DNS/FQDN same as external website domain


Recommended Posts

Hey all,

Signed up over here to start participating in the awesome discussions... have an issue thats had me stumped for a few days now at one of my customer's office and I'm hoping someone can lead me in the right direction.

They have a Windows Server (2003) that is hosting DNS... and when people access their site domain.com internally it brings them to the server (named edge)'s local IIS site and not the external website.

They aren't even on a domain! And there is a www. record pointing to the externally hosted website's IP but even www. brings you to the local edge IIS site.

Thanks for your help!!

You don't need to be on a domain to use a local DNS server. The computer will use whatever DNS server it is configured to use, either manually or via DHCP.

If you have a problem with the DNS server resolving the correct IP address for a zone you should check the DNS server's configuration. Do you have a single A (or AAAA if you're using IPv6) record for the external IP in the forward lookup zone configured on the DNS server?

And why are they hosting DNS on this server if not using AD? Clearly they want people to resolve stuff using this server, so who admins the server? Have them fix the records for what they are resolving if its not right?

They're using the server for file sharing... I see an smtp record and some IP reservations... I just setup a Watchguard for VPN. My next option was to disable DNS on the server and put those entries in the firewall... but didn't want to accidentally take down their mail entry (maybe having to reconfigure all 40 clients with new mail settings) so I was wondering if there was a quick fix. I'm against even having 40 clients use server in a workgroup environment but they're not paying for licensing and half the computers are home premium clients :/

you need a redirect to direct them to the external ip if the external ip is not part of your network. an A record redirecting www should work just fine. This is why we do not configure internal domains with external domain names. It creates issues like this.

Hey all,

Signed up over here to start participating in the awesome discussions... have an issue thats had me stumped for a few days now at one of my customer's office and I'm hoping someone can lead me in the right direction.

They have a Windows Server (2003) that is hosting DNS... and when people access their site domain.com internally it brings them to the server (named edge)'s local IIS site and not the external website.

They aren't even on a domain! And there is a www. record pointing to the externally hosted website's IP but even www. brings you to the local edge IIS site.

Thanks for your help!!

Remove all references to the external domain from the DNS server AND TCP/IP settings on the workstations and servers (especially primary DNS suffix settings in the TCP/IP and System settings where the computer names are set).

Remove all references to the external domain from the DNS server AND TCP/IP settings on the workstations and servers (especially suffix settings in the TCP/IP tab).

and what happens when the internal domain is named the same as the external then you delete everything...you just fubar'd your network.

and what happens when the internal domain is named the same as the external then you delete everything...you just fubar'd your network.

There is no internal domain, as referenced by the OP. I'm assuming external DNS is coming from the ISP, removing the entries will make the internal network go to the ISP for the info.

There was no parent A record... I created one with the external IP, that didn't work either. I'll admit, I am a DNS n00b but I'm assuming it should be hitting the external site with parent A record and www A record... let me remote in and screenshot the DNS so you guys can check me if you wouldn't mind.

There was no parent A record... I created one with the external IP, that didn't work either. I'll admit, I am a DNS n00b but I'm assuming it should be hitting the external site with parent A record and www A record... let me remote in and screenshot the DNS so you guys can check me if you wouldn't mind.

Send a dump of ipconfig /all from the server and a workstation too.

then delete the domain in the dns server. if you aren't on a domain, why are you using dns unless you need to redirect locally....even still you can use host file to redirect.

what is the order of operations...

host file first - do you have an entry in your host file (c:\windows\system32\drivers\etc\hosts - open in notepad)

is here a screwed up entry in lmhosts?

dns would be next.

do a nslookup for the website in a dos prompt this will query the dns server and find out what it thinks, nslookup will not use host files it is a query against the dns server.

open a command prompt

nslookup www.google.com

put in your domain vs google and see what it comes up with

what is the order of operations...

host file first - do you have an entry in your host file (c:\windows\system32\drivers\etc\hosts - open in notepad)

is here a screwed up entry in lmhosts?

dns would be next.

I think it's lmhosts, hosts, WINS, then DNS for 2003. But the problem would be on the workstations, so it might be something else.

