Firewall hangs IPCONFIG / PING, but allows webpages...

In XP, webpages would not load in IE.  IPCONFIG and PING both would hang indefinitely.  

I dropped the norton firewall.  Now all was OK.  Webpages loaded, and IPCONFIG + PING worked.

The norton firewall had been customized (probably in error, user is newbie).  So I set it back to default firewall settings, and turned the firewall back on.

Now webpages loaded fine in IE.  But IPCONFIG and PING still hung.

I tried "allowing" the PING and IPCONFIG executables in the firewall program list, but this didn't seem to help.

So in interests of saving him money, we uninstalled NOrton Internet Security, and are now using the windows firewall and another antivirus he has.

For my education -- what would cause this behavior in a 3rd-party firewall?

(would I have to allow a certain IP, beyond the range that covers my local network / adapers? Does ping and/or ipconfig use an "ip"?  the local network was / 100, and was allowed by network wizzard)

Who is Participating?

[Product update] Infrastructure Analysis Tool is now available with Business Accounts.Learn More

I wear a lot of hats...

"The solutions and answers provided on Experts Exchange have been extremely helpful to me over the last few years. I wear a lot of hats - Developer, Database Administrator, Help Desk, etc., so I know a lot of things but not a lot about one thing. Experts Exchange gives me answers from people who do know a lot about one thing, in a easy to use platform." -Todd S.

I couldn't imagine why ipconfig would "hang", unless it was doing some DNS operation, imho. This is strange.

ping will hang if DNS traffic was blocked (outgoing dst port 53, udp  and/or incoming udp, src port 53) or if the ICMP Echo requests (out) and replies (in) would be dropped.
But in both cases, it shouldn't hang indefinetly and timeout in a reasonable amount of time.

ipconfig should not generate network traffic at all.
ping uses the UDP and ICMP protocol, udp for resolving the hostname, i.e. if you ping to get google's ip address and ICMP to send echo request packets. Both udp and icmp are layered on top of IP.
go to firewall
open advance tab

permit icmp in bound and outbound
permit dns in bound and outbound

Experts Exchange Solution brought to you by

Your issues matter to us.

Facing a tech roadblock? Get the help and guidance you need from experienced professionals who care. Ask your question anytime, anywhere, with no hassle.

Start your 7-day free trial
any luck on this?
Introduction to Web Design

Develop a strong foundation and understanding of web design by learning HTML, CSS, and additional tools to help you develop your own website.

request to close this he has not responded in sometime.
dgrrrAuthor Commented:
sorry, I'm waiting to return to the site where it happened.

If I dont' get the chance, I'll just assign points and make a note ofyour advice

dgrrrAuthor Commented:
OK, wasn't able to get back to site.

I'll up the points and close this.

I will remember your advice for future ref!

It's more than this solution.Get answers and train to solve all your tech problems - anytime, anywhere.Try it for free Edge Out The Competitionfor your dream job with proven skills and certifications.Get started today Stand Outas the employee with proven skills.Start learning today for free Move Your Career Forwardwith certification training in the latest technologies.Start your trial today
Operating Systems

From novice to tech pro — start learning today.