Developer Forum

Present configuration= modem - linksys router - external adapter - server(
sbs 2003 standard) - internal adapter - switch - workstations.

Had to quickly set up a server after last one was stolen. Could only get on
the Internet if I set the router to obtain IP automatically instead of being
able to put the modem into bridged mode and setting the router to PPoE -
could not surf the net this way although I could bring up the Google page but
clicking on any links wouldn't bring up a page.

Started checking the event viewer. I show a lot of dns warnings. So I guess
this
may be the cause of all my problems. The event is 7062 which is a packet
addressed to itslef. It tells me to look up forwarders, zones and root hints.
when I check out the properties, I get the following information for these
tabs:
Interface: 192.168.16.2 (server local ip)
Forwarders: *.*.*.* and *.*.*.* (isp's dns)
Root hints: FQDN; IP address - unknown

My forward lookup zones: _msdcs.****.local
****.local

On my routing and remote access under NAT/Basic Firewall
Local area connection is set to - Public interface to the Internet with
enable Nat on this interface and enable basic firewall checked.
Server Local is set to Private interface connected to private network.

Also looking at the router under Advanced Routing - it has NAT enabled. When
I disabled this I was able to surf the net so for the time being I have set
it back
to Enable.

Under DHCP the Address Pool 192.168.16.1 - 192.168.16.254 excluding
192.168.16.1 to 192.168.16.9
Scope Options: Router-192.168.16.2; dns
server-192.168.16.2;domain name: ***.local
Wins-192.168.16.2
node:0x8

Not sure what the values on each of these should be I
have to do some homework.

i Dsully,

Thank you for posting in SBS newsgroup.

From the description, I understand the network diagram is as following:

modem - linksys router - external adapter - server(sbs 2003 standard) -
internal adapter - switch - workstations

and your current issue is you got Event id 7062 on SBS. Do you mean the
event occurs only when you put the modem into bridged mode and setting the
router to PPoE?

Firstly please make sure you have followed the KB article to configure SBS:

825763 How to configure Internet access in Windows Small Business Server
2003
http://support.microsoft.com/?id=825763

Regarding this error, the cause could be that DNS forward lookup zone is
missing _msdcs.domain.local. To correct it, please refer to the following
steps.

By default, SBS DNS Forward Lookup zone contains _msdcs.domain.local and
domain.local. Recreate the _msdcs.domain.local zone if it is missing:

0. Open the DNS console. If you find the _msdcs.ccd.local exist, you could
delete this zone by right clicking it and clicking delete, as this zone may
be corrupt
1. Right-click Forward Lookup Zones in DNS and select New Zone.
2. Specify Primary Zone, and use _msdcs.ccd.local as the Zone name.
3. Stop Netlogon and DNS service.
4. Rename %windir%\system32\config\netlogon.dns and netlogon.dnb
5. Start Netlogon and DNS service
6. ipconfig /flushdns and ipconfig /registerdns
7. Close and reopen the DNS snapin.
8. Verify _msdcs.ccd.local contains dc, domains, gc, and pdc.

It also may be caused by the following records:

1. Forwarders list. (DNS servers should not forward to themselves).
2. Master lists of secondary zones. (It this server hosts a secondary zone)
3. Notify lists of primary zones. (If this server hosts a primary zone and
it uses zone transfer)
4. Delegations of subzones. Must not contain NS record for DNS server

Please check them one by one to see if there is any misconfiguration.

1. Forwarders list.

a. Right-click on the server name.
b. Select "Properties".
c. On the "Forwarders" tab, check if the server has itself on the
forwarder list.

2. Master lists of secondary zones. (in case this server hosts any
secondary zone).

a. Select the secondary zone, right-click it, and then click
"Properties".
b. Click the "General" tab.
c. If the server's own IP address is listed select it and click "Remove".

3. Notify lists of zones.

a. Right-click on the zone, and select "Properties".
b. One the "Zone Transfer" tab, check if "Notify" button is available.
If so click it.
c. Check if this server is trying to send notification to itself.

