|
|
I have a 2003 Server Standard edition. It is configured as our DNS server.
We have 75 clients that point to it for DNS and they all work fine. The
other day I logged into the server for some AD maintenance and found that the
antivirus would not update on the server. The error message suggested making
sure the machine had internet connectivity. I fired up Internet Explorer and
I get the "Page cannot be displayed" error. I have had connectivity on this
server for years, so this is new.
I have tried pinging internet sites and have success both using ip addresses
as well as domain names. I can connect to ftp sites using both ip addresses
and domain names. It seems that any http traffic from any program; IE,
antivirus, installation programs, whatever, are not not going out.
If anyone can help, I would appreciate it because I am completely
flabergasted.
|
|
The Possibles:
(pick your favorite)
1. It is being blocked by a Firewall
2. It is being blocked by a local "personal" firewall or by local ACLs at
the TCP/IP level of the nic.
3. It is being blocked by and ACL on a LAN Router if it crosses a router to
get to the internet
4. The browser has "proxy settings" entered into it that go to a
misconfigured proxy, or a dead proxy, or an unreachable proxy, or a
non-existent proxy. Many http based applications "borrow" the browser's
proxy settings automatically and would fall victem to the same problem.
Browser proxy settings do not effect winsock based applications or anything
done from the comandline.
--
Phillip Windell
www.wandtv.com
The views expressed, are my own and not those of my employer, or Microsoft,
or anyone else associated with me, including my cats.
-----------------------------------------------------
"ccastle" <ccastle[ at ]discussions.microsoft.com> wrote in message
news:0C7B2725-07DB-4165-879D-7CEB06A3562E[ at ]microsoft.com...
[Quoted Text] >I have a 2003 Server Standard edition. It is configured as our DNS server.
> We have 75 clients that point to it for DNS and they all work fine. The
> other day I logged into the server for some AD maintenance and found that
> the
> antivirus would not update on the server. The error message suggested
> making
> sure the machine had internet connectivity. I fired up Internet Explorer
> and
> I get the "Page cannot be displayed" error. I have had connectivity on
> this
> server for years, so this is new.
>
> I have tried pinging internet sites and have success both using ip
> addresses
> as well as domain names. I can connect to ftp sites using both ip
> addresses
> and domain names. It seems that any http traffic from any program; IE,
> antivirus, installation programs, whatever, are not not going out.
>
> If anyone can help, I would appreciate it because I am completely
> flabergasted.
|
|
Thanks for the quick reply, but it was no help.
I disconnected from the router, brought the internet connection into a new
switch fresh out of the box, connected only the server to it, made sure there
are no proxy settings on he browser and disabled the windows firewall. Still
cannot access any http functions.
Any other ideas?
"Phillip Windell" wrote:
[Quoted Text] > The Possibles:
> (pick your favorite)
>
> 1. It is being blocked by a Firewall
> 2. It is being blocked by a local "personal" firewall or by local ACLs at
> the TCP/IP level of the nic.
> 3. It is being blocked by and ACL on a LAN Router if it crosses a router to
> get to the internet
> 4. The browser has "proxy settings" entered into it that go to a
> misconfigured proxy, or a dead proxy, or an unreachable proxy, or a
> non-existent proxy. Many http based applications "borrow" the browser's
> proxy settings automatically and would fall victem to the same problem.
> Browser proxy settings do not effect winsock based applications or anything
> done from the comandline.
>
> --
> Phillip Windell
> www.wandtv.com
>
> The views expressed, are my own and not those of my employer, or Microsoft,
> or anyone else associated with me, including my cats.
> -----------------------------------------------------
>
>
> "ccastle" <ccastle[ at ]discussions.microsoft.com> wrote in message
> news:0C7B2725-07DB-4165-879D-7CEB06A3562E[ at ]microsoft.com...
> >I have a 2003 Server Standard edition. It is configured as our DNS server.
> > We have 75 clients that point to it for DNS and they all work fine. The
> > other day I logged into the server for some AD maintenance and found that
> > the
> > antivirus would not update on the server. The error message suggested
> > making
> > sure the machine had internet connectivity. I fired up Internet Explorer
> > and
> > I get the "Page cannot be displayed" error. I have had connectivity on
> > this
> > server for years, so this is new.
