DNS/FQDN same as external website domain

By KENNY P
in Microsoft (Windows)

 Share

Recommended Posts

Explorer

KENNY P

Posted
Posted

Hey all,

Signed up over here to start participating in the awesome discussions... have an issue thats had me stumped for a few days now at one of my customer's office and I'm hoping someone can lead me in the right direction.

They have a Windows Server (2003) that is hosting DNS... and when people access their site domain.com internally it brings them to the server (named edge)'s local IIS site and not the external website.

They aren't even on a domain! And there is a www. record pointing to the externally hosted website's IP but even www. brings you to the local edge IIS site.

Thanks for your help!!

Grand Master

+LogicalApex MVC

Posted
  • MVC
Posted

You don't need to be on a domain to use a local DNS server. The computer will use whatever DNS server it is configured to use, either manually or via DHCP.

If you have a problem with the DNS server resolving the correct IP address for a zone you should check the DNS server's configuration. Do you have a single A (or AAAA if you're using IPv6) record for the external IP in the forward lookup zone configured on the DNS server?

Grand Master

+BudMan MVC

Posted
  • MVC
Posted

And why are they hosting DNS on this server if not using AD? Clearly they want people to resolve stuff using this server, so who admins the server? Have them fix the records for what they are resolving if its not right?

Explorer

KENNY P

Posted
  • Author
Posted

They're using the server for file sharing... I see an smtp record and some IP reservations... I just setup a Watchguard for VPN. My next option was to disable DNS on the server and put those entries in the firewall... but didn't want to accidentally take down their mail entry (maybe having to reconfigure all 40 clients with new mail settings) so I was wondering if there was a quick fix. I'm against even having 40 clients use server in a workgroup environment but they're not paying for licensing and half the computers are home premium clients :/

Grand Master

sc302 Veteran

Posted
  • Veteran
Posted

you need a redirect to direct them to the external ip if the external ip is not part of your network. an A record redirecting www should work just fine. This is why we do not configure internal domains with external domain names. It creates issues like this.

Veteran

Joe User

Posted
Posted

Hey all,

Signed up over here to start participating in the awesome discussions... have an issue thats had me stumped for a few days now at one of my customer's office and I'm hoping someone can lead me in the right direction.

They have a Windows Server (2003) that is hosting DNS... and when people access their site domain.com internally it brings them to the server (named edge)'s local IIS site and not the external website.

They aren't even on a domain! And there is a www. record pointing to the externally hosted website's IP but even www. brings you to the local edge IIS site.

Thanks for your help!!

Remove all references to the external domain from the DNS server AND TCP/IP settings on the workstations and servers (especially primary DNS suffix settings in the TCP/IP and System settings where the computer names are set).

Grand Master

sc302 Veteran

Posted
  • Veteran
Posted

Remove all references to the external domain from the DNS server AND TCP/IP settings on the workstations and servers (especially suffix settings in the TCP/IP tab).

and what happens when the internal domain is named the same as the external then you delete everything...you just fubar'd your network.

Veteran

Joe User

Posted
Posted

and what happens when the internal domain is named the same as the external then you delete everything...you just fubar'd your network.

There is no internal domain, as referenced by the OP. I'm assuming external DNS is coming from the ISP, removing the entries will make the internal network go to the ISP for the info.

Explorer

KENNY P

Posted
  • Author
Posted

There was no parent A record... I created one with the external IP, that didn't work either. I'll admit, I am a DNS n00b but I'm assuming it should be hitting the external site with parent A record and www A record... let me remote in and screenshot the DNS so you guys can check me if you wouldn't mind.

Veteran

Joe User

Posted
Posted

There was no parent A record... I created one with the external IP, that didn't work either. I'll admit, I am a DNS n00b but I'm assuming it should be hitting the external site with parent A record and www A record... let me remote in and screenshot the DNS so you guys can check me if you wouldn't mind.

Send a dump of ipconfig /all from the server and a workstation too.

