Certbot
-
@JaredBusch said in Certbot:
Once you do this, you will see what DNS server is giving you the result.
I highly suspect DNS is misconfigured.
Anything I can do to find out why NSLOOKUP is providing the external address from inside the network?
-
@alex.olynyk said in Certbot:
@JaredBusch said in Certbot:
Once you do this, you will see what DNS server is giving you the result.
I highly suspect DNS is misconfigured.
Anything I can do to find out what is misconfigured?
You could start by posting the results from
nslookupas instructed. -
-
@alex.olynyk said in Certbot:
Your internal DNS server is returning the external IP address for that URL.
Your Internal DNS server is the device at 192.168.128.1
$5 says that is your router
-
Our router is a NetVanta managed by Windstream. I have no access to it. I will call Windstream.
-
@alex.olynyk said in Certbot:
Our router is a NetVanta managed by Windstream. I have no access to it. I will call Windstream.
You are completely missing the point here
-
I have spent entirely too much time trying to help you. If you continue to want my help, please feel free to contact me directly for consulting.
-
What are the results of ipconfig on this machine?
-
-
yep, there are your problems!!
Look at your DNS entries. You can only use Windows DNS servers for DNS to have this problem solved.
It also appears that you are not using DHCP - why not?
Also, why is 127.0.0.1 in that list? that is basically saying, use myself to find DNS information, but non of your PCs have a DNS sever installed on them, I hope.
-
@Dashrender said in Certbot:
yep, there are your problems!!
Look at your DNS entries. You can only use Windows DNS servers for DNS to have this problem solved.
It also appears that you are not using DHCP - why not?
Also, why is 127.0.0.1 in that list? that is basically saying, use myself to find DNS information, but non of your PCs have a DNS sever installed on them, I hope.
What is that ::1 in DNS servers?
-
The only DNS IPs that should be listed in any PC that lives on your network should be the IPs of these machines
-
@wirestyle22 said in Certbot:
@Dashrender said in Certbot:
yep, there are your problems!!
Look at your DNS entries. You can only use Windows DNS servers for DNS to have this problem solved.
It also appears that you are not using DHCP - why not?
Also, why is 127.0.0.1 in that list? that is basically saying, use myself to find DNS information, but non of your PCs have a DNS sever installed on them, I hope.
What is that ::1 in DNS servers?
That is IPv6 loopback
-
@JaredBusch said in Certbot:
@wirestyle22 said in Certbot:
@Dashrender said in Certbot:
yep, there are your problems!!
Look at your DNS entries. You can only use Windows DNS servers for DNS to have this problem solved.
It also appears that you are not using DHCP - why not?
Also, why is 127.0.0.1 in that list? that is basically saying, use myself to find DNS information, but non of your PCs have a DNS sever installed on them, I hope.
What is that ::1 in DNS servers?
That is IPv6 loopback
Oh I see. Thanks
-
This post is deleted! -
Do you have someone else in the company who is a senior IT person? Or are you the one currently in charge of the network?
-
@Dashrender said in Certbot:
Do you have someone else in the company who is a senior IT person? Or are you the one currently in charge of the network?
there is a senior IT person. But he is at the same level as me when it comes to DNS
-
@Dashrender said in Certbot:
The only DNS IPs that should be listed in any PC that lives on your network should be the IPs of these machines
Im aware of that
-
Hold the phone here -
JB pointed out to me that the ipconfig you posted is from your DC.
THAT majorly changes things.
You can point to yourself for DNS on a DC - in your case you don't need to, because have 6 DNS servers.
You need to change the Domain Controller's DNS to all point to other DNS servers on your network. The primary one should point to another Local DNS server if there is one, the secondary can be local or remote. If there are no other local DNS, you have no choice but to have the primary point to another DNS that is remote.
-
@Dashrender said in Certbot:
Hold the phone here -
JB pointed out to me that the ipconfig you posted is from your DC.
THAT majorly changes things.
You can point to yourself for DNS on a DC - in your case you don't need to, because have 6 DNS servers.
You need to change the Domain Controller's DNS to all point to other DNS servers on your network. The primary one should point to another Local DNS server if there is one, the secondary can be local or remote. If there are no other local DNS, you have no choice but to have the primary point to another DNS that is remote.
Yeah I was literally just typing that out in a post. Rose-DC1 so it would refer to itself for DNS
