my client pc can link to internet but cannot ping out web address

  • Thread starter Thread starter singlin
  • Start date Start date
I can ping 218.242.243.26. If your client cannot do it
then you should check his firewall settings.
 
the server use wingate 5.0
the client and server have not firewall
is there problem with the server?
Pegasus (MVP) said:
I can ping 218.242.243.26. If your client cannot do it
then you should check his firewall settings.


singlin said:
my client pc can link to internet, and can ping to the server address
successfully, but cannot ping out web address.the screen displays:
ping www.cableplus.com.cn[218.242.243.26]
with 32 bytes of data:

Requested time out
Requested time out
Requested time out
Click to expand...
Click to expand...
 
From the small amount of information I cannot tell
if there is a problem with your server. I would try
and ping a number of different addresses in order
to find out if the problem is restricted to this one
address. If it is then you should have a closer
look at

- Your server. Can it ping the addresses that your
workstation cannot? When you turn on the network
card icon in the System Tray, can you see the
ping packets coming in from the workstation?

- Your firewall. I know you say that you don't have one
but then I have dealt with several posts in the past where
the poster ultimately found that he did have a firewall.
Some virus scanners (e.g. PC-Cillin) have an inbuilt
firewall.

- Your hubs/switches.

- Your network adapters. It's extremely rare but I have
seen network adapters that selectively failed on certain
IP addresses.


singlin said:
the server use wingate 5.0
the client and server have not firewall
is there problem with the server?
Pegasus (MVP) said:
I can ping 218.242.243.26. If your client cannot do it
then you should check his firewall settings.


singlin said:
my client pc can link to internet, and can ping to the server address
successfully, but cannot ping out web address.the screen displays:
ping www.cableplus.com.cn[218.242.243.26]
with 32 bytes of data:

Requested time out
Requested time out
Requested time out
Click to expand...
Click to expand...
Click to expand...
 
it's detail of my local network configuration:
the server windows 2000,2 network card. one links to cable modem,ip is
automatic;the other links to hub,ip is 192.168.0.1;
there's wingate 5.0 server on the server.

the client windows 2000,one network card, links to hub,ip is 192.168.0.2.
there's wingate 5.0 client.

the problem is that the client cannot ping out web address,but can ping
192.168.0.1.
and the client can share the internet.i can browse webpages properly.

i'm sure there's no virus scanner on client and server. but i saw some
setting of wingate about firewall in the extended networking part. the
option is set to Disable Wingate Firewall.

the problem is not restricted to 218.242.243.26. the client cannot ping any
out web address,but in fact it's can browse webpage of that address.

can u give me any advice more?

Pegasus (MVP) said:
From the small amount of information I cannot tell
if there is a problem with your server. I would try
and ping a number of different addresses in order
to find out if the problem is restricted to this one
address. If it is then you should have a closer
look at

- Your server. Can it ping the addresses that your
workstation cannot? When you turn on the network
card icon in the System Tray, can you see the
ping packets coming in from the workstation?

- Your firewall. I know you say that you don't have one
but then I have dealt with several posts in the past where
the poster ultimately found that he did have a firewall.
Some virus scanners (e.g. PC-Cillin) have an inbuilt
firewall.

- Your hubs/switches.

- Your network adapters. It's extremely rare but I have
seen network adapters that selectively failed on certain
IP addresses.


singlin said:
the server use wingate 5.0
the client and server have not firewall
is there problem with the server?
Pegasus (MVP) said:
I can ping 218.242.243.26. If your client cannot do it
then you should check his firewall settings.


my client pc can link to internet, and can ping to the server address
successfully, but cannot ping out web address.the screen displays:
ping www.cableplus.com.cn[218.242.243.26]
with 32 bytes of data:

Requested time out
Requested time out
Requested time out
Click to expand...
Click to expand...
Click to expand...
 