4. Delegations of subzones. Must not contain NS record for DNS server.

If this server also has a sub zone created on this server, please let me
know. This generally will not happen on SBS domain.

For more information, read the following article:

235689 How to Troubleshoot 7062 Errors Logged in DNS Event Log
http://support.microsoft.com/?id=235689

If you have any questions or concerns related to this issue, please let me
know.

I appreciate your time and look forward to hearing from you.

Best regards,

Crina Li (MSFT)

Microsoft CSS Online Newsgroup Support

Get Secure! - www.microsoft.com/security

=====================================================
This newsgroup only focuses on SBS technical issues. If you have issues
regarding other Microsoft products, you'd bette

hank you for replying.
Yes I had checked out the kb article and my configurations follow the
instructions.

In Forward lookup zone, I have both zones showing in the list.
In Fowarders list, I show 2 dns address that are from my isp
I don't see secondary zones. notify lists (when I searched for this it gave
me the option to set something up, so obviously it hadn't been set. I left
this without setting anything up). Not sure where to look for delegation of
subzones.

I haven't flushed the dns as yet, as I would like to make sure that there is
nothing else that is in conflict. In addition I'm not sure where I go to do
some stages; 3 - I presume this is in Services, but I have no idea about 4.

When I try nslookup it comes up with the following:
Can't find server name for address 192.168.16.2: Non -existent domain
default server: Unknown
Address; 192.168.16.2
In the kb article that I read it says that the DNS is still able to answer
queries and host Active Directory. The resolver cannot locate the PTR
resource. What is PTR?

I've tried to do some troubleshooting with my network setup and I get the
following results.

Present setup
Modem - (running ppoe) status page gives me the static ip, an ip gateway,
the primary and secondary dns and the modem ip. When it powers up DHCP server
is enabled with a subnet 255.255.255.0 Start address 192.168.1.1 end
192.168.1.253
Linksys router - Obtain IP automatically, DHCP is disabled. On the status
page the default gateway, DNS1, DNS2 = modem router address. Router Ip is
192.168.1.1 Under Advance routing NAt is enabled. If I disable this I can't
access the Internet.
Server External adapter - 192.168.1.2 subnet 255.255.255.0 Default gateway
192.168.1.1 Preferred dns 192.168.16.2
Server internal adapter - ip-192.168.16.2 subnet 255.255.255.0 default
gateway-blank Preferred dns-192.168.16.2
Workstation-ip-192.168.16.102 subnet-255.255.255.0 default
gateway-192.168.16.2 dns-192.168.16.2

If I try and change to the recommended configuration for modem and router I
can't surf the Internet. That is modem reset to place into bridge mode.
Router set to PPoE.
When I do this it connects - shows me the static ip address and the dns of
the isp. I have dhcp disabled. I can't bring up any pages execept Google. It
will return search results but when I click on any of these I get a page
cannot be found.

I have run Internet Connection wizard several times.
--
DS


""Crina Li"" wrote:

i Dsully,

Thanks for your reply.

You said: I'm not sure where I go to do some stages; 3 - I presume this is
in Services, but I have no idea about 4. Do you mean you can not understand
the following steps?

3. Stop Netlogon and DNS service.
4. Rename %windir%\system32\config\netlogon.dns and netlogon.dnb

If so, you need to stop the services on services.msc. on steps 4, you can
find the path: c:\windows\system32\config.

Regarding the PTR, it is DNS pointer (PTR) resource records. In order for
reverse DNS resolution to succeed, the server must have a PTR record in DNS
for its Internet IP address.

I will look forward to your test result of the rest steps.

