# Different DNS addresses for computer and modem/router

**URL:** https://boards.straightdope.com/t/different-dns-addresses-for-computer-and-modem-router/517538
**Category:** Factual Questions
**Created:** [November 14, 2009, 8:29am UTC](https://boards.straightdope.com/t/different-dns-addresses-for-computer-and-modem-router/517538 "2009-11-14T08:29:21Z")
**Posts on this page:** 20
**Page:** 1

<div class="post-metadata">

### Author: ![Nobody](https://avatars.discourse-cdn.com/v4/letter/n/94ad74/32.png) [@Nobody](https://boards.straightdope.com/u/Nobody)
#### Post date: [November 14, 2009, 8:29am UTC](https://boards.straightdope.com/t/different-dns-addresses-for-computer-and-modem-router/517538/1 "2009-11-14T08:29:21Z")

</div>

I think some Internet connectivity issues my wife and I have been experiencing for a couple of days has to do with problems connecting to our ISPs DNS server, so I manually entered different DNS server address to our computers (I’m using Windows 7 and she is using XP).

However, our DSL modem/router has the addresses for our ISPs DNS servers. I’m assuming that the addresses in the modem will be ignored and the DNS server addresses that will be used will be what’s stored in Windows, right?

Thanks.

---

<div class="post-metadata">

### Author: ![Quartz](https://sea3.discourse-cdn.com/straightdope/user_avatar/boards.straightdope.com/quartz/32/267_2.png) [@Quartz](https://boards.straightdope.com/u/Quartz)
#### Post date: [November 14, 2009, 9:38am UTC](https://boards.straightdope.com/t/different-dns-addresses-for-computer-and-modem-router/517538/2 "2009-11-14T09:38:54Z")

</div>

Correct. You can confirm this by opening a command prompt and entering **ipconfig /all** and looking at the DNS entries.

---

<div class="post-metadata">

### Author: ![Nobody](https://avatars.discourse-cdn.com/v4/letter/n/94ad74/32.png) [@Nobody](https://boards.straightdope.com/u/Nobody)
#### Post date: [November 14, 2009, 10:30am UTC](https://boards.straightdope.com/t/different-dns-addresses-for-computer-and-modem-router/517538/3 "2009-11-14T10:30:41Z")

</div>

> [@Quartz](#):
>
> Correct. You can confirm this by opening a command prompt and entering **ipconfig /all** and looking at the DNS entries.

:smack: I should have thought of that. Anyway, thank you.

---

<div class="post-metadata">

### Author: ![engineer\_comp\_geek](https://sea3.discourse-cdn.com/straightdope/user_avatar/boards.straightdope.com/engineer_comp_geek/32/504_2.png) [@engineer\_comp\_geek](https://boards.straightdope.com/u/engineer_comp_geek)
#### Post date: [November 14, 2009, 3:36pm UTC](https://boards.straightdope.com/t/different-dns-addresses-for-computer-and-modem-router/517538/4 "2009-11-14T15:36:03Z")

</div>

DNS is a hierarchy. At the low end is your computer. The high end is the root DNS servers for the entire internet. Your computer starts at the low end and works its way up until it gets an address.

Typically, your router (assuming you are letting it hand out IP addresses instead of configuring them yourself) will give you a DNS address of itself. When your computer makes a DNS request, it goes to the router. The router probably doesn’t have the DNS entry cached, so it goes up the chain. The next link in the chain according to the router is your ISP server, which is currently acting a bit wonky and causing you all kinds of grief.

By entering another DNS server, instead of the request going to your router, it goes to whatever server you specified. Then if that server doesn’t have the name cached, it goes to what it thinks is the next DNS server up the hierarchy chain. Assuming that you have picked a DNS server outside of your ISP, you’ve just bypassed your ISP’s wonky DNS server and you’ll take a different path up the hierarchy.

If you enter the router’s address as your primary DNS server and whatever secondary source you have as the alternate DNS server for your computer, it will automatically try the alternate whenever your router can’t get an address (i.e. whenever your ISP goes wonky again).

