Take the 2-minute tour ×
Super User is a question and answer site for computer enthusiasts and power users. It's 100% free, no registration required.

Ok, so here's the setup. Laptop is connected to our company VPN (Juniper Network Connect 7.2.0). There are two DNS Search suffix's (domain1.com, domain2.local). From that laptop, while connected, nslookup polls the correct DNS server, returns the right IP. Pinging the IP works fine. Pinging the FQDN works fine. Pinging the unqualified domain name appears to be both using the hostname.domain.com suffix (even though that doesn't exist), and appears to be using the results from the local DNS server rather than the VPN DNS server.

More detail:

c:\> nslookup hostname
Server: hostname.domain2.local
Address: 10.0.0.10

Non-authoritative answer:
Name: hostname.domain2.local
Address: 10.0.0.10

c:\> nslookup hostname.domain2.local
Server: hostname.domain2.local
Address: 10.0.0.10

Non-authoritative answer:
Name: hostname.domain2.local
Address: 10.0.0.10

C:\> ping hostname

Pinging hostname.domain1.com [EXTERNAL/WRONG_IP] with 32 bytes of data:
Request timed out.
Request timed out.
Request timed out.
Request timed out.

Ping statistics for EXTERNAL/WRONG_IP:
Packets: Sent = 4, Received = 0, Lost = 4 (100% loss),

C:\> ping hostname.domain2.local

Pinging hostname.domain2.local [10.0.0.10] with 32 bytes of data:
Reply from 10.0.0.10: bytes=32 time=50ms TTL=128
Reply from 10.0.0.10: bytes=32 time=50ms TTL=128
Reply from 10.0.0.10: bytes=32 time=47ms TTL=128
Reply from 10.0.0.10: bytes=32 time=50ms TTL=128

Ping statistics for 10.0.0.10:
Packets: Sent = 4, Received = 4, Lost = 0 (0% loss),
Approximate round trip times in milli-seconds:
Minimum = 47ms, Maximum = 50ms, Average = 49ms

So here's what I've tried so far:

  1. ipconfig /flushdns
  2. netsh int ip reset all
  3. Verified that the network adapters are in the right priority order in the advanced settings
  4. Verified that the TCP/IP routes are correct
  5. Verified that the hostname isn't in the hosts file.

So... does anyone know why it still seems to be using the wrong DNS server?

share|improve this question
    
Have you checked if a static route is configured? What do the A records look like? Take a look at the packets and figure out what server is resolving for the 'ping hostname'. You said VPN DNS, are you on a VPN? Are you split tunneling? –  Tanner Jul 23 '12 at 19:01
    
Please clarify, are you saying that the name hostname.domain1.com doesn't exist? What order do the suffixes appear in the DNS suffix search list (ipconfig /all)? –  Harry Johnston Jul 24 '12 at 0:22
    
Is the hostname in question special in any way? For example, is it the NetBIOS name of the client, the domain, or perhaps one of the domain controllers? –  Harry Johnston Jul 24 '12 at 0:24
    
@HarryJohnston, the hostname in question is one of the domain controllers for domain2. hostname.domain1.com doesn't exist, the IP it returns is the IP of the website for domain1.com. In ipconfig /all the DNS suffix search list is domain1, domain2. The laptop in question is a member of domain1, but is VPN'd into domain2, which is a trusted domain. –  FlyinButrs Jul 24 '12 at 18:49
    
@r.tanner.f - No static routes, and yes, the laptop is connected to the VPN. I believe it's a split tunnel, but I'll check and get back to you. I haven't done a packet analysis yet, I'm trying to diagnose a problem on a user's machine remotely, so getting time to work on it has been tricky. –  FlyinButrs Jul 24 '12 at 18:51

Your Answer

 
discard

By posting your answer, you agree to the privacy policy and terms of service.

Browse other questions tagged or ask your own question.