> >
> > I have tried pinging internet sites and have success both using ip
> > addresses
> > as well as domain names. I can connect to ftp sites using both ip
> > addresses
> > and domain names. It seems that any http traffic from any program; IE,
> > antivirus, installation programs, whatever, are not not going out.
> >
> > If anyone can help, I would appreciate it because I am completely
> > flabergasted.
>
>
>
|
|
"ccastle" <ccastle[ at ]discussions.microsoft.com> wrote in message
news:3617C632-F5E0-4F8D-852A-0DC2B33EE8B1[ at ]microsoft.com...
[Quoted Text] > Thanks for the quick reply, but it was no help.
>
> I disconnected from the router, brought the internet connection into a new
> switch fresh out of the box, connected only the server to it, made sure
> there
> are no proxy settings on he browser and disabled the windows firewall.
> Still
> cannot access any http functions.
....and the TCP/IP config of the server is?
....and the DNS config is?
--
Phillip Windell
www.wandtv.com
The views expressed, are my own and not those of my employer, or Microsoft,
or anyone else associated with me, including my cats.
-----------------------------------------------------
|
|
A few things come to mind, admittedly, all are a shot in the dark:
- check the TCP/IP properties on the NIC, under Advanced/Options, and see if
filtering is enabled
- try a different browser, like Firefox
- try another computer on that new switch, if that works, you've narrowed
the problem to the server.
"ccastle" <ccastle[ at ]discussions.microsoft.com> wrote in message
news:3617C632-F5E0-4F8D-852A-0DC2B33EE8B1[ at ]microsoft.com...
[Quoted Text] > Thanks for the quick reply, but it was no help.
>
> I disconnected from the router, brought the internet connection into a new
> switch fresh out of the box, connected only the server to it, made sure
> there
> are no proxy settings on he browser and disabled the windows firewall.
> Still
> cannot access any http functions.
>
> Any other ideas?
>
> "Phillip Windell" wrote:
>
>> The Possibles:
>> (pick your favorite)
>>
>> 1. It is being blocked by a Firewall
>> 2. It is being blocked by a local "personal" firewall or by local ACLs at
>> the TCP/IP level of the nic.
>> 3. It is being blocked by and ACL on a LAN Router if it crosses a router
>> to
>> get to the internet
>> 4. The browser has "proxy settings" entered into it that go to a
>> misconfigured proxy, or a dead proxy, or an unreachable proxy, or a
>> non-existent proxy. Many http based applications "borrow" the browser's
>> proxy settings automatically and would fall victem to the same problem.
>> Browser proxy settings do not effect winsock based applications or
>> anything
>> done from the comandline.
>>
>> --
>> Phillip Windell
>> www.wandtv.com
>>
>> The views expressed, are my own and not those of my employer, or
>> Microsoft,
>> or anyone else associated with me, including my cats.
>> -----------------------------------------------------
>>
>>
>> "ccastle" <ccastle[ at ]discussions.microsoft.com> wrote in message
>> news:0C7B2725-07DB-4165-879D-7CEB06A3562E[ at ]microsoft.com...
>> >I have a 2003 Server Standard edition. It is configured as our DNS
>> >server.
>> > We have 75 clients that point to it for DNS and they all work fine.
>> > The
>> > other day I logged into the server for some AD maintenance and found
>> > that
>> > the
>> > antivirus would not update on the server. The error message suggested
>> > making
>> > sure the machine had internet connectivity. I fired up Internet
>> > Explorer
>> > and
>> > I get the "Page cannot be displayed" error. I have had connectivity on
>> > this
>> > server for years, so this is new.
>> >
>> > I have tried pinging internet sites and have success both using ip
>> > addresses
>> > as well as domain names. I can connect to ftp sites using both ip
>> > addresses
>> > and domain names. It seems that any http traffic from any program; IE,
>> > antivirus, installation programs, whatever, are not not going out.
>> >
>> > If anyone can help, I would appreciate it because I am completely
>> > flabergasted.
>>
>>
>>
|
|
I thought about filtering, so I disabled that, rebooted and still have no
success. I have connected my laptop to the switch it works like it should.
