Windows, Operating System, Security, Networking, Malware, Support, Forum, Help Site Check Our Facebook Page!
Notices
Windows Server System Post your Windows Server System questions here. Besides Windows Server, this also includes other Microsoft Server software (such as BizTalk Server, Exchange Server, ISA Server & others).


Register your FREE account to unlock additional features at WindowsBBS.com
   
 
 
LinkBack Thread Tools
Old 15th January 2007   #1
Inactive
THREAD STARTER
 
Profile:
Join Date: Sep 2003
Posts: 49
Computer Experience:
Experienced
markjrees Reputation Level

DNS Server Problems - Keep having to restart the DNS service


For about a week now during the day our office internet connection goes down. When it goes down I have to restart the DNS service on our server which brings the internet back online.

Our DNS server has forwarders set-up to send external requests to an external internet based DNS server. We use NAT to share internet access throughout the office.

When the connection goes down we can access websites by using IP address. This obviously confirms the problem is DNS based.

Whilst restarting the DNS service on our server sorts the problem I do need to find out what's causing it to go down.

There are no errors or warning messages in the event log.


Any advice welcomed!

markjrees is offline  

 

Register
to remove this ad.
 
 

Old 15th January 2007   #2
Inactive
 
Profile:
Join Date: Aug 2002
Posts: 4,141
mflynn Reputation Levelmflynn Reputation Levelmflynn Reputation Level

Hey Mark

Someting else a required service (for DNS) or something is shutting down therefore DNS.

Look closely at the required services for DNS.

Additionally and indirectly you may possibly solve this by hard coding just the internet DNS Ip's of your ISP. Even if using DHCP for local LAN IP.

This should keep internet up but still does not address the reason DNS goes down.

Have you checked the event logs for this?

Mike

mflynn is offline  

Did you find this post helpful? Yes | No
Old 15th January 2007   #3
Alumni
 
Profile:
Join Date: May 2004
Location: Worcs. UK
Posts: 2,786
Computer Experience:
Unabashed deviant
ReggieB Reputation LevelReggieB Reputation LevelReggieB Reputation LevelReggieB Reputation LevelReggieB Reputation LevelReggieB Reputation LevelReggieB Reputation LevelReggieB Reputation LevelReggieB Reputation LevelReggieB Reputation LevelReggieB Reputation Level

What server OS are you using?

Setting your ISP's DNS IPs as the secondary DNS via DHCP may help keep the internet connection live - but if you are using 2000 or 2003 server, DNS failure on the server will give you log on and authentication problems. So you still need to find the underlying problem.

If we know the server OS, it would help us find a solution.

ReggieB is offline  

Did you find this post helpful? Yes | No
Old 15th January 2007   #4
Staff
 
Profile:
Join Date: Jan 2002
Location: Montgomery AL
Posts: 1,947
Computer Experience:
Experienced
Scott Smith Reputation LevelScott Smith Reputation LevelScott Smith Reputation LevelScott Smith Reputation LevelScott Smith Reputation LevelScott Smith Reputation LevelScott Smith Reputation LevelScott Smith Reputation LevelScott Smith Reputation LevelScott Smith Reputation LevelScott Smith Reputation Level

Send a message via AIM to Scott Smith Send a message via MSN to Scott Smith Send a message via Yahoo to Scott Smith
As an outside possibuility check hard drive space on the server.
As the drive fills it starts shutting down services. Been there done that.

Just thought I would throw that out as an outside chance that could be the problem. DNS and DHCP are on of the first to shut down.

Scott Smith is offline  

Did you find this post helpful? Yes | No
Old 16th January 2007   #5
Inactive
THREAD STARTER
 
Profile:
Join Date: Sep 2003
Posts: 49
Computer Experience:
Experienced
markjrees Reputation Level

Thanks for your responses so far.

Some further details. The internet was off again when I arrived in the office this morning. Again it came straight back on after restarting the DNS service.

To answer your queries:

- We are using Windows 2000 Server

- Where in DHCP should I set the ISP's DNS as a secondary address?

- The required services for DNS are NTLM Security Support Provider and Remote Procedure Call

- The DNS event log shows the following:- (sorry for the layout)

16/01/2007 08:26:16 DNS Error None 3152 N/A SERVER The DNS server was unable to open file dns\dns.log for write. Most likely the file is a zone file that is already open. Close the zone file and re-initiate zone write.

