silly network ip address problem i must be blind

[stevenriz]

I am a little frustrated. We have a 2003 server on a segment on a network with IP address 10.10.103.12, the gateway is the PIX at 10.10.103.1 with a public DNS server from Bell South at 205.152.144.23. There is also a WINS server at 10.10.104.11. ipconfig looks like this. I can ping the DNS servers and public IP addresses out there but cannot ping URLs or web addresses. What are we missing here??

ping example
C:\Documents and ettings\Administrator.BLABLACO>ping

http://www.msn.com

Ping request could not find host

http://www.msn.com.

Please check the name and try again.

ipconfig results
Ethernet adapter Intel Pro 1000 MT Gigabit Ethernet Adapter - Onboard - Link A:

Connection-specific DNS Suffix . :
Description . . . . . . . . . . . : Intel(R) PRO/1000 MT Network Connection
Physical Address. . . . . . . . . : 00-11-43-32-EA-07
DHCP Enabled. . . . . . . . . . . : No
IP Address. . . . . . . . . . . . : 10.10.103.12
Subnet Mask . . . . . . . . . . . : 255.255.255.0
Default Gateway . . . . . . . . . : 10.10.103.1
DNS Servers . . . . . . . . . . . : 205.152.144.23
205.152.132.23
Primary WINS Server . . . . . . . : 10.10.104.11

 

[mrdenny]

I take it that everyone else on the network segment with the same settings is having no problems?

Denny

--Anything is possible. All it takes is a little research. (Me)

 

[stevenriz]

this is the DMZ and there are only two machines on it. both seem to be having the same issues. Why can I ping the DNS servers by IP address without a problem but nothing gets resolved when pinging

http://www.yahoo.com

?

 

[mrdenny]

Is your firewall allowing TCP and UDP port 53 traffic to the DNS servers?

Denny

--Anything is possible. All it takes is a little research. (Me)

 

[stevenriz]

I have these statements...

access-list Internet_Inbound permit tcp any any eq domain
access-list Internet_Inbound permit udp any any eq domain
..
..
access-group Internet_Inbound in interface outside

do you need to see more, I will show more if you would like?

 

[mrdenny]

I don't know how to configure firewalls, so that's greek to me.

Denny

--Anything is possible. All it takes is a little research. (Me)

 

[taterease]

Steve,

Have you resolved this issue? If so, how? I'm experiencinga similar problem...

Thanks!

Jim

 

[stevenriz]

If I remember correctly, we found a route issue on the pix between the .103.0 network and the .104.0 network. Do you have the same sort of architecture?

 

[taterease]

Hi Steve,

Not exactly - I've a fellow who has a home network; the wireless laptop has no issues with the cable modem/router, but the desktop computer suddenly can't resolve DNS names; he can ping yahoo's number and such, but can't browse with I.E. or ping by name. I'm headed over to his home tomorrow to take a look. According to him, he's made no changes to the system...

Jim

 

[stevenriz]

maybe the desktop has had some network changes. my problem was with a cisco router a little differnet then a home cable modem which is graphically configured. Anyway I found network settings change from ip spyware etc on a couple of people's home laptope with built in ethernet cards. I'd ask them " Did you program these IP addresses or anyone you know work on this computer?" and they would tell me absolutely nobody has so if dns has changed for whtever reason, that's your problem.

 

[NickFerrar]

Make sure his DNS settings are correct. If you can't contact the DNS server you can of course still ping via IP but anything you do via name will fail.

 

[taterease]

Hey guys.

DNS wasn't the main problem - seems some spyware had installed it's own proxy.

I ran msconfig and removed the proxy from start up, then ran regedit and removed winsock and winsock2, rebooted, reinstalled tcp/ip, restarted and everything is working.

Thanks much for the suggestions.

Jim