Clients cannot access website.. Servers can...

  • Thread starter Thread starter BSM
  • Start date Start date
B

BSM

I have a situation where my clients, including myself, cannot get to a
particular websites.. I get the msn cannot find domain webpage. I even
try putting in the IP Address of the website and still no luck. I am
not using any proxies since I have a straight shot to the internet
from our PC's.

WE do have firewalls in place and a IDS system but this would not
explain why my Windows Servers can access the website and not my
clients since we all go through the same pipe.
We use Windows DNS and I do have my ISP's DNS in its forwarders. My
clients get their ip addresses through DHCP which only has the ip
addresses of my internal DNS Servers. Nothing external.

I don't know if there is some sort of group policy or if there is some
issues with DNS for Microsoft. Its wierd that I cannot get to websites
on my clients but my servers can.

Any ideas??

Brandon
 
In BSM <[email protected]> posted a question
Then Kevin replied below:
: I have a situation where my clients, including myself, cannot get to a
: particular websites.. I get the msn cannot find domain webpage. I even
: try putting in the IP Address of the website and still no luck. I am
: not using any proxies since I have a straight shot to the internet
: from our PC's.
:
: WE do have firewalls in place and a IDS system but this would not
: explain why my Windows Servers can access the website and not my
: clients since we all go through the same pipe.
: We use Windows DNS and I do have my ISP's DNS in its forwarders. My
: clients get their ip addresses through DHCP which only has the ip
: addresses of my internal DNS Servers. Nothing external.
:
: I don't know if there is some sort of group policy or if there is some
: issues with DNS for Microsoft. Its wierd that I cannot get to websites
: on my clients but my servers can.
:
: Any ideas??
:
: Brandon

Can you post an ipconfig /all for the server and a client, please?
 
FROM MY COMPUTER
=========================
Windows 2000 IP Configuration



Host Name . . . . . . . . . . . . : MyComputer
Primary DNS Suffix . . . . . . . :
Node Type . . . . . . . . . . . . : Hybrid

IP Routing Enabled. . . . . . . . : No

WINS Proxy Enabled. . . . . . . . : No

DNS Suffix Search List. . . . . . : thisismydomain.net



Ethernet adapter WORK:



Connection-specific DNS Suffix . : thisismydomain.net
Description . . . . . . . . . . . : 3Com 3C920 Integrated Fast
Ethernet Controller (3C905C-TX Compatible)
Physical Address. . . . . . . . . : HID MY MAC

DHCP Enabled. . . . . . . . . . . : No

IP Address. . . . . . . . . . . . : 10.100.24.15

Subnet Mask . . . . . . . . . . . : 255.255.255.0

Default Gateway . . . . . . . . . : 10.100.24.254

DNS Servers . . . . . . . . . . . : 10.100.8.5
10.100.8.2




FROM MY SERVER



Windows 2000 IP Configuration



Host Name . . . . . . . . . . . . : SERVER1
Primary DNS Suffix . . . . . . . : thisismydomain.net
Node Type . . . . . . . . . . . . : Hybrid

IP Routing Enabled. . . . . . . . : No

WINS Proxy Enabled. . . . . . . . : No

DNS Suffix Search List. . . . . . : thisismydomainname.net

Ethernet adapter Local Area Connection:



Connection-specific DNS Suffix . : thisismydomain.net
Description . . . . . . . . . . . : Intel(R) PRO/1000 XT
Network Connection
Physical Address. . . . . . . . . : HID THE MAC

DHCP Enabled. . . . . . . . . . . : No

IP Address. . . . . . . . . . . . : 10.100.8.5

Subnet Mask . . . . . . . . . . . : 255.255.255.0

Default Gateway . . . . . . . . . : 10.100.8.254

DNS Servers . . . . . . . . . . . : 10.100.8.5
10.100.8.2
151.164.11.201
151.164.1.8
 
In BSM <[email protected]> posted a question
Then Kevin replied below:

You probably have more problems than you know. Your server is using SBC's
DNS in its NIC you need to remove them. You are probably getting
registartion errors in the event log on the servers that you didn't mention.
Use the DNS console to get to the properties of your DNS servers.
Put SBC's DNS in on the forwarders tab, if the forwarders tab is grayed out
open Forward Lookup zones and delete the ".'' then refresh the DNS console
or close it and reopen it. Then you can enable the forwarder. This will also
enable the Root Hints.
If the "." zone is already gone go to the Advanced Tab and make sure
"Disable recursion" is NOT checked.
If you have a public website in thisismydomain.net open that zone and create
a host named www pointing to the IP of your website.