singlin said:
it's detail of my local network configuration:
the server windows 2000,2 network card. one links to cable modem,ip is
automatic;the other links to hub,ip is 192.168.0.1;
there's wingate 5.0 server on the server.

the client windows 2000,one network card, links to hub,ip is
192.168.0.2. there's wingate 5.0 client.

the problem is that the client cannot ping out web address,but can
ping 192.168.0.1.
and the client can share the internet.i can browse webpages properly.

i'm sure there's no virus scanner on client and server. but i saw some
setting of wingate about firewall in the extended networking part. the
option is set to Disable Wingate Firewall.

the problem is not restricted to 218.242.243.26. the client cannot
ping any out web address,but in fact it's can browse webpage of that
address.

can u give me any advice more?

Pegasus (MVP) said:
From the small amount of information I cannot tell
if there is a problem with your server. I would try
and ping a number of different addresses in order
to find out if the problem is restricted to this one
address. If it is then you should have a closer
look at

- Your server. Can it ping the addresses that your
workstation cannot? When you turn on the network
card icon in the System Tray, can you see the
ping packets coming in from the workstation?

- Your firewall. I know you say that you don't have one
but then I have dealt with several posts in the past where
the poster ultimately found that he did have a firewall.
Some virus scanners (e.g. PC-Cillin) have an inbuilt
firewall.

- Your hubs/switches.

- Your network adapters. It's extremely rare but I have
seen network adapters that selectively failed on certain
IP addresses.


singlin said:
the server use wingate 5.0
the client and server have not firewall
is there problem with the server?
I can ping 218.242.243.26. If your client cannot do it
then you should check his firewall settings.


my client pc can link to internet, and can ping to the server
address successfully, but cannot ping out web address.the screen
displays: ping www.cableplus.com.cn[218.242.243.26]
with 32 bytes of data:

Requested time out
Requested time out
Requested time out
Click to expand...
Click to expand...
Click to expand...

Presumably you mean to say that your Win2K Server has 2 network cards
where one goes to the cable modem and the other is connected to a "hub".
However, hubs do not get assigned an IP address but *routers* do. So
192.168.0.1 could be the address of the intranet network card in the
server or it could be the address for the intervening router. Since you
can ping the server, this shows that any firewall software you may have
on your machine and any firewall features that may be in the router (if
it is a router instead of a hub) are allowing you to ping okay to the
server. So it's the Wingate firewall software on the server or
something in the server that is blocking pings to the Internet. It
could whomever administers the server has disabled ICMP (which is part
of IP) so external users cannot ping that server. Lots of sites disable
ICMP so they don't waste bandwidth and time responding to them, to help
alleviate attacks, and to stealth their existence. You only need to
block inbound ICMP but maybe the admin also blocked outbound ICMP. They
could've use the firewall software or they might have used filtering
features in the TCP/IP configuration
(http://support.microsoft.com/default.aspx?scid=kb;en-us;309798 and
http://support.microsoft.com/default.aspx?scid=kb;EN-US;289892).
 
i have read yo answers many times,and i also opened the attached two links.
but i do not know how to solve my problem.

u said that Lots of sites disable
ICMP so they don't waste bandwidth and time responding to them, to help
alleviate attacks, and to stealth their existence. i'm puzzed at this,coz
on the server i can ping the out website address properly.
 
singlin said:
i have read yo answers many times,and i also opened the attached two
links. but i do not know how to solve my problem.

u said that Lots of sites disable
ICMP so they don't waste bandwidth and time responding to them, to
help alleviate attacks, and to stealth their existence. i'm puzzed
at this,coz on the server i can ping the out website address properly.
Click to expand...

It's a problem your Win2K Server and Wingate administrator(s) have to
resolve. Is that you? Sounds like you really need to discuss the
problem with whomever is the administrator for your Win2K Server host
and whomever administers the WinGate firewall.

