[Last Call] Learn how to a build a cloud-first strategyRegister Now


windows xp pro can not access internet from lan

Posted on 2004-11-18
Medium Priority
Last Modified: 2010-04-10

We are running a lan behind a PIX firewall. 10 servers (win2k server), 10 workstations (win 2k).
All systems run inside our domain.

I have tried to connect some new machines (windows XP pro) and after doing so they can see everything behind our firewall but have zero outside access. I am able to ping gateway, internal dns server, etc...

I can not ping or reach external ip's, urls etc.

Any thoughts?

I've been through tcp/ip setup - identical to my w2k machines. IE6 seems to be set correctly. No software based firewalls.
(I was wondering if there was some hidden proxy that I was missing - dont think so).

route print
Interface List
0x1 ........................... MS TCP Loopback interface
0x2 ...00 e0 98 74 f9 48 ...... Linksys Etherfast USB 10/100 Ethernet Adapter -
Packet Scheduler Miniport
Active Routes:
Network Destination        Netmask          Gateway       Interface  Metric
       20       1       20       20       20       20       1
Default Gateway:
Persistent Routes:

Question by:netrep
LVL 11

Expert Comment

ID: 12619755
Greetings netrep,

Have you tried connecting another machine (known to work properly) on the same subnet to see if it can connect to outside IPs?  If another machine cannot connect, you'll need to have a look at your firewall rules.  Is access perhaps limited by IP address?  The local route setup looks fine to me... When you try and ping an outside IP, does it say "Destination net unreachable"? or just no reply?  Have you also disabled the XP built-in firewall?  It's enabled by default in SP2.  Good luck!


Accepted Solution

JohnCarlMorgan earned 1000 total points
ID: 12620213
Work with IP's not hostnames to rule out DNS as a problem (if it works with IP's but not hostnames then it's obviously a DNS problem).  You sound fairly clued so I'm going to rule out the possibility of the 2K machines going through a proxy and the firewall only allowing traffic from the proxy.  Are you able to configure the firewall & check that it is not set to only allow traffic from a specific IP range?

Try to ping from one of the Windows 2K machines that are working.  If you get no replies but are able to browse the web from these machines the your firewall is probably dropping ICMP (which is important to know as it can throw you off in your troubleshooting).

Nothing wrong with your routing table.  Your XP firewall wouldn't be stopping you pinging external IP's if it allows internal's.

I'm not familiar with your firewall but the WatchGuard crap we tend to use is licensed for a certain number of users only. Hence if you go over the 10 users it doesn't allow the traffic from the additional computers out.  Which would replicate your symptoms exactly.


Expert Comment

ID: 12620258
Without wanting to offend in any way, but knowing how frustrating XP can be, have you tried running the new connection wizard?  I have had many occasions where XP boxes have refused to talk to the outside world until after I've run the connection wizard and told it to use the LAN to connect.

Open IE
Select Tools
Select Internet Options
Connections Tab
Setup button (top right)
Connect to Internet
Connect using...always on

My apologies if you've already tried this.

Featured Post

Free recovery tool for Microsoft Active Directory

Veeam Explorer for Microsoft Active Directory provides fast and reliable object-level recovery for Active Directory from a single-pass, agentless backup or storage snapshot — without the need to restore an entire virtual machine or use third-party tools.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

This program is used to assist in finding and resolving common problems with wireless connections.
In this article I will be showing you how to subnet the easiest way possible for IPv4 (Internet Protocol version 4). This article does not cover IPv6. Keep in mind that subnetting requires lots of practice and time.
In this brief tutorial Pawel from AdRem Software explains how you can quickly find out which services are running on your network, or what are the IP addresses of servers responsible for each service. Software used is freeware NetCrunch Tools (https…
Monitoring a network: how to monitor network services and why? Michael Kulchisky, MCSE, MCSA, MCP, VTSP, VSP, CCSP outlines the philosophy behind service monitoring and why a handshake validation is critical in network monitoring. Software utilized …

831 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question