NSLOOK UP - Different IP for one machine
Hi All,
Can you advise what would cause the following and what actions I can take to stop this from happening.
If I do an NSLOOKUP of a specific IP it comes back with the expected machine name. However if I then do an NSLOOKUP of the PC name, it comes back with a different IP address.
nslookup 172.27.5.111
Server: TEST.TEST.com
Address: 172.27.6.91
Name: PC1.TEST.com
Address: 172.27.5.111
______________________________________
nslookup PC1
Server: TEST.TEST.com
Address: 172.27.6.91
Name: PC1.TEST.com
Address: 172.27.5.95
Thank You
Can you advise what would cause the following and what actions I can take to stop this from happening.
If I do an NSLOOKUP of a specific IP it comes back with the expected machine name. However if I then do an NSLOOKUP of the PC name, it comes back with a different IP address.
nslookup 172.27.5.111
Server: TEST.TEST.com
Address: 172.27.6.91
Name: PC1.TEST.com
Address: 172.27.5.111
______________________________________
nslookup PC1
Server: TEST.TEST.com
Address: 172.27.6.91
Name: PC1.TEST.com
Address: 172.27.5.95
Thank You
Comments
-
darkerosxx Banned Posts: 1,343
Those are two different records. One a forward, one a reverse. A good DNS intro might help you out. -
bigdogz Member Posts: 873 ■■■■■■■■□□
You may want to check the DNS settings on the host you performed the nslookup and the DNS of the host in question.
This may give you a hint on where to proceed. -
JDMurray MSIT InfoSec, CISSP, SSCP, GSEC, EnCE, C|EH, CySA+, PenTest+, CASP+, Security+ Surf City, USAAdmin Posts: 12,082 Admin
Make sure the A and PTR record info in the DNS server are correct. Is this address assigned via DHCP?
Forum Admin at www.techexams.net
--
LinkedIn: www.linkedin.com/in/jamesdmurray
Twitter: www.twitter.com/jdmurray -
control Member Posts: 309
Hi,
I had a look at the PTR and A records and removed the incorrect entry. However, I'm guessing these should match or at least it's best practice to have them matching. Reverse DNS is used by a few services the onsite guys use.
The addresses are assigned by DHCP. The issues seems to occur a lot with all different machines on DHCP. Anything I can tweak at all?