Here is my situation: I have an internal DNS (Windows server 2003 sp1)
server. Server is configured with forwarders to point to external DNS
server 65.64.63.21 (example address). No recursion is turned off on
either the forwarders or advanced tabs. Any client that points solely
to this server for DNS cannot get to the internet. The client can
however reach the internet if I statically insert the 65.4.63.21
address in the network settings on the client. The internal DNS server
itself displays this behavior as well.
I am thinking that the firewall could be an issue but that would mean
that the forwarded requests from the DNS server must be using a
different port or packet than the statically assigned requests.
Any ideas? This is beating me to death. What am I missing?

"vanilla" <Irun6snd8th@yahoo.com> wrote in message
news:1168445347.842162.65580@i56g2000hsf.googlegro ups.com...
> Here is my situation: I have an internal DNS (Windows server 2003 sp1)
> server. Server is configured with forwarders to point to external DNS
> server 65.64.63.21 (example address). No recursion is turned off on
> either the forwarders

Generally this is a good idea (do not use recursion)

> ...or advanced tabs.

NEVER do this for such servers which must forward as the Advanced
tab also disabled Forwarding.

> Any client that points solely
> to this server for DNS cannot get to the internet.

Try running NSLookup FROM the command prompt of the
DNS server. This way you can easily detect if some firewall
(or other problem) is preventing the DNS server from reaching
the external forwarder. You must SPECIFY the DNS server
to use as the final parameter:

NSLookup www.google.com 65.64.63.21

> The client can
> however reach the internet if I statically insert the 65.4.63.21
> address in the network settings on the client.

Clients must (eventually) be set to use STRICTLY the internal
DNS server.

> The internal DNS server itself displays this behavior as well.

Tends to imply the test above will fail too -- but make sure.

If the test above fails but the DNS server cannot get through
check the following:

1) Using the correct forwarder IP (e.g., 65.64.63.21)
check and re-check in forwarding tab, remove
any extraneous entries

2) DOUBLE check that Advanced tab and ensure the
disable is CLEARED for recurions (and forwarders)

3) Check your gateway/firewalls -- some have a problem
with large UDP packets AND you might also need
to enable TCP port 53 for some conditions.

> I am thinking that the firewall could be an issue but that would mean
> that the forwarded requests from the DNS server must be using a
> different port

Possibly TCP 53 for SOME packets.

Firewall is likely source of problem since in theory the
internal DNS server SHOULD be willing to RECURSE
since you have not (yet) said "do not use recursion" on the
forwarding tab (generally this should be used eventually.)

> or packet than the statically assigned requests.

Or LARGE UDP packets could cause this.

> Any ideas? This is beating me to death. What am I missing?

See above.

Also if this doesn't quickly resolve (or point out the problem) turn
on the DNS Server "debug logging" for these:

Log packets
UDP & TCP
Outgoing + Requests (to forwarder) and
Incoming + Responses (from forwarder)
Queries

(You can just enable everything but using only what you need
reduces the junk to look through.)


--
Herb Martin, MCSE MVP
www.LearnQuick.Com

Herb Martin wrote:
> "vanilla" <Irun6snd8th@yahoo.com> wrote in message
> news:1168445347.842162.65580@i56g2000hsf.googlegro ups.com...
> > Here is my situation: I have an internal DNS (Windows server 2003 sp1)
> > server. Server is configured with forwarders to point to external DNS
> > server 65.64.63.21 (example address). No recursion is turned off on
> > either the forwarders
>
> Generally this is a good idea (do not use recursion)
>
> > ...or advanced tabs.
>
> NEVER do this for such servers which must forward as the Advanced
> tab also disabled Forwarding.
>
> > Any client that points solely
> > to this server for DNS cannot get to the internet.
>
> Try running NSLookup FROM the command prompt of the
> DNS server. This way you can easily detect if some firewall
> (or other problem) is preventing the DNS server from reaching
> the external forwarder. You must SPECIFY the DNS server
> to use as the final parameter:
>
> NSLookup www.google.com 65.64.63.21
>
> > The client can
> > however reach the internet if I statically insert the 65.4.63.21
> > address in the network settings on the client.
>
> Clients must (eventually) be set to use STRICTLY the internal
> DNS server.
>
> > The internal DNS server itself displays this behavior as well.
>
> Tends to imply the test above will fail too -- but make sure.
>
> If the test above fails but the DNS server cannot get through
> check the following:
>
> 1) Using the correct forwarder IP (e.g., 65.64.63.21)
> check and re-check in forwarding tab, remove
> any extraneous entries
>
> 2) DOUBLE check that Advanced tab and ensure the
> disable is CLEARED for recurions (and forwarders)
>
> 3) Check your gateway/firewalls -- some have a problem
> with large UDP packets AND you might also need
> to enable TCP port 53 for some conditions.
>
> > I am thinking that the firewall could be an issue but that would mean
> > that the forwarded requests from the DNS server must be using a
> > different port
>
> Possibly TCP 53 for SOME packets.
>
> Firewall is likely source of problem since in theory the
> internal DNS server SHOULD be willing to RECURSE
> since you have not (yet) said "do not use recursion" on the
> forwarding tab (generally this should be used eventually.)
>
> > or packet than the statically assigned requests.
>
> Or LARGE UDP packets could cause this.
>
> > Any ideas? This is beating me to death. What am I missing?
>
> See above.
>
> Also if this doesn't quickly resolve (or point out the problem) turn
> on the DNS Server "debug logging" for these:
>
> Log packets
> UDP & TCP
> Outgoing + Requests (to forwarder) and
> Incoming + Responses (from forwarder)
> Queries
>
> (You can just enable everything but using only what you need
> reduces the junk to look through.)
>
>
> --
> Herb Martin, MCSE MVP
> www.LearnQuick.Com

