No DNS resolution with ICS

  • Thread starter Thread starter Stephan
  • Start date Start date
S

Stephan

My topology:
Two W2K PCs connected through a hub
One of these PCs is connected to the internet via a USB
modem.

I hoped W2K ICS would allow me to share the internet
connetion, but the client is not able to resolve IP
addresses:
- The client successfully pings website IP adresses, but
- The client does not recognise (ping) website names
- Interestingly enough, the client's browser either does
not display webpages using http://<IP address>

Anyone able to help me out?

Full IPCONFIGs:
PC-I:

Windows 2000 IP Configuration

Host Name . . . . . . . . . . . . : Vectra
Primary DNS Suffix . . . . . . . :
Node Type . . . . . . . . . . . . : Mixed
IP Routing Enabled. . . . . . . . : Yes
WINS Proxy Enabled. . . . . . . . : No
DNS Suffix Search List. . . . . . : tiscali.nl

Ethernet adapter Internet Connection:

Connection-specific DNS Suffix . : tiscali.nl
Description . . . . . . . . . . . : USB ADSL LAN
Adapter
Physical Address. . . . . . . . . : 00-60-4C-28-10-
EF
DHCP Enabled. . . . . . . . . . . : Yes
Autoconfiguration Enabled . . . . : Yes
IP Address. . . . . . . . . . . . : 82.168.149.244
Subnet Mask . . . . . . . . . . . : 255.255.248.0
Default Gateway . . . . . . . . . : 82.168.151.254
DHCP Server . . . . . . . . . . . : 82.168.37.254
DNS Servers . . . . . . . . . . . : 195.241.77.55
195.241.49.33
Lease Obtained. . . . . . . . . . : 20 March 2004
21:14:50
Lease Expires . . . . . . . . . . : 20 March 2004
23:14:50

Ethernet adapter Local Area Connection:

Connection-specific DNS Suffix . :
Description . . . . . . . . . . . : 3Com EtherLink
XL 10/100 PCI For Com
plete PC Management NIC (3C905C-TX)
Physical Address. . . . . . . . . : 00-04-76-1B-D5-
92
DHCP Enabled. . . . . . . . . . . : No
IP Address. . . . . . . . . . . . : 192.168.0.1
Subnet Mask . . . . . . . . . . . : 255.255.255.0
Default Gateway . . . . . . . . . :
DNS Servers . . . . . . . . . . . :

PC-II:

Windows 2000 IP Configuration

Host Name . . . . . . . . . . . . : rotterdam
Primary DNS Suffix . . . . . . . :
Node Type . . . . . . . . . . . . : Broadcast
IP Routing Enabled. . . . . . . . : No
WINS Proxy Enabled. . . . . . . . : No

Ethernet adapter Local Area Connection:

Connection-specific DNS Suffix . :
Description . . . . . . . . . . . : 3Com EtherLink
XL PCI TPO NIC (3C900
B-TPO)
Physical Address. . . . . . . . . : 00-01-02-A0-16-
CF
DHCP Enabled. . . . . . . . . . . : No
IP Address. . . . . . . . . . . . : 192.168.0.2
Subnet Mask . . . . . . . . . . . : 255.255.255.0
Default Gateway . . . . . . . . . : 192.168.0.1
DNS Servers . . . . . . . . . . . : 192.168.0.1
 
In
Stephan said:
My topology:
Two W2K PCs connected through a hub
One of these PCs is connected to the internet via a USB
modem.

I hoped W2K ICS would allow me to share the internet
connetion, but the client is not able to resolve IP
addresses:
- The client successfully pings website IP adresses, but
- The client does not recognise (ping) website names
- Interestingly enough, the client's browser either does
not display webpages using http://<IP address>

Anyone able to help me out?

Full IPCONFIGs:
PC-I:

Windows 2000 IP Configuration

Host Name . . . . . . . . . . . . : Vectra
Primary DNS Suffix . . . . . . . :
Node Type . . . . . . . . . . . . : Mixed
IP Routing Enabled. . . . . . . . : Yes
WINS Proxy Enabled. . . . . . . . : No
DNS Suffix Search List. . . . . . : tiscali.nl

Ethernet adapter Internet Connection:

Connection-specific DNS Suffix . : tiscali.nl
Description . . . . . . . . . . . : USB ADSL LAN
Adapter
Physical Address. . . . . . . . . : 00-60-4C-28-10-
EF
DHCP Enabled. . . . . . . . . . . : Yes
Autoconfiguration Enabled . . . . : Yes
IP Address. . . . . . . . . . . . : 82.168.149.244
Subnet Mask . . . . . . . . . . . : 255.255.248.0
Default Gateway . . . . . . . . . : 82.168.151.254
DHCP Server . . . . . . . . . . . : 82.168.37.254
DNS Servers . . . . . . . . . . . : 195.241.77.55
195.241.49.33
Lease Obtained. . . . . . . . . . : 20 March 2004
21:14:50
Lease Expires . . . . . . . . . . : 20 March 2004
23:14:50

Ethernet adapter Local Area Connection:

Connection-specific DNS Suffix . :
Description . . . . . . . . . . . : 3Com EtherLink
XL 10/100 PCI For Com
plete PC Management NIC (3C905C-TX)
Physical Address. . . . . . . . . : 00-04-76-1B-D5-
92
DHCP Enabled. . . . . . . . . . . : No
IP Address. . . . . . . . . . . . : 192.168.0.1
Subnet Mask . . . . . . . . . . . : 255.255.255.0
Default Gateway . . . . . . . . . :
DNS Servers . . . . . . . . . . . :

