We help IT Professionals succeed at work.

Web site loads once, then after that nothing...

Up until a couple days ago our users that needed to were able to go to www.edrnet.com without any issue. Now it seems they can get the main page to load once then anything after that it just does not work. Screen shot of the msg http://i179.photobucket.com/albums/w285/legibryn/websiteshot.jpg.   It seems to work outside of the network. I have tried different browsers, added the website on the firewall as a safe site, changed the security settings throughout the computer. There have been no big updates to windows or our systems to mess with this. The users are using IE 8. This might be an easy fix, but i need some third party eyes. Our Firewall is Watchguard.
Comment
Watch Question

Commented:
Can you ping edrnet.com  or 204.60.151.10 (which is the ip for the site)

Put this ip in your browser, if the site opens, you have a dns issue.

If it loads once, that is cache copy on the local machine.

Try this two things first

Are you the admin?

Is there any reason this site would be blocked to you?

Jfer
Josh SisloLead IT Systems Specialist

Author

Commented:
I am unable to ping either the site or straight ip, nor am i able to put the ip into the browser to get it to load. I have admin rights. We added the site to the accepted sites on our firewall, and if the site was being blocked it would normally tell us right in the browser why it is being blocked.

Commented:
do a tracert 204.60.151.10

it will tell you the last device that pushes out the request

That would be your problem device
Josh SisloLead IT Systems Specialist

Author

Commented:
Destination Host Unreachable

Commented:
how many hops did it do?

0?
Josh SisloLead IT Systems Specialist

Author

Commented:
from my computer to the gateway and gateway to destination host unreachable

Commented:
the gateway is blocking access out then

get on that device, what device is it?
Josh SisloLead IT Systems Specialist

Author

Commented:
It's our ISPs T1 modem

Commented:
Does it do NAT for all your hosts?
Josh SisloLead IT Systems Specialist

Author

Commented:
I believe our DNS server does that

Commented:
is there any device between the Hosts and the Modem?

Josh SisloLead IT Systems Specialist

Author

Commented:
Hosts(internal)-> Router(at their location)-> Router(in server room)-> DNS->Firewall-> ISP Modem-> Internet......If i remember 100% that is how it goes. Might be something else in there that is minor and the routers don't block anything

Commented:
Are you sure, when you did the Tracert, that is went through all those routers, and other devices and made its way to the ISP's modem?
Josh SisloLead IT Systems Specialist

Author

Commented:
I am right at the server room, so i only go to the router/switch than the firewall to the gateway

Commented:
can you connect, a single workstation (or network device) directly to isp modem?
Josh SisloLead IT Systems Specialist

Author

Commented:
Yep that was my next thing to try, going to connect a laptop straight to the isp modem
Josh SisloLead IT Systems Specialist

Author

Commented:
The website works for less then a min before not working anymore still. Not to mention it works 100% on my home network.

Commented:
So it does not work with a direct connect to your ISP?

Does your WAN IP start with 204.60.151.XXX ?

Call your ISP, since this problem does not seem related to your LAN setup, and explain to them you have already directly connected to the ISP device.

Odds are, they are doing BGP routing, and perhaps this is conflicting with your destination address for some reason.

Keep me posted

Jfer
Josh SisloLead IT Systems Specialist

Author

Commented:
I was informed that we had a problems many years ago with the same website and our ISP conflicting, so i think you are right that it is a problem with our ISP.

Our WAN is a 10.11.xxx.xxx

Commented:
Let me know

Josh SisloLead IT Systems Specialist

Author

Commented:
Well talked to the ISP, got hooked up to outside of our network and tested the site and it works. So the problem lies somewhere inside our network. Been point towards it being our DNS since the firewall is allowing access to the site. Going to write a policy to allow traffic to the site to see if that works.
Josh SisloLead IT Systems Specialist

Author

Commented:
here is what our firewall says when trying to connect to edrnet.com:

2010-06-16 10:29:25 Deny 10.11.70.20 204.60.151.10 http/tcp 50555 80 1-Trusted 0-External blocked sites 48 127 (Internal Policy)  proc_id="firewall" rc="101" tcp_info="offset 7 S 2760187386 win 32"       Traffic

Commented:
what kind of router do you have?
Josh SisloLead IT Systems Specialist

Author

Commented:
Cisco 2600, Cisco 1751, Cisco 1700 depending on which location, but the one I go through is the Cisco 2600 which i think everyone ends up at before getting to the internet
Commented:
do a "conf t" <login to privilege mode in the cisco
then "show ip access-list interface FastEthernet 0/0 out"  (FastEthernet 0/0 or your interface that goes to WAN)

i do not suggest you post all your acls

but any ones that would be relevant to your issue

Commented:
or a "show run"

Commented:
or "show access-lists"
Josh SisloLead IT Systems Specialist

Author

Commented:
We got it to work, some router policy was blocking. Thank you for your help