Double checked all the above. NSLOOKUP fails with ***Can't find server
name for address 65.64.63.21: Timed out
Server: UnKnown
Address: 65.64.63.21

Here is the logging info from dns.log:
20070111 10:19:49 BA0 PACKET UDP Rcv 204.88.5.26 fd65 Q [0001
D NOERROR] (3)www(6)google(3)com(0)
UDP question info at 007DED50
Socket = 484
Remote addr 204.88.5.26, port 1031
Time Query=153052, Queued=0, Expire=0
Buf length = 0x0500 (1280)
Msg length = 0x0020 (32)
Message:
XID 0xfd65
Flags 0x0100
QR 0 (QUESTION)
OPCODE 0 (QUERY)
AA 0
TC 0
RD 1
RA 0
Z 0
RCODE 0 (NOERROR)
QCOUNT 1
ACOUNT 0
NSCOUNT 0
ARCOUNT 0
QUESTION SECTION:
Offset = 0x000c, RR count = 0
Name "(3)www(6)google(3)com(0)"
QTYPE A (1)
QCLASS 1
ANSWER SECTION:
empty
AUTHORITY SECTION:
empty
ADDITIONAL SECTION:
empty

20070111 10:19:49 BA0 PACKET UDP Snd 65.64.63.21 38a4 Q [0001
D NOERROR] (3)www(6)google(3)com(0)
UDP question info at 007E7360
Socket = 500
Remote addr 65.64.63.21, port 53
Time Query=0, Queued=0, Expire=0
Buf length = 0x0500 (1280)
Msg length = 0x0020 (32)
Message:
XID 0x38a4
Flags 0x0100
QR 0 (QUESTION)
OPCODE 0 (QUERY)
AA 0
TC 0
RD 1
RA 0
Z 0
RCODE 0 (NOERROR)
QCOUNT 1
ACOUNT 0
NSCOUNT 0
ARCOUNT 0
QUESTION SECTION:
Offset = 0x000c, RR count = 0
Name "(3)www(6)google(3)com(0)"
QTYPE A (1)
QCLASS 1
ANSWER SECTION:
empty
AUTHORITY SECTION:
empty
ADDITIONAL SECTION:
empty

20070111 10:19:50 133C PACKET UDP Rcv 204.88.5.26 fd65 Q [0001
D NOERROR] (3)www(6)google(3)com(0)
UDP question info at 007D8ED0
Socket = 484
Remote addr 204.88.5.26, port 1031
Time Query=153053, Queued=0, Expire=0
Buf length = 0x0500 (1280)
Msg length = 0x0020 (32)
Message:
XID 0xfd65
Flags 0x0100
QR 0 (QUESTION)
OPCODE 0 (QUERY)
AA 0
TC 0
RD 1
RA 0
Z 0
RCODE 0 (NOERROR)
QCOUNT 1
ACOUNT 0
NSCOUNT 0
ARCOUNT 0
QUESTION SECTION:
Offset = 0x000c, RR count = 0
Name "(3)www(6)google(3)com(0)"
QTYPE A (1)
QCLASS 1
ANSWER SECTION:
empty
AUTHORITY SECTION:
empty
ADDITIONAL SECTION:
empty

20070111 10:19:51 14E4 PACKET UDP Rcv 204.88.5.26 fd65 Q [0001
D NOERROR] (3)www(6)google(3)com(0)
UDP question info at 007D8450
Socket = 484
Remote addr 204.88.5.26, port 1031
Time Query=153054, Queued=0, Expire=0
Buf length = 0x0500 (1280)
Msg length = 0x0020 (32)
Message:
XID 0xfd65
Flags 0x0100
QR 0 (QUESTION)
OPCODE 0 (QUERY)
AA 0
TC 0
RD 1
RA 0
Z 0
RCODE 0 (NOERROR)
QCOUNT 1
ACOUNT 0
NSCOUNT 0
ARCOUNT 0
QUESTION SECTION:
Offset = 0x000c, RR count = 0
Name "(3)www(6)google(3)com(0)"
QTYPE A (1)
QCLASS 1
ANSWER SECTION:
empty
AUTHORITY SECTION:
empty
ADDITIONAL SECTION:
empty

20070111 10:19:53 1318 PACKET UDP Rcv 204.88.5.26 fd65 Q [0001
D NOERROR] (3)www(6)google(3)com(0)
UDP question info at 007D9950
Socket = 484
Remote addr 204.88.5.26, port 1031
Time Query=153056, Queued=0, Expire=0
Buf length = 0x0500 (1280)
Msg length = 0x0020 (32)
Message:
XID 0xfd65
Flags 0x0100
QR 0 (QUESTION)
OPCODE 0 (QUERY)
AA 0
TC 0
RD 1
RA 0
Z 0
RCODE 0 (NOERROR)
QCOUNT 1
ACOUNT 0
NSCOUNT 0
ARCOUNT 0
QUESTION SECTION:
Offset = 0x000c, RR count = 0
Name "(3)www(6)google(3)com(0)"
QTYPE A (1)
QCLASS 1
ANSWER SECTION:
empty
AUTHORITY SECTION:
empty
ADDITIONAL SECTION:
empty

