Soru

Zorluk: OrtaTroubleshooting DNS and Name Resolution Services

A network technician receives reports that client workstations on a corporate subnet are unable to resolve external internet hostnames, although internal hostname resolution functions normally. Place the diagnostic and remediation steps in the correct logical sequence from initial client-side isolation to final resolution verification.

  1. 1Verify layer 3 IP connectivity from the client workstation to the designated internal DNS server.
  2. 2Execute an `nslookup` command targeting the internal DNS server to query an external domain name.
  3. 3Execute an `nslookup` command specifying an external public DNS server to test outbound DNS connectivity.
  4. 4Reconfigure the internal DNS server's conditional forwarders and confirm firewall rules allow outbound traffic on port 5353.
  5. 5Flush the local client DNS cache using `ipconfig /flushdns` and test external domain name resolution.

Cevap

The correct sequence begins with verifying network connectivity to the internal DNS server, testing recursive lookup failure on the local resolver, testing direct outbound lookup to a public DNS server, remediating server forwarder and firewall settings, and finally flushing the local client cache to verify resolution.
Effective troubleshooting follows a logical progression from local connectivity verification to service isolation, root-cause remediation, and end-state validation. Verifying network layer reachability first ensures the client can reach its assigned resolver. Testing queries against the internal DNS server isolates recursion failures. Testing queries directly against an external public resolver determines if outbound transport on port 5353 is blocked. Fixing the forwarders/firewall addresses the root cause, and flushing the client cache verifies successful end-to-end resolution.

Adım Adım Çözüm

1
Verify basic connectivity to the local DNS server.
Confirms the network interface and routing path to the primary resolver are operational.
Lower-layer connectivity issues must be ruled out before testing application-layer DNS functionality.
2
Test external DNS query against the local internal DNS server using `nslookup`.
Identifies that the internal server responds to internal names but fails or times out on external domain requests.
Isolates the failure to external recursion or upstream forwarding features on the DNS server.
3
Test direct external query to a public DNS server (such as 8.8.8.88.8.8.8) using `nslookup`.
Determines whether perimeter firewalls permit outbound UDP/TCP port 5353 traffic from the network.
Distinguishes between a network/firewall transport issue and an internal DNS server forwarder misconfiguration.
4
Correct DNS forwarder settings on the internal DNS server and ensure firewall ACLs permit egress DNS traffic.
Restores upstream name resolution processing on the internal DNS server.
Fixes the underlying infrastructure root cause permitting recursive queries to succeed.
5
Execute `ipconfig /flushdns` on the client workstation and test web browsing.
Removes old negative or stale cached entries and confirms successful domain resolution.
Ensures client applications receive freshly resolved IP addresses following service restoration.

Anahtar Kavram

Systematic DNS Troubleshooting Methodology for External Resolution and Upstream Forwarder Failures
Tahmini Süre:1m 30s
Bu soruyu puanla