ETA:

There’s also a thing called “DNS cache poisoning” where a DNS server can be handing out wrong addresses. This can be just a screwup on the part of whoever owns the DNS server, but often it’s the result of a malicious attack on the DNS server. In this case, you can use the same technique (specifying a different DNS server) to get around the poisoned DNS server. If you have a problem like this then you don’t want to keep the poisoned DNS server on your list because you don’t want the addresses that it is handing out.

---

<div class="post-metadata">

### Author: ![Nobody](https://avatars.discourse-cdn.com/v4/letter/n/94ad74/32.png) [@Nobody](https://boards.straightdope.com/u/Nobody)
#### Post date: [November 15, 2009, 3:40am UTC](https://boards.straightdope.com/t/different-dns-addresses-for-computer-and-modem-router/517538/5 "2009-11-15T03:40:11Z")

</div>

Strange. This usually happens at night and I thought I figured the problem out, but apparently not. A couple of nights ago I live chatted with a tech support person who could find nothing wrong on their end…this sucks.

For a minute I was having connectivity issues again. I look at the modem/router log and get the same thing I got before:

```auto

(GMT-06:00)21:31:55 Sat Nov 14 2009 syslog: failed dns request len=73,srcip=208.67.222.222, url=wpad.domain_not_set.invalid  
(GMT-06:00)21:31:58 Sat Nov 14 2009 syslog: failed dns request len=73,srcip=208.67.222.222, url=wpad.domain_not_set.invalid  
(GMT-06:00)21:32:01 Sat Nov 14 2009 syslog: failed dns request len=73,srcip=208.67.222.222, url=wpad.domain_not_set.invalid  
(GMT-06:00)21:32:03 Sat Nov 14 2009 syslog: failed dns request len=73,srcip=208.67.222.222, url=wpad.domain_not_set.invalid  
(GMT-06:00)21:32:06 Sat Nov 14 2009 syslog: failed dns request len=73,srcip=208.67.222.222, url=wpad.domain_not_set.invalid  
(GMT-06:00)21:32:09 Sat Nov 14 2009 syslog: failed dns request len=73,srcip=208.67.222.222, url=wpad.domain_not_set.invalid  
(GMT-06:00)21:32:12 Sat Nov 14 2009 syslog: failed dns request len=73,srcip=208.67.222.222, url=wpad.domain_not_set.invalid  
(GMT-06:00)21:32:15 Sat Nov 14 2009 syslog: failed dns request len=73,srcip=208.67.222.222, url=wpad.domain_not_set.invalid  
(GMT-06:00)21:32:24 Sat Nov 14 2009 syslog: failed dns request len=73,srcip=208.67.222.222, url=wpad.domain_not_set.invalid  
(GMT-06:00)21:32:26 Sat Nov 14 2009 syslog: failed dns request len=73,srcip=208.67.222.222, url=wpad.domain_not_set.invalid  
(GMT-06:00)21:32:31 Sat Nov 14 2009 syslog: failed dns request len=73,srcip=208.67.222.222, url=wpad.domain_not_set.invalid  
(GMT-06:00)21:32:33 Sat Nov 14 2009 syslog: failed dns request len=73,srcip=208.67.222.222, url=wpad.domain_not_set.invalid  

```

I thought switching from QWest DNS servers to Free DNS and OpenDNS servers would work, but I’m getting the same problem. This is frustrating.

And it seems to happen at night. Usually around 9:00pm, but it’s only a little after 7:30pm now.

---

<div class="post-metadata">

### Author: ![HorseloverFat](https://avatars.discourse-cdn.com/v4/letter/h/8e8cbc/32.png) [@HorseloverFat](https://boards.straightdope.com/u/HorseloverFat)
#### Post date: [November 15, 2009, 3:49am UTC](https://boards.straightdope.com/t/different-dns-addresses-for-computer-and-modem-router/517538/6 "2009-11-15T03:49:23Z")

</div>

Actually the way to test it is to type: nslookup

and type in some domain names and see to what they resolve to. It will also tell you what DNS server is using.