I have tried to install a couple of other browsers, haven't tried Firefox
yet, but they seem to require internet connectivity to download the full
program, not just the installer file.
Thanks again.
"JohnB" wrote:
[Quoted Text] > A few things come to mind, admittedly, all are a shot in the dark:
>
> - check the TCP/IP properties on the NIC, under Advanced/Options, and see if
> filtering is enabled
> - try a different browser, like Firefox
> - try another computer on that new switch, if that works, you've narrowed
> the problem to the server.
>
>
>
> "ccastle" <ccastle[ at ]discussions.microsoft.com> wrote in message
> news:3617C632-F5E0-4F8D-852A-0DC2B33EE8B1[ at ]microsoft.com...
> > Thanks for the quick reply, but it was no help.
> >
> > I disconnected from the router, brought the internet connection into a new
> > switch fresh out of the box, connected only the server to it, made sure
> > there
> > are no proxy settings on he browser and disabled the windows firewall.
> > Still
> > cannot access any http functions.
> >
> > Any other ideas?
> >
> > "Phillip Windell" wrote:
> >
> >> The Possibles:
> >> (pick your favorite)
> >>
> >> 1. It is being blocked by a Firewall
> >> 2. It is being blocked by a local "personal" firewall or by local ACLs at
> >> the TCP/IP level of the nic.
> >> 3. It is being blocked by and ACL on a LAN Router if it crosses a router
> >> to
> >> get to the internet
> >> 4. The browser has "proxy settings" entered into it that go to a
> >> misconfigured proxy, or a dead proxy, or an unreachable proxy, or a
> >> non-existent proxy. Many http based applications "borrow" the browser's
> >> proxy settings automatically and would fall victem to the same problem.
> >> Browser proxy settings do not effect winsock based applications or
> >> anything
> >> done from the comandline.
> >>
> >> --
> >> Phillip Windell
> >> www.wandtv.com
> >>
> >> The views expressed, are my own and not those of my employer, or
> >> Microsoft,
> >> or anyone else associated with me, including my cats.
> >> -----------------------------------------------------
> >>
> >>
> >> "ccastle" <ccastle[ at ]discussions.microsoft.com> wrote in message
> >> news:0C7B2725-07DB-4165-879D-7CEB06A3562E[ at ]microsoft.com...
> >> >I have a 2003 Server Standard edition. It is configured as our DNS
> >> >server.
> >> > We have 75 clients that point to it for DNS and they all work fine.
> >> > The
> >> > other day I logged into the server for some AD maintenance and found
> >> > that
> >> > the
> >> > antivirus would not update on the server. The error message suggested
> >> > making
> >> > sure the machine had internet connectivity. I fired up Internet
> >> > Explorer
> >> > and
> >> > I get the "Page cannot be displayed" error. I have had connectivity on
> >> > this
> >> > server for years, so this is new.
> >> >
> >> > I have tried pinging internet sites and have success both using ip
> >> > addresses
> >> > as well as domain names. I can connect to ftp sites using both ip
> >> > addresses
> >> > and domain names. It seems that any http traffic from any program; IE,
> >> > antivirus, installation programs, whatever, are not not going out.
> >> >
> >> > If anyone can help, I would appreciate it because I am completely
> >> > flabergasted.
> >>
> >>
> >>
>
>
>
|
|
Server TCP/IP:
IP: 204.184.59.1
Gateway: 204.184.59.254
DNS: 204.184.59.1
Alt: 150.199.178.1
DNS:
Interfaces Tab: listen on all IP addresses
Forwards tab: 150.199.178.1
150.199.8.1
150.199.1.10
Advanced tab: Bind secondaries; Enable round robin; Enable netmask ordering;
Secure cache against pollution
Name checking: Multibyte (UTF8)
Load zone data: from AD and registry
Root Hints: I'm not sure where these came from but ther are 10:
K.root-servers.net - 193.0.14.129
a.root-servers.net - 198.41.0.4
b.root-servers.net - 192.228.79.201
d.root-servers.net - 128.8.10.90
e.root-servers.net - 192.203.230.10
m.root-servers.net - 202.12.27.33
j.root-servers.net - 192.58.128.30
f.root-servers.net - 192.5.5.241
c.root-servers.net - 192.33.4.12
l.root-servers.net - 199.7.83.42
"Phillip Windell" wrote:
[Quoted Text] > "ccastle" <ccastle[ at ]discussions.microsoft.com> wrote in message
> news:3617C632-F5E0-4F8D-852A-0DC2B33EE8B1[ at ]microsoft.com...