20070111 10:19:54 4B0 PACKET UDP Snd 198.32.64.12 38a4 Q [0000
NOERROR] (3)www(6)google(3)com(0)
UDP question info at 007E7360
Socket = 500
Remote addr 198.32.64.12, port 53
Time Query=0, Queued=0, Expire=0
Buf length = 0x0500 (1280)
Msg length = 0x0020 (32)
Message:
XID 0x38a4
Flags 0x0000
QR 0 (QUESTION)
OPCODE 0 (QUERY)
AA 0
TC 0
RD 0
RA 0
Z 0
RCODE 0 (NOERROR)
QCOUNT 1
ACOUNT 0
NSCOUNT 0
ARCOUNT 0
QUESTION SECTION:
Offset = 0x000c, RR count = 0
Name "(3)www(6)google(3)com(0)"
QTYPE A (1)
QCLASS 1
ANSWER SECTION:
empty
AUTHORITY SECTION:
empty
ADDITIONAL SECTION:
empty

20070111 10:19:57 BA0 PACKET UDP Rcv 204.88.0.26 fd65 Q [0001
D NOERROR] (3)www(6)google(3)com(0)
UDP question info at 007E1910
Socket = 484
Remote addr 204.88.5.26, port 1031
Time Query=153060, Queued=0, Expire=0
Buf length = 0x0500 (1280)
Msg length = 0x0020 (32)
Message:
XID 0xfd65
Flags 0x0100
QR 0 (QUESTION)
OPCODE 0 (QUERY)
AA 0
TC 0
RD 1
RA 0
Z 0
RCODE 0 (NOERROR)
QCOUNT 1
ACOUNT 0
NSCOUNT 0
ARCOUNT 0
QUESTION SECTION:
Offset = 0x000c, RR count = 0
Name "(3)www(6)google(3)com(0)"
QTYPE A (1)
QCLASS 1
ANSWER SECTION:
empty
AUTHORITY SECTION:
empty
ADDITIONAL SECTION:
empty

20070111 10:19:58 4B0 PACKET UDP Snd 198.41.0.4 38a4 Q [0000
NOERROR] (3)www(6)google(3)com(0)
UDP question info at 007E7360
Socket = 500
Remote addr 198.41.0.4, port 53
Time Query=0, Queued=0, Expire=0
Buf length = 0x0500 (1280)
Msg length = 0x0020 (32)
Message:
XID 0x38a4
Flags 0x0000
QR 0 (QUESTION)
OPCODE 0 (QUERY)
AA 0
TC 0
RD 0
RA 0
Z 0
RCODE 0 (NOERROR)
QCOUNT 1
ACOUNT 0
NSCOUNT 0
ARCOUNT 0
QUESTION SECTION:
Offset = 0x000c, RR count = 0
Name "(3)www(6)google(3)com(0)"
QTYPE A (1)
QCLASS 1
ANSWER SECTION:
empty
AUTHORITY SECTION:
empty
ADDITIONAL SECTION:
empty

20070111 10:20:02 4B0 PACKET UDP Snd 202.12.27.33 38a4 Q [0000
NOERROR] (3)www(6)google(3)com(0)
UDP question info at 007E7360
Socket = 500
Remote addr 202.12.27.33, port 53
Time Query=0, Queued=0, Expire=0
Buf length = 0x0500 (1280)
Msg length = 0x0020 (32)
Message:
XID 0x38a4
Flags 0x0000
QR 0 (QUESTION)
OPCODE 0 (QUERY)
AA 0
TC 0
RD 0
RA 0
Z 0
RCODE 0 (NOERROR)
QCOUNT 1
ACOUNT 0
NSCOUNT 0
ARCOUNT 0
QUESTION SECTION:
Offset = 0x000c, RR count = 0
Name "(3)www(6)google(3)com(0)"
QTYPE A (1)
QCLASS 1
ANSWER SECTION:
empty
AUTHORITY SECTION:
empty
ADDITIONAL SECTION:
empty

20070111 10:20:02 4B0 PACKET UDP Snd 193.0.14.129 38a4 Q [0000
NOERROR] (3)www(6)google(3)com(0)
UDP question info at 007E7360
Socket = 500
Remote addr 193.0.14.129, port 53
Time Query=0, Queued=0, Expire=0
Buf length = 0x0500 (1280)
Msg length = 0x0020 (32)
Message:
XID 0x38a4
Flags 0x0000
QR 0 (QUESTION)
OPCODE 0 (QUERY)
AA 0
TC 0
RD 0
RA 0
Z 0
RCODE 0 (NOERROR)
QCOUNT 1
ACOUNT 0
NSCOUNT 0
ARCOUNT 0
QUESTION SECTION:
Offset = 0x000c, RR count = 0
Name "(3)www(6)google(3)com(0)"
QTYPE A (1)
QCLASS 1
ANSWER SECTION:
empty
AUTHORITY SECTION:
empty
ADDITIONAL SECTION:
empty

20070111 10:20:06 4B0 PACKET UDP Snd 204.88.5.26 fd65 R Q [8281
DR SERVFAIL] (3)www(6)google(3)com(0)
UDP response info at 007DED50
Socket = 484
Remote addr 204.88.0.26, port 1031
Time Query=153052, Queued=153066, Expire=153069
Buf length = 0x0500 (1280)
Msg length = 0x0020 (32)
Message:
XID 0xfd65
Flags 0x8182
QR 1 (RESPONSE)
OPCODE 0 (QUERY)
AA 0
TC 0
RD 1
RA 1
Z 0
RCODE 2 (SERVFAIL)
QCOUNT 1
ACOUNT 0
NSCOUNT 0
ARCOUNT 0
QUESTION SECTION:
Offset = 0x000c, RR count = 0
Name "(3)www(6)google(3)com(0)"
QTYPE A (1)
QCLASS 1
ANSWER SECTION:
empty
AUTHORITY SECTION:
empty
ADDITIONAL SECTION:
empty

> Double checked all the above. NSLOOKUP fails with ***Can't find server
> name for address 65.64.63.21: Timed out
> Server: UnKnown
> Address: 65.64.63.21
>

The above is NOT a failure of DNS when using NSLookup but a
(stupid) artifact of the way NSLookup first tries to resolve the IP
of the DNS SERVER back to its name -- even though the user never
asked it to do that. This always confuses DNS beginners.

