Werbung: SecurityConsole.de verwaltet Ihre Computer mit Security Essentails aus der Cloud!
30 Tage kostenfrei testen und 20% Rabatt für Ihre Bestellung mit Promocode: WBF2685582
(Promocode gültig bis 31.12.2011)

Group:  English: Windows Server » microsoft.public.windows.server.dns
Thread: ping to a non existent host...

HTVi
TV Discussion Newsgroups

ping to a non existent host...
minnow 5/14/2007 1:46:01 PM
Whenever I ping a non-existent machine name on my network (ping computer2000)
I get the following response 216.34.131.135. This is an external IP
(obviously) and is not one of my DNS forwarders. I have a surf control tool
that logs all web access to the internet. This same IP address comes up as
being accessed often even on weekends when nobody is in the office. Has my
DNS system/ server been hacked? I have run anti-spyware programs on every
machine in the place but this only reduces the number of hits to this IP. Any
suggestions would be greatly appreciated.
Re: ping to a non existent host...
"Kevin D. Goodknecht Sr. [MVP]" <admin[ at ]nospam.WFTX.US> 5/15/2007 3:09:23 AM
Read inline please.

In news:D412384F-4888-4368-BE74-45DA2C3B8A92[ at ]microsoft.com,
minnow <minnow[ at ]discussions.microsoft.com> typed:
[Quoted Text]
> Whenever I ping a non-existent machine name on my network (ping
> computer2000) I get the following response 216.34.131.135. This is an
> external IP (obviously) and is not one of my DNS forwarders. I have a
> surf control tool that logs all web access to the internet. This same
> IP address comes up as being accessed often even on weekends when
> nobody is in the office. Has my DNS system/ server been hacked? I
> have run anti-spyware programs on every machine in the place but this
> only reduces the number of hits to this IP. Any suggestions would be
> greatly appreciated.

Let me take a guess, (since that's all I can do with the information you
given) your internal domain name is a third, fourth or lower level of a
Public Top Level domain. Examples, home.domain.com or domain.co.uk?

The default behavior of the DNS Client in Windows adds the Primary DNS
suffix and its parent suffixes to the DNS Suffix search list, (check your
ipconfig /all) Depending on the Primary DNS suffix you could have several
parent suffixes added to the DNS suffix search list, which is appended to
all non-fully-qualified DNS lookups by the client. KEEP IN MIND, a DNS query
is not fully qualified unless it also includes the DNS Root (A dot ".")
www.microsoft.com is not fully qualified while www.microsoft.com. is. If
your DNS server does not have a zone for each of these suffixes, it forwards
these queries, and some public DNS providers use wildcard records, and
apparently, one of the parent domains in your DNS suffix search list has
such a wildcard record.

--
Best regards,
Kevin D. Goodknecht Sr. [MVP]
Hope This Helps
Send IM: http://www.icq.com/people/webmsg.php?to=296095728
===================================
When responding to posts, please "Reply to Group"
via your newsreader so that others may learn and
benefit from your issue, to respond directly to
me remove the nospam. from my email address.
===================================
http://www.lonestaramerica.com/
http://support.wftx.us/
http://message.wftx.us/
===================================
Use Outlook Express?... Get OE_Quotefix:
It will strip signature out and more
http://home.in.tum.de/~jain/software/oe-quotefix/
===================================
Keep a back up of your OE settings and folders
with OEBackup:
http://www.oehelp.com/OEBackup/Default.aspx
===================================


Re: ping to a non existent host...
minnow 5/15/2007 1:32:02 PM
Kevin,
You are correct, IPCONFIG /ALL returns:
my.domain.name.com
my.domain.name.com
Part.name.com
Not.mine.com
My correct domain name is one of the top 2 (they are the same why is that?).
Now my question is how do I get rid of the bottom 2 domain names?

More environment information:
DNS Server is Windows Server 2003 Standard Sp2.
Active directory integrated.


"Kevin D. Goodknecht Sr. [MVP]" wrote:

