Internet/LAN problem

ct5amr2ig1nfhp

I've a problem that, for the life of me, I can't figure out. We've over 25 machines connected to our server.

I added 3 new machines yesterday. 2 running XP. 1 running winNT.

All the machines can access the server however, for some reason both XP machines cannot access the internet. The winNT machine can without any problems.

I've set the IP and DNS manually, as I've done with all the other machines. I've tested the wiring and connections, and everything physically seems fine.

I can't seem to figure out the problem. Been at this all morning. If anyone has any suggestions, I'd really appreciate them.

Thanks
ambrose :cool:

parsi

Any Proxy Server settings ? XP firewall ? CAn they even do an nslookup of an off-site address ?

stevenmu

Yeah, turn the inbuilt firewall off (assuming you have other adequate protection between them and the internet), iirc it's on the last tab of the network properties.

Kali

Double-check: Default gateway, DNS, outbound rules on your gateway/firewall or XP SP2 firewall on the client boxes.

ct5amr2ig1nfhp

No proxy settings, no firewalls on. Can't do nslookup. Just did the diagnostics, and all tests passed.

ambrose

NOTE: I only installed 5 of these machines (Dimension 5000) last week, with no problems.

boidey

how far does a trace route get?

ressem

Can't nslookup?
Your DNS is internal or external?

route PRINT lists that your external destinations are going to your gateway?
You can ping the gateway?

There isn't more than one network interface enabled on these machines?

Drop in a knoppix live CD and the situation is different?

ct5amr2ig1nfhp

NSlookup timesout. DNS is external.

I can ping the gateway fine. Only 1 NIC in each PC.

Trace route eircom.net, no luck at all.


ambrose

boidey

i take it they are browsing the network ok. If you swop a card with a known working one what happens?

ct5amr2ig1nfhp

I can browse the network fine. Put in a new NIC and same problem.

Double checked settings this morning. All correct. Tried a different working machine on the same patch and it works fine.



I'm going crazy at this stage. Maybe I've stopped an essential service?

ambrose :cool:

Kali

dns client service should be started..

just try the following and post up the results:

ipconfig /all
route print
tracert 194.106.143.83

definitely sounds like you don't have a default route specified... if you don't fancy posting up information then at least make sure the output from route print contains a line with destination 0.0.0.0 and your correct gateway.

ct5amr2ig1nfhp

Kali,

ipconfig /all - looks good.
route print - looks good, except for one line which is missing. It appears on a working machine.

Route print from working PC:

****************************************************************
Active Routes:
Network Destination Netmask Gateway Interface Metric
0.0.0.0 0.0.0.0 10.0.0.20 10.0.0.61 20
...
...
255.255.255.255 255.255.255.255 10.0.0.61 10.0.0.61 1
255.255.255.255 255.255.255.255 10.0.0.61 3 1
Default Gateway: 10.0.0.20
===========================================================================
Persistent Routes:
None

****************************************************************

The 2nd last line, 255.255.255.255 255.255.255.255 10.0.0.61 3 1
does not appear on the machine that is not working.

ambrose :cool:

Kali

kingambrose wrote:

The 2nd last line, 255.255.255.255 255.255.255.255 10.0.0.61 3 1
does not appear on the machine that is not working.

Hmm seems ok to me.. that extra line just refers to additional adaptors in the machine (adaptor 3).
Sure theres no policies on the gateway machine blocking access?

ct5amr2ig1nfhp

Kali,
Forgot I have an extra NIC on my PC.

Thanks for all the help so far btw

I'm baffled. What sort of policy would allow one machine and not another?

Thanks again,
ambrose :cool:

Kali

kingambrose wrote:

I'm baffled. What sort of policy would allow one machine and not another?

What OS/machine is the gateway? Of course it'd be easier just to configure existing IPs that are known to work on the "broken" PCs... that would definitely take the gateway out of the equation anyway.

ct5amr2ig1nfhp

Tried that too Kali. Still the same problem.

ambrose

Shiny

Did you try installing the IPX/SPX/NetBIOS protocal on the client PCs
that dont seem to be working?

I dont really know what it does but when ever my PCs cant access the
internet i, install that and everything works fine.

Although you shouldn't have to install it, it works.:)

ressem

You're not using Microsoft ISA from MS SBE or similar as a gateway, that might have license restrictions?
You've checked the logs on the firewall / gateway (/ layer3 switch perhaps) to see whether they are seeing/ deliberately rejecting traffic?

There theoretically could be routing policies based on MAC addresses (but very doubtful)

I'd be tempted to temporarily run apache on one and map a port to that address to be tested from outside, to see if the firewall can route traffic in to that NIC.
Also the knoppix livecd test should rule in/out windows config and services.

axer

kingambrose wrote:

Trace route eircom.net, no luck at all.

What do you mean by this? Did it make any hops? or what hops did it make?

ct5amr2ig1nfhp

Guys,
Thanks for all the help. I finally figured it out. Fecking firewall licences had reached the limit. Time to buy some more! So simple...

Thanks again for all the help!

ambrose :cool: