Server Fault is a question and answer site for system and network administrators. Join them; it only takes a minute:

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

I recently moved to a new DNS server. Currently it is resolving hosts and working, but I noticed when I try to ping ANY host (such as that it returns the translated IP address, but it always times out. It's like it goes out but never comes back in. No matter what address I put in. For example I try to ping and it times out, but I can go to no problem (on the DNS server and all clients pointing to the DNS server). All INTERNAL ping requests work without a problem.

DNS server is pointing to itself for DNS by the way (the actual internal address).

Is there maybe a problem with my zones that I don't know about?

share|improve this question
up vote 2 down vote accepted

Ping isn't a tool for testing DNS. That being said, your problem is not with DNS as your tests should be telling you. Your DNS server can resolve and you're able to get to, that should tell you that your DNS server is working. I suspect that a firewall is blocking outbound ping traffic or blocking the inbound responses to your pings.

As is pingable, I suspect the problem is with your firewall.

In addition, don't use ping to test DNS. An external web site may be available but may not allow inbound ICMP echo requests (ping) which will send you off on a wild goose chase trying to figure out why you can't ping the site.

share|improve this answer
It was the firewall. I don't know why I was thinking about it so hard. – drpcken Mar 8 '11 at 3:52
Glad you got it resolved. – joeqwerty Mar 8 '11 at 11:56

Your firewall (are you running Windows Server???) could be blocking the ICMP response. That would cause the ping to not be received. Check that, first.

share|improve this answer
Windows Server's built in firewall does not block packet replies on outgoing traffic, and all outgoing traffic is allowed by default. – Bret Fisher Mar 8 '11 at 15:03

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.