Cannot access particular website from this PC

[noveyron]

As per the title really. Vista Business, ESET Smart Security, IE7, FF, Safari

Cannot access specific website with IE, FF or Safari. Any other website in the known universe is OK.

Website is currently showing as down: "Internet explorer cannot display the web page".

A tracert shows "Unable to resolve target system name

http://www.xyz.com".

Any other domain traces OK

Ping states "Ping request could not find host

http://www.xyz.com.

Please check the name and try again". Any other domain pings ok.

Accessing it through freeproxyserver is fine, downforeveryoneorjustme shows it as up as well. It is accessible from any other XP or Vista machine on this network.

Switching off ESET AV and Firewall makes no difference.

I have cleared my internet cache, flushdns etc.

What is the most likely cause of this, and what is the best way to troubleshoot it?

TIA

 

[SimonDavies]

checked your hosts file? tried it via the ip address rather than the dns name?

Simon

The real world is not about exam scores, it's about ability.

 

[noveyron]

Yep, hosts file is ok as far as I can see:
127.0.0.1 localhost
::1 localhost


IP address shows up a holding page,

http://194.0.252.175,

but it does for other websites I know they host. Not quite sure how all that works, different domains pointing to the same IP, but I would imagine that there is some clever webby technology that sorts it all out when the request hits their server.

 

[BadBigBen]

Host: xyz(.)com = IP: 199.26.172.101

try pinging the above IP or enter it directly into the browser addressbar ...

Ben

"If it works don't fix it! If it doesn't use a sledgehammer..."

 

[noveyron]

Hi Ben

Thanks for the response. XYZ.com was just a spurious domain I invented rather than typing in the actual domain name. Apologies for any confusion.

nv

 

[Borvik]

We had a problem with accessing a particular web address as well - though I wasn't able to do anything to fix it, it has now been resolved.

The problem we had stemmed from Vista's name resolution service requesting both A records and AAA records from the DNS server. A records are typical IPv4 records while AAA records are IPv6 records. Something was getting them confused (I suspect the DNS server hosting the domain name in our particular case - they fix their problem and then ours was fixed).

As far as I can tell Vista likes to use IPv6 when it can, and if the domain you are trying to view has incorrectly setup the IPv6 records then Vista will try to use them and fail.

One way to test name resolution is using the nslookup tool - using this allowed me to see this IPv6 oddity, though I couldn't do anything about it (so I had the user change to Firefox and disabled IPv6 in it).

Give nslookup a shot to see if anything stands out. Nslookup has an interactive mode allows you to get verbose information - though I don't remember how to do it (it's been a while since I've used it).

Usage:
   nslookup [-opt ...]             # interactive mode using default server
   nslookup [-opt ...] - server    # interactive mode using 'server'
   nslookup [-opt ...] host        # just look up 'host' using default server
   nslookup [-opt ...] host server # just look up 'host' using 'server'

Hope this helps.

 

[noveyron]

Hi Borvic

I did an aaaa lookup via zoneedit.com, which reports that no aaaa records exist for the domain.

I will have a go with FF when I am back in the office tomorrow, what is the procedure for disabling IPv6 on it?

Thanks

nv

 

[linney]

See the Cookie and Privacy solution at the end of this thread.

IE6 blocking

http://www nytimes

com only...
thread779-601162

Consider a corrupt or faulty Index.dat too.
Safely Delete the Temporary Internet Files

http://www.mvps.org/winhelp2002/delcache.htm

Check your IPv6 configuration
"Disabling IPv6"

http://www.ipv6day.org/action.php?n=En.Configuration-WindowsVista

 

[Borvik]

For disabling IPv6 in FireFox type "about:config" into the address bar.

When you see the list of preferences scroll down to "network.dns.disableIPv6" and change the value to "true". Or an easier way to find it is to just type "ipv6" into the filter and it should automatically filter the preferences by name allowing you to find that preference easily. You may need to reboot FireFox for it to take affect - I'm not sure.

Once done if you still can't access the site then the problem you are having is most likely not the IPv6 problem we had.

 

[noveyron]

Borvik: Disabled IPv6 in FF, still unable to access the website. Thanks for the input though, it was worth a shot!

Linney:
Added domain to cookie policy, no change
Ran ccleaner to clear index.dat, rebooted, no change.
Ping as per link returns:
'ping6' is not recognized as an internal or external command,operable program or batch file.