ICMP can be disabled by any web site or host. For example, I can ping
www.creative.com but I cannot ping www.intel.com or www.ibm.com.
Nothing in my network is preventing me from pinging. It is the
destination hosts that refuse to accept the ping request. It all
depends if they have left inbound ICMP enabled or not. If a host has
inbound ICMP disabled or blocked, you are never going to be able to ping
them no matter where you are. The ability to ping other hosts on your
intranet is separate of being able to ping hosts on the Internet. It
could be because those Internet hosts don't allow ping. Could be
something between you and the Internet connection is blocking outbound
ping requests (which seems likely in your case). If you were the
administrator of the Win2K Server host and also the administrator of the
Wingate firewall then you would know how to use either TCP/IP filtering
on the protocol itself or use the firewall to block pinging.
 
Here are a few further points:

- You never replied to my question about turning
on the network card icon in the System Tray,
and observing the network traffic when pinging.

- It is possible that your default gateway is incorrectly
set. It must point at the machine that will handle
addresses that are outside your current subnet,
taking into account your subnet mask.

- Do you have any files of the form vs*.* in the
directory c:\winnt\system32?


singlin said:
it's detail of my local network configuration:
the server windows 2000,2 network card. one links to cable modem,ip is
automatic;the other links to hub,ip is 192.168.0.1;
there's wingate 5.0 server on the server.

the client windows 2000,one network card, links to hub,ip is 192.168.0.2.
there's wingate 5.0 client.

the problem is that the client cannot ping out web address,but can ping
192.168.0.1.
and the client can share the internet.i can browse webpages properly.

i'm sure there's no virus scanner on client and server. but i saw some
setting of wingate about firewall in the extended networking part. the
option is set to Disable Wingate Firewall.

the problem is not restricted to 218.242.243.26. the client cannot ping any
out web address,but in fact it's can browse webpage of that address.

can u give me any advice more?

Pegasus (MVP) said:
From the small amount of information I cannot tell
if there is a problem with your server. I would try
and ping a number of different addresses in order
to find out if the problem is restricted to this one
address. If it is then you should have a closer
look at

- Your server. Can it ping the addresses that your
workstation cannot? When you turn on the network
card icon in the System Tray, can you see the
ping packets coming in from the workstation?

- Your firewall. I know you say that you don't have one
but then I have dealt with several posts in the past where
the poster ultimately found that he did have a firewall.
Some virus scanners (e.g. PC-Cillin) have an inbuilt
firewall.

- Your hubs/switches.

- Your network adapters. It's extremely rare but I have
seen network adapters that selectively failed on certain
IP addresses.


singlin said:
the server use wingate 5.0
the client and server have not firewall
is there problem with the server?
I can ping 218.242.243.26. If your client cannot do it
then you should check his firewall settings.


my client pc can link to internet, and can ping to the server address
successfully, but cannot ping out web address.the screen displays:
ping www.cableplus.com.cn[218.242.243.26]
with 32 bytes of data:

Requested time out
Requested time out
Requested time out
Click to expand...
Click to expand...
Click to expand...
 
dear Pegasus (MVP),it's results below:
1.i've turned on the network card icon in the System Tray. the two eyes r
black.sent
5,219 packages,received 5053 packages.
when i ping www.sina.com.cn,
at first two eyes turns green,then left eye green,right eye black.sent 5,375
packages,received 5094,etc. the sent and received number is changing with
every ping.

2.i dont understand. the gateway and netmask address is assigned according
to the help documents on the internet.

3.surely no.
 
Rather than pinging a name (such as www.sina.com.cn),
you should ping an IP address at this stage in order to
avoid name resolution problems. 216.239.39.99 is a good
address to ping - it is the Google address.

You said that you have turned on the card icon in the
System Tray, and that the "sent" & "receive" counters
increment with each unsuccessful ping. Which machine
are you talking about - the problem machine or the server?

Come to think of it, it would be a good idea to monitor
these counters on both machines while you're pinging.
 
Back
Top