The settings on your router are for DHCP, but you can override those locally on the PC.

---

<div class="post-metadata">

### Author: ![Nobody](https://avatars.discourse-cdn.com/v4/letter/n/94ad74/32.png) [@Nobody](https://boards.straightdope.com/u/Nobody)
#### Post date: [November 15, 2009, 3:50am UTC](https://boards.straightdope.com/t/different-dns-addresses-for-computer-and-modem-router/517538/7 "2009-11-15T03:50:33Z")

</div>

> [@HorseloverFat](#):
>
> The settings on your router are for DHCP, but you can override those locally on the PC.

That’s what I was thinking, thanks.

---

<div class="post-metadata">

### Author: ![si\_blakely](https://avatars.discourse-cdn.com/v4/letter/s/d9b06d/32.png) [@si\_blakely](https://boards.straightdope.com/u/si_blakely)
#### Post date: [November 16, 2009, 9:12am UTC](https://boards.straightdope.com/t/different-dns-addresses-for-computer-and-modem-router/517538/8 "2009-11-16T09:12:26Z")

</div>

In your browser options, turn off proxy autodetection.

_wpad.\<local domain\>_ is a catchall dns entry used by Windows - it does a DNS lookup on wpad.\<local domain\> to create a URL that is used to download the local domain proxy settings. If nothing resolves _wpad.\<local domain\>_, it may take up to 15 seconds for the DNS failure to occur, and for IE to stop trying the proxy autoconfiguration.

The other solution is to create a host entry for wpad as 127.0.0.1

Si

---

<div class="post-metadata">

### Author: ![Nobody](https://avatars.discourse-cdn.com/v4/letter/n/94ad74/32.png) [@Nobody](https://boards.straightdope.com/u/Nobody)
#### Post date: [November 16, 2009, 9:38am UTC](https://boards.straightdope.com/t/different-dns-addresses-for-computer-and-modem-router/517538/9 "2009-11-16T09:38:24Z")

</div>

I’ll check my wife’s computer since I’m not auto-detecting proxies on mine.

Off topic, but do you know how to set the DNS Suffix Search List? If I manually enter other DNS servers then try using NSLookup it appends domain\_not\_set.invalid to any name I enter and I can’t resolve it to an address.

I tried Googling this, but no luck. Actually, let me rephrase, none of the public DNS servers give a suffix to use and I don’t know how, if it’s possible, to append no suffix at the end of a name.

---

<div class="post-metadata">

### Author: ![si\_blakely](https://avatars.discourse-cdn.com/v4/letter/s/d9b06d/32.png) [@si\_blakely](https://boards.straightdope.com/u/si_blakely)
#### Post date: [November 16, 2009, 10:05am UTC](https://boards.straightdope.com/t/different-dns-addresses-for-computer-and-modem-router/517538/10 "2009-11-16T10:05:33Z")

</div>

You get .domain\_not\_set.invalid if your machine has no DNS suffix set in the Internet Protocol Network settings. If these are being set manually, you can add them (via the Advanced button, DNS Tab). If they are being set by DHCP, the DHCP server (probably your router) should have a config option to set this. However, a domain suffix should only get added to a name (for resolution purposes) if it does not have a suffix already or if the initial lookup has failed.

I should note that other bit of Windows (relating to http/Internet) can also try to resolve the wpad name - take a look at any other running apps that may try to configure a web proxy.

Si

---

<div class="post-metadata">

### Author: ![Nobody](https://avatars.discourse-cdn.com/v4/letter/n/94ad74/32.png) [@Nobody](https://boards.straightdope.com/u/Nobody)
#### Post date: [November 16, 2009, 10:07am UTC](https://boards.straightdope.com/t/different-dns-addresses-for-computer-and-modem-router/517538/11 "2009-11-16T10:07:13Z")

</div>

> [@si\_blakely](#):
>
> You get .domain\_not\_set.invalid if your machine has no DNS suffix set in the Internet Protocol Network settings. If these are being set manually, you can add them (via the Advanced button, DNS Tab). If they are being set by DHCP, the DHCP server (probably your router) should have a config option to set this. However, a domain suffix should only get added to a name (for resolution purposes) if it does not have a suffix already or if the initial lookup has failed.
> 
> I should note that other bit of Windows (relating to http/Internet) can also try to resolve the wpad name - take a look at any other running apps that may try to configure a web proxy.
> 
> Si

I know how to set the suffix, I just don’t know what suffix to use. And I’m also curious if there’s a way to not use a suffix at all.

