NAORC
asked on
Can't browse the Internet on Server 2003.
Hi,
At the start of the week I noticed that I could not connect to the Internet on several of my Dell Poweredge 830 servers which run Server 2003, it just trys to connect and then a message states that the page cannot be displayed. I could connect to the Internet before. All of the other servers (which are NOT PE 830) can connect with no issues. I can ping all internal devices including the firewall and external devices by IP and their DNS names.
It seems that it is connected to the network fine and has all the correct DNS and default gateway settings but It seems that I just cannot connect? I've been looking into it for several days now with no joy.
In addition to this I have AVG installed on all servers and workstations and updates are not getting through because of this issue. I have updated and restarted the servers (to install them) twice over the past week, could It be a security update for the operating system or IE?
At the start of the week I noticed that I could not connect to the Internet on several of my Dell Poweredge 830 servers which run Server 2003, it just trys to connect and then a message states that the page cannot be displayed. I could connect to the Internet before. All of the other servers (which are NOT PE 830) can connect with no issues. I can ping all internal devices including the firewall and external devices by IP and their DNS names.
It seems that it is connected to the network fine and has all the correct DNS and default gateway settings but It seems that I just cannot connect? I've been looking into it for several days now with no joy.
In addition to this I have AVG installed on all servers and workstations and updates are not getting through because of this issue. I have updated and restarted the servers (to install them) twice over the past week, could It be a security update for the operating system or IE?
leegclystvale
Proxy server settings?
ASKER
This is going to show my naviety, but where can I check the Proxy settings?
Go to internet explorer>Tools>Internet options>Connections>LAN settings.
It may be that your proxy settings are set via a GPO. Are your servers in the same OU in AD yet a differnet OU to the servers that can see the internet?
ASKER
I checked the LAN Settings - The only option that is checked is the "Automatically detect settings" Nothing is checked on the Proxy settings.
ASKER
I have two different OU's... one for the Domain Controllers and one for the other member servers. The servers that can connect to the internet are in the same OU as the one's that can't.
Do you use a proxy?> check the IE settings on the servers that can get to the net.
ASKER
I have just checked the IE Settings on the servers that can see the Internet and they are the same as the servers that cannot see it, i.e. no proxy setup and automatically detect settings is set. I can't seem to put a finger on what could of caused my browser to stop displaying content.
Well it could be an update getting in the way. do a nslookup and post back
Start>Run>type cmd>ok>type nslookup. See if this is the same output on a working server.
also do a tracert and ensure it's going to your default gateway
Start>Run>type cmd>ok>type tracert www.bbc.co.uk
Again this should be the output from a working server, Post back findings.
Are these servers set to download and install all updates automitically without testing?
Start>Run>type cmd>ok>type nslookup. See if this is the same output on a working server.
also do a tracert and ensure it's going to your default gateway
Start>Run>type cmd>ok>type tracert www.bbc.co.uk
Again this should be the output from a working server, Post back findings.
Are these servers set to download and install all updates automitically without testing?
ASKER
nslookup - Working Server
Default Server: winslet.orcnet.int
Address: 192.168.0.10
nslookup - Non Working Server
Default Server: winslet.orcnet.int
Address: 192.168.0.10
Tracert - Working server
> tracert www.bbc.co.uk
Server: www.bbc.net.uk
Address: 212.58.253.67
Aliases: www.bbc.co.uk
DNS request timed out.
timeout was 2 seconds.
*** Request to www.bbc.co.uk timed-out
Tracert - Non working server
> tracert www.bbc.co.uk
Server: www.bbc.net.uk
Address: 212.58.253.67
Aliases: www.bbc.co.uk
DNS request timed out.
timeout was 2 seconds.
*** Request to www.bbc.co.uk timed-out
The servers get the updates from a central server (WSUS) which can connect to the internet. They download to the servers and then I press the button to install the updates and restart the servers.
Default Server: winslet.orcnet.int
Address: 192.168.0.10
nslookup - Non Working Server
Default Server: winslet.orcnet.int
Address: 192.168.0.10
Tracert - Working server
> tracert www.bbc.co.uk
Server: www.bbc.net.uk
Address: 212.58.253.67
Aliases: www.bbc.co.uk
DNS request timed out.
timeout was 2 seconds.
