tomfogarty
asked on
Cannot ping www.microsoft.com
Hi,
I recently took over a server in a school. I was trying to update the server when I noticed the machine couldn't ge to windows update. On firther investigation it won't ping any part of microsoft.com. NSLookup seems to work but it won't ping (Ping request could not find host www.microsoft.com. Please check the name and try again.) or browse to www.microsoft.com or obviously windows update.
The setup is that the school gets its broadband through a VPN on a Cisco. There are 2 nics in the server and it's acting as a router to create a separate network on the LANside of the Cisco. I'm seeing some issues in relation Master Browser errors in the logs so I wanted to update the machine to get a line in the sand. Very frustrating. Have tried a lot of things but feel like a need a fresh look.
Any help, please!
Tom.
I recently took over a server in a school. I was trying to update the server when I noticed the machine couldn't ge to windows update. On firther investigation it won't ping any part of microsoft.com. NSLookup seems to work but it won't ping (Ping request could not find host www.microsoft.com. Please check the name and try again.) or browse to www.microsoft.com or obviously windows update.
The setup is that the school gets its broadband through a VPN on a Cisco. There are 2 nics in the server and it's acting as a router to create a separate network on the LANside of the Cisco. I'm seeing some issues in relation Master Browser errors in the logs so I wanted to update the machine to get a line in the sand. Very frustrating. Have tried a lot of things but feel like a need a fresh look.
Any help, please!
Tom.
Have you checked for virus infection? There are a few classics that screw up access to Microsoft and a number of AV sites such as McAfee or Symantec.
Any proxy server / firewall hardware ? Is there any WSUS server in the network ?
ASKER
Hi,
To answer all questions together!
expert1010
See result of tracert below
C:\Documents and Settings\Administrator>tra cert -d microsoft.com
Unable to resolve target system name microsoft.com.
C:\Documents and Settings\Administrator>tra cert microsoft.com
Unable to resolve target system name microsoft.com.
See result of nslookup
C:\Documents and Settings\Administrator>tra cert -d microsoft.com
Unable to resolve target system name microsoft.com.
C:\Documents and Settings\Administrator>tra cert microsoft.com
Unable to resolve target system name microsoft.com.
Matthewidavies
I'm running a virus scan now. I'll update as soon as it's done.
Roads_Roads
Not aware of any proxy/firewall hardware. I'm checking the WSUS situation - how would this affect it?
How does the fact that this server is effectively a router impact on this problem/DNS. I wouldn't have thought it would impact on it. I have tried pinging other sites like yahoo/google and other browsing and all seems OK. I have also flushed DNS, recreated DNS zones and checked the HOSTS file.
Tom.
To answer all questions together!
expert1010
See result of tracert below
C:\Documents and Settings\Administrator>tra
Unable to resolve target system name microsoft.com.
C:\Documents and Settings\Administrator>tra
Unable to resolve target system name microsoft.com.
See result of nslookup
C:\Documents and Settings\Administrator>tra
Unable to resolve target system name microsoft.com.
C:\Documents and Settings\Administrator>tra
Unable to resolve target system name microsoft.com.
Matthewidavies
I'm running a virus scan now. I'll update as soon as it's done.
Roads_Roads
Not aware of any proxy/firewall hardware. I'm checking the WSUS situation - how would this affect it?
How does the fact that this server is effectively a router impact on this problem/DNS. I wouldn't have thought it would impact on it. I have tried pinging other sites like yahoo/google and other browsing and all seems OK. I have also flushed DNS, recreated DNS zones and checked the HOSTS file.
Tom.
Did you actually >>restart<< DNS service ? Did you try to reach MS site with an IP address ?
ASKER
Server has been restarted serevarl times. Have tried a resolved IP to get to MS but it doesn' ping. This doesn't tell me anything though since pinging www.microsoft.com on any machine won't return anything because presumably they have ICMP turned off on the outside.
Tom.
ASKER CERTIFIED SOLUTION
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
Check if can ping any other website from your system. ICMP to microsoft.com would not work. Check your DNS binding and check with the ISP since you would be forwarding your packets to the ISP DNS.
ASKER
Apologies for the delay in getting back - MRT did the trick.
tracert -d microsoft.com
tracert microsoft.com
You should at least be able to reach somewhere in microsofts network 207.46.0.0/16
Here's a trace from me (2 first disguised). From 11 and on there is some ACL that's hindering the backets to get through.
3 static-213.50.128.33.addr.
4 ge3-7.ign-p2.got.se.ip.tdc
5 nyc-76e-1.ntwk.msn.net (198.32.118.18) 115.520 ms 116.533 ms 116.582 ms
6 209.240.210.130 (209.240.210.130) 117.938 ms 117.530 ms 118.012 ms
7 ge-7-0-0-0.co1-64c-1b.ntwk
8 ge-7-2-0-0.wst-64cb-1b.ntw
9 ge-1-1-0-0.cpk-64c-1b.ntwk
10 ten2-4.cpk-76c-1b.ntwk.msn
11 * * *
12 * * *
13 * * *
14 * * *
15 * * *
16 * * *
Here's a tcp traceroute to port 80 on www.microsoft.com
Tracing the path to www.microsoft.com (65.55.12.249) on TCP port 80 (http), 30 hops max
3 static-213.50.128.33.addr.
4 ge3-7.ign-p2.got.se.ip.tdc
5 nyc-76e-1.ntwk.msn.net (198.32.118.18) 115.036 ms 114.969 ms 109.384 ms
6 209.240.210.130 115.165 ms 114.916 ms 116.334 ms
7 ge-7-0-0-0.co1-64c-1b.ntwk
8 * * *
9 * * *
10 wwwco2vip.microsoft.com (65.55.12.249) [open] 193.104 ms 195.369 ms 188.923 ms