IPv6 is obviously installed by default on vista, and an ipconfig /all shows an IPv6 address

Windows IP Configuration

Host Name . . . . . . . . . . . . : xblade
Primary Dns Suffix . . . . . . . :
Node Type . . . . . . . . . . . . : Hybrid
IP Routing Enabled. . . . . . . . : No
WINS Proxy Enabled. . . . . . . . : No

Ethernet adapter Local Area Connection:

Connection-specific DNS Suffix . :
Description . . . . . . . . . . . : NVIDIA nForce Networking Controller
Physical Address. . . . . . . . . : 00-01-6C-E3-9C-5A
DHCP Enabled. . . . . . . . . . . : Yes
Autoconfiguration Enabled . . . . : Yes
Link-local IPv6 Address . . . . . : fe80::1874:f07a:f887:bafc%8(Preferred)
IPv4 Address. . . . . . . . . . . : 192.168.1.27(Preferred)
Subnet Mask . . . . . . . . . . . : 255.255.255.0
Lease Obtained. . . . . . . . . . : 07 November 2008 09:42:08
Lease Expires . . . . . . . . . . : 08 November 2008 09:42:08
Default Gateway . . . . . . . . . : 192.168.1.1
DHCP Server . . . . . . . . . . . : 192.168.1.1
DHCPv6 IAID . . . . . . . . . . . : 201326956
DNS Servers . . . . . . . . . . . : 91.151.208.10
NetBIOS over Tcpip. . . . . . . . : Enabled

Tunnel adapter Local Area Connection*:

Connection-specific DNS Suffix . :
Description . . . . . . . . . . . : Teredo Tunneling Pseudo-Interface
Physical Address. . . . . . . . . : 02-00-54-55-4E-01
DHCP Enabled. . . . . . . . . . . : No
Autoconfiguration Enabled . . . . : Yes
IPv6 Address. . . . . . . . . . . : 2001:0:d5c7:a2ca:34da:3eb4:3f57:fee4(Pref
erred)
Link-local IPv6 Address . . . . . : fe80::34da:3eb4:3f57:fee4%10(Preferred)
Default Gateway . . . . . . . . . : ::
NetBIOS over Tcpip. . . . . . . . : Disabled

Tunnel adapter Local Area Connection* 2:

Media State . . . . . . . . . . . : Media disconnected
Connection-specific DNS Suffix . :
Description . . . . . . . . . . . : isatap.gateway.2wire.net
Physical Address. . . . . . . . . : 00-00-00-00-00-00-00-E0
DHCP Enabled. . . . . . . . . . . : No
Autoconfiguration Enabled . . . . : Yes

Tunnel adapter Local Area Connection* 12:

Connection-specific DNS Suffix . :
Description . . . . . . . . . . . : isatap.{A9B39E95-0AB1-46FE-AFAF-47CDC9DB5
8AE}
Physical Address. . . . . . . . . : 00-00-00-00-00-00-00-E0
DHCP Enabled. . . . . . . . . . . : No
Autoconfiguration Enabled . . . . : Yes
Link-local IPv6 Address . . . . . : fe80::5efe:192.168.1.27%17(Preferred)
Default Gateway . . . . . . . . . :
DNS Servers . . . . . . . . . . . : 91.151.208.10
NetBIOS over Tcpip. . . . . . . . : Disabled

C:\Users\Administrator>


I cant see too much wrong in the IP config? The odd DNS is a manual entry I put in a couple of days ago, to use an alternative ISP's DNS server to try and resolve the ping and tracert issues mentioned in my initial post.

 

[Borvik]

Is the IP address you posted in your second post (the one for the holding page) the correct IP address?

If so, I have tried several sites to see reverse DNS information of that IP - and none of them found anything. This seems to indicate there is no DNS information, and those computers that work for you have a previously cached result that allows it to work - though why downforeveryoneorjustyou would still show it as "up" is a puzzle.

Is it possible you can post the real domain - it may help diagnose the error.

 

[noveyron]

sure, it is

http://www.onlineshine.com,

they also host amongst others, sellike.com and rhki.co.uk, which all resolve to the .175 IP address. The hosting company is vooservers.com.

Thanks

 

[Borvik]

Ok - resolving the IP address from the domain does work for me.