> > Thanks for the quick reply, but it was no help.
> >
> > I disconnected from the router, brought the internet connection into a new
> > switch fresh out of the box, connected only the server to it, made sure
> > there
> > are no proxy settings on he browser and disabled the windows firewall.
> > Still
> > cannot access any http functions.
>
> ....and the TCP/IP config of the server is?
> ....and the DNS config is?
>
>
> --
> Phillip Windell
> www.wandtv.com
>
> The views expressed, are my own and not those of my employer, or Microsoft,
> or anyone else associated with me, including my cats.
> -----------------------------------------------------
>
>
>
|
|
"ccastle" <ccastle[ at ]discussions.microsoft.com> wrote in message
news:DF4EC373-F889-4E4E-96A6-35CEA35FF099[ at ]microsoft.com...
[Quoted Text] > Server TCP/IP:
>
> IP: 204.184.59.1
> Gateway: 204.184.59.254
> DNS: 204.184.59.1
> Alt: 150.199.178.1
Remove 150.199.178.1, that is already in the Forwarders list. The machine
should only point to itself in the TCP/IP Specs.
I don't really see anything wrong other than that, and I don't think that is
the problem. So I guess I have to just surrender on this one for now.
--
Phillip Windell
www.wandtv.com
The views expressed, are my own and not those of my employer, or Microsoft,
or anyone else associated with me, including my cats.
-----------------------------------------------------
|
|
Thanks for trying. I guess I'll go beat my head against the wall in solitude.
"Phillip Windell" wrote:
[Quoted Text] > "ccastle" <ccastle[ at ]discussions.microsoft.com> wrote in message
> news:DF4EC373-F889-4E4E-96A6-35CEA35FF099[ at ]microsoft.com...
> > Server TCP/IP:
> >
> > IP: 204.184.59.1
> > Gateway: 204.184.59.254
> > DNS: 204.184.59.1
> > Alt: 150.199.178.1
>
> Remove 150.199.178.1, that is already in the Forwarders list. The machine
> should only point to itself in the TCP/IP Specs.
>
> I don't really see anything wrong other than that, and I don't think that is
> the problem. So I guess I have to just surrender on this one for now.
>
> --
> Phillip Windell
> www.wandtv.com
>
> The views expressed, are my own and not those of my employer, or Microsoft,
> or anyone else associated with me, including my cats.
> -----------------------------------------------------
>
>
>
|
|
have a look at the eventlist
flush your dns cache
is dns server running / restart
do you have functioning dns for your lan
jk
|
|
I've not found anything relevant in the event list.
I have flushed the cache and restarted the dns server several times as well
as rebooting the entire machine.
As for having a functioning dns for my lan, that is the strange thing. This
is my lans dns server. Every machine connected to my lan points to this
machine as their dns server and they all have full functionality. It is just
this machine that cannot access windows updates or update its antivirus. I
have manually updated the antivirus and scanned, their seems to be no
infections of virus or malware.
"Juergen Kluth" wrote:
[Quoted Text] > have a look at the eventlist
> flush your dns cache
> is dns server running / restart
> do you have functioning dns for your lan
> jk
>
>
>
|
|
Remove the forwarders, configure DNS to listen only on a specific NIC,
restart DNS service, restart dnscache (or dns client) service. Try again.
Deji
"ccastle" <ccastle[ at ]discussions.microsoft.com> wrote in message
news:A1993EF1-0589-4172-BCF1-0CF490965EA7[ at ]microsoft.com...
[Quoted Text] > I've not found anything relevant in the event list.
>
> I have flushed the cache and restarted the dns server several times as
> well
> as rebooting the entire machine.
>
> As for having a functioning dns for my lan, that is the strange thing.
> This
> is my lans dns server. Every machine connected to my lan points to this
> machine as their dns server and they all have full functionality. It is
> just
> this machine that cannot access windows updates or update its antivirus.