Grand Master

sc302 Veteran

Posted
  • Veteran
Posted

then delete the domain in the dns server. if you aren't on a domain, why are you using dns unless you need to redirect locally....even still you can use host file to redirect.

what is the order of operations...

host file first - do you have an entry in your host file (c:\windows\system32\drivers\etc\hosts - open in notepad)

is here a screwed up entry in lmhosts?

dns would be next.

do a nslookup for the website in a dos prompt this will query the dns server and find out what it thinks, nslookup will not use host files it is a query against the dns server.

open a command prompt

nslookup www.google.com

put in your domain vs google and see what it comes up with

Veteran

Joe User

Posted
Posted

what is the order of operations...

host file first - do you have an entry in your host file (c:\windows\system32\drivers\etc\hosts - open in notepad)

is here a screwed up entry in lmhosts?

dns would be next.

I think it's lmhosts, hosts, WINS, then DNS for 2003. But the problem would be on the workstations, so it might be something else.

Explorer

KENNY P

Posted
  • Author
Posted

Wow... that did it... posting the screenshot made me take a second look and it was pretty obvious after nslookup there were two A records... you guys are the ****. After seeing DNS config should I leave everything how it is or disable DNS because we're not really using it (from what I see)?

Veteran

Joe User

Posted
Posted

Wow... that did it... posting the screenshot made me take a second look and it was pretty obvious after nslookup there were two A records... you guys are the ****. After seeing DNS config should I leave everything how it is or disable DNS because we're not really using it (from what I see)?

If all you're doing is duplicating the ISP's records, then you shouldn't have entries in DNS. It's really not recommended.

Explorer

KENNY P

Posted
  • Author
Posted

Well crap... I just ping'ed each entry and the IPs match the external IPs (from my ISP, not from their server) so you're right... I don't need DNS. Can I delete the whole reverse/forward DNS zone?

Also, second question... if anyone is familiar with Watchguard/VPN... the branch office I setup is on a different subnet. When I ping edge (server name) or any clients... it doesn't resolve. I fixed with host files.. but is there a way to have WINS resolve over the VPN? So we can ping without manual hosts file mapping?

Grand Master

sc302 Veteran

Posted
  • Veteran
Posted

you can fully uninstall dns.

You will need a common wins server that handles all wins resolution, but yes you can. point all to 1 wins server. it would be much better if you enabled active directory, that would solve your issues and have a common user base, which it is easier to share with and setup common mappings.

Veteran

Joe User

Posted
Posted

Well crap... I just ping'ed each entry and the IPs match the external IPs (from my ISP, not from their server) so you're right... I don't need DNS. Can I delete the whole reverse/forward DNS zone?

Also, second question... if anyone is familiar with Watchguard/VPN... the branch office I setup is on a different subnet. When I ping edge (server name) or any clients... it doesn't resolve. I fixed with host files.. but is there a way to have WINS resolve over the VPN? So we can ping without manual hosts file mapping?

What I think you want is something like "office.domain.com" then your internal office servers and workstations are computername.office.domain.com. That way you can keep your DNS resolution for the VPN and also have WINS lookup thru DNS. If you add office.domain.com to the dns suffix search on the workstations and enable dynamic DNS updates, then honestly you won't even need WINS.

Grand Master

sc302 Veteran

Posted
  • Veteran
Posted

Recommended practice for internal networks is not to use a internet extension like .com or .org, etc. .local, .lan, .internal, etc is recommended and preferred. This way if you do register externally your dns server won't get confused or need to put in manual entries.

This topic is now closed to further replies.
 Share
Go to topic listing

  • Recently Browsing   0 members

    • No registered users viewing this page.

