Security Incidents mailing list archives

Re: strange DNS behavior over the last 2 days


From: jacob () excaliburfilms com (Jacob)
Date: Fri, 28 Mar 2003 15:40:36 -0800

Could be a bad cache file. I had this type of problem on NT4. I had to stop the DNS service, copy a new cache file over from the backup or template directory under \winnt\system32\dns, restart the DNS service.

On 2000, you can right click and clear cache.

I am on 2000 now, so I am not quite sure where that cache file is for NT4.

Jacob

At 01:06 PM 3/27/2003 -0500, you wrote:
For some odd reason, periodically our clients will visit a site, only to have a blank page appear as if the site loaded.

Nslookup resolves the correct IP address, but ping returns 64.251.66.2 for every address that has this problem. There are NO hosts files on these machines and regardless of which DNS server we point them to, the same problem occurs.

The problem occurs intermittently as well, which makes it even harder to pin down. Some sites previously affected will be accessible and new sites not affected suddenly have the same problem - but they eventually clear up in just about 10 minutes.

Very strange. Has anyone heard or seen this before on a network running windows nt 4 DNS server with nt/2000 clients?







_________________________________________________________________
MSN 8 with e-mail virus protection service: 2 months FREE*
http://join.msn.com/?page=features/virus


----------------------------------------------------------------------------
Powerful Anti-Spam Management and More...
SurfControl E-mail Filter puts the brakes on spam,
viruses and malicious code. Safeguard your business
critical communications. Download a free 30-day trial:
http://www.surfcontrol.com/go/zsfihl1


----------------------------------------------------------------------------
Powerful Anti-Spam Management and More...
SurfControl E-mail Filter puts the brakes on spam,
viruses and malicious code. Safeguard your business
critical communications. Download a free 30-day trial:
http://www.surfcontrol.com/go/zsfihl1


Current thread: