DNS external domain resolving name problem

Question

question

KrzysztofGliniecki-3754 asked Mar 18, '22 GaryReynolds answered Mar 20, '22

DNS external domain resolving name problem

Hello everyone
I have strange problem with DNS serwer on Win2019 with AD, IP6-off
in general all working well, but dont resolving just one domain (anydesk.com)
I try flush cache, change forwarders, main servers, etc
I dont have any idea whats wrong. it look like just this name don't send out...

look please, nslookup, debug on:

> google.com
Server: serwer.xxx_domain.local
Address: 10.11.12.99

Got answer:
HEADER:
opcode = QUERY, id = 30, rcode = NXDOMAIN
header flags: response, auth. answer, want recursion, recursion avail.
questions = 1, answers = 0, authority records = 1, additional = 0

 QUESTIONS:
     google.com.xxx_domain.local, type = A, class = IN
 AUTHORITY RECORDS:
 ->  xxx_domain.local
     ttl = 3600 (1 hour)
     primary name server = serwer.xxx_domain.local
     responsible mail addr = hostmaster.xxx_domain.local
     serial  = 970
     refresh = 60 (1 min)
     retry   = 60 (1 min)
     expire  = 86400 (1 day)
     default TTL = 3600 (1 hour)

Got answer:
HEADER:
opcode = QUERY, id = 31, rcode = NXDOMAIN
header flags: response, auth. answer, want recursion, recursion avail.
questions = 1, answers = 0, authority records = 1, additional = 0

 QUESTIONS:
     google.com.xxx_domain.local, type = AAAA, class = IN
 AUTHORITY RECORDS:
 ->  xxx_domain.local
     ttl = 3600 (1 hour)
     primary name server = serwer.xxx_domain.local
     responsible mail addr = hostmaster.xxx_domain.local
     serial  = 970
     refresh = 60 (1 min)
     retry   = 60 (1 min)
     expire  = 86400 (1 day)
     default TTL = 3600 (1 hour)

Got answer:
HEADER:
opcode = QUERY, id = 32, rcode = NOERROR
header flags: response, want recursion, recursion avail.
questions = 1, answers = 1, authority records = 0, additional = 0

 QUESTIONS:
     google.com, type = A, class = IN
 ANSWERS:
 ->  google.com
     internet address = 142.250.75.14
     ttl = 300 (5 mins)

Non-authoritative answer:

Got answer:
HEADER:
opcode = QUERY, id = 33, rcode = NOERROR
header flags: response, want recursion, recursion avail.
questions = 1, answers = 1, authority records = 0, additional = 0

 QUESTIONS:
     google.com, type = AAAA, class = IN
 ANSWERS:
 ->  google.com
     AAAA IPv6 address = 2a00:1450:401b:801::200e
     ttl = 300 (5 mins)

Name: google.com
Addresses: 2a00:1450:401b:801::200e
142.250.75.14

> anydesk.com
Server: serwer.xxx_domain.local
Address: 10.11.12.99

Got answer:
HEADER:
opcode = QUERY, id = 34, rcode = NXDOMAIN
header flags: response, auth. answer, want recursion, recursion avail.
questions = 1, answers = 0, authority records = 1, additional = 0

 QUESTIONS:
     anydesk.com.xxx_domain.local, type = A, class = IN
 AUTHORITY RECORDS:
 ->  xxx_domain.local
     ttl = 3600 (1 hour)
     primary name server = serwer.xxx_domain.local
     responsible mail addr = hostmaster.xxx_domain.local
     serial  = 970
     refresh = 60 (1 min)
     retry   = 60 (1 min)
     expire  = 86400 (1 day)
     default TTL = 3600 (1 hour)

Got answer:
HEADER:
opcode = QUERY, id = 35, rcode = NXDOMAIN
header flags: response, auth. answer, want recursion, recursion avail.
questions = 1, answers = 0, authority records = 1, additional = 0

 QUESTIONS:
     anydesk.com.xxx_domain.local, type = AAAA, class = IN
 AUTHORITY RECORDS:
 ->  xxx_domain.local
     ttl = 3600 (1 hour)
     primary name server = serwer.xxx_domain.local
     responsible mail addr = hostmaster.xxx_domain.local
     serial  = 970
     refresh = 60 (1 min)
     retry   = 60 (1 min)
     expire  = 86400 (1 day)
     default TTL = 3600 (1 hour)

DNS request timed out.
timeout was 2 seconds.
timeout (2 secs)
DNS request timed out.
timeout was 2 seconds.
timeout (2 secs)
*** Request to serwer.xxx_domain.local timed-out

windows-server-2019 windows-dhcp-dns

5 |1600 characters needed characters left characters exceeded

Attachments: Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.

Answer 1 · 2022-03-18T11:44:43.757Z

Thameur-BOURBITA answered Mar 18, '22

Hi,

Did you try create a conditional forwarder for impacted DNS zone anydesk.com to specify the correct forwarder for this zone.
Check if the network flow are already opened between local DNS server and the DNS forwarder.

Please don't forget to mark helpful reply as answer

5 |1600 characters needed characters left characters exceeded

Attachments: Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.

Answer 2 · 2022-03-18T14:20:32.387Z

KrzysztofGliniecki-3754 answered Mar 18, '22 KrzysztofGliniecki-3754 edited Mar 18, '22

Every other name is translate to adres IP corectly, but this one don't. 2 weeks ago it worked well.
Every computer with other dns server (eg. 8.8.8.8) in this network find anydesk.com without problem.

Every other domain names without problems, instead anydesk.com:

nslookup:

> cnn.com
Server: serwer.xxx_domain.local
Address: 10.11.12.99

Non-authoritative answer:
Name: cnn.com
Addresses: 2a04:4e42:400::323
2a04:4e42::323
2a04:4e42:600::323
2a04:4e42:200::323
151.101.1.67
151.101.129.67
151.101.65.67
151.101.193.67

> yahoo.com
Server: serwer.xxx_domain.local
Address: 10.11.12.99

Non-authoritative answer:
Name: yahoo.com
Addresses: 2001:4998:24:120d::1:1
2001:4998:124:1507::f001
2001:4998:44:3507::8001
2001:4998:124:1507::f000
2001:4998:24:120d::1:0
2001:4998:44:3507::8000
74.6.231.20
74.6.143.25
98.137.11.163
98.137.11.164
74.6.143.26
74.6.231.21

> anydesk.com
Server: serwer.xxx_domain.local
Address: 10.11.12.99

DNS request timed out.
timeout was 2 seconds.
DNS request timed out.
timeout was 2 seconds.
*** Request to serwer.xxx_domain.local timed-out

image.png (22.0 KiB)

5 |1600 characters needed characters left characters exceeded

Attachments: Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.

Answer 3 · 2022-03-20T20:18:40.187Z

GaryReynolds answered Mar 20, '22

Hi,

If you do the query against 8.8.4.4 or 1.1.1.1 do you get the issue.

Also when executing the query in nslookup, add a full stop the end of the name this will stop nslookup doing a query with dns prefix first i.e. Anydesk.com.

Another possible issue is that for some reason the upstream server is taking longer to respond and nslookup is timing out before the server responds, you can increase the timeout by using set timeout=10 and see if get a result.

Gary

5 |1600 characters needed characters left characters exceeded

Attachments: Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.

question