Win2k TS Users cant connect to http but can connect to https

[Knackster]

I've got a win2k server as a terminal server.

Typically serves 12 users and not a heavy load.

This is all patched up with sp4.

I installed Trend Micro officescan on the server in install mode. It didn't take ( haven't figured out why yet) so I removed it.

Now, when my users log in to the terminal server, they can't connect to http sites but they can conenct to https sites. This includes internal and across our firewall.

I can ping the http sites with not problem. DNS is working.

For example:

https://www.gmail.com

works

http://www.gmail.com

does not.

This has thrown me for a loop.

Now, this server has had a very long uptime and probably hasnt been rebooted in 5 or 6 months, with the exception of the r and r of the officescan software.

IE 6 is the browser of choice here.

Anyone have any clues?

Thanks

Chris
IT Manager
Houston, Texas

 

[Roadki11]

Perhaps Trend didnt uninstall correctly. Check your services and see if the OfficeScanNT Personal Firewall service is still installed and running.



RoadKi11

"This apparent fear reaction is typical, rather than try to solve technical problems technically, policy solutions are often chosen." - Fred Cohen

 

[Knackster]

There is no reminents left of office scan or any processes. Plus the firewall was not installed in this instance.

Chris
IT Manager
Houston, Texas

 

[Knackster]

I found the problem.

There apparently was a piece of spyware installed on my ts that asfter I rebooted it, it enabled the spyware. I also believe that is why trend micro had a problem installing.

My firewall, sensing the rougue port 80 traffic, flagged it as spyware and dropped the connection, just like it was supposed to do. I just totally forgot that I had IPS enabled on the internal network as well as our external network.

So, I am currently erradicating the spyware and changed the IPS on our firewall for the http outbound proxy to show a deny message instead of just dropping the conenction. It sure will help in diagnosing problems later.

Hope this helps someone else out.

Chris
IT Manager
Houston, Texas

 

[Roadki11]

Well i am glad you figured it out because that wouldnt have been one of my guesses.



RoadKi11

"This apparent fear reaction is typical, rather than try to solve technical problems technically, policy solutions are often chosen." - Fred Cohen