Wow... that did it... posting the screenshot made me take a second look and it was pretty obvious after nslookup there were two A records... you guys are the ****. After seeing DNS config should I leave everything how it is or disable DNS because we're not really using it (from what I see)?

Wow... that did it... posting the screenshot made me take a second look and it was pretty obvious after nslookup there were two A records... you guys are the ****. After seeing DNS config should I leave everything how it is or disable DNS because we're not really using it (from what I see)?

If all you're doing is duplicating the ISP's records, then you shouldn't have entries in DNS. It's really not recommended.

Well crap... I just ping'ed each entry and the IPs match the external IPs (from my ISP, not from their server) so you're right... I don't need DNS. Can I delete the whole reverse/forward DNS zone?

Also, second question... if anyone is familiar with Watchguard/VPN... the branch office I setup is on a different subnet. When I ping edge (server name) or any clients... it doesn't resolve. I fixed with host files.. but is there a way to have WINS resolve over the VPN? So we can ping without manual hosts file mapping?

you can fully uninstall dns.

You will need a common wins server that handles all wins resolution, but yes you can. point all to 1 wins server. it would be much better if you enabled active directory, that would solve your issues and have a common user base, which it is easier to share with and setup common mappings.

Well crap... I just ping'ed each entry and the IPs match the external IPs (from my ISP, not from their server) so you're right... I don't need DNS. Can I delete the whole reverse/forward DNS zone?

Also, second question... if anyone is familiar with Watchguard/VPN... the branch office I setup is on a different subnet. When I ping edge (server name) or any clients... it doesn't resolve. I fixed with host files.. but is there a way to have WINS resolve over the VPN? So we can ping without manual hosts file mapping?

What I think you want is something like "office.domain.com" then your internal office servers and workstations are computername.office.domain.com. That way you can keep your DNS resolution for the VPN and also have WINS lookup thru DNS. If you add office.domain.com to the dns suffix search on the workstations and enable dynamic DNS updates, then honestly you won't even need WINS.

Recommended practice for internal networks is not to use a internet extension like .com or .org, etc. .local, .lan, .internal, etc is recommended and preferred. This way if you do register externally your dns server won't get confused or need to put in manual entries.