Best regards,

Crina Li (MSFT)

Microsoft CSS Online Newsgroup Support

Get Secure! - www.microsoft.com/security

=====================================================
This newsgroup only focuses on SBS technical issues. If you have issues
regarding other Microsoft products, you'd better post in the corresponding
newsgroups so that they can be resolved in an efficient and timely manner.
You can locate the newsgroup here:
http://www.microsoft.com/communities/newsgroups/en-us/default.aspx

When opening a new thread via the web interface, we recommend you check the
"Notify me of replies" box to receive e-mail notifications when there are
any updates in your thread. When responding to posts via your newsreader,
please "Reply to Group" so that others may learn and benefit from your
issue.

Microsoft engineers can only focus on one issue per thread. Although we
provide other information for your reference, we recommend you post
different incidents in different threads to keep the thread clean. In doing
so, it will ensure your issues are resolved in a timely manner.

For urgent issues, you may want to contact Microsoft CSS directly. Please
check http://support.microsoft.com for regional support phone numbers.

Any input or comments in this thread are highly appreciated.

=====================================================

This posting is provided "AS IS" with no warranties, and confers no rights.
--------------------
| Thread-Topic: Event id 7062
| thread-index: AcXT6vnF4TqER/HjQTmU312zfmJY7Q==
| X-WBNR-Posting-Host: 70.147.59.152
| From: "=?Utf-8?B?ZHN1bGx5cw==?=" < XXXX@XXXXX.COM >
| References: < XXXX@XXXXX.COM >
< XXXX@XXXXX.COM >
| Subject: RE: Event id 7062
| Date: Tue, 18 Oct 2005 06:51:01 -0700
| Lines: 237
| Message-ID: < XXXX@XXXXX.COM >
| MIME-Version: 1.0
| Content-Type: text/plain;
| charset="Utf-8"
| Content-Transfer-Encoding: 7bit
| X-Newsreader: Microsoft CDO for Windows 2000
| Content-Class: urn:content-classes:message
| Importance: normal
| Priority: normal
| X-MimeOLE: Produced By Microsoft MimeOLE V6.00.3790.0
| Newsgroups: microsoft.public.windows.server.sbs
| NNTP-Posting-Host: TK2MSFTNGXA03.phx.gbl 10.40.2.250
| Path: TK2MSFTNGXA01.phx.gbl!TK2MSFTNGXA02.phx.gbl!TK2MSFTNGXA03.phx.gbl
| Xref: TK2MSFTNGXA01.phx.gbl microsoft.public.windows.server.sbs:162302
| X-Tomcat-NG: microsoft.public.windows.server.sbs
|
| Thank you for replying.
| Yes I had checked out the kb article and my configurations follow the
| instructions.
|
| In Forward lookup zone, I have both zones showing in the list.
| In Fowarders list, I show 2 dns address that are from my isp
| I don't see secondary zones. notify lists (when I searched for this it
gave
| me th

Hi,
I am working on a server that is running SBS 2003.
My problem is in the event logger. On the DNS folder I am getting hundreds
of the event id 7062. Full event is pasted below.
One other thing I should mention but not sure if they are linked. At the
moment I have the outgoing emails sending through DNS rather than smtp. The
reason for this is because I cant get the smtp to work. If I change the out
going mail to smtp through the connect to internet wizard no emails leave the
office or queue in the smtp queue. Also that are no errors in the logs.

Any help would be great

Thanks

James


Event Type: Warning
Event Source: DNS
Event Category: None
Event ID: 7062
Date: 01/05/2007
Time: 13:49:37
User: N/A
Computer: PBCSERVER01
Description:
The DNS server encountered a packet addressed to itself on IP address
192.168.1.23. The packet is for the DNS name
"_ldap._tcp.Default-First-Site-Name._sites.dc._msdcs.platinum.local.". The
packet will be discarded. This condition usually indicates a configuration
error.

Check the following areas for possible self-send configuration errors:
1) Forwarders list. (DNS servers should not forward to themselves).
2) Master lists of secondary zones.
3) Notify lists of primary zones.
4) Delegations of subzones. Must not contain NS record for this DNS
server unless subzone is also on this server.
5) Root hints.

Example of self-delegation:
-> This DNS server dns1.example.microsoft.com is the primary for the zone
example.microsoft.com.
-> The example.microsoft.com zone contains a delegation of
bar.example.microsoft.com to dns1.example.microsoft.com,
(bar.example.microsoft.com NS dns1.example.microsoft.com)
-> BUT the bar.example.microsoft.com zone is NOT on this server.

Note, you should make this delegation check (with nslookup or DNS manager)
both on this DNS server and on the server(s) you delegated the subzone to. It
is possible that the delegation was done correctly, but that the primary DNS
for the subzone, has any incorrect NS record pointing back at this server. If
this incorrect NS record is cached at this server, then the self-send could
result. If found, the subzone DNS server admin should remove the offending
NS record.

need you to run 'ipconfig /all' on the server and post the entire results
here

--
Cris Hanna [SBS-MVP]
-------------------------------------------------
Microsoft MVPs
Independent Experts (MVPs do not work for MS)
Real World Answers
---------------------------------------------------------
Please do not contact me directly regarding issues

i Cris,
Here are the ipconfig details as requested:

Microsoft Windows [Version 5.2.3790]
(C) Copyright 1985-2003 Microsoft Corp.

C:\Documents and Settings\Administrator>ipconfig /all

Windows IP Configuration

Host Name . . . . . . . . . . . . : PBCSERVER01
Primary Dns Suffix . . . . . . . : platinum.local
Node Type . . . . . . . . . . . . : Unknown
IP Routing Enabled. . . . . . . . : Yes
WINS Proxy Enabled. . . . . . . . : Yes
DNS Suffix Search List. . . . . . : platinum.local

Ethernet adapter Server Local Area Connection:

Connection-specific DNS Suffix . :
Description . . . . . . . . . . . : Broadcom NetXtreme Gigabit Ethernet
Physical Address. . . . . . . . . : 00-14-22-7B-17-00
DHCP Enabled. . . . . . . . . . . : No
IP Address. . . . . . . . . . . . : 192.168.1.23
Subnet Mask . . . . . . . . . . . : 255.255.255.0
Default Gateway . . . . . . . . . : 192.168.1.1
DNS Servers . . . . . . . . . . . : 192.168.1.23
Primary WINS Server . . . . . . . : 192.168.1.23

C:\Documents and Settings\Administrator>


Thanks

James

"Cris Hanna [SBS-MVP]" wrote:

ooks like helpful information here
http://www.eventid.net/display.asp?eventid=7062&eventno=479&source=DNS&phase=1

--
Cris Hanna [SBS-MVP]
-------------------------------------------------
Microsoft MVPs
Independent Experts (MVPs do not work for MS)
Real World Answers
---------------------------------------------------------
Please do not contact me directly regarding issues

"James Kierath" < XXXX@XXXXX.COM > wrote in message
news: XXXX@XXXXX.COM ...

i Cris,
Thanks for the quick reply. I had a read through the link you sent me and
couldn't get any joy out of it. Mind you I didn find the instructions that
easy to follow.
Do you think removing DNS from the server and reconfiguring could be a good
idea. I know sometimes SBS doesn't like things being removed like this. Would
you recommend this?

Regards

James

"Cris Hanna [SBS-MVP]" wrote:

Hi

"
he DNS server encountered a packet addressed to itself on IP address
192.168.181.1. The packet is for the DNS name "nzherald.co.nz.". The packet
will be discarded. This condition usually indicates a configuration error.


Check the following areas for possible self-send configuration errors:

1) Forwarders list. (DNS servers should not forward to themselves).

2) Master lists of secondary zones.

3) Notify lists of primary zones.

4) Delegations of subzones. Must not contain NS record for this DNS server
unless subzone is also on this server.

5) Root hints.


Example of self-delegation:

-> This DNS server dns1.example.microsoft.com is the primary for the zone
example.microsoft.com.