16/01/2007 04:00:12 DNS Information None 2 N/A SERVER The DNS server has started.
16/01/2007 04:00:10 DNS Information None 3 N/A SERVER The DNS server has shutdown.
16/01/2007 00:00:12 DNS Information None 2 N/A SERVER The DNS server has started.
16/01/2007 00:00:10 DNS Information None 3 N/A SERVER The DNS server has shutdown.
15/01/2007 20:00:03 DNS Information None 2 N/A SERVER The DNS server has started.
15/01/2007 20:00:00 DNS Information None 3 N/A SERVER The DNS server has shutdown.
15/01/2007 19:57:05 DNS Warning None 5501 N/A SERVER The DNS server encountered a bad packet from 192.112.36.4. Packet processing leads beyond packet length.
15/01/2007 19:57:01 DNS Warning None 5501 N/A SERVER The DNS server encountered a bad packet from 0.0.0.0. Packet processing leads beyond packet length.
15/01/2007 19:56:37 DNS Warning None 5501 N/A SERVER The DNS server encountered a bad packet from 0.0.0.0. Packet processing leads beyond packet length.
15/01/2007 19:56:34 DNS Warning None 5501 N/A SERVER The DNS server encountered a bad packet from 0.0.0.0. Packet processing leads beyond packet length.
15/01/2007 19:56:19 DNS Warning None 5501 N/A SERVER The DNS server encountered a bad packet from 0.0.0.0. Packet processing leads beyond packet length.
15/01/2007 19:56:16 DNS Warning None 5501 N/A SERVER The DNS server encountered a bad packet from 0.0.0.0. Packet processing leads beyond packet length.
15/01/2007 19:56:03 DNS Warning None 5501 N/A SERVER The DNS server encountered a bad packet from 0.0.0.0. Packet processing


Again cheers for your help on this!

markjrees is offline  

Did you find this post helpful? Yes | No
Old 16th January 2007   #6
Inactive
THREAD STARTER
 
Profile:
Join Date: Sep 2003
Posts: 49
Computer Experience:
Experienced
markjrees Reputation Level

just been looking at the event logs on the server and it has recorded this:

16/01/2007 09:53:34 DNS Error None 140 N/A SERVER The DNS server could not initialize the remote procedure call (RPC) service. If it is not running, start the RPC service or reboot the computer. The event data is the error code.
16/01/2007 09:53:32 DNS Warning None 5501 N/A SERVER The DNS server encountered a bad packet from 0.0.0.0. Packet processing leads beyond packet length.


This obviously points towards the RPC service which I'll look into.

markjrees is offline  

Did you find this post helpful? Yes | No
Old 16th January 2007   #7
Inactive
 
Profile:
Join Date: Aug 2002
Posts: 4,141
mflynn Reputation Levelmflynn Reputation Levelmflynn Reputation Level

Hey Mark

Are you getting event logs full errors sometimes? Or do you empty them often?

Here is what M$ has to say
http://support.microsoft.com/kb/198757

Is this perhaps the LAN IP of the server in question?
192.112.36.4. Packet processing leads beyond packet length

Wait for the next DNS shut down, and see if the same IP is the problem in events. If so that machine is the problem.

To confirm this you should find the workstation that did this and unplug it for a day.

Have you noticed this same IP before in the events?

If this the Server IP or the errored IP is random. Then drop back and punt time!

I have seen a bad NIC spew bad data and cause this and similar problems.

BTW: to easily get text from the event logs is rt click the catagory you want like
system
choose Save log file as
choose as type *.txt

Adding Explicit DNS entries is Ok if done properly. I only suggested it as an emergency gap measure to get the internet back up untill the problem is found.

In this case it could cover up the problem and may have other issues dependng on your setup.

Your answer:

First do this
cmd prompt

type
ipconfig /all >c:\ipcfg.out
browse there print this

Now
rt click Local Area Connection
properties
Internet Protocol TCP/IP

If
Obtain DNS server address automatically has the DOT
then choose
Use the following

put any other DNS's from ipconfig in first then the ISP DNS numbers. If many you may need to go to Advanced to add all of them.

Do this as a stop gap until you find the real problem.

Mike

mflynn is offline  

Did you find this post helpful? Yes | No
Old 16th January 2007   #8
Inactive
 
Profile:
Join Date: Aug 2002
Posts: 4,141
mflynn Reputation Levelmflynn Reputation Levelmflynn Reputation Level

Mark

I will check back in in about an hour. Untill then I am offline.

Hope to come back to news that you got it.

