ALL DNS Entries resolve to 127.0.0.1 in Networking http://www.dslreports.com/forum/r22623362 en Thu, 26 Nov 2009 15:14:04 EDT Thu, 26 Nov 2009 15:14:04 EDT Re: ALL DNS Entries resolve to 127.0.0.1 http://www.dslreports.com/forum/remark,22644400 Matt :
said by waynebike See Profile :

Thanks to all who have replied. I'm actually working with Microsoft on this now. I've managed to stump two seperate teams thus far (AD & Networking). Both have had access to the systems and are completely unsure so for as to how this could be happening. If/when we get this resolved, I'll post the solution here. For now, I'll let them have a stab at it.
Many moons ago I interviewed with the Microsoft Networking Team. If you're working at the level I would have been, those are some smart guys. You're in good hands.]]> http://www.dslreports.com/forum/remark,22644400 Thu, 02 Jul 2009 11:05:02 EDT Re: ALL DNS Entries resolve to 127.0.0.1 http://www.dslreports.com/forum/remark,22642220 waynebike : Thanks to all who have replied. I'm actually working with Microsoft on this now. I've managed to stump two seperate teams thus far (AD & Networking). Both have had access to the systems and are completely unsure so for as to how this could be happening. If/when we get this resolved, I'll post the solution here. For now, I'll let them have a stab at it.]]> http://www.dslreports.com/forum/remark,22642220 Wed, 01 Jul 2009 21:28:27 EDT Re: ALL DNS Entries resolve to 127.0.0.1 http://www.dslreports.com/forum/remark,22642135 efflandt : Some ISP's do use private IP's as gateways, since outbound and inbound routes can differ (out/in routes differ on my DSL even though all IP's involved are public). And some foreign ISP do not even give their users public IP's (they NAT their customers). So if someone assumed that traffic to "any" private IP should not go out the WAN, they might break something.]]> http://www.dslreports.com/forum/remark,22642135 Wed, 01 Jul 2009 21:09:50 EDT Re: ALL DNS Entries resolve to 127.0.0.1 http://www.dslreports.com/forum/remark,22630156 Matt :
said by tschmidt See Profile :

said by Matt See Profile :

Your Linksys should drop those packets as private address space shouldn't be routed onto the public internet.
The only addresses router will not forward is the local address segment used by the LAN. It has no way of knowing what addresses are being used external to itself.
Dood, Tom, you're right. I just tested performing a trace route to 10.0.0.1 and sure enough, my router tried to send it out onto North State's (my ISP's) network. I was under the assumption that a home router would be intelligent enough to know about the private address space and not pass it LAN to WAN.]]> http://www.dslreports.com/forum/remark,22630156 Mon, 29 Jun 2009 18:29:41 EDT Re: ALL DNS Entries resolve to 127.0.0.1 http://www.dslreports.com/forum/remark,22630068 tschmidt :
said by Matt See Profile :

Your Linksys should drop those packets as private address space shouldn't be routed onto the public internet.
The only addresses router will not forward is the local address segment used by the LAN. It has no way of knowing what addresses are being used external to itself.

There is a lot of confusion about RFC 1918 private addresses. They are private in so far as they are not used on the public Internet. However that does not mean they are forbidden from being used by ISPs or corporate networks. As you pointed out it is common for ISPs to use the 10/8 block for edge routers. The "public" Internet does not begin until the ISP hands the traffic off at peering point.

/tom]]> http://www.dslreports.com/forum/remark,22630068 Mon, 29 Jun 2009 18:12:51 EDT Re: ALL DNS Entries resolve to 127.0.0.1 http://www.dslreports.com/forum/remark,22629728 Matt : What is 10.2.11.2? Is that the IP of your server at work? If so, most cable companies use the 10.x.x.x network for devices, so what it looks like it happening is that you are running a trace route to a piece of Comcast equipment, not to your server.

What has me MORE puzzled, is why in the hell is your WRT router passing a 10.x.x.x address out the WAN port. Your Linksys should drop those packets as private address space shouldn't be routed onto the public internet.]]> http://www.dslreports.com/forum/remark,22629728 Mon, 29 Jun 2009 17:01:05 EDT Re: ALL DNS Entries resolve to 127.0.0.1 http://www.dslreports.com/forum/remark,22623688 Bink : From your tracert it would appear they might be using a Comcast DNS server—and Comcast is improperly routing traffic to private address space out their network. It also appears Comcast’s DNS servers, for whatever reason, are using a loopback address in response to some types of DNS requests. It might also be the case where Comcast is using private address space that is similar to what you use on their internal network.]]> http://www.dslreports.com/forum/remark,22623688 Sun, 28 Jun 2009 12:16:13 EDT Re: ALL DNS Entries resolve to 127.0.0.1 http://www.dslreports.com/forum/remark,22623603 efflandt : When they are on the road, does ipconfig /all in a command window show a DNS Suffix

And in a command window does nslookup gobblygook resolve to 127.0.0.1? Maybe their ISP sets their own domain as default DNS suffix and uses a wildcard entry to resolve any unknown name in that default domain to self.

Or are there any manual settings for DNS Suffix in the Advanced tab of TCP/IP properties for whatever interface they are using for their on the road internet connection or in general?]]> http://www.dslreports.com/forum/remark,22623603 Sun, 28 Jun 2009 11:54:47 EDT ALL DNS Entries resolve to 127.0.0.1 http://www.dslreports.com/forum/remark,22623362 waynebike : Hi All,

I've been struggling with a very strange issue here lately. I support a few hundred PC's which are configured with folder redirection for my docs, favorites and desktop items. I then use offline files to allow laptop uses to sync these directories so that they have access to them while they are at home.

This has worked perfectly fine since its introduction nearly 2 years ago. As of Tuesday of this week, I've had almost every one of my users get prompted for a password after logging in, but ONLY when they are outside of my office. This dialogue box is prompting them for a password to my file server, lets call it fileserver1.contoso.com. No combination of their current username/password provides successful authentication as it complains that no DC is currently available.

In doing a bit of troubleshooting on their machine, here is what i've found:
1.) NO changes have been made recently to any of our configs/network.
2.) No entries in the hosts file accept for 127.0.0.1 for localhost
3.) I'm able to ping anything and it resolves to 127.0.0.1 as long as I don't specify a domain (ex. .com). Example: ping fhfhdfyduaifydufayduia resolves to 127.0.0.1.
4.) All Virus defs are up to date (mcAfee 8.5i Patch 8), also uninstalled mcafee to see if that was causing the issue.
5.) I tried adding the IP to my file server to the hosts file in order to see if that could resolve my issue (hoping that it would find the server is offline and then stay offline) and it was still able to resolve! tracert showed the following:

It's worth noting that there is no VPN or any kind of connection back to our office when working remotely. I'm at a complete and total loss on this one, any ideas are appreciated. Thanks!
]]> http://www.dslreports.com/forum/remark,22623362 Sun, 28 Jun 2009 10:26:56 EDT