Microsoft DNS works fine behind firewall except with 2 websites

[GPenn]

I have a Microsoft DNS setup on Windows 2003. This server is also the
Active Directory controller.

It has the latest root hints and can resolve just about any domain...
except mail.yahoo.com and a few others I have noticed. It's very odd.
When I put a forwarder on there it is able to resolve these few
addresses. But I'd prefer to get to the core of the problem rather
than throwing another forwarded DNS at the issue.

Can anyone give me insight into what may be happening here? I have
logging turned up and am not seeing errors.

Thanks.

 

[Jonathan de Boyne Pollard]

G> Can anyone give me insight into what may be happening here?

Yes.

 

[Jonathan de Boyne Pollard]

G> except mail.yahoo.com and a few others [...] It's very odd.

It's EDNS0.

<URL:http://groups.google.com/[email protected]>

 

[Michael Johnston [MSFT]]

Is the server behind a firewall? It's possible that the DNS query from your DNS server is answered from a different IP than what
the query was sent to. Some firewalls will drop this packet is there is not active port mapping from the source of the response.
Also, you can enable DNS logging and try to query for the failing record. Check to see if you get a response for the query.

Thank you,
Mike Johnston
Microsoft Network Support
--

This posting is provided "AS IS" with no warranties, and confers no rights. Use of included script samples are subject to the
terms specified at
http://www.microsoft.com/info/cpyright.htm

Note: For the benefit of the community-at-large, all responses to this message are best directed to the newsgroup/thread from
which they originated.

 

[Michael Johnston [MSFT]]

Please reference 247681 Microsoft DNS Server Cannot Resolve Some Domain Names http://support.microsoft.com/?id=
247681

Thank you,
Mike Johnston
Microsoft Network Support
--

This posting is provided "AS IS" with no warranties, and confers no rights. Use of included script samples are subject to the
terms specified at
http://www.microsoft.com/info/cpyright.htm

Note: For the benefit of the community-at-large, all responses to this message are best directed to the newsgroup/thread from
which they originated.

 

[Rahul Indurkar [MS]]

The mail.yahoo.com name rings a bell. The DNS server in Win2k3 has EDNS
enabled by default, and we know this to have caused some issues...

Try disabling EDNS (set the EnableEDNSProbes value to 0) according to the
below link and see if that helps...

http://www.microsoft.com/technet/treeview/default.asp?url=/technet/prodtechn
ol/windowsserver2003/proddocs/standard/sag_DNS_pro_ModifyEDNS.asp