Can't get to certain web sites from inside office Lan

I am the I.T. Manager for a solicitors

We can seems to access several web sites such as Facebook, Wikipedia, HKH solicitors and Eurostar plus several others.

We have nothing in place to block these site and it only happens on new Windows 7 installs not the on our old XP machines

Any ideas?
Ian PriceIT ManagerAsked:
Who is Participating?
I wear a lot of hats...

"The solutions and answers provided on Experts Exchange have been extremely helpful to me over the last few years. I wear a lot of hats - Developer, Database Administrator, Help Desk, etc., so I know a lot of things but not a lot about one thing. Experts Exchange gives me answers from people who do know a lot about one thing, in a easy to use platform." -Todd S.

raypedongCommented:
Hi,

Please check the DNS settings of the newly installed laptops. If this is pointed to an internal DNS server, please query a certain sites using the nslookup command and see if it can resolve the site. Try also flushing or registering its dns by employing the command

ipconfig /flushdns
ipconfig /registerdns
0
Daniel HelgenbergerCommented:
There are numerous reasons. Please elaborate if :
- Do the websites not open at all,
- are they loading partially?

Here is a check list of what I think are the most common causes:
- DNS. This is the fist thing to check:
nslookup facebook.com 8.8.8.8
nslookup facebook.com

Open in new window

Compare the outputs. If you do get a srvfail in the second nslookup, check your forwarders in your internal DNS.

- Do you use multiple Load Balanced WAN Links? This can cause the trouble, if configured incorrectly. Check your firewall settings.

- Are the target IPs to facebook ect. for some reason blocked on your firewall? I mean not by DNS name but by IP ranges?
0
Ian PriceIT ManagerAuthor Commented:
Sorry for the long delay in replying, i've attached a screen shot from the command prompt when I run NSLOOKUP.

any thoughts?
0
Big Business Goals? Which KPIs Will Help You

The most successful MSPs rely on metrics – known as key performance indicators (KPIs) – for making informed decisions that help their businesses thrive, rather than just survive. This eBook provides an overview of the most important KPIs used by top MSPs.

Ian PriceIT ManagerAuthor Commented:
Also Wikipedia loads but not fully - http://en.wikipedia.org/wiki/Main_Page
0
Ian PriceIT ManagerAuthor Commented:
Also i've changed to the google DNS made no different
0
Daniel HelgenbergerCommented:
i've attached a screen shot
Please do attach the screen shot, I fail to see it?
and also post the output of:
nslookup -debug facebook.com

Open in new window

Please make sure you run this on an affected computer/network.

If you have issues with partial loading pages, then this is another issue. Open the page in a browser (for instance Chrome) and enable debug console, <CTL><SHIFT><C>.
0
Ian PriceIT ManagerAuthor Commented:
Ok this is the result of running debug

C:\Users\ip2>nslookup -debug facebook.com
------------
Got answer:
    HEADER:
        opcode = QUERY, id = 1, rcode = NOERROR
        header flags:  response, want recursion, recursion avail.
        questions = 1,  answers = 1,  authority records = 0,  additional = 0

    QUESTIONS:
        8.8.8.8.in-addr.arpa, type = PTR, class = IN
    ANSWERS:
    ->  8.8.8.8.in-addr.arpa
        name = google-public-dns-a.google.com
        ttl = 19387 (5 hours 23 mins 7 secs)

------------
Server:  google-public-dns-a.google.com
Address:  8.8.8.8

------------
Got answer:
    HEADER:
        opcode = QUERY, id = 2, rcode = NXDOMAIN
        header flags:  response, want recursion, recursion avail.
        questions = 1,  answers = 0,  authority records = 1,  additional = 0

    QUESTIONS:
        facebook.com.wisemanlee.co.uk, type = A, class = IN
    AUTHORITY RECORDS:
    ->  wisemanlee.co.uk
        ttl = 1800 (30 mins)
        primary name server = a4.nstld.com
        responsible mail addr = dnssupport.verisign-grs.com
        serial  = 2279434084
        refresh = 28800 (8 hours)
        retry   = 7200 (2 hours)
        expire  = 1209600 (14 days)
        default TTL = 86400 (1 day)

