Solved

Some Outbound TCP/IP Addresses are blocked - why?

Posted on 2013-11-07
7
418 Views
Last Modified: 2013-11-11
At one of my clients locations they can not browse various websites.
For example at this particular location they can browse to google but not www.dahats.com.au which is their website.

What could be causing this?

DNS does resolve the IP address correctly.

This is a relatively recent issue.  Previously they could browse any website.
0
Comment
Question by:enigmasolutions
  • 3
  • 3
7 Comments
 
LVL 82

Expert Comment

by:Dave Baldwin
ID: 39632771
What error message do they get?  You might check anything that might do content filtering like their anti-virus or firewall.
0
 
LVL 68

Expert Comment

by:Qlemo
ID: 39632896
Content-filtering is my first guess, too.
Did you check whether packets can pass to the destination, e.g. with  tracert -d -h 6 -w 100 www.dahats.com.au?
First point to check is (of course) the corporate firewall. A personal firewall, if active, could be an issue too.
0
 
LVL 1

Author Comment

by:enigmasolutions
ID: 39636406
Thanks Qlemo,

Actually I did ask them to do a tracert www.dahats.com.au and as far as I know they got the same results that I got.  But I was able to view their website and they were not.

I will get a screen shot of the tracert with the options suggested.
0
How to run any project with ease

Manage projects of all sizes how you want. Great for personal to-do lists, project milestones, team priorities and launch plans.
- Combine task lists, docs, spreadsheets, and chat in one
- View and edit from mobile/offline
- Cut down on emails

 
LVL 68

Accepted Solution

by:
Qlemo earned 500 total points
ID: 39637040
If a tracert to the target worked fine, there is no need to do it again; my additional options are only for speeding up the test (no reverse DNS, only 6 routers, 100ms timeout).

The ICMP packets are passing, so it is very likely a content filtering or port blocking issue (for specific IP addresses). The only point you can know about that is their firewall; its logs might show the reason.

If you want to, you can try  telnet www.dahats.com.au 80   and then type something invalid. After pressing return you should get a HTTP/1.1 400 Bad Request message. If that does not work from their network, the HTTP access is blocked for that IP. If you get the Bad Request message, content filtering prevents seeing the page.
0
 
LVL 1

Author Comment

by:enigmasolutions
ID: 39637791
Thank you Qlemo,

The problem seems to have fixed it self.  Or at least we don't really know what was the cause.  

Anyway the client did this:
* Disconnected the router form the internet (I think hit disconnect in router setup)
* for some reason router lost its username / pwd (so they re-entered it)
* it also lost port forwarding settings
* After restart - all working

Perhaps a fault router?  (Linksys).
0
 
LVL 68

Expert Comment

by:Qlemo
ID: 39638217
A router loosing the settings on disconnect or reboot? Very suspicious ...
0
 
LVL 1

Author Closing Comment

by:enigmasolutions
ID: 39638339
Although not the specific solution, all responses helped resolve the issue.   Thank you.
0

Featured Post

How to run any project with ease

Manage projects of all sizes how you want. Great for personal to-do lists, project milestones, team priorities and launch plans.
- Combine task lists, docs, spreadsheets, and chat in one
- View and edit from mobile/offline
- Cut down on emails

Join & Write a Comment

One of the most often confused topics in the area DNS is the idea of GLUE records. Specifically, what they are, when they are needed, when they are provided, and how they are created. First, WHAT IS GLUE? To understand GLUE, you must first under…
I've written instructions for one router type, but this principle may be useful for others of the same brand and even other brands of router. Problem: I had an issue especially with mobile devices that refused to use DNS information supplied via…
Sending a Secure fax is easy with eFax Corporate (http://www.enterprise.efax.com). First, Just open a new email message.  In the To field, type your recipient's fax number @efaxsend.com. You can even send a secure international fax — just include t…
Here's a very brief overview of the methods PRTG Network Monitor (https://www.paessler.com/prtg) offers for monitoring bandwidth, to help you decide which methods you´d like to investigate in more detail.  The methods are covered in more detail in o…

747 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

12 Experts available now in Live!

Get 1:1 Help Now