*** Request to www.bbc.co.uk timed-out
Tracert - Non working server
> tracert www.bbc.co.uk
Server: www.bbc.net.uk
Address: 212.58.253.67
Aliases: www.bbc.co.uk
DNS request timed out.
timeout was 2 seconds.
*** Request to www.bbc.co.uk timed-out
The servers get the updates from a central server (WSUS) which can connect to the internet. They download to the servers and then I press the button to install the updates and restart the servers.
ASKER
Update - I am managing to get a trace route response now on the NON WORKING server.
Are these non-working servers on a different switch? Can you ping the default gateway from any non working servers?
ASKER
No all of the servers are on the same switch. Yes I can ping the default gateway.
..and still no internet? Have you any entries in the hosts file?
c:\windows\system32\driver
c:\windows\system32\driver
Are you using IE7?
ASKER
Still no Internet, no. I have just looked at the host file and this was my result...
# Copyright (c) 1993-1999 Microsoft Corp.
#
# This is a sample HOSTS file used by Microsoft TCP/IP for Windows.
#
# This file contains the mappings of IP addresses to host names. Each
# entry should be kept on an individual line. The IP address should
# be placed in the first column followed by the corresponding host name.
# The IP address and the host name should be separated by at least one
# space.
#
# Additionally, comments (such as these) may be inserted on individual
# lines or following the machine name denoted by a '#' symbol.
#
# For example:
#
# 102.54.94.97 rhino.acme.com # source server
# 38.25.63.10 x.acme.com # x client host
127.0.0.1 localhost
Yes I am using IE7.
# Copyright (c) 1993-1999 Microsoft Corp.
#
# This is a sample HOSTS file used by Microsoft TCP/IP for Windows.
#
# This file contains the mappings of IP addresses to host names. Each
# entry should be kept on an individual line. The IP address should
# be placed in the first column followed by the corresponding host name.
# The IP address and the host name should be separated by at least one
# space.
#
# Additionally, comments (such as these) may be inserted on individual
# lines or following the machine name denoted by a '#' symbol.
#
# For example:
#
# 102.54.94.97 rhino.acme.com # source server
# 38.25.63.10 x.acme.com # x client host
127.0.0.1 localhost
Yes I am using IE7.
Ok, try an IE7 reset. Tools>Internet Options>advanced>Reset.
Weird!
Weird!
ASKER
Still no joy. I'm sorry to be such a pain, I just can't think what it could be!
It's a certain model of server that is having the issues - PE 830. Trying to tie down anything that could relate to those servers?
It's a certain model of server that is having the issues - PE 830. Trying to tie down anything that could relate to those servers?
Did you do any hardware updates from WSUS? Nic drivers?
ASKER
No im afraid not. In the update criteria selection I have unchecked all drivers etc from being included in the synchronization process in WSUS. Only critical updates are installed. I tried uninstalling several securityu updates which may of been the cause but to no success.
What are these servers doing? Are they doing a similar role?
You could try resetting the TCPIP stack i suppose Start>run>cmd>type netsh int ip reset c:\resetlog.txt
You will need to put all your network settngs in again so make a note of the ip, default gateway, mask, DNS etc
Your server will be non-contactable until you've input the networking details.
Clutching at straws at bit now biut this won't hurt and will rule any protocol issues out.
You could try resetting the TCPIP stack i suppose Start>run>cmd>type netsh int ip reset c:\resetlog.txt
You will need to put all your network settngs in again so make a note of the ip, default gateway, mask, DNS etc
Your server will be non-contactable until you've input the networking details.
Clutching at straws at bit now biut this won't hurt and will rule any protocol issues out.
Are the NICS firewalled locally? Seems really strange it's just these model servers?!?!!? It's something simple I reckon.
Can you ping www.bbc.co.uk and get a reply?
Set a non working server to dhcp client and then run ipconfig /release and then ipconfig /renew and try internet. Careful as this will obviously change IP and make it inaccessible until set back.
Can you ping www.bbc.co.uk and get a reply?