  • Posts

    • Firefox 152.0

      By Copernic · Posted

      Firefox 152.0 by Razvan Serea Firefox is a fast, full-featured Web browser. It offers great security, privacy, and protection against viruses, spyware, malware, and it can also easily block pop-up windows. The key features that have made Firefox so popular are the simple and effective UI, browser speed and strong security capabilities. Firefox has complete features for browsing the Internet. It is very reliable and flexible due to its implemented security features, along with customization options. Firefox includes pop-up blocking, tab-browsing, integrated Google search, simplified privacy controls, a streamlined browser window that shows you more of the page than any other browser and a number of additional features that work with you to help you get the most out of your time online. Firefox key features Enhanced Tracking Protection (ETP) – Blocks trackers, cookies, cryptominers, and fingerprinters by default. Private Browsing Mode – Deletes history, cookies, and temporary files when closed. Lightweight & Fast Performance – Optimized memory usage with efficient page loading. Cross-Platform Sync – Sync bookmarks, passwords, history, and open tabs across devices. Customizable Interface – Toolbars, themes, and extensions can be tailored to user needs. Strong Privacy Controls – Options to manage cookies, permissions, and site data easily. Reader Mode – Strips away clutter for distraction-free reading. Pocket Integration – Save and read articles offline with Pocket built into Firefox. Picture-in-Picture (PiP) – Watch videos in a floating window while multitasking. Extensions & Add-ons – Vast library for productivity, security, and personalization. Built-in PDF Viewer – No need for external software to view PDFs. Firefox Monitor – Alerts users if their email is part of a known data breach. Multi-Account Containers – Isolate browsing sessions (e.g., work, personal, shopping). Performance & Resource Efficiency – Uses fewer system resources than some competitors. Open Source & Community-Driven – Transparent development with global contributions. Download: Firefox 64-bit | Firefox 32-bit | ARM64 | ~70.0 MB (Freeware) Download: Firefox for MacOS | 145.0 MB View: Firefox Home Page | Release Notes Get alerted to all of our Software updates on Twitter at @NeowinSoftware
    • Microsoft Visio 2024 Professional for Windows is still at 90% off

      By News Staff · Posted

      Microsoft Visio 2024 Professional for Windows is still at 90% off by Steven Parker Created by ChatGPT Today's highlighted Neowin Deal comes from our Apps & Software section of the Neowin Deals store, where you can save 90% on Microsoft Visio 2024 Professional for Windows [Digital License]. Microsoft Visio: Turn Complex Ideas into Clear Visuals Microsoft Visio 2024 is a robust diagramming software designed to empower individuals and businesses to visually represent complex data, processes, and workflows. With a host of advanced features, it caters to professionals from various industries, including IT, engineering, business, and architecture. Visio 2024 makes it easy for individuals and teams to create and share clear, professional diagrams that simplify complex information. It offers updated shapes, templates, and styles, along with a new search bar to improve your experience. Visio 2024 also has a fresh design that matches other Office apps you use. Create stunning diagrams Extensive Diagramming Capabilities: Visio 2024 offers a wide array of diagram types, including flowcharts, process maps, floor plans, network diagrams, and organizational charts. The software comes with a comprehensive set of pre-built templates and shapes, making it easier to get started on projects quickly. Professional Templates and Shapes: The software includes over 250,000 shapes across multiple diagram types, ensuring that users from any field-whether creating a simple flowchart or a complex engineering design-have the tools they need to represent their ideas visually. Data-Linked Diagrams: One of the most powerful features of Visio 2024 is its ability to link data to diagrams, allowing users to visualize real-time data directly within their diagrams. Whether you're pulling data from Excel, SQL Server, or other databases, the software ensures that your diagrams are automatically updated as data changes, giving users better insights and control. Advanced Formatting Options: Visio 2024 comes equipped with a range of formatting tools to create highly customized diagrams. These include shape formatting, text adjustments, and the ability to apply various themes, ensuring diagrams not only serve their functional purpose but also look professional. Enhanced Visual Styles: This version of Visio includes new visual styles and layouts that make complex diagrams easier to interpret. Whether you're designing an IT network, a business process flow, or a floor plan, the enhanced visual options improve clarity and presentation quality. Easy, secure collaboration Real-Time Collaboration: With Visio 2024's improved collaboration tools, multiple users can work on the same diagram simultaneously from anywhere, with changes being tracked in real-time. This makes it a highly efficient tool for teams working remotely or across different locations. Mobile and Cloud Access: Users can view and edit diagrams on the go with the Visio web app. This ensures that even when you're away from your desktop, you can access and make critical changes to diagrams via mobile devices. Integration with Microsoft 365: Visio 2024 integrates seamlessly with the Microsoft 365 suite, allowing users to easily embed diagrams into PowerPoint presentations, Word documents, or Teams chats. You can also store diagrams in OneDrive or SharePoint for easy sharing and access from any device. Security and Compliance: Built with enterprise-grade security, Visio 2024 ensures that your diagrams are protected. Microsoft's trusted cloud infrastructure means that your data is encrypted and safeguarded, with compliance with international standards. Good to know Length of access: lifetime Redemption deadline: redeem your code within 7 days of purchase Access options: desktop Bound to account - Limited to one device activation at a time Only available to existing and new users Version: 2024 Updates included Click here to verify Microsoft partnership Microsoft Visio 2024 Professional for Windows normally costs $579.99, but it can be yours for just $39.97 for a limited time, that's a saving of $520 (90%). For terms, specifications, and license info please click the link below. Microsoft Visio 2024 Professional for Windows for $54.97 (was $579.99) Although priced in U.S. dollars, this deal is available for digital purchase worldwide. Support queries If you have queries or need support for any of the Neowin Deals, please use the contact form here. Neowin Deals are managed and sold by StackCommerce who represent Neowin on an affiliate basis. Why we post these deals We post these because we earn commission on each sale so as not to rely solely on advertising, which many of our readers block. It all helps toward paying staff reporters, servers and hosting costs. So for those that keep moaning and complaining, be thankful we're still online for you to even do that. Other ways to support Neowin Whitelist Neowin by not blocking our ads Create a free member account to see fewer ads Make a donation to support our day to day running costs Subscribe to Neowin - for $14 a year, or $28 a year for an ad-free experience Disclosure: Neowin benefits from revenue of each sale made through our branded deals site powered by StackCommerce.
    • Anthropic pulls Fable 5 and Mythos 5 after US export control order