PC-II:

Windows 2000 IP Configuration

Host Name . . . . . . . . . . . . : rotterdam
Primary DNS Suffix . . . . . . . :
Node Type . . . . . . . . . . . . : Broadcast
IP Routing Enabled. . . . . . . . : No
WINS Proxy Enabled. . . . . . . . : No

Ethernet adapter Local Area Connection:

Connection-specific DNS Suffix . :
Description . . . . . . . . . . . : 3Com EtherLink
XL PCI TPO NIC (3C900
B-TPO)
Physical Address. . . . . . . . . : 00-01-02-A0-16-
CF
DHCP Enabled. . . . . . . . . . . : No
IP Address. . . . . . . . . . . . : 192.168.0.2
Subnet Mask . . . . . . . . . . . : 255.255.255.0
Default Gateway . . . . . . . . . : 192.168.0.1
DNS Servers . . . . . . . . . . . : 192.168.0.1
Click to expand...


Assuming AD is not on the network:

1. On PC1, move the "Local Area Connection" to the top of the binding order.
2. On PC1, in "Local Area Connection", specify a DNS address. Somewhat
suprised that it's blank. In your case, specify:
195.241.77.55
195.241.49.33


Tell you what, it's WAY eaiser to spend $50 and get a Linksys DSL/Cable
Broadband Router and let it be the connection to your DSL provider. It will
take a big load of your W2k machine and the best thing, is that your W2k
machine will NOT be directly exposed to the INternet and most of all, all
that WinPoet software (for the PPPoE connection) will not be on the machine.

--
Regards,
Ace

Please direct all replies to the newsgroup so all can benefit.
This posting is provided "AS-IS" with no warranties and confers no
rights.

Ace Fekay, MCSE 2000, MCSE+I, MCSA, MCT, MVP
Microsoft Windows MVP - Active Directory
 
-----Original Message-----
In Stephan <[email protected]> posted their thoughts, then I
offered mine


Assuming AD is not on the network:

1. On PC1, move the "Local Area Connection" to the top of the binding order.
2. On PC1, in "Local Area Connection", specify a DNS address. Somewhat
suprised that it's blank. In your case, specify:
195.241.77.55
195.241.49.33


Tell you what, it's WAY eaiser to spend $50 and get a Linksys DSL/Cable
Broadband Router and let it be the connection to your DSL provider. It will
take a big load of your W2k machine and the best thing, is that your W2k
machine will NOT be directly exposed to the INternet and most of all, all
that WinPoet software (for the PPPoE connection) will not be on the machine.

--
Regards,
Ace

Please direct all replies to the newsgroup so all can benefit.
This posting is provided "AS-IS" with no warranties and confers no
rights.

Ace Fekay, MCSE 2000, MCSE+I, MCSA, MCT, MVP
Microsoft Windows MVP - Active Directory
--
=================================


.
Click to expand...
Thank you, Ace, for looking into this.

Unfortunately, however, after implementing your
suggestions, I still remain with exactly the same symptoms
as before (I continue to suspect a malfunctioning DNS
resolution, but have no clue why so, though).

Please see complete ipconfigs and DNS-netdiags below
(Perhaps the last bit of PC-1's DNS-netdiag looks
suspicious?).

Thanks again,
Stephan

BTW, I am not sure what you mean by: assuming AD is not on
the network.
BTW2: Begin to recognise you may be quite right,
suggesting I would acquire a ADSL router instead, don't
know if this would work with my USB adapter though..

PC-1:

C:\>ipconfig /all

Windows 2000 IP Configuration

Host Name . . . . . . . . . . . . : Vectra
Primary DNS Suffix . . . . . . . :
Node Type . . . . . . . . . . . . : Mixed
IP Routing Enabled. . . . . . . . : Yes
WINS Proxy Enabled. . . . . . . . : No
DNS Suffix Search List. . . . . . : tiscali.nl

Ethernet adapter Local Area Connection:

Connection-specific DNS Suffix . :
Description . . . . . . . . . . . : 3Com EtherLink
XL 10/100 PCI For Com
plete PC Management NIC (3C905C-TX)
Physical Address. . . . . . . . . : 00-04-76-1B-D5-
92
DHCP Enabled. . . . . . . . . . . : No
IP Address. . . . . . . . . . . . : 192.168.0.1
Subnet Mask . . . . . . . . . . . : 255.255.255.0
Default Gateway . . . . . . . . . :
DNS Servers . . . . . . . . . . . : 195.241.77.58
195.241.77.55

Ethernet adapter Internet Connection:

Connection-specific DNS Suffix . : tiscali.nl
Description . . . . . . . . . . . : USB ADSL LAN
Adapter
Physical Address. . . . . . . . . : 00-60-4C-28-10-
EF
DHCP Enabled. . . . . . . . . . . : Yes
Autoconfiguration Enabled . . . . : Yes
IP Address. . . . . . . . . . . . : 82.168.149.244
Subnet Mask . . . . . . . . . . . : 255.255.248.0
Default Gateway . . . . . . . . . : 82.168.151.254
DHCP Server . . . . . . . . . . . : 82.168.37.254
DNS Servers . . . . . . . . . . . : 195.241.77.58
195.241.77.55
Lease Obtained. . . . . . . . . . : 21 March 2004
19:56:27
Lease Expires . . . . . . . . . . : 21 March 2004
21:56:27

C:\>


PC-2:

