?
Solved

Some Outbound TCP/IP Addresses are blocked - why?

Posted on 2013-11-07
7
Medium Priority
?
430 Views
Last Modified: 2013-11-11
At one of my clients locations they can not browse various websites.
For example at this particular location they can browse to google but not www.dahats.com.au which is their website.

What could be causing this?

DNS does resolve the IP address correctly.

This is a relatively recent issue.  Previously they could browse any website.
0
Comment
Question by:enigmasolutions
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
  • 3
  • 3
7 Comments
 
LVL 84

Expert Comment

by:Dave Baldwin
ID: 39632771
What error message do they get?  You might check anything that might do content filtering like their anti-virus or firewall.
0
 
LVL 70

Expert Comment

by:Qlemo
ID: 39632896
Content-filtering is my first guess, too.
Did you check whether packets can pass to the destination, e.g. with  tracert -d -h 6 -w 100 www.dahats.com.au?
First point to check is (of course) the corporate firewall. A personal firewall, if active, could be an issue too.
0
 
LVL 1

Author Comment

by:enigmasolutions
ID: 39636406
Thanks Qlemo,

Actually I did ask them to do a tracert www.dahats.com.au and as far as I know they got the same results that I got.  But I was able to view their website and they were not.

I will get a screen shot of the tracert with the options suggested.
0
Portable, direct connect server access

The ATEN CV211 connects a laptop directly to any server allowing you instant access to perform data maintenance and local operations, for quick troubleshooting, updating, service and repair.

 
LVL 70

Accepted Solution

by:
Qlemo earned 2000 total points
ID: 39637040
If a tracert to the target worked fine, there is no need to do it again; my additional options are only for speeding up the test (no reverse DNS, only 6 routers, 100ms timeout).

The ICMP packets are passing, so it is very likely a content filtering or port blocking issue (for specific IP addresses). The only point you can know about that is their firewall; its logs might show the reason.

If you want to, you can try  telnet www.dahats.com.au 80   and then type something invalid. After pressing return you should get a HTTP/1.1 400 Bad Request message. If that does not work from their network, the HTTP access is blocked for that IP. If you get the Bad Request message, content filtering prevents seeing the page.
0
 
LVL 1

Author Comment

by:enigmasolutions
ID: 39637791
Thank you Qlemo,

The problem seems to have fixed it self.  Or at least we don't really know what was the cause.  

Anyway the client did this:
* Disconnected the router form the internet (I think hit disconnect in router setup)
* for some reason router lost its username / pwd (so they re-entered it)
* it also lost port forwarding settings
* After restart - all working

Perhaps a fault router?  (Linksys).
0
 
LVL 70

Expert Comment

by:Qlemo
ID: 39638217
A router loosing the settings on disconnect or reboot? Very suspicious ...
0
 
LVL 1

Author Closing Comment

by:enigmasolutions
ID: 39638339
Although not the specific solution, all responses helped resolve the issue.   Thank you.
0

Featured Post

Need protection from advanced malware attacks?

Look no further than WatchGuard's Total Security Suite, providing defense in depth against today's most headlining attacks like Petya 2.0 and WannaCry. Keep your organization out of the news with protection from known and unknown threats.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

I've written instructions for one router type, but this principle may be useful for others of the same brand and even other brands of router. Problem: I had an issue especially with mobile devices that refused to use DNS information supplied via…
BIND is the most widely used Name Server. A Name Server is the one that translates a site name to it's IP address. There is a new bug in BIND (https://kb.isc.org/article/AA-01272), affecting all versions of BIND 9 from BIND 9.1.0 (inclusive) thro…
In this video we outline the Physical Segments view of NetCrunch network monitor. By following this brief how-to video, you will be able to learn how NetCrunch visualizes your network, how granular is the information collected, as well as where to f…
In this video, Percona Director of Solution Engineering Jon Tobin discusses the function and features of Percona Server for MongoDB. How Percona can help Percona can help you determine if Percona Server for MongoDB is the right solution for …
Suggested Courses

752 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question