DNS Registration is Incorrect

[Guest]

I receive the following error when I run netdiag, the printout is below.
Any suggestions greatly appreciated.

Computer Name: PDC
DNS Host Name: pdc.edr.net
System info : Windows 2000 Server (Build 2195)
Processor : x86 Family 6 Model 11 Stepping 1, GenuineIntel
List of installed hotfixes :
KB810217
KB817606
KB819696
KB822679
KB823182
KB823559
KB823980
KB824105
KB824141
KB824146
KB824151
KB825119
KB826232
KB828028
KB828035
KB828741
KB828749
KB834707-IE6SP1-20040929.091901
KB835732
KB837001
KB839643
KB839645
KB840315
KB840987
KB841356
KB841533
KB841872
KB841873
KB842526
KB883935
Q147222
Q295688
q323172
Q323255
Q324096
Q324380
Q326830
Q326886
Q327696
Q328310
Q329115
Q329170
Q329553
Q329834
Q331953
Q810030
Q810649
Q810833
Q811114
Q811493
Q811630
Q814033
Q815021
Q816093
Q828026


Netcard queries test . . . . . . . : Passed
[WARNING] The net card 'Intel(R) PRO/100 Network Connection' may not be
work
ing.



Per interface results:

Adapter : Broadcom NIC - PCI slot 1

Netcard queries test . . . : Passed

Host Name. . . . . . . . . : pdc.edr.net
IP Address . . . . . . . . : 192.168.10.2
Subnet Mask. . . . . . . . : 255.255.255.0
Default Gateway. . . . . . : 192.168.10.1
Primary WINS Server. . . . : 192.168.10.3
Dns Servers. . . . . . . . : 192.168.10.2
192.168.10.3
192.168.1.12


AutoConfiguration results. . . . . . : Passed

Default gateway test . . . : Passed

NetBT name test. . . . . . : Passed
[WARNING] At least one of the <00> 'WorkStation Service', <03>
'Messenge
r Service', <20> 'WINS' names is missing.

WINS service test. . . . . : Passed

Adapter : RAS Onboard

Netcard queries test . . . : Failed
NetCard Status: DISCONNECTED
Some tests will be skipped on this interface.

Host Name. . . . . . . . . : pdc
IP Address . . . . . . . . : 66.184.165.146
Subnet Mask. . . . . . . . : 255.255.255.248
Default Gateway. . . . . . : 192.168.10.1
Dns Servers. . . . . . . . : 192.168.10.2
192.168.10.3




Global results:


Domain membership test . . . . . . : Passed


NetBT transports test. . . . . . . : Passed
List of NetBt transports currently configured:
NetBT_Tcpip_{0AE7F57D-3ECB-4663-A0F7-B976BE815108}
NetBT_Tcpip_{A16331D4-00B5-418F-A148-95727B885DE4}
2 NetBt transports currently configured.


Autonet address test . . . . . . . : Passed


IP loopback ping test. . . . . . . : Passed


Default gateway test . . . . . . . : Passed


NetBT name test. . . . . . . . . . : Passed
[WARNING] You don't have a single interface with the <00> 'WorkStation
Servi
ce', <03> 'Messenger Service', <20> 'WINS' names defined.


Winsock test . . . . . . . . . . . : Passed


DNS test . . . . . . . . . . . . . : Failed
[FATAL]: The DNS registration for 'pdc.edr.net' is incorrect
on al
l DNS servers.
PASS - All the DNS entries for DC are registered on DNS server
'192.168.10.2
' and other DCs also have some of the names registered.
PASS - All the DNS entries for DC are registered on DNS server
'192.168.10.3
' and other DCs also have some of the names registered.
PASS - All the DNS entries for DC are registered on DNS server
'192.168.1.12
' and other DCs also have some of the names registered.


Redir and Browser test . . . . . . : Passed
List of NetBt transports currently bound to the Redir
NetBT_Tcpip_{0AE7F57D-3ECB-4663-A0F7-B976BE815108}
NetBT_Tcpip_{A16331D4-00B5-418F-A148-95727B885DE4}
The redir is bound to 2 NetBt transports.

List of NetBt transports currently bound to the browser
NetBT_Tcpip_{0AE7F57D-3ECB-4663-A0F7-B976BE815108}
NetBT_Tcpip_{A16331D4-00B5-418F-A148-95727B885DE4}
The browser is bound to 2 NetBt transports.


DC discovery test. . . . . . . . . : Passed


DC list test . . . . . . . . . . . : Passed


Trust relationship test. . . . . . : Skipped


Kerberos test. . . . . . . . . . . : Passed


LDAP test. . . . . . . . . . . . . : Passed
[WARNING] Failed to query SPN registration on DC 'bdc.edr.net'.


Bindings test. . . . . . . . . . . : Passed


WAN configuration test . . . . . . : Skipped
No active remote access connections.


Modem diagnostics test . . . . . . : Passed

IP Security test . . . . . . . . . : Passed
IPSec policy service is active, but no policy is assigned.


The command completed successfully

 

[Ace Fekay [MVP]]

In

I receive the following error when I run netdiag, the printout is
below. Any suggestions greatly appreciated.

<snip>

Seems that your DC is multihomed and you have RAS on it. That is usually not
recommended. The WINS and NetBIOS errors seem to be due to NetBIOS enabled
on both interfaces. You can disable NetBIOS on the external interface. Both
records are trying to register into WINS as a service with two different
IPs, and we know that NetBIOS likes uniqueness. Since DNS is on this
machine, it complicates matters, and becomes very problematic, since you'll
need to make some registry entries to kill dynamic registration and manually
create records for the internal interface.

Is this machine a NAT server? If it is, it may be beneficial and prudent to
purchase a separate device (such as a Linksys or Netgear) to perform NAT
services and alleviate all the administrative overhead associated with
mutlihomed DCs/DNS/RAS servers.

Another HUGE problem I see is that you have two gateway addresses on this
server. Since the outside interface is exposed to the outside world, the
only gateway on this machine should be pointing to your ISP's gateway ONLY
on the external interface. The internal should have NO gateway.

Is this SBS?

I can post the instructions to fix this, but it is lengthy with multiple
steps, but frankly, I would rather not alter default configurations to
accomodate this sort of setup, and would rather see you offload NAT
functions to a dedicated hardware device. Besides, it will be much more
secure to hide your servers behind a NAT instead of exposing it to the
Ineternet.

You know some say, the most secure server is secured by burying a hole three
feet deep and putting your server into it.


--
Regards,
Ace

Please direct all replies ONLY to the Microsoft public newsgroups
so all can benefit.

This posting is provided "AS-IS" with no warranties or guarantees
and confers no rights.

Ace Fekay, MCSE 2003 & 2000, MCSA 2003 & 2000, MCSE+I, MCT, MVP
Microsoft Windows MVP - Windows Server - Directory Services

Security Is Like An Onion, It Has Layers
HAM AND EGGS: A day's work for a chicken;
A lifetime commitment for a pig.