[Quoted Text]
> Read inline please.
>
> In news:D412384F-4888-4368-BE74-45DA2C3B8A92[ at ]microsoft.com,
> minnow <minnow[ at ]discussions.microsoft.com> typed:
> > Whenever I ping a non-existent machine name on my network (ping
> > computer2000) I get the following response 216.34.131.135. This is an
> > external IP (obviously) and is not one of my DNS forwarders. I have a
> > surf control tool that logs all web access to the internet. This same
> > IP address comes up as being accessed often even on weekends when
> > nobody is in the office. Has my DNS system/ server been hacked? I
> > have run anti-spyware programs on every machine in the place but this
> > only reduces the number of hits to this IP. Any suggestions would be
> > greatly appreciated.
>
> Let me take a guess, (since that's all I can do with the information you
> given) your internal domain name is a third, fourth or lower level of a
> Public Top Level domain. Examples, home.domain.com or domain.co.uk?
>
> The default behavior of the DNS Client in Windows adds the Primary DNS
> suffix and its parent suffixes to the DNS Suffix search list, (check your
> ipconfig /all) Depending on the Primary DNS suffix you could have several
> parent suffixes added to the DNS suffix search list, which is appended to
> all non-fully-qualified DNS lookups by the client. KEEP IN MIND, a DNS query
> is not fully qualified unless it also includes the DNS Root (A dot ".")
> www.microsoft.com is not fully qualified while www.microsoft.com. is. If
> your DNS server does not have a zone for each of these suffixes, it forwards
> these queries, and some public DNS providers use wildcard records, and
> apparently, one of the parent domains in your DNS suffix search list has
> such a wildcard record.
>
> --
> Best regards,
> Kevin D. Goodknecht Sr. [MVP]
> Hope This Helps
> Send IM: http://www.icq.com/people/webmsg.php?to=296095728
> ===================================
> When responding to posts, please "Reply to Group"
> via your newsreader so that others may learn and
> benefit from your issue, to respond directly to
> me remove the nospam. from my email address.
> ===================================
> http://www.lonestaramerica.com/
> http://support.wftx.us/
> http://message.wftx.us/
> ===================================
> Use Outlook Express?... Get OE_Quotefix:
> It will strip signature out and more
> http://home.in.tum.de/~jain/software/oe-quotefix/
> ===================================
> Keep a back up of your OE settings and folders
> with OEBackup:
> http://www.oehelp.com/OEBackup/Default.aspx
> ===================================
>
>
>
Re: ping to a non existent host...
"Kevin D. Goodknecht Sr. [MVP]" <admin[ at ]nospam.WFTX.US> 5/15/2007 11:07:07 PM
Read inline please.

In news:FD635A41-E454-47E9-85F1-88E19418164A[ at ]microsoft.com,
minnow <minnow[ at ]discussions.microsoft.com> typed:
[Quoted Text]
> Kevin,
> You are correct, IPCONFIG /ALL returns:
> my.domain.name.com
> my.domain.name.com
> Part.name.com
> Not.mine.com
> My correct domain name is one of the top 2 (they are the same why is
> that?). Now my question is how do I get rid of the bottom 2 domain
> names?

on XP and Win2k3 clients, this can be done with a Group Policy, you have a
choice of two depending on your domain environment, both are in the same
template.

Computer Configuration
-Administrative templates
-Network
-DNS Client

Primary DNS Suffix Devolution (Set to Disabled)

DNS Suffix Search List
This group policy allows you to assign a custom DNS suffix search list, use
this if you have one or more child or sister domains.

IF you have any Win2k clients left, you'll have add the suffix list to each
one, separately.

--
Best regards,
Kevin D. Goodknecht Sr. [MVP]
Hope This Helps
Send IM: http://www.icq.com/people/webmsg.php?to=296095728
===================================
When responding to posts, please "Reply to Group"
via your newsreader so that others may learn and
benefit from your issue, to respond directly to
me remove the nospam. from my email address.
===================================
http://www.lonestaramerica.com/
http://support.wftx.us/
http://message.wftx.us/
===================================
Use Outlook Express?... Get OE_Quotefix:
It will strip signature out and more
http://home.in.tum.de/~jain/software/oe-quotefix/
===================================
Keep a back up of your OE settings and folders
with OEBackup:
http://www.oehelp.com/OEBackup/Default.aspx
===================================


Re: ping to a non existent host...
"Kevin D. Goodknecht Sr. [MVP]" <admin[ at ]nospam.WFTX.US> 5/15/2007 11:07:07 PM
Read inline please.

In news:FD635A41-E454-47E9-85F1-88E19418164A[ at ]microsoft.com,
minnow <minnow[ at ]discussions.microsoft.com> typed:
[Quoted Text]
> Kevin,
> You are correct, IPCONFIG /ALL returns:
> my.domain.name.com
> my.domain.name.com
> Part.name.com
> Not.mine.com
> My correct domain name is one of the top 2 (they are the same why is
> that?). Now my question is how do I get rid of the bottom 2 domain
> names?

on XP and Win2k3 clients, this can be done with a Group Policy, you have a
choice of two depending on your domain environment, both are in the same
template.

Computer Configuration
-Administrative templates
-Network
-DNS Client

Primary DNS Suffix Devolution (Set to Disabled)

DNS Suffix Search List
This group policy allows you to assign a custom DNS suffix search list, use
this if you have one or more child or sister domains.

IF you have any Win2k clients left, you'll have add the suffix list to each
one, separately.

--
Best regards,
Kevin D. Goodknecht Sr. [MVP]
Hope This Helps
Send IM: http://www.icq.com/people/webmsg.php?to=296095728
===================================
When responding to posts, please "Reply to Group"
via your newsreader so that others may learn and
benefit from your issue, to respond directly to
me remove the nospam. from my email address.
===================================
http://www.lonestaramerica.com/
http://support.wftx.us/
http://message.wftx.us/
===================================
Use Outlook Express?... Get OE_Quotefix:
It will strip signature out and more
http://home.in.tum.de/~jain/software/oe-quotefix/
===================================
Keep a back up of your OE settings and folders
with OEBackup:
http://www.oehelp.com/OEBackup/Default.aspx
===================================


Home | Search | Terms | Imprint Contact
Newsgroups Reader - provided by WiredBox.Net
Suche nach Orten, Städten, Postleitzahlen, Vorwahlen, Kfz-Kennzeichen