Mike

mflynn is offline  

Did you find this post helpful? Yes | No
Old 16th January 2007   #9
Inactive
THREAD STARTER
 
Profile:
Join Date: Sep 2003
Posts: 49
Computer Experience:
Experienced
markjrees Reputation Level

i've got the server running a net start/stop batch file every 15 minutes now to restart the dns service - this at least keeps it running.

the ip address you specified, and the 0.0.0.0 ip address I specified are not our IP addresses.

i've seen loads of posts on newsgroups with IT Managers with the exact same problem but none of them have a solution - other than just restarting the dns server as and when the problem occurs.

markjrees is offline  

Did you find this post helpful? Yes | No
Old 16th January 2007   #10
Inactive
 
Profile:
Join Date: Aug 2002
Posts: 4,141
mflynn Reputation Levelmflynn Reputation Levelmflynn Reputation Level

Hi Mark

I missed your 2nd post today about the ip 0.0.0.0.

But be sure. Can you ping 192.112.36.4

What do you get when you do ping it?

Is 192.112... your current subnet?

Is your Local Area connection named with a number like Local Area connection1?

Has the NIC been replaced in this server or have a 2nd NIC?

I don't know the size of your system and just realized you are in the UK.

But I would like to see the ipconfig. If you don't wish to post it on the BBS consider to PM it to me.

If you can, get all stations to log off or do the following after hours.

You can copy and paste into a CMD or Bat file example (ClrNet.cmd) the following
=================================================
@echo off
echo Flushing Arp Cache
netsh interface ip delete arpcache
pause

echo Flushing DNS
ipconfig /flushdns
pause

echo Releasing all network adapters
ipconfig /release *
pause

echo Renewing all network adapters
ipconfig /renew *
pause

echo Reregister DNS
ipconfig /registerdns
pause

echo Release and renew NETBIOS cache
nbtstat -RR
pause
=================================================
Or run each line from the cmd prompt. Report back any unusual responses.

Should reboot after this.

Of course you would need to turn off your DNS reset script to see if this fixed it.

Mike

mflynn is offline  

Did you find this post helpful? Yes | No

Having problems with your computer? Does it crash or freeze? Is your pc slow? Our technicians can identify any issues and fix your PC quickly and reliably.

 

THIS THREAD HAS EXPIRED.

Are you having the same problem? Please post a new thread, but first you'll have to join us by Registering (FREE).



Discussion Forums
Operating Systems
Windows 8 Windows 8
Windows 7 Windows 7
Windows Vista Windows Vista
Windows XP Windows XP
Windows Server System Windows Server System
Legacy Windows OS Legacy Windows OS
Internet & Networking
Networking (Hardware & Software) Networking
Internet Explorer Internet Explorer
Microsoft Mail Microsoft Mail
Firefox, Thunderbird & SeaMonkey Firefox, Thunderbird
      & SeaMonkey

Web Applications & Cloud Web Applications & Cloud
General Internet
Security
Malware and Virus Removal Malware and Virus
     Removal

Security and Privacy Security and Privacy

Other
Other PC Software Other PC Software
Test Posts Test Posts
Hardware
PC Hardware PC Hardware
Mobile Devices Mobile Devices
Community
Introductions Introductions
General Discussions General Discussions
Site Comments & Suggestions Site Comments
      & Suggestions

News News @ WindowsBBS

Thread Tools


Find us on Facebook   Web Of Trust Rating

All times are GMT. The time now is 05:04.


Recent Discussions
Insert Link Not Working in Thunderb.. (1)
altering the OS (3)
Start Up Slow? (2)
Sharing a printer using WiFi (4)
Hub Manager (6)
Outlook Express doesn't work with b.. (3)
SpywareBlaster updates available (0)
Blue Screen Of Death (13)
Need desktop icon save/restore sw f.. (3)
Spacebar won't work (9)
PC Will Not Boot After HDDs Re-Arra.. (32)
WD External Hard Drives not recogin.. (4)
BSoD (31)
Can't get Win7 shortcuts to open in.. (13)
Changing default View Fields in Out.. (3)
Dell Studio 540 350watt psu require.. (25)
Firefox and Thunderbird Version 31... (11)
How do I check links in favorites t.. (6)
CD player application (3)
Re-starting IE8 every time I change.. (1)


Donate!
Support Windows BBS!



Powered by vBulletin® Copyright ©2000 - 2014, Jelsoft Enterprises Ltd.
Content Relevant URLs by vBSEO
Copyright 2002 - 2013 WindowsBBS.com. All rights reserved.
FDMA Media LLC
Terms of Use, Legal Information & Privacy Policy
Page generated in 0.14295 seconds with 7 queries