Hello. I am having some dns issues, and I am hoping you guys can
me out. I have read through this group, and have found some similar
problems, but no solution.

My Domain info:
gcsd.edu (domain controller dc.gcsd.edu, ip 172.16.240.1, 172.16.240.2)
Child domains: rre.gcsd.edu, hmk.gcsd.edu, ms.gcsd.edu

When I perform an nslookup on any machine in the domain I get "DNS
Request timed out. Timeout was 2 seconds" but then it correctly
resolves the ip address. If I put a "." at the end it resolves
immediately. Also, computers on the child domains can ping computers
on all domains without the fqdn and quickly. Computers on the top
domain, gcsd.edu, can only ping each other after a long delay, but can
ping computers in child domains quickly. I have played around with the
dns suffixes, and changed all the settings, but it doesn't . I am
attaching an nslookup -ds performed on my machine (which is in the root
gcsd.edu domain). All the domain controllers are pointing to
themselves for dns with a forwarder to the root domain. The root
domain conroller has a forwarder to our isp for dns queries it can't
resolve. I have run dcdiag, and it passes all tests. Netdiag turns up
one warning and one error:
" NetBT name test. . . . . . : Passed
[WARNING] At least one of the <00> 'WorkStation Service', <03>
'Messenge
r Service', <20> 'WINS' names is missing.
No remote names have been found."
"DC list test . . . . . . . . . . . : Failed
Failed to enumerate DCs by using the browser.
[ERROR_REQ_NOT_ACCEP]"

I don't know if these are related, but I would really like to solve the
dc list test failure if anyone has any ideas.

Thanks for the !!


nslookup -ds dc.gcsd.edu
------------
Got answer:
HEADER:
opcode = QUERY, id = 1, rcode = NOERROR
header flags: response, auth. answer, want recursion, recursion
avail.
questions = 1, answers = 1, authority records = 0, additional = 0

QUESTIONS:
1.240.16.172.in-addr.arpa, type = PTR, class = IN
ANSWERS:
-> 1.240.16.172.in-addr.arpa
name = dc.gcsd.edu
ttl = 1200 (20 mins)

------------
Server: dc.gcsd.edu
Address: 172.16.240.1

------------
Got answer:
HEADER:
opcode = QUERY, id = 2, rcode = NXDOMAIN
header flags: response, auth. answer, want recursion, recursion
avail.
questions = 1, answers = 0, authority records = 1, additional = 0

QUESTIONS:
dc.gcsd.edu.rre.gcsd.edu, type = A, class = IN
AUTHORITY RECORDS:
-> rre.gcsd.edu
ttl = 3600 (1 hour)
primary name server = dc.gcsd.edu
responsible mail addr = hostmaster.rre.gcsd.edu
serial = 105
refresh = 900 (15 mins)
retry = 600 (10 mins)
expire = 86400 (1 day)
default TTL = 3600 (1 hour)

------------
------------
Got answer:
HEADER:
opcode = QUERY, id = 3, rcode = NXDOMAIN
header flags: response, auth. answer, want recursion, recursion
avail.
questions = 1, answers = 0, authority records = 1, additional = 0

QUESTIONS:
dc.gcsd.edu.ss.gcsd.edu, type = A, class = IN
AUTHORITY RECORDS:
-> gcsd.edu
ttl = 3600 (1 hour)
primary name server = dc.gcsd.edu
responsible mail addr = hostmaster.gcsd.edu
serial = 218
refresh = 900 (15 mins)
retry = 600 (10 mins)
expire = 86400 (1 day)
default TTL = 900 (15 mins)

------------
------------
Got answer:
HEADER:
opcode = QUERY, id = 4, rcode = NXDOMAIN
header flags: response, auth. answer, want recursion, recursion
avail.
questions = 1, answers = 0, authority records = 1, additional = 0

