Primary Storage

Hi,

I get this warning message 3-6 times a day.

Error ID = 9213 : Could not connect to DNS server # Error Code = 1585 : Could not connect to DNS server # Error Sequence Number = 509 # Timestamp = Thu Mar 21 05:21:54 2024 # 

I tried all 3 of our DNS Server -> same behavior

 -> lsdnsserver
id name type IP_address status
0  DNS1 ipv4 10.0.0.7   reachable

I also checked if the firewall is blocking the DNS server. No blockage detected.
2024-03-21 05:16:41 ALLOW UDP 10.55.0.23 10.0.0.7 56195 53 0 - - - - - - - RECEIVE
2024-03-21 05:21:41 ALLOW UDP 10.55.0.23 10.0.0.7 37467 53 0 - - - - - - - RECEIVE
2024-03-21 05:21:51 ALLOW UDP 10.55.0.23 10.0.0.7 54035 53 0 - - - - - - - RECEIVE

Is there a log where I can get more information?

One solution would be to switch completely to IP communication without DNS, but I would like to know what the problem is here

And I also receive the email / Information via a resolved DNS name. So DNS resolution works

If you need any further information please let me know.

Thank you.

------------------------------
Thomas Greß
------------------------------

Hi Thomas,

you can also check "sainfo traceroute -ip_or_name 10.0.0.7"  (or dns01.local)

Hi,

I get this warning message 3-6 times a day.

Error ID = 9213 : Could not connect to DNS server # Error Code = 1585 : Could not connect to DNS server # Error Sequence Number = 509 # Timestamp = Thu Mar 21 05:21:54 2024 # 

I tried all 3 of our DNS Server -> same behavior

 -> lsdnsserver
id name type IP_address status
0  DNS1 ipv4 10.0.0.7   reachable

I also checked if the firewall is blocking the DNS server. No blockage detected.
2024-03-21 05:16:41 ALLOW UDP 10.55.0.23 10.0.0.7 56195 53 0 - - - - - - - RECEIVE
2024-03-21 05:21:41 ALLOW UDP 10.55.0.23 10.0.0.7 37467 53 0 - - - - - - - RECEIVE
2024-03-21 05:21:51 ALLOW UDP 10.55.0.23 10.0.0.7 54035 53 0 - - - - - - - RECEIVE

Is there a log where I can get more information?

One solution would be to switch completely to IP communication without DNS, but I would like to know what the problem is here

And I also receive the email / Information via a resolved DNS name. So DNS resolution works

If you need any further information please let me know.

Thank you.

------------------------------
Thomas Greß
------------------------------

Hi,

I get this warning message 3-6 times a day.

Error ID = 9213 : Could not connect to DNS server # Error Code = 1585 : Could not connect to DNS server # Error Sequence Number = 509 # Timestamp = Thu Mar 21 05:21:54 2024 # 

I tried all 3 of our DNS Server -> same behavior

 -> lsdnsserver
id name type IP_address status
0  DNS1 ipv4 10.0.0.7   reachable

I also checked if the firewall is blocking the DNS server. No blockage detected.
2024-03-21 05:16:41 ALLOW UDP 10.55.0.23 10.0.0.7 56195 53 0 - - - - - - - RECEIVE
2024-03-21 05:21:41 ALLOW UDP 10.55.0.23 10.0.0.7 37467 53 0 - - - - - - - RECEIVE
2024-03-21 05:21:51 ALLOW UDP 10.55.0.23 10.0.0.7 54035 53 0 - - - - - - - RECEIVE

Is there a log where I can get more information?

One solution would be to switch completely to IP communication without DNS, but I would like to know what the problem is here

And I also receive the email / Information via a resolved DNS name. So DNS resolution works

If you need any further information please let me know.

Thank you.

------------------------------
Thomas Greß
------------------------------

Hi Thomas, 

unfortunately, there are no additional logs to look at.

Feel free, however, to raise a support ticket for this issue so we can conduct a thorough analysis.

Hi,

I get this warning message 3-6 times a day.

Error ID = 9213 : Could not connect to DNS server # Error Code = 1585 : Could not connect to DNS server # Error Sequence Number = 509 # Timestamp = Thu Mar 21 05:21:54 2024 # 

I tried all 3 of our DNS Server -> same behavior

 -> lsdnsserver
id name type IP_address status
0  DNS1 ipv4 10.0.0.7   reachable

I also checked if the firewall is blocking the DNS server. No blockage detected.
2024-03-21 05:16:41 ALLOW UDP 10.55.0.23 10.0.0.7 56195 53 0 - - - - - - - RECEIVE
2024-03-21 05:21:41 ALLOW UDP 10.55.0.23 10.0.0.7 37467 53 0 - - - - - - - RECEIVE
2024-03-21 05:21:51 ALLOW UDP 10.55.0.23 10.0.0.7 54035 53 0 - - - - - - - RECEIVE

Is there a log where I can get more information?

One solution would be to switch completely to IP communication without DNS, but I would like to know what the problem is here

And I also receive the email / Information via a resolved DNS name. So DNS resolution works

If you need any further information please let me know.

Thank you.

------------------------------
Thomas Greß
------------------------------

I did some additional investigation on that topic.

In the past, availability of the configured DNS server objects was checked by regular pings,

lost or blocked ICMP packets hence could trigger the observed error 1585/9213.

This was changed with 8.6.0 code stream, so depending on the version you are using, it might not apply here. 

