DNS
 
Forums: » Register « |  User CP |  Games |  Calendar |  Members |  FAQs |  Sitemap |  Support | 
User Name:
Password:
Remember me
Go Back   Dev Shed ForumsSystem AdministrationDNS

Reply
Add This Thread To:
  Del.icio.us   Digg   Google   Spurl   Blink   Furl   Simpy   Y! MyWeb 
Thread Tools Search this Thread Rate Thread Display Modes
 
Unread Dev Shed Forums Sponsor:
  #1  
Old June 24th, 2004, 05:31 AM
bitonw bitonw is offline
Registered User
Dev Shed Newbie (0 - 499 posts)
 
Join Date: Jun 2004
Location: Belgium
Posts: 4 bitonw User rank is Just a Lowly Private (1 - 20 Reputation Level) 
Time spent in forums: < 1 sec
Reputation Power: 0
Send a message via Yahoo to bitonw
Strange DNS resolve of external domain.

Dear all,

Since some time we are getting a lot of German spam trough our MS Exchange 2003 server. Those messages are from some existing domains. Spam is not the question.

If I check those domains with nslookup from my laptop I got the out as shown in the attachment. This is not with other external domains. nslookup will just give the correct IP number for those.

Now my question, Why this result?

MS DNS on MS Windows Server 2003 with all the latest pathes installed. Those 2 DNS servers are running AD integrated. Only secure updates. PIX 501 Firewall conencted to SDSL for Internet.

Added: the output of the attachment is the same if done on an server who is using the DNS server of the ISP.

Cheers,
Biton
Attached Files
File Type: txt nslookup.txt (609 Bytes, 247 views)

Reply With Quote
  #2  
Old June 24th, 2004, 09:42 AM
SilentRage's Avatar
SilentRage SilentRage is offline
DNS/BIND Guru
Dev Shed Specialist (4000 - 4499 posts)
 
Join Date: Jun 2003
Location: OH, USA
Posts: 4,193 SilentRage User rank is Second Lieutenant (5000 - 10000 Reputation Level)SilentRage User rank is Second Lieutenant (5000 - 10000 Reputation Level)SilentRage User rank is Second Lieutenant (5000 - 10000 Reputation Level)SilentRage User rank is Second Lieutenant (5000 - 10000 Reputation Level)SilentRage User rank is Second Lieutenant (5000 - 10000 Reputation Level)SilentRage User rank is Second Lieutenant (5000 - 10000 Reputation Level)SilentRage User rank is Second Lieutenant (5000 - 10000 Reputation Level) 
Time spent in forums: 1 Week 5 Days 14 h 35 m 27 sec
Reputation Power: 77
The domain "tvwbad01.tvwbdom.be" does not have an IP address. It does not exist. If you recieved mail from that domain, then the DNS for tvwbdom.be is incorrectly setup, or "tvwbad01.tvwbdom.be" is an internal domain on another network.

Spam blocking mail servers that use RDNS techniques may refuse mail sent from "tvwbad01.tvwbdom.be".
__________________
Send me a private message if you would like me to setup your DNS for you for a price of your choosing. This is the preferred method if your DNS needs to be fixed/setup fast and you don't have the time to bounce messages back and forth on a forum. Also, check out these links:

Whois Direct | DNS Crawler | NS Trace | Compare Free DNS Hosts

Reply With Quote
  #3  
Old June 26th, 2004, 02:53 PM
bitonw bitonw is offline
Registered User
Dev Shed Newbie (0 - 499 posts)
 
Join Date: Jun 2004
Location: Belgium
Posts: 4 bitonw User rank is Just a Lowly Private (1 - 20 Reputation Level) 
Time spent in forums: < 1 sec
Reputation Power: 0
Send a message via Yahoo to bitonw
ok,

will explain. tvwbdom.be is an internal domain not publisched on the internet. our mail domain is thevisionweb.be. we don't receive any mail from the domain tvwbdom.be.

the domain name could be better something like tvwbdom.local but this setup is made before my time at this company.

cheers,
biton

Reply With Quote
  #4  
Old June 26th, 2004, 07:34 PM
SilentRage's Avatar
SilentRage SilentRage is offline
DNS/BIND Guru
Dev Shed Specialist (4000 - 4499 posts)
 