The part you care about is the ACTUAL response or failure to respond
to the question you asked -- it skips a line after the above stuff and
then prints out the actual failure or sucessful resolution.

Redo the NSlookups and post the actual resulting text,
and post your UNEDITED "IPConfig /all" TEXT
here for the DNS server.


--
Herb Martin, MCSE MVP
www.LearnQuick.Com

Herb Martin wrote:
> > Double checked all the above. NSLOOKUP fails with ***Can't find server
> > name for address 65.64.63.21: Timed out
> > Server: UnKnown
> > Address: 65.64.63.21
> >
>
> The above is NOT a failure of DNS when using NSLookup but a
> (stupid) artifact of the way NSLookup first tries to resolve the IP
> of the DNS SERVER back to its name -- even though the user never
> asked it to do that. This always confuses DNS beginners.
>
> The part you care about is the ACTUAL response or failure to respond
> to the question you asked -- it skips a line after the above stuff and
> then prints out the actual failure or sucessful resolution.
>
> Redo the NSlookups and post the actual resulting text,
> and post your UNEDITED "IPConfig /all" TEXT
> here for the DNS server.
>
>
> --
> Herb Martin, MCSE MVP
> www.LearnQuick.Com
Microsoft Windows [Version 5.2.3790]
(C) Copyright 1985-2003 Microsoft Corp.

C:\Documents and Settings\Administrator>ipconfig /all

Windows IP Configuration

Host Name . . . . . . . . . . . . : SRV_PDC01
Primary Dns Suffix . . . . . . . : intranet.welbornclinic.com
Node Type . . . . . . . . . . . . : Hybrid
IP Routing Enabled. . . . . . . . : No
WINS Proxy Enabled. . . . . . . . : No
DNS Suffix Search List. . . . . . : intranet.welbornclinic.com
welbornclinic.com

Ethernet adapter Local Area Connection:

Connection-specific DNS Suffix . :
Description . . . . . . . . . . . : HP NC7782 Gigabit Server Adapter
#2
Physical Address. . . . . . . . . : 00-14-C2-C2-1E-EB
DHCP Enabled. . . . . . . . . . . : No
IP Address. . . . . . . . . . . . : 204.88.0.26
Subnet Mask . . . . . . . . . . . : 255.255.255.0
Default Gateway . . . . . . . . . : 204.88.0.50
DNS Servers . . . . . . . . . . . : 204.88.0.26
Primary WINS Server . . . . . . . : 204.88.0.26

Microsoft Windows [Version 5.2.3790]
(C) Copyright 1985-2003 Microsoft Corp.

C:\Documents and Settings\Administrator>ipconfig /all

Windows IP Configuration

Host Name . . . . . . . . . . . . : SRV_PDC01
Primary Dns Suffix . . . . . . . : intranet.welbornclinic.com
Node Type . . . . . . . . . . . . : Hybrid
IP Routing Enabled. . . . . . . . : No
WINS Proxy Enabled. . . . . . . . : No
DNS Suffix Search List. . . . . . : intranet.welbornclinic.com
welbornclinic.com

Ethernet adapter Local Area Connection:

Connection-specific DNS Suffix . :
Description . . . . . . . . . . . : HP NC7782 Gigabit Server Adapter
#2
Physical Address. . . . . . . . . : 00-14-C2-C2-1E-EB
DHCP Enabled. . . . . . . . . . . : No
IP Address. . . . . . . . . . . . : 204.88.0.26
Subnet Mask . . . . . . . . . . . : 255.255.255.0
Default Gateway . . . . . . . . . : 204.88.0.50
DNS Servers . . . . . . . . . . . : 204.88.0.26
Primary WINS Server . . . . . . . : 204.88.0.26

Microsoft Windows [Version 5.2.3790]
(C) Copyright 1985-2003 Microsoft Corp.

C:\Documents and Settings\Administrator>ipconfig /all

Windows IP Configuration

Host Name . . . . . . . . . . . . : SRV_PDC01
Primary Dns Suffix . . . . . . . : intranet.welbornclinic.com
Node Type . . . . . . . . . . . . : Hybrid
IP Routing Enabled. . . . . . . . : No
WINS Proxy Enabled. . . . . . . . : No
DNS Suffix Search List. . . . . . : intranet.welbornclinic.com
welbornclinic.com

Ethernet adapter Local Area Connection:

Connection-specific DNS Suffix . :
Description . . . . . . . . . . . : HP NC7782 Gigabit Server Adapter
#2
Physical Address. . . . . . . . . : 00-14-C2-C2-1E-EB
DHCP Enabled. . . . . . . . . . . : No
IP Address. . . . . . . . . . . . : 204.88.0.26
Subnet Mask . . . . . . . . . . . : 255.255.255.0
Default Gateway . . . . . . . . . : 204.88.0.50
DNS Servers . . . . . . . . . . . : 204.88.0.26
Primary WINS Server . . . . . . . : 204.88.0.26

Microsoft Windows [Version 5.2.3790]
(C) Copyright 1985-2003 Microsoft Corp.

