Connection problem from some internet connections to office

[bludbunny]

Hi guys (sorry its a little long)

This issue has been causing some random problems over the last six months, but it is now got to a point where half of the remote staff we have working cannot get email or connect remotely.

We have a business internet connection into our head office with Telstra. Head office hosts our mail server, and also our remote access setup.

The problem is that SOME of our remote staff cannot connect using Checkpoint Secureclient, but others can. The strange thing is that these connections were working fine for about 12months+, and over the last 6 months, we have had them stop working for no apparent reason. These same users cannot connect to our external webmail software (it cannot find the server) or use outlook to pick up email from the server. It is like something is stopping the connection.

This has now happened to my connection - and being the IT support for the company causes a big problem. I use a different ISP to the others that have had problems, so I doubt it is the ISP I am using. Through my ADSL connection, if I tracert our mail server, I get this:
>>>>>>>>>

C:\>tracert mail.daleandmeyers.com.au

Tracing route to mail.daleandmeyers.com.au [203.46.74.100]
over a maximum of 30 hops:

1 <1 ms <1 ms <1 ms 192.168.1.1
2 43 ms 43 ms 44 ms nexthop.qld.ii.net[203.55.228.88]
3 45 ms 44 ms 44 ms gi2-12.bne-pipe-bdr1.ii.net [203.215.8.48]
4 61 ms 61 ms 60 ms gi0-15-0-3.syd-ult-core1.ii.net [203.215.20.24]

5 60 ms 61 ms 60 ms te0-13-0-0.syd-stl-core1.ii.net [203.215.20.129]

6 61 ms 61 ms 60 ms 0.ge-0-0-0.GW4.SYD4.ALTER.NET [203.166.90.157]
7 61 ms 62 ms 60 ms ge-3-2-0.XT2.SYD4.ALTER.NET [210.80.2.165]
8 60 ms 60 ms 61 ms ge-7-1-0.BR2.SYD2.ALTER.NET [210.80.34.22]
9 63 ms 62 ms 63 ms FastEthernet2-2.ken17.Sydney.telstra.net [139.130.4.185]
10 64 ms 64 ms 63 ms 10GigabitEthernet0-1-0-2.ken-core4.Sydney.telstra.net [203.50.20.1]
11 79 ms 79 ms 79 ms Pos0-0-0-0.cha-core4.Brisbane.telstra.net [203.50.6.206]
12 77 ms 78 ms 77 ms GigabitEthernet0-1.cha33.Brisbane.telstra.net [203.50.51.43]
13 daleme2.lnk.telstra.net [165.228.7.125] reports: Destination net unreachable.

Trace complete.

<<<<<<<<<<<<<<<<<

Now, I also have a backup dial up connection, which when I dial up and connect to the net, a tracert gives me this:

<<<<<<<<<<<<<<<<

C:\>tracert mail.daleandmeyers.com.au

Tracing route to mail.daleandmeyers.com.au [203.46.74.100]
over a maximum of 30 hops:

1 163 ms 156 ms 156 ms ALIP-T-001-pool-178.tmns.net.au [139.134.96.178]

2 140 ms 124 ms 140 ms ALIP-T-001-pool-157.tmns.net.au [139.134.96.157]

3 187 ms 171 ms 156 ms 139.134.53.54
4 156 ms 156 ms 156 ms GigabitEthernet2-3.cha23.Brisbane.telstra.net [1
39.130.65.209]
5 171 ms 156 ms 156 ms GigabitEthernet0-1.cha33.Brisbane.telstra.net [2
03.50.51.43]
6 203 ms 265 ms 203 ms daleme2.lnk.telstra.net [165.228.7.125]
7 * * * Request timed out.
8 * * * Request timed out.
9 * * * Request timed out.
10 * * ^C

<<<<<<<<<<<<<<<<<<<<<<<<

So it gets to the router for our internet connection at the office, then gets stopped by the firewall. The ADSL tracert on the other hand dies before getting to the firewall - just before getting to the router daleme2.lnk.telstra.net


Anyone know why this would be doing this?

Thanks,
Brett

 

[Atavar]

Try reducing the MTU on your client machine to 1360 and see if it makes a difference..

Remember that when a tracert dies the problem is at the next hop, not at the last one shown. Look at the logs for that router/firewall.