---

<div class="post-metadata">

### Author: ![si\_blakely](https://avatars.discourse-cdn.com/v4/letter/s/d9b06d/32.png) [@si\_blakely](https://boards.straightdope.com/u/si_blakely)
#### Post date: [November 16, 2009, 10:10am UTC](https://boards.straightdope.com/t/different-dns-addresses-for-computer-and-modem-router/517538/12 "2009-11-16T10:10:45Z")

</div>

> [@Nobody](#):
>
> I know how to set the suffix, I just don’t know what suffix to use. And I’m also curious if there’s a way to not use a suffix at all.

You can use anything - it should only be used when resolving local names. _localnet_ is an option, or maybe your workgroup name. Not having a suffix is fine, too - Windows just uses _domain\_not\_set.invalid_ as a default in that situation.

Si

---

<div class="post-metadata">

### Author: ![Nobody](https://avatars.discourse-cdn.com/v4/letter/n/94ad74/32.png) [@Nobody](https://boards.straightdope.com/u/Nobody)
#### Post date: [November 16, 2009, 10:15am UTC](https://boards.straightdope.com/t/different-dns-addresses-for-computer-and-modem-router/517538/13 "2009-11-16T10:15:02Z")

</div>

> [@si\_blakely](#):
>
> You can use anything - it should only be used when resolving local names. _localnet_ is an option, or maybe your workgroup name. Not having a suffix is fine, too - Windows just uses _domain\_not\_set.invalid_ as a default in that situation.
> 
> Si

Yes, but unless I’m using my IP DNS server nslookup doesn’t work. For instance, I looked up Google under my IP’s DNS server. Under any other server I get this (using DNSAdvantage for example):

Default Server: [rdns1.ultradns.net](http://rdns1.ultradns.net)  
Address: 156.154.70.1

\> [www.google.com](http://www.google.com)  
Server: [rdns1.ultradns.net](http://rdns1.ultradns.net)  
Address: 156.154.70.1

Non-authoritative answer:  
Name: www.google.com.domain\_not\_set.invalid  
Address: 92.242.140.13

---

<div class="post-metadata">

### Author: ![spinky](https://avatars.discourse-cdn.com/v4/letter/s/59ef9b/32.png) [@spinky](https://boards.straightdope.com/u/spinky)
#### Post date: [November 16, 2009, 10:45am UTC](https://boards.straightdope.com/t/different-dns-addresses-for-computer-and-modem-router/517538/14 "2009-11-16T10:45:09Z")

</div>

Note that you may not be using the DNS servers you think you are. There are ISPs that actually intercept port 53 UDP (DNS) traffic and send it to their own servers no matter what server it is actually addressed to, and I have heard that there are consumer routers that do the same thing, redirecting all DNS traffic to whatever DNS server **the router** is configured to use, despite local clients being configured differently. I have no idea what the rationale for the latter functionality would be, but apparently it exists.

---

<div class="post-metadata">

### Author: ![si\_blakely](https://avatars.discourse-cdn.com/v4/letter/s/d9b06d/32.png) [@si\_blakely](https://boards.straightdope.com/u/si_blakely)
#### Post date: [November 16, 2009, 10:56am UTC](https://boards.straightdope.com/t/different-dns-addresses-for-computer-and-modem-router/517538/15 "2009-11-16T10:56:51Z")

</div>

> [@Nobody](#):
>
> Yes, but unless I’m using my IP DNS server nslookup doesn’t work. For instance, I looked up Google under my IP’s DNS server. Under any other server I get this (using DNSAdvantage for example):
> 
> Default Server: [rdns1.ultradns.net](http://rdns1.ultradns.net)  
> Address: 156.154.70.1
> 
> \> [www.google.com](http://www.google.com)  
> Server: [rdns1.ultradns.net](http://rdns1.ultradns.net)  
> Address: 156.154.70.1
> 
> Non-authoritative answer:  
> Name: www.google.com.domain\_not\_set.invalid  
> Address: 92.242.140.13

Do a  
**nslookup  
set debug=true  
 [www.google.com](http://www.google.com)**

and see what happens.