C:\Documents and Settings\Administrator>ipconfig /all

Windows IP Configuration

Host Name . . . . . . . . . . . . : SRV_PDC01
Primary Dns Suffix . . . . . . . : intranet.welbornclinic.com
Node Type . . . . . . . . . . . . : Hybrid
IP Routing Enabled. . . . . . . . : No
WINS Proxy Enabled. . . . . . . . : No
DNS Suffix Search List. . . . . . : intranet.welbornclinic.com
welbornclinic.com

Ethernet adapter Local Area Connection:

Connection-specific DNS Suffix . :
Description . . . . . . . . . . . : HP NC7782 Gigabit Server Adapter
#2
Physical Address. . . . . . . . . : 00-14-C2-C2-1E-EB
DHCP Enabled. . . . . . . . . . . : No
IP Address. . . . . . . . . . . . : 204.88.0.26
Subnet Mask . . . . . . . . . . . : 255.255.255.0
Default Gateway . . . . . . . . . : 204.88.0.50
DNS Servers . . . . . . . . . . . : 204.88.0.26
Primary WINS Server . . . . . . . : 204.88.0.26

Microsoft Windows [Version 5.2.3790]
(C) Copyright 1985-2003 Microsoft Corp.

C:\Documents and Settings\Administrator>ipconfig /all

Windows IP Configuration

Host Name . . . . . . . . . . . . : SRV_PDC01
Primary Dns Suffix . . . . . . . : intranet.welbornclinic.com
Node Type . . . . . . . . . . . . : Hybrid
IP Routing Enabled. . . . . . . . : No
WINS Proxy Enabled. . . . . . . . : No
DNS Suffix Search List. . . . . . : intranet.welbornclinic.com
welbornclinic.com

Ethernet adapter Local Area Connection:

Connection-specific DNS Suffix . :
Description . . . . . . . . . . . : HP NC7782 Gigabit Server Adapter
#2
Physical Address. . . . . . . . . : 00-14-C2-C2-1E-EB
DHCP Enabled. . . . . . . . . . . : No
IP Address. . . . . . . . . . . . : 204.88.0.26
Subnet Mask . . . . . . . . . . . : 255.255.255.0
Default Gateway . . . . . . . . . : 204.88.0.50
DNS Servers . . . . . . . . . . . : 204.88.0.26
Primary WINS Server . . . . . . . : 204.88.0.26

Microsoft Windows [Version 5.2.3790]
(C) Copyright 1985-2003 Microsoft Corp.

C:\Documents and Settings\Administrator>ipconfig /all

Windows IP Configuration

Host Name . . . . . . . . . . . . : SRV_PDC01
Primary Dns Suffix . . . . . . . : intranet.welbornclinic.com
Node Type . . . . . . . . . . . . : Hybrid
IP Routing Enabled. . . . . . . . : No
WINS Proxy Enabled. . . . . . . . : No
DNS Suffix Search List. . . . . . : intranet.welbornclinic.com
welbornclinic.com

Ethernet adapter Local Area Connection:

Connection-specific DNS Suffix . :
Description . . . . . . . . . . . : HP NC7782 Gigabit Server Adapter
#2
Physical Address. . . . . . . . . : 00-14-C2-C2-1E-EB
DHCP Enabled. . . . . . . . . . . : No
IP Address. . . . . . . . . . . . : 204.88.0.26
Subnet Mask . . . . . . . . . . . : 255.255.255.0
Default Gateway . . . . . . . . . : 204.88.0.50
DNS Servers . . . . . . . . . . . : 204.88.0.26
Primary WINS Server . . . . . . . : 204.88.0.26

Microsoft Windows [Version 5.2.3790]
(C) Copyright 1985-2003 Microsoft Corp.

C:\Documents and Settings\Administrator>ipconfig /all

Windows IP Configuration

Host Name . . . . . . . . . . . . : SRV_PDC01
Primary Dns Suffix . . . . . . . : intranet.welbornclinic.com
Node Type . . . . . . . . . . . . : Hybrid
IP Routing Enabled. . . . . . . . : No
WINS Proxy Enabled. . . . . . . . : No
DNS Suffix Search List. . . . . . : intranet.welbornclinic.com
welbornclinic.com

Ethernet adapter Local Area Connection:

Connection-specific DNS Suffix . :
Description . . . . . . . . . . . : HP NC7782 Gigabit Server Adapter
#2
Physical Address. . . . . . . . . : 00-14-C2-C2-1E-EB
DHCP Enabled. . . . . . . . . . . : No
IP Address. . . . . . . . . . . . : 204.88.0.26
Subnet Mask . . . . . . . . . . . : 255.255.255.0
Default Gateway . . . . . . . . . : 204.88.0.50
DNS Servers . . . . . . . . . . . : 204.88.0.26
Primary WINS Server . . . . . . . : 204.88.0.26

Microsoft Windows [Version 5.2.3790]
(C) Copyright 1985-2003 Microsoft Corp.

