Solved

Some Outbound TCP/IP Addresses are blocked - why?

Posted on 2013-11-07
7
419 Views
Last Modified: 2013-11-11
At one of my clients locations they can not browse various websites.
For example at this particular location they can browse to google but not www.dahats.com.au which is their website.

What could be causing this?

DNS does resolve the IP address correctly.

This is a relatively recent issue.  Previously they could browse any website.
0
Comment
Question by:enigmasolutions
  • 3
  • 3
7 Comments
 
LVL 83

Expert Comment

by:Dave Baldwin
ID: 39632771
What error message do they get?  You might check anything that might do content filtering like their anti-virus or firewall.
0
 
LVL 68

Expert Comment

by:Qlemo
ID: 39632896
Content-filtering is my first guess, too.
Did you check whether packets can pass to the destination, e.g. with  tracert -d -h 6 -w 100 www.dahats.com.au?
First point to check is (of course) the corporate firewall. A personal firewall, if active, could be an issue too.
0
 
LVL 1

Author Comment

by:enigmasolutions
ID: 39636406
Thanks Qlemo,

Actually I did ask them to do a tracert www.dahats.com.au and as far as I know they got the same results that I got.  But I was able to view their website and they were not.

I will get a screen shot of the tracert with the options suggested.
0
3 Use Cases for Connected Systems

Our Dev teams are like yours. They’re continually cranking out code for new features/bugs fixes, testing, deploying, testing some more, responding to production monitoring events and more. It’s complex. So, we thought you’d like to see what’s working for us.

 
LVL 68

Accepted Solution

by:
Qlemo earned 500 total points
ID: 39637040
If a tracert to the target worked fine, there is no need to do it again; my additional options are only for speeding up the test (no reverse DNS, only 6 routers, 100ms timeout).

The ICMP packets are passing, so it is very likely a content filtering or port blocking issue (for specific IP addresses). The only point you can know about that is their firewall; its logs might show the reason.

If you want to, you can try  telnet www.dahats.com.au 80   and then type something invalid. After pressing return you should get a HTTP/1.1 400 Bad Request message. If that does not work from their network, the HTTP access is blocked for that IP. If you get the Bad Request message, content filtering prevents seeing the page.
0
 
LVL 1

Author Comment

by:enigmasolutions
ID: 39637791
Thank you Qlemo,

The problem seems to have fixed it self.  Or at least we don't really know what was the cause.  

Anyway the client did this:
* Disconnected the router form the internet (I think hit disconnect in router setup)
* for some reason router lost its username / pwd (so they re-entered it)
* it also lost port forwarding settings
* After restart - all working

Perhaps a fault router?  (Linksys).
0
 
LVL 68

Expert Comment

by:Qlemo
ID: 39638217
A router loosing the settings on disconnect or reboot? Very suspicious ...
0
 
LVL 1

Author Closing Comment

by:enigmasolutions
ID: 39638339
Although not the specific solution, all responses helped resolve the issue.   Thank you.
0

Featured Post

DevOps Toolchain Recommendations

Read this Gartner Research Note and discover how your IT organization can automate and optimize DevOps processes using a toolchain architecture.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Creating an OSPF network that automatically (dynamically) reroutes network traffic over other connections to prevent network downtime.
Configuring network clients can be a chore, especially if there are a large number of them or a lot of itinerant users.  DHCP dynamically manages this process, much to the relief of users and administrators alike!
This Micro Tutorial will teach you how to censor certain areas of your screen. The example in this video will show a little boy's face being blurred. This will be demonstrated using Adobe Premiere Pro CS6.
This Micro Tutorial hows how you can integrate  Mac OSX to a Windows Active Directory Domain. Apple has made it easy to allow users to bind their macs to a windows domain with relative ease. The following video show how to bind OSX Mavericks to …

863 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

25 Experts available now in Live!

Get 1:1 Help Now