------------
------------
Got answer:
    HEADER:
        opcode = QUERY, id = 3, rcode = NXDOMAIN
        header flags:  response, want recursion, recursion avail.
        questions = 1,  answers = 0,  authority records = 1,  additional = 0

    QUESTIONS:
        facebook.com.wisemanlee.co.uk, type = AAAA, class = IN
    AUTHORITY RECORDS:
    ->  wisemanlee.co.uk
        ttl = 1800 (30 mins)
        primary name server = a4.nstld.com
        responsible mail addr = dnssupport.verisign-grs.com
        serial  = 2279434084
        refresh = 28800 (8 hours)
        retry   = 7200 (2 hours)
        expire  = 1209600 (14 days)
        default TTL = 86400 (1 day)

------------
------------
Got answer:
    HEADER:
        opcode = QUERY, id = 4, rcode = NXDOMAIN
        header flags:  response, want recursion, recursion avail.
        questions = 1,  answers = 0,  authority records = 1,  additional = 0

    QUESTIONS:
        facebook.com.co.uk, type = A, class = IN
    AUTHORITY RECORDS:
    ->  co.uk
        ttl = 1800 (30 mins)
        primary name server = ns1.nic.uk
        responsible mail addr = hostmaster.nominet.org.uk
        serial  = 1303250194
        refresh = 900 (15 mins)
        retry   = 300 (5 mins)
        expire  = 2419200 (28 days)
        default TTL = 10800 (3 hours)

------------
------------
Got answer:
    HEADER:
        opcode = QUERY, id = 5, rcode = NXDOMAIN
        header flags:  response, want recursion, recursion avail.
        questions = 1,  answers = 0,  authority records = 1,  additional = 0

    QUESTIONS:
        facebook.com.co.uk, type = AAAA, class = IN
    AUTHORITY RECORDS:
    ->  co.uk
        ttl = 1800 (30 mins)
        primary name server = ns1.nic.uk
        responsible mail addr = hostmaster.nominet.org.uk
        serial  = 1303250194
        refresh = 900 (15 mins)
        retry   = 300 (5 mins)
        expire  = 2419200 (28 days)
        default TTL = 10800 (3 hours)

------------
------------
Got answer:
    HEADER:
        opcode = QUERY, id = 6, rcode = NOERROR
        header flags:  response, want recursion, recursion avail.
        questions = 1,  answers = 1,  authority records = 0,  additional = 0

    QUESTIONS:
        facebook.com, type = A, class = IN
    ANSWERS:
    ->  facebook.com
        internet address = 173.252.110.27
        ttl = 69 (1 min 9 secs)

------------
Non-authoritative answer:
------------
Got answer:
    HEADER:
        opcode = QUERY, id = 7, rcode = NOERROR
        header flags:  response, want recursion, recursion avail.
        questions = 1,  answers = 1,  authority records = 0,  additional = 0

    QUESTIONS:
        facebook.com, type = AAAA, class = IN
    ANSWERS:
    ->  facebook.com
        AAAA IPv6 address = 2a03:2880:2110:df07:face:b00c:0:1
        ttl = 35 (35 secs)

------------
Name:    facebook.com
Addresses:  2a03:2880:2110:df07:face:b00c:0:1
          173.252.110.27


C:\Users\ip2>
0
Daniel HelgenbergerCommented:
facebook.com
This was only an example I used; not actually working! Please replace it by substituting it by any not working domain.

But since you use 8.8.8.8 - there should be no DNS related problem any more? Again, make sure you run this on a affected computer. Fist, try to open an not working page in a browser. Dos this not open at all? Or is it not partially not working?
0

Experts Exchange Solution brought to you by

Your issues matter to us.

Facing a tech roadblock? Get the help and guidance you need from experienced professionals who care. Ask your question anytime, anywhere, with no hassle.

Start your 7-day free trial
Ian PriceIT ManagerAuthor Commented:
Sorry helge000 - Not sure what you want me to do?

Should I post results of another site what won't load?
0
It's more than this solution.Get answers and train to solve all your tech problems - anytime, anywhere.Try it for free Edge Out The Competitionfor your dream job with proven skills and certifications.Get started today Stand Outas the employee with proven skills.Start learning today for free Move Your Career Forwardwith certification training in the latest technologies.Start your trial today
Network Analysis

From novice to tech pro — start learning today.