C:\>ipconfig /all

Windows 2000 IP Configuration

Host Name . . . . . . . . . . . . : rotterdam
Primary DNS Suffix . . . . . . . :
Node Type . . . . . . . . . . . . : Broadcast
IP Routing Enabled. . . . . . . . : No
WINS Proxy Enabled. . . . . . . . : No

Ethernet adapter Local Area Connection:

Connection-specific DNS Suffix . :
Description . . . . . . . . . . . : 3Com EtherLink
XL PCI TPO NIC (3C900
B-TPO)
Physical Address. . . . . . . . . : 00-01-02-A0-16-
CF
DHCP Enabled. . . . . . . . . . . : No
IP Address. . . . . . . . . . . . : 192.168.0.2
Subnet Mask . . . . . . . . . . . : 255.255.255.0
Default Gateway . . . . . . . . . : 192.168.0.1
DNS Servers . . . . . . . . . . . : 192.168.0.1

C:\>


PC-1 (Vectra):

C:\>netdiag /test:dns /v

Gathering IPX configuration information.
Querying status of the Netcard drivers... Passed
Testing Domain membership... Passed
Gathering NetBT configuration information.
Testing DNS

Tests complete.


Computer Name: VECTRA
DNS Host Name: Vectra
DNS Domain Name: (null)
System info : Windows 2000 Professional (Build 2195)
Processor : x86 Family 6 Model 8 Stepping 3,
GenuineIntel
Hotfixes :
Installed? Name
Yes KB329115
Yes KB820888
Yes KB822831
Yes KB823182
Yes KB823559
Yes KB823980
Yes KB824105
Yes KB824141
Yes KB824146
Yes KB825119
Yes KB826232
Yes KB828028
Yes KB828035
Yes KB828749
Yes Q147222
Yes Q818043
No ServicePackUninstall


Netcard queries test . . . . . . . : Passed

Information of Netcard drivers:

-------------------------------------------------------
--------------------
Description: USB ADSL LAN Adapter
Device: \DEVICE\{5B414365-F00D-41D8-85EA-26E14F5D85C1}

Media State: Connected

Device State: Connected
Connect Time: 00:39:13
Media Speed: 458 Kbps

Packets Sent: 2354
Bytes Sent (Optional): 0

Packets Received: 1993
Directed Pkts Recd (Optional): 1992
Bytes Received (Optional): 0
Directed Bytes Recd (Optional): 0

-------------------------------------------------------
--------------------
Description: 3Com EtherLink XL 10/100 PCI For Complete
PC Management NIC (3C
905C-TX)
Device: \DEVICE\{38ABBBDF-E3D4-4133-A7F0-FF5270DD3844}

Media State: Connected

Device State: Connected
Connect Time: 00:39:15
Media Speed: 10 Mbps

Packets Sent: 2298
Bytes Sent (Optional): 0

Packets Received: 2009
Directed Pkts Recd (Optional): 1961
Bytes Received (Optional): 0
Directed Bytes Recd (Optional): 0

-------------------------------------------------------
--------------------
[PASS] - At least one netcard is in the 'Connected'
state.



Per interface results:

Adapter : Local Area Connection
Adapter ID . . . . . . . . : {38ABBBDF-E3D4-4133-
A7F0-FF5270DD3844}

Netcard queries test . . . : Passed

Adapter : Internet Connection
Adapter ID . . . . . . . . : {5B414365-F00D-41D8-
85EA-26E14F5D85C1}

Netcard queries test . . . : Passed


Global results:


Domain membership test . . . . . . : Passed
Machine is a . . . . . . . . . : Standalone Workstation
Netbios Workgroup name . . . . : WORKGROUP
Dns domain name is not specified.
Dns forest name is not specified.
Domain Guid. . . . . . . . . . : {00000000-0000-0000-
0000-000000000000}
Logon User . . . . . . . . . . : Administrator
Logon Domain . . . . . . . . . : VECTRA


NetBT transports test. . . . . . . : Passed
List of NetBt transports currently configured:
NetBT_Tcpip_{38ABBBDF-E3D4-4133-A7F0-FF5270DD3844}
NetBT_Tcpip_{5B414365-F00D-41D8-85EA-26E14F5D85C1}
2 NetBt transports currently configured.


DNS test . . . . . . . . . . . . . : Passed
Interface {38ABBBDF-E3D4-4133-A7F0-FF5270DD3844}
DNS Domain:
DNS Servers: 195.241.77.58 195.241.77.55
IP Address: 192.168.0.1
Interface {5B414365-F00D-41D8-85EA-26E14F5D85C1}
DNS Domain: tiscali.nl
DNS Servers: 195.241.77.58 195.241.77.55
IP Address: 82.168.149.244
Expected registration with adapter's DNS Domain
Name:
Hostname: Vectra.tiscali.nl.
Registration with adapter's DNS domain name is
disabled.


The command completed successfully


PC-2 (Rotterdam):

C:\>netdiag /test:dns /v

Gathering IPX configuration information.
Querying status of the Netcard drivers... Passed
Testing Domain membership... Passed
Gathering NetBT configuration information.
Testing DNS

Tests complete.


