<html><head></head><body style="word-wrap: break-word; -webkit-nbsp-mode: space; -webkit-line-break: after-white-space; "><div>The Cisco VPN Client does, indeed, change the Microsoft generated DNS search list. The Microsoft DNS resolver routines will use the appropriate Microsoft or Cisco generated search list to resolve names and IP addresses. The problem is that Microsoft's nslookup is isn't using this nor does it use the name server specified on the command line.</div><div><br></div><div>The problem isn't so much that Microsoft's nslookup implementation returns the wrong answer. The problem is that Windows weanies believe that nslookup is returning the correct answer.</div><div><br></div><div>Thanks for your help.</div><div><br></div><div><br></div><br><div><div>On Jun 15, 2010, at 11:20 AM, Tim Maestas wrote:</div><br class="Apple-interchange-newline"><blockquote type="cite"><div>One thing I also learned recently is that the Cisco IPSEC VPN client<br>dialer hijacks all UDP DNS packets and sends them to the DNS server<br>handed out by the VPN concentrators. So "dig @x.x.x.x" and "nslookup<br>foo.bar x.x.x.x" queries don't actually go to x.x.x.x. Don't know if<br>that's in play here but thought it worth mentioning.<br><br>-Tim<br><br><br>On Tue, Jun 15, 2010 at 11:06 AM, Steve Shockley<br><<a href="mailto:steve.shockley@shockley.net">steve.shockley@shockley.net</a>> wrote:<br><blockquote type="cite">On 6/13/2010 4:00 PM, Merton Campbell Crockett wrote:<br></blockquote><blockquote type="cite"><blockquote type="cite"><br></blockquote></blockquote><blockquote type="cite"><blockquote type="cite">Inspecting the query log on the name server indicates that BIND never<br></blockquote></blockquote><blockquote type="cite"><blockquote type="cite">services a request from the system running Microsoft's nslookup tool. In<br></blockquote></blockquote><blockquote type="cite"><blockquote type="cite">addition, using tcpdump in controlled tests, I find that Microsoft's<br></blockquote></blockquote><blockquote type="cite"><blockquote type="cite">nslookup implementation never sends any requests to any name server that<br></blockquote></blockquote><blockquote type="cite"><blockquote type="cite">is designated in a "server" command unless it is one of the default name<br></blockquote></blockquote><blockquote type="cite"><blockquote type="cite">servers that the system would normally use.<br></blockquote></blockquote><blockquote type="cite"><br></blockquote><blockquote type="cite">WinXP and newer sometimes cache results in unexpected ways, including<br></blockquote><blockquote type="cite">caching failed lookups. Perhaps flushing the DNS cache will help.<br></blockquote><blockquote type="cite"><br></blockquote><blockquote type="cite">With that said, I could not duplicate the problem on Win7's nslookup:<br></blockquote><blockquote type="cite"><br></blockquote><blockquote type="cite"><blockquote type="cite"><a href="http://foo.shockley.net">foo.shockley.net</a><br></blockquote></blockquote><blockquote type="cite">Server: server2003.internal.corporate<br></blockquote><blockquote type="cite">Address: 192.168.x.x<br></blockquote><blockquote type="cite"><br></blockquote><blockquote type="cite">*** server2003.internal.corporate can't find <a href="http://foo.shockley.net">foo.shockley.net</a>: Non-existent<br></blockquote><blockquote type="cite">domain<br></blockquote><blockquote type="cite"><br></blockquote><blockquote type="cite"><blockquote type="cite">server 208.67.222.222<br></blockquote></blockquote><blockquote type="cite">Default Server: <a href="http://resolver1.opendns.com">resolver1.opendns.com</a><br></blockquote><blockquote type="cite">Address: 208.67.222.222<br></blockquote><blockquote type="cite"><br></blockquote><blockquote type="cite"><blockquote type="cite"><a href="http://foo.shockley.net">foo.shockley.net</a>.<br></blockquote></blockquote><blockquote type="cite">Server: <a href="http://resolver1.opendns.com">resolver1.opendns.com</a><br></blockquote><blockquote type="cite">Address: 208.67.222.222<br></blockquote><blockquote type="cite"><br></blockquote><blockquote type="cite">Non-authoritative answer:<br></blockquote><blockquote type="cite">Name: <a href="http://foo.shockley.net">foo.shockley.net</a><br></blockquote><blockquote type="cite">Address: 67.215.65.132<br></blockquote><blockquote type="cite"><br></blockquote><blockquote type="cite">(<a href="http://foo.shockley.net">foo.shockley.net</a> does not exist, that result is an opendns ad page.)<br></blockquote><blockquote type="cite">_______________________________________________<br></blockquote><blockquote type="cite">bind-users mailing list<br></blockquote><blockquote type="cite"><a href="mailto:bind-users@lists.isc.org">bind-users@lists.isc.org</a><br></blockquote><blockquote type="cite"><a href="https://lists.isc.org/mailman/listinfo/bind-users">https://lists.isc.org/mailman/listinfo/bind-users</a><br></blockquote><blockquote type="cite"><br></blockquote></div></blockquote></div><br><div>
<span class="Apple-style-span" style="border-collapse: separate; color: rgb(0, 0, 0); font-family: Helvetica; font-size: medium; font-style: normal; font-variant: normal; font-weight: normal; letter-spacing: normal; line-height: normal; orphans: 2; text-align: auto; text-indent: 0px; text-transform: none; white-space: normal; widows: 2; word-spacing: 0px; -webkit-border-horizontal-spacing: 0px; -webkit-border-vertical-spacing: 0px; -webkit-text-decorations-in-effect: none; -webkit-text-size-adjust: auto; -webkit-text-stroke-width: 0px; "><span class="Apple-style-span" style="border-collapse: separate; -webkit-border-horizontal-spacing: 0px; -webkit-border-vertical-spacing: 0px; color: rgb(0, 0, 0); font-family: 'Helvetica Neue'; font-size: 12px; font-style: normal; font-variant: normal; font-weight: normal; letter-spacing: normal; line-height: normal; -webkit-text-decorations-in-effect: none; text-indent: 0px; -webkit-text-size-adjust: auto; text-transform: none; orphans: 2; white-space: normal; widows: 2; word-spacing: 0px; "><div style="word-wrap: break-word; -webkit-nbsp-mode: space; -webkit-line-break: after-white-space; "><span class="Apple-style-span" style="border-collapse: separate; -webkit-border-horizontal-spacing: 0px; -webkit-border-vertical-spacing: 0px; color: rgb(0, 0, 0); font-family: 'Helvetica Neue'; font-size: 12px; font-style: normal; font-variant: normal; font-weight: normal; letter-spacing: normal; line-height: normal; -webkit-text-decorations-in-effect: none; text-indent: 0px; -webkit-text-size-adjust: auto; text-transform: none; orphans: 2; white-space: normal; widows: 2; word-spacing: 0px; "><div>--</div><div>Merton Campbell Crockett</div><div><a href="mailto:m.c.crockett@roadrunner.com">m.c.crockett@roadrunner.com</a></div><div><br class="khtml-block-placeholder"></div><br class="Apple-interchange-newline"></span></div></span></span><br class="Apple-interchange-newline">
</div>
<br></body></html>