So, the recommendation I made above remains the same to address this through a formal support case.

Hi Thomas, 

unfortunately, there are no additional logs to look at.

Feel free, however, to raise a support ticket for this issue so we can conduct a thorough analysis.

Hi,

I get this warning message 3-6 times a day.

Error ID = 9213 : Could not connect to DNS server # Error Code = 1585 : Could not connect to DNS server # Error Sequence Number = 509 # Timestamp = Thu Mar 21 05:21:54 2024 # 

I tried all 3 of our DNS Server -> same behavior

 -> lsdnsserver
id name type IP_address status
0  DNS1 ipv4 10.0.0.7   reachable

I also checked if the firewall is blocking the DNS server. No blockage detected.
2024-03-21 05:16:41 ALLOW UDP 10.55.0.23 10.0.0.7 56195 53 0 - - - - - - - RECEIVE
2024-03-21 05:21:41 ALLOW UDP 10.55.0.23 10.0.0.7 37467 53 0 - - - - - - - RECEIVE
2024-03-21 05:21:51 ALLOW UDP 10.55.0.23 10.0.0.7 54035 53 0 - - - - - - - RECEIVE

Is there a log where I can get more information?

One solution would be to switch completely to IP communication without DNS, but I would like to know what the problem is here

And I also receive the email / Information via a resolved DNS name. So DNS resolution works

If you need any further information please let me know.

Thank you.

------------------------------
Thomas Greß
------------------------------

HI Christian,

I'm on 8.6.3.0 to benefit from the new ransomware feature (new FS5200 with FSM4). 

Thank you for your help. I will open a support case.

I did some additional investigation on that topic.

In the past, availability of the configured DNS server objects was checked by regular pings,

lost or blocked ICMP packets hence could trigger the observed error 1585/9213.

This was changed with 8.6.0 code stream, so depending on the version you are using, it might not apply here. 

So, the recommendation I made above remains the same to address this through a formal support case.

Hi Thomas, 

unfortunately, there are no additional logs to look at.

Feel free, however, to raise a support ticket for this issue so we can conduct a thorough analysis.

Hi,

I get this warning message 3-6 times a day.

Error ID = 9213 : Could not connect to DNS server # Error Code = 1585 : Could not connect to DNS server # Error Sequence Number = 509 # Timestamp = Thu Mar 21 05:21:54 2024 # 

I tried all 3 of our DNS Server -> same behavior

 -> lsdnsserver
id name type IP_address status
0  DNS1 ipv4 10.0.0.7   reachable

I also checked if the firewall is blocking the DNS server. No blockage detected.
2024-03-21 05:16:41 ALLOW UDP 10.55.0.23 10.0.0.7 56195 53 0 - - - - - - - RECEIVE
2024-03-21 05:21:41 ALLOW UDP 10.55.0.23 10.0.0.7 37467 53 0 - - - - - - - RECEIVE
2024-03-21 05:21:51 ALLOW UDP 10.55.0.23 10.0.0.7 54035 53 0 - - - - - - - RECEIVE

Is there a log where I can get more information?

One solution would be to switch completely to IP communication without DNS, but I would like to know what the problem is here

And I also receive the email / Information via a resolved DNS name. So DNS resolution works

If you need any further information please let me know.

Thank you.

------------------------------
Thomas Greß
------------------------------

Hi,

I found the solution to fix this problem. I researched the DNS server logs. The Flasystem is trying to get a PTR record for its IP address. Most of the answers were answered with "NXDOMAIN". But some with "SERVFAIL". When "SERVFAIL" occurred, I received the message from the storage.

Solution: Create PTR entry for the storage. Since then there has been no further notification.

HI Christian,

I'm on 8.6.3.0 to benefit from the new ransomware feature (new FS5200 with FSM4). 

Thank you for your help. I will open a support case.

I did some additional investigation on that topic.

In the past, availability of the configured DNS server objects was checked by regular pings,

lost or blocked ICMP packets hence could trigger the observed error 1585/9213.

This was changed with 8.6.0 code stream, so depending on the version you are using, it might not apply here. 

So, the recommendation I made above remains the same to address this through a formal support case.

Hi Thomas, 

unfortunately, there are no additional logs to look at.

Feel free, however, to raise a support ticket for this issue so we can conduct a thorough analysis.

Hi,

I get this warning message 3-6 times a day.

Error ID = 9213 : Could not connect to DNS server # Error Code = 1585 : Could not connect to DNS server # Error Sequence Number = 509 # Timestamp = Thu Mar 21 05:21:54 2024 # 

I tried all 3 of our DNS Server -> same behavior

 -> lsdnsserver
id name type IP_address status
0  DNS1 ipv4 10.0.0.7   reachable

I also checked if the firewall is blocking the DNS server. No blockage detected.
2024-03-21 05:16:41 ALLOW UDP 10.55.0.23 10.0.0.7 56195 53 0 - - - - - - - RECEIVE
2024-03-21 05:21:41 ALLOW UDP 10.55.0.23 10.0.0.7 37467 53 0 - - - - - - - RECEIVE
2024-03-21 05:21:51 ALLOW UDP 10.55.0.23 10.0.0.7 54035 53 0 - - - - - - - RECEIVE

Is there a log where I can get more information?

One solution would be to switch completely to IP communication without DNS, but I would like to know what the problem is here

And I also receive the email / Information via a resolved DNS name. So DNS resolution works

If you need any further information please let me know.

Thank you.

------------------------------
Thomas Greß
------------------------------