• Status: Solved
  • Priority: Medium
  • Security: Public
  • Views: 1864
  • Last Modified:

Cant browse to a particular site - error 10060 connection timeout

Users trying to access a particular site get the following error:  This is happened with or without their proxy settings turned on.  Only happening with this site.  Ive tested it on a dial up internet connection and its fine. Something to do with ISA I think!! Please help...what do I check - where do I look?  I didnt setup the ISA server.
This is the exact error:
"Explanation: The request timed out before the page could be retrieved.

Try the following:
Refresh page: Search for the page again by clicking the Refresh button. The timeout may have occurred due to Internet congestion.
Check spelling: Check that you typed the Web page address correctly. The address may have been mistyped.
Contact website: You may want to contact the website administrator to make sure the Web page still exists. You can do this by using the e-mail address or phone number listed on the website home page.
If you are still not able to view the requested page, try contacting your administrator or Helpdesk.

 
 
 Technical Information (for support personnel)
Error Code 10060: Connection timeout
Background: The gateway could not receive a timely response from the website you are trying to access. This might indicate that the network is congested, or that the website is experiencing technical difficulties.
Date: 14/04/2005 12:39:19 AM
Server: gadsydsrv-09.nsw.gadens.local
Source: Firewall"
 
0
byrca
Asked:
byrca
1 Solution
 
srikrishnakCommented:
Hi,
Seems when you bypass the proxy and hitting the internet router/gw directly it works fine ..Am I right ?
In this case try to check your ISA for any specific rules which're denying the access to the website.. Or can you do  a traceroute from ISA to ensure the routing is just fine..
0
 
byrcaAuthor Commented:
Hi there

Thanks for the response.  When I turn off the proxy settings in IE it doesnt work either.  When you say do a traceroute from ISA - do you mean just run it from the command prompt of the ISA server?
Any other ideas?  

Thanks
Cat
0
 
srikrishnakCommented:
Yes. From the ISA server command prompt only...

So your network connectivity is something similar to

LAN-----> ISA---->Internet.

So a machine in side your LAN doesnt work...But when you dial-in to internet as you are bypassing the ISA and reaching directly to your ISP network its working fine...

0
Evaluating UTMs? Here's what you need to know!

Evaluating a UTM appliance and vendor can prove to be an overwhelming exercise.  How can you make sure that you're getting the security that your organization needs without breaking the bank? Check out our UTM Buyer's Guide for more information on what you should be looking for!

 
byrcaAuthor Commented:
Yes  - inside our lan is the problem.  With or without the proxy settings on.  If I use a laptop with an analogue line and dial up to the internet its fine. Ive also tested from home and the site is good.  Its only timing out here. And it seems to be the only site im having problems with. I work in a law firm and the lawyers need to use this site.

Cheers
Cat
0
 
srikrishnakCommented:
Hmm..Okies understand the urgency...Anyway can you try the traceroute results from ISA command prompt...If you can do that then you can check the "nslookup" from the command prompt again. If the results are okie  you need to check the ISA configuration..Seems n more likely there might be some routing problem or some explicit deny statements...
Hope this helps..
0
 
byrcaAuthor Commented:
Hi there - thanks for this.  Ive tried to do a TRACERT www.docep.wa.gov.au but its timing out from our ISA server too.  Whats a NSLOOKUP?  is it just a command?  If so can you give me step by steps on how to do it?  Failing this i'll have to look into the configuration of ISA to see if there are any denys to this site.  Although if there were im sure it wouldnt just be timing out...any more ideas anybody?

Cheers
Cat
0
 
srikrishnakCommented:
Hmm....probably you are not allowing ICMP from ISA...
Okie..NSLOOKUP is a tool/command to know the dns status...
Just open a cmd prompt and type "nslookup".. Then to check the status(or resolve) you have to just type the url.For example "www.docep.wa.gov.au".
Thats it..
0
 
byrcaAuthor Commented:
OK did an NSLOOKUP but it timed out after two seconds!  This is what it said:

> nslookup www.docep.wa.gov.au
Server:  docep.wa.gov.au
Address:  203.33.230.144
Aliases:  www.docep.wa.gov.au

DNS request timed out.
    timeout was 2 seconds.
*** Request to www.docep.wa.gov.au timed-out

What do you mean by ICMP?
0
 
srikrishnakCommented:
ICMP..A good link can be "http://www.faqs.org/rfcs/rfc792.html"
Okie...your DNS requiest timed out..But from the post  you put it seems the resolution is okie...Coz i can see the Ip address 203.33.230.144 which belongs to docep...
Then you may want to check the firewall filtering rules which might be blocking the access due to some stupid reasons....:)




(Side Talk: Do you stay in WA..I used to stay ther n worked some time..:)...)
0
 
byrcaAuthor Commented:
No im in Sydney mate!!  Bondi Bird....
Now back to ISA.  Im not familiar with it. How do I check for filtering rules?
0
 
byrcaAuthor Commented:
Its ok - fixed it!  
0
 
krmisCommented:
I'm having the same issue however the website resides in my DMZ. I can ping the website and browse to however one paticular page when browsed to connects to our oracle Database which then runs a set a querys during this time the page says loading. The query takes about 15 minutes so before it finishes I get the time out error in proxy. I know the site is ok because as soon as I uncheck proxy the page loads with out the timeout. This also happened with our FTP site. I was attempting to open a rather large jpeg when it trys to open the image it times out because the image takes sometime to open. However just like before if I uncheck proxy I'm ok. any ideas?
0
 
srikrishnakCommented:
Probably you need to open a new question...:)
0
 
livegirlloveCommented:
nice you fixed it.  way to go on letting everybody else in on the answer.
0

Featured Post

SMB Security Just Got a Layer Stronger

WatchGuard acquires Percipient Networks to extend protection to the DNS layer, further increasing the value of Total Security Suite.  Learn more about what this means for you and how you can improve your security with WatchGuard today!

Tackle projects and never again get stuck behind a technical roadblock.
Join Now