I have a unique issue I can not seem to solve. I have a customer that access a Application Service Provider to do most of their Business Process during the Day.
They have a Airband Radio Internet Connection, 3MB, a Netgear Router, and a Windows 2003 Small Business Server. All 25 Users connect to a Netgear Switch and then have a default gateway of the Netgear Router, and are pointed at the Intenal DNS Server that Does DNS forwarding to the Router which gets it's information from the Netgear Router. For all web sites but one they have no problems accessing the internet.
About 95% of the time the Website in question comes up successfully in the browser and functions correclty, but about 5% of the time a Frame of a Multi Frame site will come up saying that the PAGE CANNOT be Displayed, and gives a Standard IE Error Page, referenceing a DNS Error May occured.
We have discussed the Problem with the Sites, and they have had no other reports of Access problems, this has been going on for about 5 months.
We have in that time tried Different DNS Providers, Router, upgraded the SBS Server, all have had no affect on the issue.
What does seem to help for a couple of days is if we change their Public IP on the Router the problem goes away for several days.
The Site Provider has also stated that they see
--------------
I looked up the GEN:SID id number on the type of attack at the
www.snort.org site, and got the listing of the potential problem. One was 1:2522 - WEB-MISC SSLv3 Invalid Client_Hello attempt
http://www.snort.org/pub-bin/sigs.cgi?sid=2522------------------
Direct Quote form their Message.
I have confirmed that all servers and workstations are Patched, SP3 and SP2. and All computers are Running Total Protection from MCafee.
If any one can provide me a place to look next.............
Thanks
Rob
Start Free Trial