Join Date: Jun 2003
Location: OH, USA
Posts: 4,193 SilentRage User rank is Second Lieutenant (5000 - 10000 Reputation Level)SilentRage User rank is Second Lieutenant (5000 - 10000 Reputation Level)SilentRage User rank is Second Lieutenant (5000 - 10000 Reputation Level)SilentRage User rank is Second Lieutenant (5000 - 10000 Reputation Level)SilentRage User rank is Second Lieutenant (5000 - 10000 Reputation Level)SilentRage User rank is Second Lieutenant (5000 - 10000 Reputation Level)SilentRage User rank is Second Lieutenant (5000 - 10000 Reputation Level) 
Time spent in forums: 1 Week 5 Days 14 h 35 m 27 sec
Reputation Power: 77
ok then I'm very confused. You said "Strange DNS resolve of external domain", but I don't see any external domains. I don't know what they are resolving to that is strange. I don't know the problem.

Reply With Quote
  #5  
Old June 28th, 2004, 02:34 PM
bitonw bitonw is offline
Registered User
Dev Shed Newbie (0 - 499 posts)
 
Join Date: Jun 2004
Location: Belgium
Posts: 4 bitonw User rank is Just a Lowly Private (1 - 20 Reputation Level) 
Time spent in forums: < 1 sec
Reputation Power: 0
Send a message via Yahoo to bitonw
Sorry, that you are confused as I find it difficult to explain. May be this will help you to understand me.

Cheers,
Biton
Attached Files
File Type: txt nslookup02.txt (258 Bytes, 255 views)

Reply With Quote
  #6  
Old June 28th, 2004, 02:47 PM
SilentRage's Avatar
SilentRage SilentRage is offline
DNS/BIND Guru
Dev Shed Specialist (4000 - 4499 posts)
 
Join Date: Jun 2003
Location: OH, USA
Posts: 4,193 SilentRage User rank is Second Lieutenant (5000 - 10000 Reputation Level)SilentRage User rank is Second Lieutenant (5000 - 10000 Reputation Level)SilentRage User rank is Second Lieutenant (5000 - 10000 Reputation Level)SilentRage User rank is Second Lieutenant (5000 - 10000 Reputation Level)SilentRage User rank is Second Lieutenant (5000 - 10000 Reputation Level)SilentRage User rank is Second Lieutenant (5000 - 10000 Reputation Level)SilentRage User rank is Second Lieutenant (5000 - 10000 Reputation Level) 
Time spent in forums: 1 Week 5 Days 14 h 35 m 27 sec
Reputation Power: 77
nslookup ingenial.be

If your problem is that you can't resolve that domain, well, I can't either. It's because somebody didn't create an 'A' record for the root ingenial.be domain.

Reply With Quote
  #7  
Old June 29th, 2004, 09:54 AM
bitonw bitonw is offline
Registered User
Dev Shed Newbie (0 - 499 posts)
 
Join Date: Jun 2004
Location: Belgium
Posts: 4 bitonw User rank is Just a Lowly Private (1 - 20 Reputation Level) 
Time spent in forums: < 1 sec
Reputation Power: 0
Send a message via Yahoo to bitonw
Thumbs up Solved

I am with you, Thanks!

Server: tvwbad01.tvwbdom.be
Address: 192.168.x.2

Non-authoritative answer:
Name: URL
Address: 194.78.240.149

The reason of this question was that we get a lot of spam from some of those domains. I tried to nslookup those like ingenial.be and received output as in the attachment.

Cheers,
Biton

Reply With Quote
Reply

Viewing: Dev Shed ForumsSystem AdministrationDNS > Strange DNS resolve of external domain.


Thread Tools  Search this Thread 
Search this Thread:

Advanced Search
Display Modes  Rate This Thread 
Rate This Thread:


Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

vB code is On
Smilies are On
[IMG] code is On
HTML code is Off
View Your Warnings | New Posts | Latest News | Latest Threads | Shoutbox
Forum Jump


Forums: » Register « |  User CP |  Games |  Calendar |  Members |  FAQs |  Sitemap |  Support | 
  
 





© 2003-2008 by Developer Shed. All rights reserved. DS Cluster 4 hosted by Hostway