Here is what the nslookup should look like (I trimmed the results to the relevant queries and answers, and I've highlighted what I type in red):

C:\Users\my_user>[red]nslookup[/red]
Default Server:  our.internal.dc.com
Address:  192.168.104.2

> [red]set d2[/red]
> [red]www.onlineshine.com[/red]
Server:  our.internal.dc.com
Address:  192.168.104.2

------------
SendRequest(), len 37
    HEADER:
        opcode = QUERY, id = 8, rcode = NOERROR
        header flags:  query, want recursion
        questions = 1,  answers = 0,  authority records = 0,  additional = 0

    QUESTIONS:
        [URL unfurl="true"]www.onlineshine.com,[/URL] type = A, class = IN

------------
------------
Got answer (53 bytes):
    HEADER:
        opcode = QUERY, id = 8, rcode = NOERROR
        header flags:  response, want recursion, recursion avail.
        questions = 1,  answers = 1,  authority records = 0,  additional = 0

    QUESTIONS:
        [URL unfurl="true"]www.onlineshine.com,[/URL] type = A, class = IN
    ANSWERS:
    ->  [URL unfurl="true"]www.onlineshine.com[/URL]
        type = A, class = IN, dlen = 4
        internet address = 194.0.252.175
        ttl = 14148 (3 hours 55 mins 48 secs)

------------
Non-authoritative answer:
------------
SendRequest(), len 37
    HEADER:
        opcode = QUERY, id = 9, rcode = NOERROR
        header flags:  query, want recursion
        questions = 1,  answers = 0,  authority records = 0,  additional = 0

    QUESTIONS:
        [URL unfurl="true"]www.onlineshine.com,[/URL] type = AAAA, class = IN

------------
------------
Got answer (93 bytes):
    HEADER:
        opcode = QUERY, id = 9, rcode = NOERROR
        header flags:  response, want recursion, recursion avail.
        questions = 1,  answers = 0,  authority records = 1,  additional = 0

    QUESTIONS:
        [URL unfurl="true"]www.onlineshine.com,[/URL] type = AAAA, class = IN
    AUTHORITY RECORDS:
    ->  onlineshine.com
        type = SOA, class = IN, dlen = 44
        ttl = 14191 (3 hours 56 mins 31 secs)
        primary name server = ns1.vooservers.com
        responsible mail addr = root.onlineshine.com
        serial  = 2008081200
        refresh = 14400 (4 hours)
        retry   = 3600 (1 hour)
        expire  = 1209600 (14 days)
        default TTL = 86400 (1 day)

------------
Name:    [URL unfurl="true"]www.onlineshine.com[/URL]
Address:  194.0.252.175

>

As you can see there is no IPv6 address returned to the query for it and it resolves to the proper IP address.

What does the nslookup look like for you? Remember to use "set d2" to see the debug information.

 

[noveyron]

Hi Borvik

I am getting the following:

Address: 91.151.208.10:53

> set d2
>

http://www.onlineshine.com

Server: backupmx.Serverstream.net
Address: 91.151.208.10:53

------------
SendRequest(), len 37
HEADER:
opcode = QUERY, id = 2, rcode = NOERROR
header flags: query, want recursion
questions = 1, answers = 0, authority records = 0, additional = 0

QUESTIONS:

http://www.onlineshine.com,

type = A, class = IN

------------
------------
Got answer (37 bytes):
HEADER:
opcode = QUERY, id = 2, rcode = SERVFAIL
header flags: response, want recursion, recursion avail.
questions = 1, answers = 0, authority records = 0, additional = 0

QUESTIONS:

http://www.onlineshine.com,

type = A, class = IN

------------
------------
SendRequest(), len 37
HEADER:
opcode = QUERY, id = 3, rcode = NOERROR
header flags: query, want recursion
questions = 1, answers = 0, authority records = 0, additional = 0

QUESTIONS:

http://www.onlineshine.com,

type = A, class = IN

------------
------------
Got answer (37 bytes):
HEADER:
opcode = QUERY, id = 3, rcode = SERVFAIL
header flags: response, want recursion, recursion avail.
questions = 1, answers = 0, authority records = 0, additional = 0

QUESTIONS:

http://www.onlineshine.com,

type = A, class = IN

------------
*** backupmx.Serverstream.net can't find

http://www.onlineshine.com:

Server failed

Looks like it is falling over at serverstream? But as mentioned previously, any other PC on the network can resolve and access http.

 

[Borvik]

What does running the same thing on one of your working PCs look like?

 

[linney]

I notice that this may be installed in your machine, "NVIDIA nForce Networking Controller", people in the past have reported trouble with Nvidia.

Got Network issues and nForce Chipset...
thread1583-1437402

A Hidden Personal Firewall - The nVidia nForce Network Adapter

http://networking.nitecruzr.net/2006/02/hidden-personal-firewall-nvidia-nforce.html

Recently AVG anti virus software caused a few strange problems on some Networks but I don't suppose that is relevant, however may be worth noting.