitulation to the fact that semiconductor makers and computer OEMs (and tech bloggers) have totally lost the plot.
    • Everyone should install this extension and ignore games that use AI. https://chromewebstore.google....nnigaaeelfkeomjcngmnh?pli=1 https://addons.mozilla.org/en-US/firefox/addon/ai-warning-for-steam/
    • Malwarebytes Anti-Malware 5.6.0.256 by Razvan Serea Malwarebytes is a high performance anti-malware application that thoroughly removes even the most advanced malware and spyware. Malwarebytes version 5.**** brings comprehensive protection against today’s threat landscape so that you can finally replace your traditional antivirus. You can finally replace your traditional antivirus, thanks to a innovative and layered approach to prevent malware infections using a healthy combination of proactive and signature-less technologies. While signatures are still effective against threats like potentially unwanted programs, the majority of malware detection events already come from signature-less technologies like Malwarebytes Anti-Exploit and Malwarebytes Anti-Ransomware; that trend will only continue to grow. For many of you, this is something you already know, since over 50% of the users already run Malwarebytes as their sole security software, without any third-party antivirus. What's new in Malwarebytes 5.****: Unified user experience - For the first time, Malwarebytes now provides a consistent experience across all of our desktop and mobile products courtesy of an all new and reimagined user experience powered by a faster and more responsive UI all managed through an intuitive dashboard. Modern security and privacy integrations - Antivirus and ultra-fast VPN come together seamlessly in one easy-to-use solution. Whether you’re looking for a next-gen VPN to secure your online activity, or harnessing the power of Browser Guard to block ad trackers and scam sites, taking charge of your privacy is simple. Trusted Advisor - Empowers you with real-time insights, easy-to-read protection score and expert guidance that puts you in control over your security and privacy. Malwarebytes 5.6.0.256 changelog: Features and improvements Simplified adding files and folders to the Allow list to make managing your exclusions easier. Improved notifications for Webcam Monitoring. Issues fixed Resolved an issue preventing the Deep Scan results window from displaying when several threats are detected during a scan. Fixed text wrapping issues on the Settings page. Fixed an issue causing tray menu notifications to appear off-screen when using multiple external monitors. Download: Malwarebytes 5.6.0.256 | 436.0 MB (Free, paid upgrade available) Links: Malwarebytes Website | Screenshot Get alerted to all of our Software updates on Twitter at @NeowinSoftware
    • Steam Next Fest returns with thousands of new demos to try out by Pulasthi Ariyasinghe Valve has been routinely kicking off demo festivals on Steam for years now, and the second drop of 2026 has just opened its doors. It's a great opportunity for any PC gamers to find some interesting games before they release. The June edition of Steam Next Fest is a week-long digital festival including gameplay slices from a large number of indie developers, though a few major publishers are involved this time too. Interested players can use the Next Fest hub page's various sorting and filtering options to easily sort through the hordes of demos available. The top buttons offer quick access to separate and important sorting options, including "By Genre, By Theme, By Feature," with each one offering more granular settings when clicked. At the same time, the built-in Steam tags system is also available below every page to discover new games more quickly. As always, logging in will also enable Steam gamers to utilize Valve's recommendation algorithms to find game demos they might like, specifically, depending on their past play and purchase histories. This time there is even a toggle now to swap between getting a random and personalized selection as Valve collects more data on the available demos. The Charts section is where you can find the most popular demos on the platform right now, offering up the most hyped titles in a simple list. Right at the kickoff, Mistfall Hunter, Empulse, Echoes of Aincrad, Onimusha: Way of the Sword, Over the Hill, Mortal Shell II, and more are trending. Expect this list to change as the week progresses. This edition of the Steam Next Fest is slated to end on June 22 at 10 AM PT. Valve's latest event is now open, and it can be accessed by going to the dedicated hub page here.
    • I lived and breathed MSN Messenger/Windows Live Messenger. Going to the mess.be website (still online with no changes since 2013) to download display pictures etc. I was a beta tester for Messenger Plus! and spent quite a lot of time on the MsgPlus! forums (a read-only copy is still online at https://shoutbox.menthix.net) Some old Neowin articles also https://www.neowin.net/news/messenger-plus-350/ good times but how time flies The main developer of Messenger Plus!, Cyril aka. Patchou has released a game https://store.steampowered.com/app/3275440/Pluralys/
  • Recent Achievements

    • One Year In
      ThatGuyOnline earned a badge
      One Year In
    • Week One Done
      Jeroen Wilms earned a badge
      Week One Done
    • Week One Done
      rolfus earned a badge
      Week One Done
    • One Month Later
      Leroy Jethro Gibbs earned a badge
      One Month Later
    • Conversation Starter
      flexorcist earned a badge
      Conversation Starter
  • Popular Contributors

    1. 1
      +primortal
      505
    2. 2
      +Edouard
      199
    3. 3
      PsYcHoKiLLa
      127
    4. 4
      Steven P.
      82
    5. 5
      ATLien_0
      76
  • Tell a friend

    Love Neowin? Tell a friend!