      By JayZJay · Posted

      I totally disagree. Very little good comes out of governments all around the world manipulating everything they can and usually the people are not the benefactors. What you say about being restricted and expensive sounds almost like the arguments against firearms and why banning them will protect people as if making something illegal somehow will prevent the criminals from having and using them. AI being far less mainstream could simply mean the average person will not benefit, but "big brother" and the corporations will benefit, which is almost for sure NOT a good thing.
    • Microsoft making much needed change to Windows 11, 10 Patch Tuesday security updates

      By lonegull · Posted

      I do apologize to the author Mr. Sen for my rude comment, questioning his knowledge of the subject. It is I whom lacked knowledge of the subject. Sorry!
    • USB Port Optimization for best locations for devices

      By bikeman25 · Posted

      Hello All Have a MSI Pro B650 VC Wifi Rev 1.0 motherboard Ryzen 7 7700X Radeon 7800XT OC 16GB 32GB Teamgroup DDR 5 5600mhz Samsung 990 Pro 1TB Boot NVMe Samsung 990 Pro 2TB Game NVMe Lian Li Lancool Black ARGB 216 Case Seasonic Focus GX 750 Watt Power supply   Wondering today what is best spot to plug in the following items on system for performance and not bottle neck anything if i can help it Creative Pebble Pro USB C or A Speakers, ((Powered by External USB C to C PD Adapter)  Logitech G513 USB Gaming Keyboard Logitech G502X Wired Gaming Mouse Cyberpower UPS USB Cable for UPS Power Management/System shutdown External drives connected occasionally are as follows---WD My Book 8TB (primary backup drive)   Seagate 8TB in External USB 3.0 Enclosure,  Seagate Portable 1TB USB 3.0 drive,   WD My Passport (Blue) 2TB, and WD My Passport (Red) 2TB,    WD Elements 500GB USB 2.0 External (Oldest one, Christmas 2003)       **Do have a 7 Port Powered  USB Hub as well, but when i use that--that leaves only the USB Flash spot for something to directly connect to system if needed.    Rear USB C 2x2 unused right now as moved the Creative speakers off it to USB A port next to it, with a USB C to A Cable, as figured speakers didn't near audio from USB C port and tie up the high speed port**   Front Ports trying to limit use of, so i don't have Front I/O port go bad again, already had it replaced once by Lian Li support all the way from Taiwan over night ((Do get extra nervous at times on things,  so i might just be extra nervous for nothing lol))

  • Recent Achievements

    • Week One Done
      Jeroen Wilms earned a badge
      Week One Done
    • Week One Done
      rolfus earned a badge
      Week One Done
    • One Month Later
      Leroy Jethro Gibbs earned a badge
      One Month Later
    • Conversation Starter
      flexorcist earned a badge
      Conversation Starter
    • One Month Later
      AndreaB earned a badge
      One Month Later

  • Popular Contributors

    1. 1
      +primortal
      500
    2. 2
      +Edouard
      201
    3. 3
      PsYcHoKiLLa
      127
    4. 4
      Steven P.
      81
    5. 5
      ATLien_0
      76
    Show More

  • Tell a friend

    Love Neowin? Tell a friend!