Computer Name: ROTTERDAM
DNS Host Name: rotterdam
DNS Domain Name: (null)
System info : Windows 2000 Professional (Build 2195)
Processor : x86 Family 6 Model 8 Stepping 3,
GenuineIntel
Hotfixes :
Installed? Name
Yes KB329115
Yes KB820888
Yes KB822831
Yes KB823182
Yes KB823559
Yes KB823980
Yes KB824105
Yes KB824141
Yes KB824146
Yes KB825119
Yes KB826232
Yes KB828028
Yes KB828035
Yes KB828749
Yes Q147222
No ServicePackUninstall


Netcard queries test . . . . . . . : Passed

Information of Netcard drivers:

-------------------------------------------------------
--------------------
Description: NDIS WAN CAPI drivers
Device: \DEVICE\{C600FE84-F792-4150-8A43-F6E0DFA372E8}

Media State: Connected

Device State: Connected
Connect Time: 00:27:53
Media Speed: 6 Mbps

Packets Sent: 0
Bytes Sent (Optional): 0

Packets Received: 0
Directed Pkts Recd (Optional): 0
Bytes Received (Optional): 0
Directed Bytes Recd (Optional): 0

[WARNING] The net card 'NDIS WAN CAPI drivers' may not
be working because it
has not received any packets.
-------------------------------------------------------
--------------------
Description: 3Com EtherLink XL PCI TPO NIC (3C900B-TPO)
Device: \DEVICE\{7A34795B-8151-400B-92C4-26092D21D4DD}

Media State: Connected

Device State: Connected
Connect Time: 00:27:53
Media Speed: 10 Mbps

Packets Sent: 1580
Bytes Sent (Optional): 0

Packets Received: 1724
Directed Pkts Recd (Optional): 1694
Bytes Received (Optional): 0
Directed Bytes Recd (Optional): 0

-------------------------------------------------------
--------------------
[PASS] - At least one netcard is in the 'Connected'
state.



Per interface results:

Adapter : Local Area Connection
Adapter ID . . . . . . . . : {7A34795B-8151-400B-
92C4-26092D21D4DD}

Netcard queries test . . . : Passed


Global results:


Domain membership test . . . . . . : Passed
Machine is a . . . . . . . . . : Standalone Workstation
Netbios Workgroup name . . . . : WORKGROUP
Dns domain name is not specified.
Dns forest name is not specified.
Domain Guid. . . . . . . . . . : {00000000-0000-0000-
0000-000000000000}
Logon User . . . . . . . . . . : Administrator
Logon Domain . . . . . . . . . : ROTTERDAM


NetBT transports test. . . . . . . : Passed
List of NetBt transports currently configured:
NetBT_Tcpip_{7A34795B-8151-400B-92C4-26092D21D4DD}
1 NetBt transport currently configured.


DNS test . . . . . . . . . . . . . : Passed
Interface {7A34795B-8151-400B-92C4-26092D21D4DD}
DNS Domain:
DNS Servers: 192.168.0.1
IP Address: 192.168.0.2


The command completed successfully
 
In
Stephan said:
Thank you, Ace, for looking into this.

Unfortunately, however, after implementing your
suggestions, I still remain with exactly the same symptoms
as before (I continue to suspect a malfunctioning DNS
resolution, but have no clue why so, though).

Please see complete ipconfigs and DNS-netdiags below
(Perhaps the last bit of PC-1's DNS-netdiag looks
suspicious?).

Thanks again,
Stephan

BTW, I am not sure what you mean by: assuming AD is not on
the network.
BTW2: Begin to recognise you may be quite right,
suggesting I would acquire a ADSL router instead, don't
know if this would work with my USB adapter though..
Click to expand...

<snip>

I was assuming you're not running Active Directory. It doesn't appear to be,
so don't worry about that part.

If you can ping from the client, but cannot resolve anything with a browser,
whether IP or name, then I would start to suspect there's a proxy setting in
IE Options, connection tab. Check that out and let us know what you see.

Also, I suggested to move Local Area Connection to the top of the binding
order in PC1, because it still shows as the second entry in your ipconfig
/all. I see it doesn't have a DNS address or gateway. No gateway is normal
for the internal interface since the outside interface's gateway is the ISP.
Leave that the way it is. But I would suggest to enter a DNS address in that
interface and move it to the top. You can use your ISP's DNS address for
that (195.241.77.55).

If not sure how to move the Local Area Connection to the top of the binding
order, goto Network & DIalup Connections, Advanced Menu, Advanced settings,
and select Local Area Connection, and click the up arrow so it will now show
at the top of the list.

If for further testing, you can even try to force the ISP's DNS
(195.241.77.55) into PC2 (assuming this is where the problem lies). This
will eliminate the fact if ICS on PC1 is not proxying the DNS request (as
it's designed to do). But check the proxy settings please.


--
Regards,
Ace

Please direct all replies to the newsgroup so all can benefit.
This posting is provided "AS-IS" with no warranties and confers no
rights.

Ace Fekay, MCSE 2000, MCSE+I, MCSA, MCT, MVP
Microsoft Windows MVP - Active Directory
 
-----Original Message-----
In Stephan <[email protected]> posted their thoughts, then I
offered mine

<snip>

I was assuming you're not running Active Directory. It doesn't appear to be,
so don't worry about that part.

If you can ping from the client, but cannot resolve anything with a browser,
whether IP or name, then I would start to suspect there's a proxy setting in
IE Options, connection tab. Check that out and let us know what you see.

Also, I suggested to move Local Area Connection to the top of the binding
order in PC1, because it still shows as the second entry in your ipconfig
/all. I see it doesn't have a DNS address or gateway. No gateway is normal
for the internal interface since the outside interface's gateway is the ISP.
Leave that the way it is. But I would suggest to enter a DNS address in that
interface and move it to the top. You can use your ISP's DNS address for
that (195.241.77.55).