QUESTIONS:
dc.gcsd.edu.hmk.gcsd.edu, type = A, class = IN
AUTHORITY RECORDS:
-> hmk.gcsd.edu
ttl = 3600 (1 hour)
primary name server = dc.gcsd.edu
responsible mail addr = hostmaster.hmk.gcsd.edu
serial = 207
refresh = 900 (15 mins)
retry = 600 (10 mins)
expire = 86400 (1 day)
default TTL = 3600 (1 hour)

------------
------------
Got answer:
HEADER:
opcode = QUERY, id = 5, rcode = NXDOMAIN
header flags: response, auth. answer, want recursion, recursion
avail.
questions = 1, answers = 0, authority records = 1, additional = 0

QUESTIONS:
dc.gcsd.edu.ms.gcsd.edu, type = A, class = IN
AUTHORITY RECORDS:
-> ms.gcsd.edu
ttl = 3600 (1 hour)
primary name server = dc.gcsd.edu
responsible mail addr = hostmaster
serial = 238
refresh = 900 (15 mins)
retry = 600 (10 mins)
expire = 86400 (1 day)
default TTL = 3600 (1 hour)

------------
DNS request timed out.
timeout was 2 seconds.
timeout (2 secs)
------------
Got answer:
HEADER:
opcode = QUERY, id = 7, rcode = NOERROR
header flags: response, auth. answer, want recursion, recursion
avail.
questions = 1, answers = 2, authority records = 0, additional = 0

QUESTIONS:
dc.gcsd.edu, type = A, class = IN
ANSWERS:
-> dc.gcsd.edu
internet address = 172.16.240.1
ttl = 3600 (1 hour)
-> dc.gcsd.edu
internet address = 172.16.240.2
ttl = 3600 (1 hour)

------------
Name: dc.gcsd.edu
Addresses: 172.16.240.1, 172.16.240.2

Update:

I disabled recursion on the top level domain controller, and this
seemed to with the problem. But, of course, I lost internet
access, so this is not a solution. I am hoping one you DNS experts can
tell me how to fix this. Thanks!

