nslookup can't but browser can !

Prashant Ranade pranade at gigabitwireless.com
Wed Aug 23 02:30:39 UTC 2000


hello,
thanks for taking so much interest
the setup is as follows :
the internal network has 192.168.x.x IPs with an NT DNS which has many
entries in its domain. we have a cisco router with access lists and NAT
running on it and converting all our internal addresses to the registered
addresses before they leave the box, and everything is working fine. we are
able to browse, send mails, receive mails...
now on this nt box in its DNS tab in network protocol we have a IP address of
our ISPs nameserver. if I run nslookup on this box and point it to itself by
saying "server ntbox" (assuming ntbox the name of this nt machine which is
running DNS) and try to resolve www.yahoo.com I get an answer which I know is
from its cache.
so I then pointed the nslookup to the ISPs nameserver for the same query
expecting that it will give an non-authoritative answer but it returned
saying "unknown host"
if the ISPs dns dosn't know where www.yahoo.com is then where is my dns
getting the resolution from(other than cache)...
this confused me totally... all my theries about DNS and browsing have beed
proved wrong...
I did check in browsers preference, advanced, proxies... and there the radio
button for "direct connection to internet" is checked.
so my worry is if sometime the cache of this NT domain nameserver is wiped
out and if my ISPs nameserver is not able to resolve www.yahoo.com then the
whole company will not be able to resolve anything.
fyi : I checked with the ISP and made it sure that the nameserver address
which we are using is indeed the name server.

any help in this matter will be appreciated.
TIA
Prashant

Joseph S D Yao wrote:

> On Tue, Aug 22, 2000 at 05:26:28PM -0700, Prashant Ranade wrote:
> > ok..
> > let me explain somethings first I think my post was not very clear.
> > I don't have a proxy server at all. we are using NAT so that the
> > machines can go out on there on and get the content from the web sites.
> > so now, without a proxy if nslookup can't resolve the name where the
> > browser is getting the IP address from
> > I was haiving a cache for some addresses in the NT DNS. but I tried
> > browsing the site whos IP address was not there in the cache, I could
> > browse the site and the record got added to the cache
> > this is what confused me the most !
> >
> > TIA
> > Prashant
>
> How are you using NAT without a proxy?
>
> Open up Navigator, go to Edit->Preferences->Advanced->Proxies.  Tell me
> what you see.  If manual, press View... and tell me what you see in all
> of the blanks.
>
> --
> Joe Yao                         jsdy at cospo.osis.gov - Joseph S. D. Yao
> COSPO/OSIS Computer Support                                     EMT-B
> -----------------------------------------------------------------------
> This message is not an official statement of COSPO policies.




More information about the bind-users mailing list