If not sure how to move the Local Area Connection to the top of the binding
order, goto Network & DIalup Connections, Advanced Menu, Advanced settings,
and select Local Area Connection, and click the up arrow so it will now show
at the top of the list.

If for further testing, you can even try to force the ISP's DNS
(195.241.77.55) into PC2 (assuming this is where the problem lies). This
will eliminate the fact if ICS on PC1 is not proxying the DNS request (as
it's designed to do). But check the proxy settings please.


--
Regards,
Ace

Please direct all replies to the newsgroup so all can benefit.
This posting is provided "AS-IS" with no warranties and confers no
rights.

Ace Fekay, MCSE 2000, MCSE+I, MCSA, MCT, MVP
Microsoft Windows MVP - Active Directory
--
=================================


.
Click to expand...
Hi Ace,

I am not sure what you mean when you say you can see my PC-
1 Local Area Connection is the second entry in its
ipconfig/all listing. In my Network & Dialup Connections,
Advanced Menu, Advanced settings, Adapters and Bindings
tab, my Local Area Connection is shown on top, with my
Internet Connection showing right beneath that.

Are you perhaps referring to the fact that I do not use a
domain/DNS suffix in my two-PC LAN, whereas my ISP uses a
Connection-specific DNS Suffix (being tiscali.nl)?

Or otherwise, perhaps you are referring to the "NDIS WAN
CAPI driver" Netcard driver shown on top of the "3Com
Etherlink [...]" in PC-2's "netdiag/test:dns /v" listing.
I do not know why that driver is shown there nor how to
remove it (it seems to be idle anyway) - it was probably
not removed correctly durring some deinstall process
earlier on PC-2.

Proxy settings - None:
IE Options, connection tab, LAN Settings, both checkboxes
on Automatic configuration are unchecked and the Use a
proxy server for your LAN checkbox is unchecked as well.
(on both PC's)

Please note: PC-1 is browsing happily, its for PC-2 that
the resolution problem emerges. PC-2 will not IE browse
nor ping names, allthough it does ping IP addresses ok.

Also tried filling in the ISP's DNS addresses in PC-2's
DNS server address list as second and third order
alternative DNS server address (see ipconfig below).
Didn't help either.


Thank you so much!
Stephan

PC-2:

C:\>ipconfig /all

Windows 2000 IP Configuration

Host Name . . . . . . . . . . . . : rotterdam
Primary DNS Suffix . . . . . . . :
Node Type . . . . . . . . . . . . : Broadcast
IP Routing Enabled. . . . . . . . : No
WINS Proxy Enabled. . . . . . . . : No

Ethernet adapter Local Area Connection:

Connection-specific DNS Suffix . :
Description . . . . . . . . . . . : 3Com EtherLink
XL PCI TPO NIC (3C900
B-TPO)
Physical Address. . . . . . . . . : 00-01-02-A0-16-
CF
DHCP Enabled. . . . . . . . . . . : No
IP Address. . . . . . . . . . . . : 192.168.0.2
Subnet Mask . . . . . . . . . . . : 255.255.255.0
Default Gateway . . . . . . . . . : 192.168.0.1
DNS Servers . . . . . . . . . . . : 192.168.0.1
195.241.77.58
195.241.77.55

C:\>
 
In
Stephan said:
Hi Ace,

I am not sure what you mean when you say you can see my PC-
1 Local Area Connection is the second entry in its
ipconfig/all listing. In my Network & Dialup Connections,
Advanced Menu, Advanced settings, Adapters and Bindings
tab, my Local Area Connection is shown on top, with my
Internet Connection showing right beneath that.

Are you perhaps referring to the fact that I do not use a
domain/DNS suffix in my two-PC LAN, whereas my ISP uses a
Connection-specific DNS Suffix (being tiscali.nl)?

Or otherwise, perhaps you are referring to the "NDIS WAN
CAPI driver" Netcard driver shown on top of the "3Com
Etherlink [...]" in PC-2's "netdiag/test:dns /v" listing.
I do not know why that driver is shown there nor how to
remove it (it seems to be idle anyway) - it was probably
not removed correctly durring some deinstall process
earlier on PC-2.

Proxy settings - None:
IE Options, connection tab, LAN Settings, both checkboxes
on Automatic configuration are unchecked and the Use a
proxy server for your LAN checkbox is unchecked as well.
(on both PC's)

Please note: PC-1 is browsing happily, its for PC-2 that
the resolution problem emerges. PC-2 will not IE browse
nor ping names, allthough it does ping IP addresses ok.

Also tried filling in the ISP's DNS addresses in PC-2's
DNS server address list as second and third order
alternative DNS server address (see ipconfig below).
Didn't help either.


Thank you so much!
Stephan
Click to expand...
<snip>


Hmm, no proxy? Ok, I'm starting to think now it's an MTU issue. This is a
common issue with ADSL that I almost forgot about. You may have to do a reg
alteration to make this work, if this is the case. Default TCP/IP MTU is
1500 bytes. Due to ADSL's PPPoE overhead in the header, about 8 bytes is
used for PPPoE, therefore reducing it to 1492. In some cases, it's even
lower, and will cause issues, *possibly* what you're experiencing.. Here's
what I'm talking about and how to check to see what MTU is set, and some
other links on it.