frandsend@gmail.com wrote:
> Hello. I am having some dns issues, and I am hoping you guys can
> me out. I have read through this group, and have found some similar
> problems, but no solution.
>
> My Domain info:
> gcsd.edu (domain controller dc.gcsd.edu, ip 172.16.240.1, 172.16.240.2)
> Child domains: rre.gcsd.edu, hmk.gcsd.edu, ms.gcsd.edu
>
> When I perform an nslookup on any machine in the domain I get "DNS
> Request timed out. Timeout was 2 seconds" but then it correctly
> resolves the ip address. If I put a "." at the end it resolves
> immediately. Also, computers on the child domains can ping computers
> on all domains without the fqdn and quickly. Computers on the top
> domain, gcsd.edu, can only ping each other after a long delay, but can
> ping computers in child domains quickly. I have played around with the
> dns suffixes, and changed all the settings, but it doesn't . I am
> attaching an nslookup -ds performed on my machine (which is in the root
> gcsd.edu domain). All the domain controllers are pointing to
> themselves for dns with a forwarder to the root domain. The root
> domain conroller has a forwarder to our isp for dns queries it can't
> resolve. I have run dcdiag, and it passes all tests. Netdiag turns up
> one warning and one error:
> " NetBT name test. . . . . . : Passed
> [WARNING] At least one of the <00> 'WorkStation Service', <03>
> 'Messenge
> r Service', <20> 'WINS' names is missing.
> No remote names have been found."
> "DC list test . . . . . . . . . . . : Failed
> Failed to enumerate DCs by using the browser.
> [ERROR_REQ_NOT_ACCEP]"
>
> I don't know if these are related, but I would really like to solve the
> dc list test failure if anyone has any ideas.
>
> Thanks for the !!
>
>
> nslookup -ds dc.gcsd.edu
> ------------
> Got answer:
> HEADER:
> opcode = QUERY, id = 1, rcode = NOERROR
> header flags: response, auth. answer, want recursion, recursion
> avail.
> questions = 1, answers = 1, authority records = 0, additional = 0
>
> QUESTIONS:
> 1.240.16.172.in-addr.arpa, type = PTR, class = IN
> ANSWERS:
> -> 1.240.16.172.in-addr.arpa
> name = dc.gcsd.edu
> ttl = 1200 (20 mins)
>
> ------------
> Server: dc.gcsd.edu
> Address: 172.16.240.1
>
> ------------
> Got answer:
> HEADER:
> opcode = QUERY, id = 2, rcode = NXDOMAIN
> header flags: response, auth. answer, want recursion, recursion
> avail.
> questions = 1, answers = 0, authority records = 1, additional = 0
>
> QUESTIONS:
> dc.gcsd.edu.rre.gcsd.edu, type = A, class = IN
> AUTHORITY RECORDS:
> -> rre.gcsd.edu
> ttl = 3600 (1 hour)
> primary name server = dc.gcsd.edu
> responsible mail addr = hostmaster.rre.gcsd.edu
> serial = 105
> refresh = 900 (15 mins)
> retry = 600 (10 mins)
> expire = 86400 (1 day)
> default TTL = 3600 (1 hour)
>
> ------------
> ------------
> Got answer:
> HEADER:
> opcode = QUERY, id = 3, rcode = NXDOMAIN
> header flags: response, auth. answer, want recursion, recursion
> avail.
> questions = 1, answers = 0, authority records = 1, additional = 0
>
> QUESTIONS:
> dc.gcsd.edu.ss.gcsd.edu, type = A, class = IN
> AUTHORITY RECORDS:
> -> gcsd.edu
> ttl = 3600 (1 hour)
> primary name server = dc.gcsd.edu
> responsible mail addr = hostmaster.gcsd.edu
> serial = 218
> refresh = 900 (15 mins)
> retry = 600 (10 mins)
> expire = 86400 (1 day)
> default TTL = 900 (15 mins)
>
> ------------
> ------------
> Got answer:
> HEADER:
> opcode = QUERY, id = 4, rcode = NXDOMAIN
> header flags: response, auth. answer, want recursion, recursion
> avail.
> questions = 1, answers = 0, authority records = 1, additional = 0
>
> QUESTIONS:
> dc.gcsd.edu.hmk.gcsd.edu, type = A, class = IN
> AUTHORITY RECORDS:
> -> hmk.gcsd.edu
> ttl = 3600 (1 hour)
> primary name server = dc.gcsd.edu
> responsible mail addr = hostmaster.hmk.gcsd.edu
> serial = 207
> refresh = 900 (15 mins)
> retry = 600 (10 mins)
> expire = 86400 (1 day)
> default TTL = 3600 (1 hour)
>
> ------------
> ------------
> Got answer:
> HEADER:
> opcode = QUERY, id = 5, rcode = NXDOMAIN
> header flags: response, auth. answer, want recursion, recursion
> avail.
> questions = 1, answers = 0, authority records = 1, additional = 0
>
> QUESTIONS:
> dc.gcsd.edu.ms.gcsd.edu, type = A, class = IN
> AUTHORITY RECORDS:
> -> ms.gcsd.edu
> ttl = 3600 (1 hour)
> primary name server = dc.gcsd.edu
> responsible mail addr = hostmaster
> serial = 238
> refresh = 900 (15 mins)
> retry = 600 (10 mins)
> expire = 86400 (1 day)
> default TTL = 3600 (1 hour)
>
> ------------
> DNS request timed out.
> timeout was 2 seconds.
> timeout (2 secs)
> ------------
> Got answer:
> HEADER:
> opcode = QUERY, id = 7, rcode = NOERROR
> header flags: response, auth. answer, want recursion, recursion
> avail.
> questions = 1, answers = 2, authority records = 0, additional = 0
>
> QUESTIONS:
> dc.gcsd.edu, type = A, class = IN
> ANSWERS:
> -> dc.gcsd.edu
> internet address = 172.16.240.1
> ttl = 3600 (1 hour)
> -> dc.gcsd.edu
> internet address = 172.16.240.2
> ttl = 3600 (1 hour)
>
> ------------
> Name: dc.gcsd.edu
> Addresses: 172.16.240.1, 172.16.240.2