Si

---

<div class="post-metadata">

### Author: ![Nobody](https://avatars.discourse-cdn.com/v4/letter/n/94ad74/32.png) [@Nobody](https://boards.straightdope.com/u/Nobody)
#### Post date: [November 16, 2009, 10:59am UTC](https://boards.straightdope.com/t/different-dns-addresses-for-computer-and-modem-router/517538/16 "2009-11-16T10:59:36Z")

</div>

> [@si\_blakely](#):
>
> Do a  
> **nslookup  
> set debug=true  
> [www.google.com](http://www.google.com)**
> 
> and see what happens.
> 
> Si

\> set debug=true  
\> [www.google.com](http://www.google.com)  
Server: [rdns1.ultradns.net](http://rdns1.ultradns.net)  
Address: 156.154.70.1

* * *

Got answer:  
HEADER:  
opcode = QUERY, id = 2, rcode = NOERROR  
header flags: response, want recursion, recursion avail.  
questions = 1, answers = 1, authority records = 0, additional = 0

```
QUESTIONS:
    www.google.com.domain_not_set.invalid, type = A, class = IN
ANSWERS:
-&gt; www.google.com.domain_not_set.invalid
    internet address = 92.242.140.13
    ttl = 600 (10 mins)

```

* * *

## Non-authoritative answer:

Got answer:  
HEADER:  
opcode = QUERY, id = 3, rcode = NOERROR  
header flags: response, want recursion, recursion avail.  
questions = 1, answers = 0, authority records = 0, additional = 0

```
QUESTIONS:
    www.google.com.domain_not_set.invalid, type = AAAA, class = IN

```

* * *

Name: www.google.com.domain\_not\_set.invalid  
Address: 92.242.140.13

---

<div class="post-metadata">

### Author: ![si\_blakely](https://avatars.discourse-cdn.com/v4/letter/s/d9b06d/32.png) [@si\_blakely](https://boards.straightdope.com/u/si_blakely)
#### Post date: [November 16, 2009, 11:16am UTC](https://boards.straightdope.com/t/different-dns-addresses-for-computer-and-modem-router/517538/17 "2009-11-16T11:16:53Z")

</div>

Yeah, this is a combination of stupid problems at both ends.

First, Windows DNS client always appends the primary DNS suffix before trying the raw name. It should only do this if there are no “.” in the name (IMHO).

Second, DNSAdvantage (and OpenDNS) use wildcard DNS resolution that resolve all unknown DNS names to their own advertising supported search page. This is how they make money. Unfortunately, they appear to not invalidate the results for domain\_not\_set.invalid (this search string should always return an NXERROR).

Try adding a “.” as your primary DNS suffix - this prevents appending.

Si

---

<div class="post-metadata">

### Author: ![Nobody](https://avatars.discourse-cdn.com/v4/letter/n/94ad74/32.png) [@Nobody](https://boards.straightdope.com/u/Nobody)
#### Post date: [November 16, 2009, 11:25am UTC](https://boards.straightdope.com/t/different-dns-addresses-for-computer-and-modem-router/517538/18 "2009-11-16T11:25:20Z")

</div>

I got it to work by using the _**() Append these DNS suffixes (in order):**_ option and then adding  
.  
com  
net  
edu  
gov

as suffix options.