> I
> have manually updated the antivirus and scanned, their seems to be no
> infections of virus or malware.
> "Juergen Kluth" wrote:
>
>> have a look at the eventlist
>> flush your dns cache
>> is dns server running / restart
>> do you have functioning dns for your lan
>> jk
>>
>>
>>
|
|
Hi
do the clients have a entry for secondary dns server (by dhcp for example or
manually) configured ?
so that they can resolve external adresses ?
and your server has/can not ?
is it a dns prob ?
could be also a routing problem, check your client and servers gateway entry
jk
|
|
Since this is just an http issue (everyone seems to be missing that part),
here's another thought....
Try to http to a network printer on the LAN, like something with a JetDirect
card. That would rule out an ACL entry in the router, that's specific to
that machine. But again, that seems like a shot in the dark. Why would it
all of a sudden not work.
I'm really surprised that it *isn't* a virus of some type. I can remember
seeing that, on an XP machine, a couple years ago.... same thing; DNS worked
but http didn't. Unfortunately I don't remember what the virus was.
"ccastle" <ccastle[ at ]discussions.microsoft.com> wrote in message
news:CAAE76A7-3CB0-4C9B-97DB-0D9802A7856F[ at ]microsoft.com...
[Quoted Text] >I thought about filtering, so I disabled that, rebooted and still have no
> success. I have connected my laptop to the switch it works like it
> should.
>
> I have tried to install a couple of other browsers, haven't tried Firefox
> yet, but they seem to require internet connectivity to download the full
> program, not just the installer file.
>
> Thanks again.
>
> "JohnB" wrote:
>
>> A few things come to mind, admittedly, all are a shot in the dark:
>>
>> - check the TCP/IP properties on the NIC, under Advanced/Options, and see
>> if
>> filtering is enabled
>> - try a different browser, like Firefox
>> - try another computer on that new switch, if that works, you've narrowed
>> the problem to the server.
>>
>>
>>
>> "ccastle" <ccastle[ at ]discussions.microsoft.com> wrote in message
>> news:3617C632-F5E0-4F8D-852A-0DC2B33EE8B1[ at ]microsoft.com...
>> > Thanks for the quick reply, but it was no help.
>> >
>> > I disconnected from the router, brought the internet connection into a
>> > new
>> > switch fresh out of the box, connected only the server to it, made sure
>> > there
>> > are no proxy settings on he browser and disabled the windows firewall.
>> > Still
>> > cannot access any http functions.
>> >
>> > Any other ideas?
>> >
>> > "Phillip Windell" wrote:
>> >
>> >> The Possibles:
>> >> (pick your favorite)
>> >>
>> >> 1. It is being blocked by a Firewall
>> >> 2. It is being blocked by a local "personal" firewall or by local ACLs
>> >> at
>> >> the TCP/IP level of the nic.
>> >> 3. It is being blocked by and ACL on a LAN Router if it crosses a
>> >> router
>> >> to
>> >> get to the internet
>> >> 4. The browser has "proxy settings" entered into it that go to a
>> >> misconfigured proxy, or a dead proxy, or an unreachable proxy, or a
>> >> non-existent proxy. Many http based applications "borrow" the
>> >> browser's
>> >> proxy settings automatically and would fall victem to the same
>> >> problem.
>> >> Browser proxy settings do not effect winsock based applications or
>> >> anything
>> >> done from the comandline.
>> >>
>> >> --
>> >> Phillip Windell
>> >> www.wandtv.com
>> >>
>> >> The views expressed, are my own and not those of my employer, or
>> >> Microsoft,
>> >> or anyone else associated with me, including my cats.
>> >> -----------------------------------------------------
>> >>
>> >>
>> >> "ccastle" <ccastle[ at ]discussions.microsoft.com> wrote in message
>> >> news:0C7B2725-07DB-4165-879D-7CEB06A3562E[ at ]microsoft.com...
>> >> >I have a 2003 Server Standard edition. It is configured as our DNS
>> >> >server.
>> >> > We have 75 clients that point to it for DNS and they all work fine.