C:\Documents and Settings\Administrator>ipconfig /all

Windows IP Configuration

Host Name . . . . . . . . . . . . : SRV_PDC01
Primary Dns Suffix . . . . . . . : intranet.welbornclinic.com
Node Type . . . . . . . . . . . . : Hybrid
IP Routing Enabled. . . . . . . . : No
WINS Proxy Enabled. . . . . . . . : No
DNS Suffix Search List. . . . . . : intranet.welbornclinic.com
welbornclinic.com

Ethernet adapter Local Area Connection:

Connection-specific DNS Suffix . :
Description . . . . . . . . . . . : HP NC7782 Gigabit Server Adapter
#2
Physical Address. . . . . . . . . : 00-14-C2-C2-1E-EB
DHCP Enabled. . . . . . . . . . . : No
IP Address. . . . . . . . . . . . : 204.88.0.26
Subnet Mask . . . . . . . . . . . : 255.255.255.0
Default Gateway . . . . . . . . . : 204.88.0.50
DNS Servers . . . . . . . . . . . : 204.88.0.26
Primary WINS Server . . . . . . . : 204.88.0.26

Microsoft Windows [Version 5.2.3790]
(C) Copyright 1985-2003 Microsoft Corp.

C:\Documents and Settings\Administrator>ipconfig /all

Windows IP Configuration

Host Name . . . . . . . . . . . . : SRV_PDC01
Primary Dns Suffix . . . . . . . : intranet.welbornclinic.com
Node Type . . . . . . . . . . . . : Hybrid
IP Routing Enabled. . . . . . . . : No
WINS Proxy Enabled. . . . . . . . : No
DNS Suffix Search List. . . . . . : intranet.welbornclinic.com
welbornclinic.com

Ethernet adapter Local Area Connection:

Connection-specific DNS Suffix . :
Description . . . . . . . . . . . : HP NC7782 Gigabit Server Adapter
#2
Physical Address. . . . . . . . . : 00-14-C2-C2-1E-EB
DHCP Enabled. . . . . . . . . . . : No
IP Address. . . . . . . . . . . . : 204.88.0.26
Subnet Mask . . . . . . . . . . . : 255.255.255.0
Default Gateway . . . . . . . . . : 204.88.0.50
DNS Servers . . . . . . . . . . . : 204.88.0.26
Primary WINS Server . . . . . . . : 204.88.0.26

Nslookup ends in:

DNS request timed out.
Timeout was 2 seconds.
DNS request timed out.
Timeout was 2 seconds.
*** Request to UnKnown timed-out.

> C:\Documents and Settings\Administrator>ipconfig /all
>
> Windows IP Configuration
>
> Host Name . . . . . . . . . . . . : SRV_PDC01
> Primary Dns Suffix . . . . . . . : intranet.welbornclinic.com
> Node Type . . . . . . . . . . . . : Hybrid
> IP Routing Enabled. . . . . . . . : No
> WINS Proxy Enabled. . . . . . . . : No
> DNS Suffix Search List. . . . . . : intranet.welbornclinic.com
> welbornclinic.com
>
> Ethernet adapter Local Area Connection:
>
> Connection-specific DNS Suffix . :
> Description . . . . . . . . . . . : HP NC7782 Gigabit Server Adapter
> #2
> Physical Address. . . . . . . . . : 00-14-C2-C2-1E-EB
> DHCP Enabled. . . . . . . . . . . : No
> IP Address. . . . . . . . . . . . : 204.88.0.26
> Subnet Mask . . . . . . . . . . . : 255.255.255.0
> Default Gateway . . . . . . . . . : 204.88.0.50
> DNS Servers . . . . . . . . . . . : 204.88.0.26
> Primary WINS Server . . . . . . . : 204.88.0.26
>
> Nslookup ends in:
>
> DNS request timed out.
> Timeout was 2 seconds.
> DNS request timed out.
> Timeout was 2 seconds.
> *** Request to UnKnown timed-out.

> Nslookup ends in:
>
> DNS request timed out.
> Timeout was 2 seconds.
> DNS request timed out.
> Timeout was 2 seconds.
> *** Request to UnKnown timed-out.

[I would really have preferred to see the entire output of the NSLookup
command -- among other things to ensure you typed it correctly but....]

Based on the above, the Name server is either not functioning OR
you have a firewall issue.

Are you running the NSLookup from the same machine (as the DNS
service)?

You should be doing these NSLookups first with the LOCAL IP
(of the same DNS server) specific and then with the ISP/Forwarder
specified. Using internal names to also prove that the local DNS
works differently for those than it does for the ones where it needs
to forward.

Check the DNS service to ensure it is running. Check (local) firewalls
to ensure they are not blocking this.