This topic is now closed to further replies.
  • Recently Browsing   0 members

    • No registered users viewing this page.
  • Posts

    • Just when I thought EA couldn't go lower. They surpassed my expectations
    • The GEEKOM A8 mini PC is 20% off (lower than Prime Day pricing) plus Huge Storewide Sale by Steven Parker GEEKOM is back with a deal on a variant of its A8 Mini PC powered by AMD's Ryzen 7 8945HS, which came out in 2024 with a TDP of just 45W, with a base clock of 3.8 GHz and a Turbo Boost of 4.9 GHz; although we never reviewed this variant, we did check out the Ryzen 9 version. As a reminder of what you get, below are the specifications for this Mini PC. GEEKOM A8 Dimensions 112.4 mm x 112.4 mm x 37 mm Weight 450g CPU Ryzen 7 8745HS (8 cores, 16 threads, 16MB L3 cache, 3.8 - 4.9 GHz, TDP: 45 W) cTDP: 35-54W (Default 45W) Graphics AMD Radeon™ 780M Graphics 12 RDNA 3 Graphics Cores 2700MHz 768 shading units / stream processors (12 CUs), 48 texture mapping units, and 32 ROPs NPU XDNA architecture (Up to 16 NPU TOPS) Memory 16GB Dual-channel Crucial DDR5-5600MT/s SODIMM (up to 64GB) Storage 1TB NVMe M.2 (PCIe Gen 4.0 x4) Operating System Windows 11 Pro Bluetooth Bluetooth v5.2 Wireless LAN Wi-Fi 6E Kensington Lock No SD Card reader Yes (left side) Adapter 120W, 6.32A, 19V Power Adapter Front I/O Ports 2 x USB 3.2 Gen 2 Type-A 1 x 3.5mm front stereo headset jack Rear I/O Ports 1 x USB 3.2 Gen 2 Type-A 1 x USB 4 Gen 3 Type-C with Power delivery up to 15W (5V 3A) 1 x USB 3.2 Gen 2 Type-C 1 x USB 2.0 Type-A 2 x HDMI 2.0b 1 x 2.5G RJ45 LAN 1 x DC-in Deal Price $519 (buying links below) GEEKOM has two configurations of the A8, with the only difference being the slightly less-powerful Ryzen 7 CPU with half the storage (1TB) and DDR5 memory (16GB). This knocks $350 off the price compared to the $999 Ryzen 9 configuration. In both instances, a Windows 11 Pro license is also pre-loaded. As I said previously, this appears to be an update on the A7 with the only difference being the newer CPU. The packaging has changed quite a bit from the A7. Instead of dark colors, now the box is completely white, and the foam cushion has been replaced by a cardboard mould that the A8 sits in, above a small envelope that contains a thank you card and booklet that has guidance on all of the controls, how to access the A8 to swap out the SSD or memory, and safety information in several European languages. Upon removing the cardboard mould, you can find another cardboard compartment that contains the power lead, HDMI cable, VESA plate, and a bag of screws. What’s In The Box 1 x A8 Mini PC 1 x Power Adapter 1 x HDMI Cable 1 x VESA plate and bag of screws 1 x Envelope with booklet and Thank you card Unlike the A7, the VESA mount option is back with the A8. In short, you have everything you need to get started. All products sold by GEEKOM receive a 3-year free Warranty from the date you receive the product. If needed, you can RMA or return locally relative to your region (the U.S. has a U.S. warehouse, mainland E.U. has a German warehouse). GEEKOM A8 at GEEKOM U.S. for $519 was $649 (20% off) GEEKOM A8 at GEEKOM U.K. for £503 was £629 (20% off) GEEKOM A8 at GEEKOM CA for $735.20 was $919 (20% off) Use coupon code NWGKA820 when checking out. This flash deal expires on July 2. Next up is the highest savings on the A7 Max series of Mini PC in the Spring Sale. The GEEKOM [2026 Edition] A7 MAX with AMD Ryzen 9 7940HS, 16GB DDR5, and 1TB SSD. Operating System: Windows 11 Pro CPU Model: Ryzen 9 7940HS CPU Speed: 5.2 GHz Cache Size: 24 MB Graphics Card Description: Integrated Graphics Coprocessor: AMD Radeon 780M Memory Storage Capacity: 16GB DDR5 SSD: 1 TB We reviewed this Mini PC back in January, and praised it for its modern internals like a dedicated NPU and DDR5 memory; as such, it is more than capable of keeping up with today's offerings of Mini PC on the market. GEEKOM A7 Max at GEEKOM U.S. for $587 (was $699) 16% off GEEKOM A7 Max at GEEKOM U.K. for £551 was £689 (20% off) Use coupon code NWGKA7MAX when checking out. This flash deal expires on July 2. Huge Summer Sale If the above deals don't tickle your fancy, from today, there are deep discounts on a range of other GEEKOM products. From June 15 to June 30, the GEEKOM Official Store will be running its Summer Sale, with discounts starting from 15% off across the entire lineup, up to 50%! This is their biggest promotion of the year so far, offering pricing that is even lower than select Prime Day deals. You can check out the discounts at the dedicated Summer Sale landing pages below. GEEKOM U.S. Summer Sale GEEKOM U.K. Summer Sale What's more, all products from GEEKOM receive a 3-year free Warranty from the date you receive the product. If needed, you can RMA or return locally relative to your region (the U.S. has a U.S. warehouse, mainland E.U. has a German warehouse, the U.K. has a U.K. warehouse, Australia has an AU warehouse). While the Summer Sale ends on June 30, deals on the A8 and A7 Max will remain active until July 2.
  • Recent Achievements

    • Week One Done
      Jeroen Wilms earned a badge
      Week One Done
    • Week One Done
      rolfus earned a badge
      Week One Done
    • One Month Later
      Leroy Jethro Gibbs earned a badge
      One Month Later
    • Conversation Starter
      flexorcist earned a badge
      Conversation Starter
    • One Month Later
      AndreaB earned a badge
      One Month Later
  • Popular Contributors

    1. 1
      +primortal
      515
    2. 2
      +Edouard
      205
    3. 3
      PsYcHoKiLLa
      136
    4. 4
      ATLien_0
      88
    5. 5
      Steven P.
      85
  • Tell a friend

    Love Neowin? Tell a friend!