nslookup can't but browser can !

[Kevin Darcy]

1. Does your box use its own hints file, or is it forwarding to your ISP's
nameserver for Internet names?
2. Is your box running BIND?
3. It seems unlikely that "unknown host" would ever be returned legitimately for
www.yahoo.com. Try setting debug in nslookup, or, if there are better
DNS lookup/troubleshooting tools on NT than nslookup (which is to say,
ANYTHING ELSE), try using them instead. What's the *real* response (RCODE and
section counts)?



- Kevin
Prashant Ranade wrote:

> hello,
> thanks for taking so much interest
> the setup is as follows :
> the internal network has 192.168.x.x IPs with an NT DNS which has many
> entries in its domain. we have a cisco router with access lists and NAT
> running on it and converting all our internal addresses to the registered
> addresses before they leave the box, and everything is working fine. we are
> able to browse, send mails, receive mails...
> now on this nt box in its DNS tab in network protocol we have a IP address of
> our ISPs nameserver. if I run nslookup on this box and point it to itself by
> saying "server ntbox" (assuming ntbox the name of this nt machine which is
> running DNS) and try to resolve www.yahoo.com I get an answer which I know is
> from its cache.
> so I then pointed the nslookup to the ISPs nameserver for the same query
> expecting that it will give an non-authoritative answer but it returned
> saying "unknown host"
> if the ISPs dns dosn't know where www.yahoo.com is then where is my dns
> getting the resolution from(other than cache)...
> this confused me totally... all my theries about DNS and browsing have beed
> proved wrong...
> I did check in browsers preference, advanced, proxies... and there the radio
> button for "direct connection to internet" is checked.
> so my worry is if sometime the cache of this NT domain nameserver is wiped
> out and if my ISPs nameserver is not able to resolve www.yahoo.com then the
> whole company will not be able to resolve anything.
> fyi : I checked with the ISP and made it sure that the nameserver address
> which we are using is indeed the name server.
>
> any help in this matter will be appreciated.
> TIA
> Prashant
>
> Joseph S D Yao wrote:
>
> > On Tue, Aug 22, 2000 at 05:26:28PM -0700, Prashant Ranade wrote:
> > > ok..
> > > let me explain somethings first I think my post was not very clear.
> > > I don't have a proxy server at all. we are using NAT so that the
> > > machines can go out on there on and get the content from the web sites.
> > > so now, without a proxy if nslookup can't resolve the name where the
> > > browser is getting the IP address from
> > > I was haiving a cache for some addresses in the NT DNS. but I tried
> > > browsing the site whos IP address was not there in the cache, I could
> > > browse the site and the record got added to the cache
> > > this is what confused me the most !
> > >
> > > TIA
> > > Prashant
> >
> > How are you using NAT without a proxy?
> >
> > Open up Navigator, go to Edit->Preferences->Advanced->Proxies.  Tell me
> > what you see.  If manual, press View... and tell me what you see in all
> > of the blanks.
> >
> > --
> > Joe Yao                         jsdy at cospo.osis.gov - Joseph S. D. Yao
> > COSPO/OSIS Computer Support                                     EMT-B
> > -----------------------------------------------------------------------
> > This message is not an official statement of COSPO policies.