Prove the DNS request is working by doing (local) NSLookups against
the

> C:\Documents and Settings\Administrator>ipconfig /all
> Windows IP Configuration
>
> Host Name . . . . . . . . . . . . : SRV_PDC01
> Primary Dns Suffix . . . . . . . : intranet.welbornclinic.com
> Node Type . . . . . . . . . . . . : Hybrid
> IP Routing Enabled. . . . . . . . : No
> WINS Proxy Enabled. . . . . . . . : No
> DNS Suffix Search List. . . . . . : intranet.welbornclinic.com
> welbornclinic.com
>
> Ethernet adapter Local Area Connection:
>
> Connection-specific DNS Suffix . :
> Description . . . . . . . . . . . : HP NC7782 Gigabit Server Adapter
> #2
> Physical Address. . . . . . . . . : 00-14-C2-C2-1E-EB
> DHCP Enabled. . . . . . . . . . . : No
> IP Address. . . . . . . . . . . . : 204.88.0.26
> Subnet Mask . . . . . . . . . . . : 255.255.255.0
> Default Gateway . . . . . . . . . : 204.88.0.50
> DNS Servers . . . . . . . . . . . : 204.88.0.26
> Primary WINS Server . . . . . . . : 204.88.0.26
>
> Microsoft Windows [Version 5.2.3790]
> (C) Copyright 1985-2003 Microsoft Corp.
>
> C:\Documents and Settings\Administrator>ipconfig /all
>
> Windows IP Configuration
>
> Host Name . . . . . . . . . . . . : SRV_PDC01
> Primary Dns Suffix . . . . . . . : intranet.welbornclinic.com
> Node Type . . . . . . . . . . . . : Hybrid
> IP Routing Enabled. . . . . . . . : No
> WINS Proxy Enabled. . . . . . . . : No
> DNS Suffix Search List. . . . . . : intranet.welbornclinic.com
> welbornclinic.com
>
> Ethernet adapter Local Area Connection:
>
> Connection-specific DNS Suffix . :
> Description . . . . . . . . . . . : HP NC7782 Gigabit Server Adapter
> #2
> Physical Address. . . . . . . . . : 00-14-C2-C2-1E-EB
> DHCP Enabled. . . . . . . . . . . : No
> IP Address. . . . . . . . . . . . : 204.88.0.26
> Subnet Mask . . . . . . . . . . . : 255.255.255.0
> Default Gateway . . . . . . . . . : 204.88.0.50
> DNS Servers . . . . . . . . . . . : 204.88.0.26
> Primary WINS Server . . . . . . . : 204.88.0.26
>
> Microsoft Windows [Version 5.2.3790]
> (C) Copyright 1985-2003 Microsoft Corp.
>
> C:\Documents and Settings\Administrator>ipconfig /all
>
> Windows IP Configuration
>
> Host Name . . . . . . . . . . . . : SRV_PDC01
> Primary Dns Suffix . . . . . . . : intranet.welbornclinic.com
> Node Type . . . . . . . . . . . . : Hybrid
> IP Routing Enabled. . . . . . . . : No
> WINS Proxy Enabled. . . . . . . . : No
> DNS Suffix Search List. . . . . . : intranet.welbornclinic.com
> welbornclinic.com
>
> Ethernet adapter Local Area Connection:
>
> Connection-specific DNS Suffix . :
> Description . . . . . . . . . . . : HP NC7782 Gigabit Server Adapter
> #2
> Physical Address. . . . . . . . . : 00-14-C2-C2-1E-EB
> DHCP Enabled. . . . . . . . . . . : No
> IP Address. . . . . . . . . . . . : 204.88.0.26
> Subnet Mask . . . . . . . . . . . : 255.255.255.0
> Default Gateway . . . . . . . . . : 204.88.0.50
> DNS Servers . . . . . . . . . . . : 204.88.0.26
> Primary WINS Server . . . . . . . : 204.88.0.26
>
> Microsoft Windows [Version 5.2.3790]
> (C) Copyright 1985-2003 Microsoft Corp.
>
> C:\Documents and Settings\Administrator>ipconfig /all
>
> Windows IP Configuration
>
> Host Name . . . . . . . . . . . . : SRV_PDC01
> Primary Dns Suffix . . . . . . . : intranet.welbornclinic.com
> Node Type . . . . . . . . . . . . : Hybrid
> IP Routing Enabled. . . . . . . . : No
> WINS Proxy Enabled. . . . . . . . : No
> DNS Suffix Search List. . . . . . : intranet.welbornclinic.com
> welbornclinic.com
>
> Ethernet adapter Local Area Connection:
>
> Connection-specific DNS Suffix . :
> Description . . . . . . . . . . . : HP NC7782 Gigabit Server Adapter
> #2
> Physical Address. . . . . . . . . : 00-14-C2-C2-1E-EB
> DHCP Enabled. . . . . . . . . . . : No
> IP Address. . . . . . . . . . . . : 204.88.0.26
> Subnet Mask . . . . . . . . . . . : 255.255.255.0
> Default Gateway . . . . . . . . . : 204.88.0.50
> DNS Servers . . . . . . . . . . . : 204.88.0.26
> Primary WINS Server . . . . . . . : 204.88.0.26
>
> Microsoft Windows [Version 5.2.3790]
> (C) Copyright 1985-2003 Microsoft Corp.
>
> C:\Documents and Settings\Administrator>ipconfig /all
>
> Windows IP Configuration
>
> Host Name . . . . . . . . . . . . : SRV_PDC01
> Primary Dns Suffix . . . . . . . : intranet.welbornclinic.com
> Node Type . . . . . . . . . . . . : Hybrid
> IP Routing Enabled. . . . . . . . : No
> WINS Proxy Enabled. . . . . . . . : No
> DNS Suffix Search List. . . . . . : intranet.welbornclinic.com
> welbornclinic.com
>
> Ethernet adapter Local Area Connection:
>
> Connection-specific DNS Suffix . :