Now when I look up Google I get:

\> [www.google.com](http://www.google.com)  
Server: [rdns1.ultradns.net](http://rdns1.ultradns.net)  
Address: 156.154.70.1

Non-authoritative answer:  
Name: [www.l.google.com](http://www.l.google.com)  
Addresses: 74.125.127.106  
74.125.127.147  
74.125.127.104  
74.125.127.99  
74.125.127.103  
74.125.127.105  
Aliases: [www.google.com](http://www.google.com)

I’m not sure why it put the .l. in there, but it seems to work.

---

<div class="post-metadata">

### Author: ![si\_blakely](https://avatars.discourse-cdn.com/v4/letter/s/d9b06d/32.png) [@si\_blakely](https://boards.straightdope.com/u/si_blakely)
#### Post date: [November 16, 2009, 11:32am UTC](https://boards.straightdope.com/t/different-dns-addresses-for-computer-and-modem-router/517538/19 "2009-11-16T11:32:05Z")

</div>

> [@Nobody](#):
>
> I got it to work by using the _**() Append these DNS suffixes (in order):**_ option and then adding  
> .  
> com  
> net  
> edu  
> gov
> 
> as suffix options.

I’m glad it is now working, but try a nslookup debug to see what is getting tested first. Those other extensions (com,net,edu,gov) will still always resolve on a wildcard DNS to the DNS search page - possibly not what you want.

Si

---

<div class="post-metadata">

### Author: ![Nobody](https://avatars.discourse-cdn.com/v4/letter/n/94ad74/32.png) [@Nobody](https://boards.straightdope.com/u/Nobody)
#### Post date: [November 16, 2009, 11:34am UTC](https://boards.straightdope.com/t/different-dns-addresses-for-computer-and-modem-router/517538/20 "2009-11-16T11:34:53Z")

</div>

```auto

> set debug=true
> www.google.com
Server: rdns1.ultradns.net
Address: 156.154.70.1

------------
Got answer:
    HEADER:
        opcode = QUERY, id = 2, rcode = NOERROR
        header flags: response, want recursion, recursion avail.
        questions = 1, answers = 7, authority records = 0, additional = 0

    QUESTIONS:
        www.google.com, type = A, class = IN
    ANSWERS:
    -> www.google.com
        canonical name = www.l.google.com
        ttl = 248578 (2 days 21 hours 2 mins 58 secs)
    -> www.l.google.com
        internet address = 74.125.127.103
        ttl = 250 (4 mins 10 secs)
    -> www.l.google.com
        internet address = 74.125.127.105
        ttl = 250 (4 mins 10 secs)
    -> www.l.google.com
        internet address = 74.125.127.99
        ttl = 250 (4 mins 10 secs)
    -> www.l.google.com
        internet address = 74.125.127.147
        ttl = 250 (4 mins 10 secs)
    -> www.l.google.com
        internet address = 74.125.127.106
        ttl = 250 (4 mins 10 secs)
    -> www.l.google.com
        internet address = 74.125.127.104
        ttl = 250 (4 mins 10 secs)

------------
Non-authoritative answer:
------------
Got answer:
    HEADER:
        opcode = QUERY, id = 3, rcode = NOERROR
        header flags: response, want recursion, recursion avail.
        questions = 1, answers = 1, authority records = 1, additional = 0

    QUESTIONS:
        www.google.com, type = AAAA, class = IN
    ANSWERS:
    -> www.google.com
        canonical name = www.l.google.com
        ttl = 248578 (2 days 21 hours 2 mins 58 secs)
    AUTHORITY RECORDS:
    -> l.google.com
        ttl = 229 (3 mins 49 secs)
        primary name server = ns1.google.com
        responsible mail addr = dns-admin.google.com
        serial = 1398190
        refresh = 900 (15 mins)
        retry = 900 (15 mins)
        expire = 1800 (30 mins)
        default TTL = 60 (1 min)

------------
Name: www.l.google.com
Addresses: 74.125.127.103
          74.125.127.105
          74.125.127.99
          74.125.127.147
          74.125.127.106
          74.125.127.104
Aliases: www.google.com

```

[Next page](https://boards.straightdope.com/t/different-dns-addresses-for-computer-and-modem-router/517538.md?page=2)
