Solved

Can't Access company website through workstations

Posted on 2014-01-13
21
406 Views
Last Modified: 2014-01-22
I suddenly have had an issue accessing our website internally from workstations.  It's something i'm not sure what is happening.  No changes were made on our servers.  I'm able to access the website externally and also through my servers,  but workstations can't resolve the DNS, apparently, although I'm able to telnet, nslookup, tracert.  Anyone able to help troubleshoot this one?
0
Comment
Question by:dohrmann
  • 9
  • 8
  • 3
  • +1
21 Comments
 
LVL 19

Expert Comment

by:Patricksr1972
Comment Utility
Hi

Did you look in the right DNS forward lookup zone, is the right A record present there?
0
 

Author Comment

by:dohrmann
Comment Utility
Yes, the correct A record is there for www.  I also changed this around, playing around and found that if it wasn't there the servers wouldn't be able to access the website.  Putting back in allowed the servers to access the website after a flushdns cmd.
0
 
LVL 19

Expert Comment

by:Patricksr1972
Comment Utility
But workstations can't? Are they in the same domain?
0
 

Author Comment

by:dohrmann
Comment Utility
Yes, all in the same domain.
0
 
LVL 19

Expert Comment

by:Patricksr1972
Comment Utility
Then workstation either use a different DNS server like 8.8.8.8 or they have entries in their hosts file i assume, did you check?
0
 

Author Comment

by:dohrmann
Comment Utility
We don't use entries for the website in the host file, although I tried.  I also changed to the DNS of 8.8.8.8 and nothing changed.
0
 
LVL 19

Expert Comment

by:Patricksr1972
Comment Utility
Hi

Offcourse not, 8.8.8.8 is Google's DNS server.

What DNS is configured on the workstations? run->      ipconfig /all
0
 
LVL 15

Expert Comment

by:Perarduaadastra
Comment Utility
What version of Windows server are you running?
0
 

Author Comment

by:dohrmann
Comment Utility
I think we may need to think outside the box a little on this one.
My DNS server is running SBS2011, but other servers that run 2008R2 can still access.

My ipconfig is pretty standard.  
IPv4: ie. 192.168.0.247
Subnet: 255.255.255.0
Default: 192.168.0.1
DNS: 192.168.0.247
192.168.0.252

Ive attached a screenshot though.
Screen-Shot-2014-01-13-at-12.48..png
0
 
LVL 19

Expert Comment

by:Patricksr1972
Comment Utility
I see 2 DNS servers, are they replicating? In other words, do both have the A record for the forward lookup zone?
0
6 Surprising Benefits of Threat Intelligence

All sorts of threat intelligence is available on the web. Intelligence you can learn from, and use to anticipate and prepare for future attacks.

 

Author Comment

by:dohrmann
Comment Utility
They are replicating, and yes, they both have the A records.  The .252 is my DC02.
0
 
LVL 19

Expert Comment

by:Patricksr1972
Comment Utility
Hmmm nasty bugger.

If you logon to a server which can resolve the website and open a dos prompt and type:

echo %LOGONSERVER%

Same on a machine that cannot resolve, is there a difference?
0
 
LVL 39

Expert Comment

by:footech
Comment Utility
Assuming you allow pings to the website, if you ping the name of the website and it returns the correct IP, then this is not a DNS issue.  The results from tracert already seem to confirm this.
I would be looking at things like proxy configuration, browser settings, etc.  Have you tried different browsers?  Have you tried browsing just by IP?  What message do you get when you try to reach the site?
0
 

Author Comment

by:dohrmann
Comment Utility
Hmmm..got a little different result that what I remember doing before.  1 - echo %logonserver% produces the same results for everything.  2 - I tried browsing to the site with just the IP and it gave me a default website page error.  I also did this externally and it came back the same thing.  I've attached what I received.  3 - Yes, I've tried different browsers, Mac's, PC's.  I don't have proxy configuration.
Screen-Shot-2014-01-13-at-2.39.0.png
0
 
LVL 39

Expert Comment

by:footech
Comment Utility
Just for completeness, would you mind providing a screenshot of pinging the name?
What error message do you get when you try to browse to the site by name on a workstation?

So under IE Internet Options > Connections tab > LAN settings, it looks like this?
LAN settingsAnd it's the same with the servers?

Any chance of your network firewall blocking traffic?
With the wide variety of clients that aren't able to reach the site, it feels more like you have some configuration that applies to the servers which allows them to be successful, rather than something which is blocking the workstations.
0
 
LVL 19

Expert Comment

by:Patricksr1972
Comment Utility
Hi

The error posted shows a public ip, and i get the same error on ip as on DNS.
Then again, we get the reaction from the default website so it is working.

From servers you get a different response you say what makes me believe there is an authentication check what is failing, what does the logfile of the website tell you?
0
 

Author Comment

by:dohrmann
Comment Utility
Footech:
I can ping from the server, with the screen shot attached.  The workstations, I can't (request timed out).  I feel like there is something allowing servers through like you said, but I am not sure where to find anything like that.    I have looked at the firewall and nothing seems to be blocking, and again, I never changed anything that would initiate that.  Yes, the Lan settings are the same from the screen shot that you showed.  When trying to access the website on workstations, it simple says page can't be displayed.

Patrick: Not sure what you want from the log.  Can you explain further what you are looking for and where?
Screen-Shot-2014-01-14-at-7.52.5.png
0
 

Accepted Solution

by:
dohrmann earned 0 total points
Comment Utility
As an update to this: I'm in the process of working with the hosting company.  I believe that it has to do with them blocking our static IP address that we are using for our workstations.  The servers are on a different block of static addresses that we have and that would explain why they are getting through and all workstations that are on the same static are not getting through.  I'll keep you posted.
0
 
LVL 19

Expert Comment

by:Patricksr1972
Comment Utility
Hi,

The log will show more information as to why i got an error visiting your website. (*edit* offcourse when this was a internally hosted website)

I dont understand the hosting thing, i browse to the page, see a redirect to a cgi-bin area and get a website error. Seems to me access has been granted allready but something else went wrong.

Ahhh i read,
websites internally
making me believe you have an external portal and a internal portal hosted locally :)
0
 
LVL 39

Expert Comment

by:footech
Comment Utility
Well, I was right about it not being a DNS issue, but that's a minor point so no objection from me.  :)
0
 

Author Closing Comment

by:dohrmann
Comment Utility
Found out that the web hosting company had been blocking our IP.
0

Featured Post

Highfive Gives IT Their Time Back

Highfive is so simple that setting up every meeting room takes just minutes and every employee will be able to start or join a call from any room with ease. Never be called into a meeting just to get it started again. This is how video conferencing should work!

Join & Write a Comment

Configuring network clients can be a chore, especially if there are a large number of them or a lot of itinerant users.  DHCP dynamically manages this process, much to the relief of users and administrators alike!
Today, still in the boom of Apple, PC's and products, nearly 50% of the computer users use Windows as graphical operating systems. If you are among those users who love windows, but are grappling to keep the system's hard drive optimized, then you s…
Google currently has a new report that is in beta and coming soon to Webmaster Tool accounts. This Micro Tutorial will highlight new features for Google Webmaster Tools.
This Micro Tutorial will demonstrate how nuggets on the Web are formatted by using Chrome Developer Tools. These tools would not only view the site's CSS but it can also modify it and save the CSS to use on your own site.

771 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

11 Experts available now in Live!

Get 1:1 Help Now