-> The example.microsoft.com zone contains a delegation of
bar.example.microsoft.com to dns1.example.microsoft.com,

(bar.example.microsoft.com NS dns1.example.microsoft.com)

-> BUT the bar.example.microsoft.com zone is NOT on this server.


I got this error and can not gain access to the internet anymore. I have run
through the connect to internet wizard again, but with no luck. When I
manually configure my workstations with static details to the router they
can access the internet, but if the server is in charge, then no and off
course I can not browse any web pages from server either.
I am not very familiar at all with DNS, so please be as descriptive as
possible.
thanks
Gabriel

One NIC or 2 ?
What is the Server External IP Address ?
What is the Server Internal IP Address ?
What is the Router IP Address ?
What is the output of "IPconfig /all" from the server ?
What IP addresses do you have for the Forwarders ?

--
Henry Craven {SBS-MVP}

i

C:\Documents and Settings\Administrator>ipconfig /all

Windows IP Configuration

Host Name . . . . . . . . . . . . : LUGGIESERVER
Primary Dns Suffix . . . . . . . : luggageplates.local
Node Type . . . . . . . . . . . . : Unknown
IP Routing Enabled. . . . . . . . : Yes
WINS Proxy Enabled. . . . . . . . : Yes
DNS Suffix Search List. . . . . . : luggageplates.local

Ethernet adapter Server Local Area Connection:

Connection-specific DNS Suffix . :
Description . . . . . . . . . . . : HP NC320i PCIe Gigabit Server Adapter
Physical Address. . . . . . . . . : 00-1A-4B-B0-F3-06
DHCP Enabled. . . . . . . . . . . : No
IP Address. . . . . . . . . . . . : 192.168.181.1
Subnet Mask . . . . . . . . . . . : 255.255.255.0
Default Gateway . . . . . . . . . : 192.168.181.2
DNS Servers . . . . . . . . . . . : 192.168.181.1

External IP: 58.28.158.45
Internal: 192.168.181.1
Router: 192.168.181.2
Forwarders: ISP - DNS-> 58.28.4.2 and 58.28.6.2

I have read somewhere to delete the Root Hints entry which was my local
server, but that did not help either.

Thanks




"Henry Craven {MVP}" < XXXX@XXXXX.COM > wrote in message
news:eu$ XXXX@XXXXX.COM ...

guess this means you have only one NIC - right?

7062 and your inability to access the internet are 2 different issues. On
the 7062 error you might want to try to restore the root hints by following
this http://support.microsoft.com/default.aspx?scid=kb;en-us;229840
If you still get the occasional 7062, let me know and we try a few other
things.

For the internet problem, please verify that your DNS is running and that
you have the ISP DNS server listed under your Forwarder tab.
If that's the case, open a cmd window and ping www.google.com. Do you get a
response? If you don't get a response, do a ping to 64.233.161.147. Do you
get a response there?

--
Claus
"gabriel" < XXXX@XXXXX.COM > wrote in message
news:eXWL% XXXX@XXXXX.COM ...

That all looks good:

PPP Setting: PPP over ATM (RFC2364) VCMUX encapsulation
VPI Setting:0
VCI Setting: 100
Authentication: PAP
Primary DNS: ns1.xnet.co.nz or 58.28.4.2
Secondary DNS:ns2.xnet.co.nz or 58.28.6.2

What's open on the router ?
Is the router using the same DNS Servers ?
( I'm presuming so as the Wokstations get access when connected
directly... )

Check you A and Cnames in DNS
execute from command prompt "Ipconfig / flushdns"

When you're good, Disable DHCP on the Router and enable it on the SBServer.

--
Henry Craven {SBS-MVP}

Hi

I have deleted everything under the DNS server and wish to start from
scratch to get the DNS going again. Is there a way to do this without having
to know too much about DNS? I know it sounds stupid, but is there a simple
wizard that would just set up the DNS again as I am not familiar enough to
do manually directly.

thanks
Gabriel