Set a non working server to dhcp client and then run ipconfig /release and then ipconfig /renew and try internet. Careful as this will obviously change IP and make it inaccessible until set back.
ASKER
No. All of the servers within my network infrastructure are connected to a switch which is then connected to our corporate firewall and then to the outside world via our router.
When I try to ping www.bbc.co.uk I get the following results...
Pinging www.bbc.net.uk [212.58.253.67] with 32 bytes of data:
Request timed out.
Request timed out.
Request timed out.
Request timed out.
Ping statistics for 212.58.253.67:
Packets: Sent = 4, Received = 0, Lost = 4 (100% loss),
This is true of all servers/PC's within my Domain. I can however, browse BBC with no issues on the working servers.
When I try to ping www.bbc.co.uk I get the following results...
Pinging www.bbc.net.uk [212.58.253.67] with 32 bytes of data:
Request timed out.
Request timed out.
Request timed out.
Request timed out.
Ping statistics for 212.58.253.67:
Packets: Sent = 4, Received = 0, Lost = 4 (100% loss),
This is true of all servers/PC's within my Domain. I can however, browse BBC with no issues on the working servers.
It looks like the beeb has stopped pings as it used to accept them, hence why I said that site and thius is very recent!
Have you looked at the other suggestions:?
Have you looked at the other suggestions:?
ASKER
Yes, I have taken into account your advice and will try resetting the TCP/IP stack. I may try the DHCP option when time permits. Thank you very much for the continuing advice, it's most appreciated.
ASKER
I have just looked at the AVG Event logs on all three of the non working servers and have found the following which may narrow it down.
All of the servers last received (successful) AVG updates from the web on 1711/2008.
I looked at my diary and I installed the latest Microsoft updates on the 17/11/2008 and this was when the internet connection seemed to of broke. It looks around the same time too.
Possible updates of some description?
All of the servers last received (successful) AVG updates from the web on 1711/2008.
I looked at my diary and I installed the latest Microsoft updates on the 17/11/2008 and this was when the internet connection seemed to of broke. It looks around the same time too.
Possible updates of some description?
It would seem so. You need to narrow down which one's I'd say. You may find that my suggestions etc may sort it out, so I'd try that first before delving into the updates if it's difficult to ascertain exactly which updates you installed. Personally I don't update servers from WSUS or the update site without testing as I've been itten in the past with more serious issues than you're having. You've got away lightely if it's just the internet not working, althougha pain in itself.
ASKER
The updates that were installed on the 17/11/2008 were...
- KB955069
- KB957097
- KB915597
- KB955069
- KB957097
- KB915597
Cool. I'd remove them one by one and see what happens!
ASKER
Yes sure I understand. Going off the subject a little - how do you test them yourself?
You can't cater for every problematic scenario as servers usually run roles independently but they will have common services across the board. The best way would be to use virtualisation and clone a server image to a virtual server and test from there, but obviously that's overkill and expensive in a small environment.
I usually choose a server that has least impact on the network and install updates one by one and ensure services are working etc, if it needs to sync with others or external sources, I'd test that too. Like I said you can't cater for everyhting but these small tests can highlight problems before you've updated across the board.
I usually choose a server that has least impact on the network and install updates one by one and ensure services are working etc, if it needs to sync with others or external sources, I'd test that too. Like I said you can't cater for everyhting but these small tests can highlight problems before you've updated across the board.
ASKER
Cheers for the heads up.
I will test your possible solutions when I can, once I have done this I will post the results so you can see.
Thanks.
I will test your possible solutions when I can, once I have done this I will post the results so you can see.
Thanks.
oK. I would also clear your DNS cache
ipconfig /flushdns
ipconfig /flushdns
ASKER
Fixed it.
http://www.avg.com/support
Article 1561:Inactive components and/or blocked internet connection after update to 8.0.196
Thank you for your support on this question. I am new to this whole Experts Exchange, do I reward points to you or?
http://www.avg.com/support
Article 1561:Inactive components and/or blocked internet connection after update to 8.0.196
Thank you for your support on this question. I am new to this whole Experts Exchange, do I reward points to you or?
ASKER CERTIFIED SOLUTION
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.