>> >> > The
>> >> > other day I logged into the server for some AD maintenance and found
>> >> > that
>> >> > the
>> >> > antivirus would not update on the server. The error message
>> >> > suggested
>> >> > making
>> >> > sure the machine had internet connectivity. I fired up Internet
>> >> > Explorer
>> >> > and
>> >> > I get the "Page cannot be displayed" error. I have had connectivity
>> >> > on
>> >> > this
>> >> > server for years, so this is new.
>> >> >
>> >> > I have tried pinging internet sites and have success both using ip
>> >> > addresses
>> >> > as well as domain names. I can connect to ftp sites using both ip
>> >> > addresses
>> >> > and domain names. It seems that any http traffic from any program;
>> >> > IE,
>> >> > antivirus, installation programs, whatever, are not not going out.
>> >> >
>> >> > If anyone can help, I would appreciate it because I am completely
>> >> > flabergasted.
>> >>
>> >>
>> >>
>>
>>
>>
|
|
"JohnB" <jbrigan[ at ]yahoo.com> wrote in message
news:ux%23HD9kSJHA.1164[ at ]TK2MSFTNGP03.phx.gbl...
[Quoted Text] > Since this is just an http issue (everyone seems to be missing that part),
Not me ;-)
--
Phillip Windell
www.wandtv.com
The views expressed, are my own and not those of my employer, or Microsoft,
or anyone else associated with me, including my cats.
-----------------------------------------------------
|
|
The clients do not have a secondary dns and the gateway is the same for
clients and server.
I've tried A. Deji's suggestions as well, still no go.
"Juergen Kluth" wrote:
[Quoted Text] > Hi
> do the clients have a entry for secondary dns server (by dhcp for example or
> manually) configured ?
>
> so that they can resolve external adresses ?
> and your server has/can not ?
>
> is it a dns prob ?
> could be also a routing problem, check your client and servers gateway entry
>
> jk
>
>
>
|
|
Correction, everyone *but* Phillip.
And I'm not criticizing anyone's suggestions.... god knows I've made enough
of them that weren't right but... I just had to put that in there, hoping
it would save one more person from thinking he had a DNS issue.... and save
them a bunch of typing
"Phillip Windell" <philwindell[ at ]hotmail.com> wrote in message
news:OFW7MplSJHA.5860[ at ]TK2MSFTNGP02.phx.gbl...
[Quoted Text] >
> "JohnB" <jbrigan[ at ]yahoo.com> wrote in message
> news:ux%23HD9kSJHA.1164[ at ]TK2MSFTNGP03.phx.gbl...
>> Since this is just an http issue (everyone seems to be missing that
>> part),
>
> Not me ;-)
>
>
> --
> Phillip Windell
> www.wandtv.com
>
> The views expressed, are my own and not those of my employer, or
> Microsoft,
> or anyone else associated with me, including my cats.
> -----------------------------------------------------
>
>
|
|
It still comes down to only HTTP,...so DNS or anything outside of things
related to HTTP is not going to be the problem.
You either have something wrong with the machine's HTTP related components
or you have something filtering at Layer4 that is blocking HTTP (like a
firewall or something with ACLs).
Don't know it this helps,...but the Browser and any browser
related/dependent applications have to use WININET.DLL to
communicate,...everything else uses WINSOCK.DLL. I don't have any specific
answers, but it may be important to know that there are two separate sets of
networking components in use between HTTP and anything other than HTTP.
--
Phillip Windell
www.wandtv.com
The views expressed, are my own and not those of my employer, or Microsoft,
or anyone else associated with me, including my cats.
-----------------------------------------------------
"ccastle" <ccastle[ at ]discussions.microsoft.com> wrote in message
news:9E9CDA87-F79F-4B1C-9211-75878264D660[ at ]microsoft.com...
[Quoted Text] > The clients do not have a secondary dns and the gateway is the same for
> clients and server.
>
> I've tried A. Deji's suggestions as well, still no go.
>
> "Juergen Kluth" wrote:
>
>> Hi
>> do the clients have a entry for secondary dns server (by dhcp for example
>> or
>> manually) configured ?
>>
>> so that they can resolve external adresses ?
>> and your server has/can not ?
>>
>> is it a dns prob ?
>> could be also a routing problem, check your client and servers gateway
>> entry
>>
>> jk
>>
>>
>>
|
|
|