DNS

[dplace]

<br>
<br>
Getting Event: 7062, "DNS Server encountered a packet<br>
addressed to itself--", on our PDC.<br>
<br>
Error occurs when I perform a TRACERT from a workstation.<br>
I have checked and peformed the suggestions from Technet<br>
and Microsoft Kknowledgebases. Configurations seem to be<br>
okay and no other symptoms appear.<br>
<br>
Unable to resolve. Any suggestions????

 

[jsauce]

This error is caused by a configuration error or is the result of a delegation of a domain or subdomain to a server for which there is no zone file.<br>
<br>
JUST CAUSE I DON'T FEEL LIKE TYPING THIS ALL OUT, I"LL COPY IT FROM TECHNET.<br>
<br>
To resolve this issue, check for the following conditions:<br>
<br>
Forwarders:<br>
<br>
DNS can be configured to forward off-site queries to designated servers. Be sure<br>
that the DNS server is not configured to forward these off-site queries to<br>
itself:<br>
<br>
1. Select the server, click DNS, and then click Properties from the menu.<br>
<br>
2. Click the Forwarders tab.<br>
<br>
3. If the server's own IP address is listed, select it and click Remove.<br>
<br>
Master List of Secondary Zones:<br>
<br>
A secondary zone is configured with a list of the master or primary server(s). Be<br>
sure that the server's own IP address is not listed as one of the IP master(s):<br>
<br>
1. Select the secondary zone, click DNS, and then click Properties from the menu.<br>
<br>
2. Click the General tab.<br>
<br>
3. If the server's own IP address is listed in the IP Master(s) section, select it and click Remove.<br>
<br>
Notify Lists:<br>
<br>
Microsoft Windows NT DNS Server allows the Administrator to specify (on the primary DNS server) any secondary DNS servers that should be notified immediately of changes to the Zone file. Be sure that the DNS server is not configured to notify itself:<br>
<br>
1. Select the primary zone, click DNS, and then click Properties from the menu.<br>
<br>
2. Click the Notify tab.<br>
<br>
3. If the server's own IP address is listed, select it and click Remove.<br>
<br>
Lame Delegation:<br>
<br>
Lame delegation is defined as having a domain or subdomain delegated to a server that is not authoritative for the domain (in other words, a zone file does not exist for the domain on the server). There are two possible scenarios that can cause lame delegation:<br>
<br>
- Delegating a Child Domain to Itself<br>
<br>
If a child domain is created on a server and an NS record is added to that domain that resolves to its own IP address, an Event 7062 is generated. The following is an example:<br>
<br>
- DNS server ns1.domain.com is the primary DNS server for the domain.com zone. A child domain is created named child.domain.com and an NS record is added to child.domain.com for ns1.domain.com. This results in a child domain being delegated to itself. To resolve this issue, remove the NS record from child.domain.com. Only add NS records to child domains if you wish to delegate it to another server (that is, to delegate it to ns2.domain.com).<br>
<br>
- Domain Delegated to Server with No Zone File<br>
<br>
If another DNS server has delegated a domain (either a forward lookup or reverse lookup domain) to a server and there is no zone file on the server for that domain, an Event 7062 is generated. The following are examples:<br>
<br>
- Your Internet Service Provider (ISP) has assigned you the Class C network of 192.168.1.0 and has delegated the 1.168.192.in-addr.arpa domain for reverse lookups to your DNS server. If there is no zone configured on your<br>
DNS server for that domain, event 7062 will be generated every time a query is made for that domain from the server. The DNS server will step through the DNS hierarchy starting at the root servers and eventually receive a response from the ISP's DNS server indicating that the server itself is authoritative for the domain and attempt to query itself. To resolve this issue, either create a primary or secondary zone for that domain, or have the ISP change the delegation.<br>
<br>
- Your ISP has delegated a domain to your caching-only DNS server. Because there are no zone files on a caching-only server, any queries that it makes for hosts that reside in domains for which it has been delegated authority will result in an event 7062 error. To resolve this issue, either create a primary or secondary zone file for that domain, or have the ISP change the delegation.<br>

 

[dplace]

I have checked for these inconsistencies and found the configuration correct. The only anomaly is that I have two slightly different DNS entries:<br>
<br>
MTC.AFRC.AF.MIL with an NS record entry MTCNT01.MTC.AFRC.AF.MIL.<br>
<br>
MTC.AFRES.AF.MIL with an NS record entry MTCNT01.MTC.AFRES.AF.MIL.<br>
<br>
I have stopped the latter with no change in error.<br>