> Description . . . . . . . . . . . : HP NC7782 Gigabit Server Adapter
> #2
> Physical Address. . . . . . . . . : 00-14-C2-C2-1E-EB
> DHCP Enabled. . . . . . . . . . . : No
> IP Address. . . . . . . . . . . . : 204.88.0.26
> Subnet Mask . . . . . . . . . . . : 255.255.255.0
> Default Gateway . . . . . . . . . : 204.88.0.50
> DNS Servers . . . . . . . . . . . : 204.88.0.26
> Primary WINS Server . . . . . . . : 204.88.0.26
>
> Microsoft Windows [Version 5.2.3790]
> (C) Copyright 1985-2003 Microsoft Corp.
>
> C:\Documents and Settings\Administrator>ipconfig /all
>
> Windows IP Configuration
>
> Host Name . . . . . . . . . . . . : SRV_PDC01
> Primary Dns Suffix . . . . . . . : intranet.welbornclinic.com
> Node Type . . . . . . . . . . . . : Hybrid
> IP Routing Enabled. . . . . . . . : No
> WINS Proxy Enabled. . . . . . . . : No
> DNS Suffix Search List. . . . . . : intranet.welbornclinic.com
> welbornclinic.com
>
> Ethernet adapter Local Area Connection:
>
> Connection-specific DNS Suffix . :
> Description . . . . . . . . . . . : HP NC7782 Gigabit Server Adapter
> #2
> Physical Address. . . . . . . . . : 00-14-C2-C2-1E-EB
> DHCP Enabled. . . . . . . . . . . : No
> IP Address. . . . . . . . . . . . : 204.88.0.26
> Subnet Mask . . . . . . . . . . . : 255.255.255.0
> Default Gateway . . . . . . . . . : 204.88.0.50
> DNS Servers . . . . . . . . . . . : 204.88.0.26
> Primary WINS Server . . . . . . . : 204.88.0.26
>
> Microsoft Windows [Version 5.2.3790]
> (C) Copyright 1985-2003 Microsoft Corp.
>
> C:\Documents and Settings\Administrator>ipconfig /all
>
> Windows IP Configuration
>
> Host Name . . . . . . . . . . . . : SRV_PDC01
> Primary Dns Suffix . . . . . . . : intranet.welbornclinic.com
> Node Type . . . . . . . . . . . . : Hybrid
> IP Routing Enabled. . . . . . . . : No
> WINS Proxy Enabled. . . . . . . . : No
> DNS Suffix Search List. . . . . . : intranet.welbornclinic.com
> welbornclinic.com
>
> Ethernet adapter Local Area Connection:
>
> Connection-specific DNS Suffix . :
> Description . . . . . . . . . . . : HP NC7782 Gigabit Server Adapter
> #2
> Physical Address. . . . . . . . . : 00-14-C2-C2-1E-EB
> DHCP Enabled. . . . . . . . . . . : No
> IP Address. . . . . . . . . . . . : 204.88.0.26
> Subnet Mask . . . . . . . . . . . : 255.255.255.0
> Default Gateway . . . . . . . . . : 204.88.0.50
> DNS Servers . . . . . . . . . . . : 204.88.0.26
> Primary WINS Server . . . . . . . : 204.88.0.26
>
> Microsoft Windows [Version 5.2.3790]
> (C) Copyright 1985-2003 Microsoft Corp.
>
> C:\Documents and Settings\Administrator>ipconfig /all
>
> Windows IP Configuration
>
> Host Name . . . . . . . . . . . . : SRV_PDC01
> Primary Dns Suffix . . . . . . . : intranet.welbornclinic.com
> Node Type . . . . . . . . . . . . : Hybrid
> IP Routing Enabled. . . . . . . . : No
> WINS Proxy Enabled. . . . . . . . : No
> DNS Suffix Search List. . . . . . : intranet.welbornclinic.com
> welbornclinic.com
>
> Ethernet adapter Local Area Connection:
>
> Connection-specific DNS Suffix . :
> Description . . . . . . . . . . . : HP NC7782 Gigabit Server Adapter
> #2
> Physical Address. . . . . . . . . : 00-14-C2-C2-1E-EB
> DHCP Enabled. . . . . . . . . . . : No
> IP Address. . . . . . . . . . . . : 204.88.0.26
> Subnet Mask . . . . . . . . . . . : 255.255.255.0
> Default Gateway . . . . . . . . . : 204.88.0.50
> DNS Servers . . . . . . . . . . . : 204.88.0.26
> Primary WINS Server . . . . . . . : 204.88.0.26
>
> Microsoft Windows [Version 5.2.3790]
> (C) Copyright 1985-2003 Microsoft Corp.
>
> C:\Documents and Settings\Administrator>ipconfig /all
>
> Windows IP Configuration
>
> Host Name . . . . . . . . . . . . : SRV_PDC01
> Primary Dns Suffix . . . . . . . : intranet.welbornclinic.com
> Node Type . . . . . . . . . . . . : Hybrid
> IP Routing Enabled. . . . . . . . : No
> WINS Proxy Enabled. . . . . . . . : No
> DNS Suffix Search List. . . . . . : intranet.welbornclinic.com
> welbornclinic.com
>
> Ethernet adapter Local Area Connection:
>
> Connection-specific DNS Suffix . :
> Description . . . . . . . . . . . : HP NC7782 Gigabit Server Adapter
> #2
> Physical Address. . . . . . . . . : 00-14-C2-C2-1E-EB
> DHCP Enabled. . . . . . . . . . . : No
> IP Address. . . . . . . . . . . . : 204.88.0.26
> Subnet Mask . . . . . . . . . . . : 255.255.255.0
> Default Gateway . . . . . . . . . : 204.88.0.50
> DNS Servers . . . . . . . . . . . : 204.88.0.26
> Primary WINS Server . . . . . . . : 204.88.0.26
>
> Nslookup ends in:
>
> DNS request timed out.
> Timeout was 2 seconds.
> DNS request timed out.
> Timeout was 2 seconds.
> *** Request to UnKnown timed-out.
>