MTU - How to test and how to set in registry:
http://gw.renner.bei.t-online.de/windowsxp/mtu.htm

Optimal MTU configuration for PPPoE ASDL Connections:
http://www.mynetwatchman.com/kb/ADSL/pppoemtu.htm

Troubleshooting MTU Size in PPPoE Dialin Connectivity-ADSL - Cisco :
http://www.cisco.com/en/US/tech/tk175/tk15/technologies_tech_note09186a0080093bc7.shtml


On another note, unusual that when one rearranges the binding order, that in
W2k, it should show it in that respect, but it's not in yours. I apologize
otherwise.

--
Regards,
Ace

Please direct all replies to the newsgroup so all can benefit.
This posting is provided "AS-IS" with no warranties and confers no
rights.

Ace Fekay, MCSE 2000, MCSE+I, MCSA, MCT, MVP
Microsoft Windows MVP - Active Directory
 
In Stephan <[email protected]> posted their thoughts, then I
offered mine
<snip>

As for your modem's USB, I thought that most modems have an ethernet
connection as well as the USB connection. Who is your provider and what
brand modem do you have? I know the Westel that Verizon uses do have an
option to use one or the other.

--
Regards,
Ace

Please direct all replies to the newsgroup so all can benefit.
This posting is provided "AS-IS" with no warranties and confers no
rights.

Ace Fekay, MCSE 2000, MCSE+I, MCSA, MCT, MVP
Microsoft Windows MVP - Active Directory
 
Sagem USB modem, it is an all-in package provided by
Tiscali (www.tiscali.nl, ISP in NL that usages the Dutch
BaByXL analogous DSL provider). The modem does only
connect through USB.

You think I won't be able to make the W2K DNS resolution
work with this configuration?

Stephan
 
In
Stephan said:
- The client successfully pings website IP adresses, but
- The client does not recognise (ping) website names
- Interestingly enough, the client's browser either does
not display webpages using http://<IP address>
Click to expand...
It is not surprising you can't use http://<ipaddress>, host headers are
common these days and many sites cannot be accessed by ipaddress.
When you use nslookup (or any DNS resolution tool) can you get resolution?
Do you have a local DNS server? (you can't use ICS on a machine with DNS)
Have you tried disabling ICS and re-enabling?
 
Hmm, no proxy? Ok, I'm starting to think now it's an MTU issue. This is a
common issue with ADSL that I almost forgot about. You may have to do a reg
alteration to make this work, if this is the case. Default TCP/IP MTU is
1500 bytes. Due to ADSL's PPPoE overhead in the header, about 8 bytes is
used for PPPoE, therefore reducing it to 1492. In some cases, it's even
lower, and will cause issues, *possibly* what you're experiencing.. Here's
what I'm talking about and how to check to see what MTU is set, and some
other links on it.

MTU - How to test and how to set in registry:
http://gw.renner.bei.t-online.de/windowsxp/mtu.htm

Optimal MTU configuration for PPPoE ASDL Connections:
http://www.mynetwatchman.com/kb/ADSL/pppoemtu.htm

Troubleshooting MTU Size in PPPoE Dialin Connectivity- ADSL - Cisco :
http://www.cisco.com/en/US/tech/tk175/tk15/technologies_te ch_note09186a0080093bc7.shtml


On another note, unusual that when one rearranges the binding order, that in
W2k, it should show it in that respect, but it's not in yours. I apologize
otherwise.

--
Regards,
Ace

Please direct all replies to the newsgroup so all can benefit.
This posting is provided "AS-IS" with no warranties and confers no
rights.

Ace Fekay, MCSE 2000, MCSE+I, MCSA, MCT, MVP
Microsoft Windows MVP - Active Directory
--
=================================


.
Click to expand...

Ace, I dare doubt this would solve the problem,
considering the fact I can ping <IP address>, but cannot
ping <website name> from my client. See also some ping
results from the DNS server (PC-1) and the client (PC-2)
below.

There must be something genuinely wrong with resolving
names to IP addresses from PC-2, I would guess..

Cheers,
Stephan

DNS server (PC-1):

C:\>ping -f -l 1500 192.168.0.1

Pinging 192.168.0.1 with 1500 bytes of data:

Packet needs to be fragmented but DF set.
Packet needs to be fragmented but DF set.
Packet needs to be fragmented but DF set.
Packet needs to be fragmented but DF set.

Ping statistics for 192.168.0.1:
Packets: Sent = 4, Received = 0, Lost = 4 (100% loss),
Approximate round trip times in milli-seconds:
Minimum = 0ms, Maximum = 0ms, Average = 0ms

C:\>ping -f -l 1454 192.168.0.1

Pinging 192.168.0.1 with 1454 bytes of data:

Reply from 192.168.0.1: bytes=1454 time<10ms TTL=128
Reply from 192.168.0.1: bytes=1454 time<10ms TTL=128
Reply from 192.168.0.1: bytes=1454 time<10ms TTL=128
Reply from 192.168.0.1: bytes=1454 time<10ms TTL=128

Ping statistics for 192.168.0.1:
Packets: Sent = 4, Received = 4, Lost = 0 (0% loss),
Approximate round trip times in milli-seconds:
Minimum = 0ms, Maximum = 0ms, Average = 0ms

C:\>ping -f -l 1454 www.spiegel.de

Pinging www.spiegel.de [195.71.11.67] with 1454 bytes of
data:

Reply from 195.71.11.67: bytes=1454 time=140ms TTL=246
Reply from 195.71.11.67: bytes=1454 time=150ms TTL=246
Reply from 195.71.11.67: bytes=1454 time=140ms TTL=246
Reply from 195.71.11.67: bytes=1454 time=151ms TTL=246

Ping statistics for 195.71.11.67:
Packets: Sent = 4, Received = 4, Lost = 0 (0% loss),
Approximate round trip times in milli-seconds:
Minimum = 140ms, Maximum = 151ms, Average = 145ms

C:\>


Client (PC-2):

C:\>ping -f -l 1500 192.168.0.1

Pinging 192.168.0.1 with 1500 bytes of data:

Packet needs to be fragmented but DF set.
Packet needs to be fragmented but DF set.
Packet needs to be fragmented but DF set.
Packet needs to be fragmented but DF set.