: FROM MY COMPUTER
: =========================
: Windows 2000 IP Configuration
:
:
:
: Host Name . . . . . . . . . . . . : MyComputer
: Primary DNS Suffix . . . . . . . :
: Node Type . . . . . . . . . . . . : Hybrid
:
: IP Routing Enabled. . . . . . . . : No
:
: WINS Proxy Enabled. . . . . . . . : No
:
: DNS Suffix Search List. . . . . . : thisismydomain.net
:
:
:
: Ethernet adapter WORK:
:
:
:
: Connection-specific DNS Suffix . : thisismydomain.net
: Description . . . . . . . . . . . : 3Com 3C920 Integrated Fast
: Ethernet Controller (3C905C-TX Compatible)
: Physical Address. . . . . . . . . : HID MY MAC
:
: DHCP Enabled. . . . . . . . . . . : No
:
: IP Address. . . . . . . . . . . . : 10.100.24.15
:
: Subnet Mask . . . . . . . . . . . : 255.255.255.0
:
: Default Gateway . . . . . . . . . : 10.100.24.254
:
: DNS Servers . . . . . . . . . . . : 10.100.8.5
: 10.100.8.2
:
:
:
:
: FROM MY SERVER
:
:
:
: Windows 2000 IP Configuration
:
:
:
: Host Name . . . . . . . . . . . . : SERVER1
: Primary DNS Suffix . . . . . . . : thisismydomain.net
: Node Type . . . . . . . . . . . . : Hybrid
:
: IP Routing Enabled. . . . . . . . : No
:
: WINS Proxy Enabled. . . . . . . . : No
:
: DNS Suffix Search List. . . . . . : thisismydomainname.net
:
: Ethernet adapter Local Area Connection:
:
:
:
: Connection-specific DNS Suffix . : thisismydomain.net
: Description . . . . . . . . . . . : Intel(R) PRO/1000 XT
: Network Connection
: Physical Address. . . . . . . . . : HID THE MAC
:
: DHCP Enabled. . . . . . . . . . . : No
:
: IP Address. . . . . . . . . . . . : 10.100.8.5
:
: Subnet Mask . . . . . . . . . . . : 255.255.255.0
:
: Default Gateway . . . . . . . . . : 10.100.8.254
:
: DNS Servers . . . . . . . . . . . : 10.100.8.5
: 10.100.8.2
: 151.164.11.201
: 151.164.1.8
:
:
: On Fri, 30 Jan 2004 17:19:59 -0600, "Kevin D. Goodknecht [MVP]"
:
:: In :: BSM <[email protected]> posted a question
:: Then Kevin replied below:
::: I have a situation where my clients, including myself, cannot get
::: to a particular websites.. I get the msn cannot find domain
::: webpage. I even try putting in the IP Address of the website and
::: still no luck. I am not using any proxies since I have a straight
::: shot to the internet from our PC's.
:::
::: WE do have firewalls in place and a IDS system but this would not
::: explain why my Windows Servers can access the website and not my
::: clients since we all go through the same pipe.
::: We use Windows DNS and I do have my ISP's DNS in its forwarders. My
::: clients get their ip addresses through DHCP which only has the ip
::: addresses of my internal DNS Servers. Nothing external.
:::
::: I don't know if there is some sort of group policy or if there is
::: some issues with DNS for Microsoft. Its wierd that I cannot get to
::: websites on my clients but my servers can.
:::
::: Any ideas??
:::
::: Brandon
::
:: Can you post an ipconfig /all for the server and a client, please?
::
:: --
:: Best regards,
:: Kevin D4 Dad Goodknecht Sr. [MVP]
:: Hope This Helps
:: ============================
 
B> I even try putting in the IP Address of the website and
B> still no luck.

Then this is not a DNS problem, since the DNS is not involved when one does
that.
 
What other possiblities could it be ??

Is there some sort of GP that prohibits users to go to a website? Now
being that I do everything on the network, I haven't set any GP up
beside a default one. If there something in a default GP that I would
have to either enable or disable ?
 
In BSM <[email protected]> posted a question
Then Kevin replied below:
: When I put in the IP address of the website ONLY, I still cannot get
: to the website.
:
: On Mon, 2 Feb 2004 13:59:31 -0600, "Kevin D. Goodknecht [MVP]"
:
You may not be able to if they are using host headers and don't allow
website access by IP.
What is the website?
 
In BSM <[email protected]> posted a question
Then Kevin replied below:
: When I put in the IP address of the website ONLY, I still cannot get
: to the website.

Did you check everything in my last reply?
 
B> I even try putting in the IP Address of the website and
B> still no luck.

JdeBP> Then this is not a DNS problem, since the DNS is not
JdeBP> involved when one does that.

B> What other possiblities could it be ??

* An IP connectivity problem (too many hops, or a firewall without the
correctly shaped hole knocked into it, for examples).

* A proxy HTTP service problem.

* An incorrect description of the symptoms of the problem on your part,
leading the people who are trying to help you up the garden path. (e.g. When
you use a URL with a literal IP address you in fact _are not_ presented with
an error page produced by your web browser, but are presented with something
quite different.)
 
Back
Top