Win2k DNS Issue, IPs show up in nslookup but not the MMC, where are they coming from?

[MysticLlama]

I'm nearly pulling my hair out over this one.

I've been trying to get DNS 100% stable because a bunch of test servers on the domain that the internet guys were using were doing dynamic updates and kept adding IPs to the tables that were screwing things up.

I think I've got that taken care of by adding the DisableDynamicUpdate Registry Key to 1 on these systems, and also by stopping and disabling the DHCP client (they were using statics anyway).

I still have this one nagging issue that's driving me crazy though, whenever I do a direct nslookup query against one of the servers for just the domain (i.e. domain.com vs. server.domain.com) it's coming up with more IP addresses then are showing up in the MMC. To further make a mess, a couple of servers are doing this, but they aren't coming up with the same results (and every other record sync's flawlessly between them).

Here's the really really weird part... The numbers that are getting added are part of the range on the PIX, but one is permanently mapped to a corresponding IP on the DMZ, one is part of the NAT range, and one is unused (and the other server doing this is only showing 2 of these, not three).

Anyone have any idea about where this is coming from? Or, more importantly, how to kill those records when they don't show up in the management console?

 

[Thor86]

Originally posted by: MysticLlama
Anyone have any idea about where this is coming from? Or, more importantly, how to kill those records when they don't show up in the management console?

You can't delete the IPs or parts of your DNS records?

 

[MysticLlama]

That's the thing, I've even turned all updating off, and manually deleted the records. (That I can see) and these things are still showing up in nslookup.

I know that to delete a domain controller that wasn't removed correctly from the directory and other things like that there are some tools that let you get in there and see those things, but I'm not sure where to look for DNS stuff.

According to the DNS records now, an nslookup should produce three 192.0.0.0 address, and instead I get one 192.0.0.0 and three externals. The weird part is that on the other two servers, I get two externals, and two 192.0.0.0s (at least that's how it's working at this particular moment)

I know that there has to be some way to get to the actual Directory info in raw form outside of the MMC, but I haven't yet found what tool to use or where to look for it.

 

[err]

try this simple command on both your client and your win2k dns box to clear the dns cache on the box:

ipconfig /flushdns

Also, make sure Wins is not answering your dns. I would safely assume there;s no host files ?

Also, look at win2k dns server to see if forwarding is enabled. Check on the dns forwarders as well.

One more thing, you might also want to clear the win2k dns cache (enable advanced view in DNS mmc), update the server and restart the dns server if necessary.

Hope this helps. Let us know how it goes

eRr