Ping statistics for 192.168.0.1:
Packets: Sent = 4, Received = 0, Lost = 4 (100% loss),
Approximate round trip times in milli-seconds:
Minimum = 0ms, Maximum = 0ms, Average = 0ms

C:\>ping -f -l 1454 192.168.0.1

Pinging 192.168.0.1 with 1454 bytes of data:

Reply from 192.168.0.1: bytes=1454 time<10ms TTL=128
Reply from 192.168.0.1: bytes=1454 time<10ms TTL=128
Reply from 192.168.0.1: bytes=1454 time<10ms TTL=128
Reply from 192.168.0.1: bytes=1454 time<10ms TTL=128

Ping statistics for 192.168.0.1:
Packets: Sent = 4, Received = 4, Lost = 0 (0% loss),
Approximate round trip times in milli-seconds:
Minimum = 0ms, Maximum = 0ms, Average = 0ms

C:\>ping -f -l 1454 www.spiegel.com
Unknown host www.spiegel.com.

C:\>
 
-----Original Message-----
In Stephan <[email protected]> posted a question
Then Kevin replied below:
It is not surprising you can't use http://<ipaddress>, host headers are
common these days and many sites cannot be accessed by ipaddress.
When you use nslookup (or any DNS resolution tool) can you get resolution?
Do you have a local DNS server? (you can't use ICS on a machine with DNS)
Have you tried disabling ICS and re-enabling?




.
Click to expand...

Kevin,

Disabling and than re-enabling ICS (on PC-1) did not show
to have improved the situation (with PC-2), unfortunately.

I am not sure I understand your comment on the
impossibility of having both ICS and a local DNS server on
the same machine, but I have added the nslookups for both
machines in my network below. (please refer to my original
message for ipconfigs of both machines)

Hope this gives you a clue.

Thank you,
Stephan

BTW Before using http://<ipaddress> on PC-2, I first
tested this on PC-1 to make sure the concerned site can
actually be accessed by ipaddress.


PC-1 (which connects to the internet):

C:\>nslookup
Default Server: ns3.tiscali.nl
Address: 195.241.77.55
exit
Click to expand...

C:\>


PC-2 (client):

C:\>nslookup
*** Can't find server name for address 192.168.0.1: No
response from server
*** Can't find server name for address 195.241.77.55: No
response from server
*** Can't find server name for address 195.241.77.58: No
response from server
*** Default servers are not available
Default Server: UnKnown
Address: 192.168.0.1
exit
Click to expand...

C:\>
 
In
Stephan said:
Disabling and than re-enabling ICS (on PC-1) did not show
to have improved the situation (with PC-2), unfortunately.

I am not sure I understand your comment on the
impossibility of having both ICS and a local DNS server on
the same machine, but I have added the nslookups for both
machines in my network below. (please refer to my original
message for ipconfigs of both machines)

Hope this gives you a clue.

Thank you,
Stephan

BTW Before using http://<ipaddress> on PC-2, I first
tested this on PC-1 to make sure the concerned site can
actually be accessed by ipaddress.


PC-1 (which connects to the internet):
Click to expand...

Does this machine have a DNS server on it?

Let me explain, ICS has a non-configurable DNS proxy in it that listens on
port 53. a DNS server also listens on port 53 so you end up with binding
conflicts, that's why you can run ICS on a machine with a DNS server on it.
You can however use NAT that is in routing and remote access, as long as you
don't enable the DNS proxy in RRAS.
 
-----Original Message-----
In Stephan <[email protected]> posted a question
Then Kevin replied below:

Does this machine have a DNS server on it?

Let me explain, ICS has a non-configurable DNS proxy in it that listens on
port 53. a DNS server also listens on port 53 so you end up with binding
conflicts, that's why you can run ICS on a machine with a DNS server on it.
You can however use NAT that is in routing and remote access, as long as you
don't enable the DNS proxy in RRAS.





.
Click to expand...

Thank you, Kevin.

However I must apologise, but I'am afraid you lost me on
that one - too much jargon. Is it possible that you
explain in more simple terms how I would do that.

Otherwise, perhaps you would be so kind to direct me to
some other source that elaborate on the issue more
comprehensively or provides a step-by-step procedure which
I can implement.

Thanks again,
Stephan
 
In
Stephan said:
Sagem USB modem, it is an all-in package provided by
Tiscali (www.tiscali.nl, ISP in NL that usages the Dutch
BaByXL analogous DSL provider). The modem does only
connect through USB.

You think I won't be able to make the W2K DNS resolution
work with this configuration?

Stephan
Click to expand...

Not sure at this point, but if the modem doesn;t have an RJ45 connector,
then it can't be used with one of those routers unless it supports USB WAN
connections.


--
Regards,
Ace

Please direct all replies to the newsgroup so all can benefit.
This posting is provided "AS-IS" with no warranties and confers no
rights.

Ace Fekay, MCSE 2000, MCSE+I, MCSA, MCT, MVP
Microsoft Windows MVP - Active Directory
 
In
Stephan said:
Ace, I dare doubt this would solve the problem,
considering the fact I can ping <IP address>, but cannot
ping <website name> from my client. See also some ping
results from the DNS server (PC-1) and the client (PC-2)
below.

There must be something genuinely wrong with resolving
names to IP addresses from PC-2, I would guess..
Click to expand...
<snip>

I see what you mean about pinging. But, just for testing, did you alter that
reg entry to just see if it works? You can always *EASILY* change it back to
the original setting, just export that key, then save it as a .reg file. If
it doesn't work, then double click on that file and it will put it back in,
or just change it manually.

Ok... if you already tried it...

Trying to narrow this sucker down. Ok, let's try another tactic... are there
any services turned off on PC2?

Services such as:
DHCP Client Service
TCP/IP NetBIOS Helper Service
Workstation Service
DNS Client service


On PC1:
Is File and Print sharing enabled?
Is there a personal firewall installed?


Has this machine ever been infected, such as with the QHOSTS virus?
http://securityresponse.symantec.com/avcenter/venc/data/trojan.bootconf.html

Just trying to look at all possibilities at this point. Maybe you can force
an IP to:
IP 192.168.0.100
mask 255.255.255.0
gate 192.168.0.1
DNS 4.2.2.2

Then try it again.
Then switch it back to DHCP.

Do you have another machine, such as a laptop, then you can try and put up
on your network as well and see if that experiences the same thing? I'm
trying to narrow down if it's the workstation or your machine set for ICS.
Maybe even switch them around and try it?

Heres a list of links dealing with ICF:
Microsoft Knowledge Base Articles dealing with Internet Connection Sharing
Issues ICS - InfiniSource, Inc. :
http://www.infinisource.com/techfiles/ics-mskb.html

--
Regards,
Ace

Please direct all replies to the newsgroup so all can benefit.
This posting is provided "AS-IS" with no warranties and confers no
rights.

Ace Fekay, MCSE 2000, MCSE+I, MCSA, MCT, MVP
Microsoft Windows MVP - Active Directory
 
In
Does this machine have a DNS server on it?

Let me explain, ICS has a non-configurable DNS proxy in it that
listens on port 53. a DNS server also listens on port 53 so you end
up with binding conflicts, that's why you can run ICS on a machine
with a DNS server on it. You can however use NAT that is in routing
and remote access, as long as you don't enable the DNS proxy in RRAS.
Click to expand...

Kevin, I don't believe he has DNS running on this box. If he did, he would
be getting the NATHLP error in his event viewer, which I think I asked him
if he was getting any errors. Kind of getting to be a long thread at this
point.

I hope he doesn't have DNS on this machine. That would be the cause of the
whole thing. I was somewhat assuming these are both Pro machines since he
wasn't even sure what I meant by "if AD is running".


--
Regards,
Ace

Please direct all replies to the newsgroup so all can benefit.
This posting is provided "AS-IS" with no warranties and confers no
rights.

Ace Fekay, MCSE 2000, MCSE+I, MCSA, MCT, MVP
Microsoft Windows MVP - Active Directory
 
In Stephan <[email protected]> posted their thoughts, then I
offered mine


From both machines, at a command prompt, type in:

net start <enter>

and post the results please.

Thanks



--
Regards,
Ace

Please direct all replies to the newsgroup so all can benefit.
This posting is provided "AS-IS" with no warranties and confers no
rights.

Ace Fekay, MCSE 2000, MCSE+I, MCSA, MCT, MVP
Microsoft Windows MVP - Active Directory
 
In
Thank you, Kevin.

However I must apologise, but I'am afraid you lost me on
that one - too much jargon. Is it possible that you
explain in more simple terms how I would do that.

Otherwise, perhaps you would be so kind to direct me to
some other source that elaborate on the issue more
comprehensively or provides a step-by-step procedure which
I can implement.

Thanks again,
Stephan
Click to expand...

Simply put, does the machine have a DNS server running on it?

Is it Win2k Pro or server?
 
-----Original Message-----
In Stephan <[email protected]> posted a question
Then Kevin replied below: proxy in RRAS.
Thank you, Kevin.

However I must apologise, but I'am afraid you lost me on
that one - too much jargon. Is it possible that you
explain in more simple terms how I would do that.

Otherwise, perhaps you would be so kind to direct me to
some other source that elaborate on the issue more
comprehensively or provides a step-by-step procedure which
I can implement.

Thanks again,
Stephan
Click to expand...

Simply put, does the machine have a DNS server running on it?

Is it Win2k Pro or server?





.
Click to expand...

Kevin,

Ok, thanks, I think I can handle this one: Both machines
are running Windows 2000 Professional.

Regards,
Stephan
 
In
Stephan said:
Ok, thanks, I think I can handle this one: Both machines
are running Windows 2000 Professional.

Regards,
Stephan
Click to expand...

Then that pretty much answers my question, unless you have installed
something that has a DNS server in it then you don't have a DNS server.
Have you disabled any services?
Run the command Ace gave you in a command prompt: "net start" (without
quotes) and post the results. This will list the running services.

Have you enabled packet filtering on any interfaces?
Are all ports open?
Packet filtering on interfaces cannot take the place of a good firewall
because it does not allow for port redirection for outgoing connections, and
you have to open too many ports to get functionality. I suggest you use a
firewall or get a good router that has a firewall.
 
Back
Top