Can't access some sites

[Andrew Chalk]

I have an odd problem with IE6.

I have several computers on the same network using NAT behind a firewall
(Kerio). From some of those computers (those running XP SP2) I cannot access
a small number of Internet sites. It is the same sites for all computers. An
example is accessing the page from which one downloads account transactions
at American Express
(https://www99.americanexpress.com/myca/ofxdl/us/action?request_type=authreg
_ofxdownload&Face=en_US&Face=en_US&ReqSource=SummaryOfAccounts).

Presumably it is a network setting that is common on the machines with this
problem. Does anyone know which setting? Possibly something like "MTU"?

Many thanks.

 

[Don Varnau]

Hi,
See if something in this article helps:
870700 - How to troubleshoot problems accessing secure Web pages with IE 6
[XP] SP2: http://support.microsoft.com/default.aspx?scid=kb;en-us;870700

Other possibile solutions at
http://www.mvps.org/inetexplorer/answers2.htm#secure_sites

Don
[MS MVP- IE/OE]

 

[Alan P. Biddle]

Don,

I was interested in this thread, as I have an access problem with my
secure link to my bank's online services. I worked my way through the
references you provided and have a work around. It all centers on the
"Enable third-party browser extensions." If this is not checked, I
can access the page. If it is checked, I can't. Both the IE "manage
extensions" and BHODemon show 8 items, all properly disabled per the
trouble shooting flow, but still no help. Where else do you check for
offending extensions?

Alan

 

[Frank Saunders, MS-MVP IE/OE]

Don,

I was interested in this thread, as I have an access problem with my
secure link to my bank's online services. I worked my way through the
references you provided and have a work around. It all centers on the
"Enable third-party browser extensions." If this is not checked, I
can access the page. If it is checked, I can't. Both the IE "manage
extensions" and BHODemon show 8 items, all properly disabled per the
trouble shooting flow, but still no help. Where else do you check for
offending extensions?

Alan

First eliminate any scumware.
CAUTION!!!!! Before you try to remove spyware using any of these programs ,
download a copy of LSPFIX from any of the following sites:
http://www.cexx.org/lspfix.htm
http://www.spychecker.com/program/winsockxpfix.html
(if your OS is Win2k or XP) The process of removing certain malware may kill
your internet connection. If this should occur, this program, LSPFIX, will
enable you to regain your connection.

See
Dealing with Unwanted Malware, Parasites, Toolbars and Search Engines
http://mvps.org/winhelp2002/unwanted.htm

Note that AdAware and SpyBot S & D will each catch some things the other
won't. Also, each needs to be updated with the program's update function
before every use, even when just downloaded. There's also a lot more to do
than just those two programs. CWShredder is also available here:
http://www.kellys-korner-xp.com/regs_edits/cwshredder.zip
**Post your HijackThis log to
http://forums.spywareinfo.com/ or the Spyware forum at
http://forum.aumha.org/ for expert analysis, not here.**
Alternative download pages for Ad-Aware, Spybot, HijackThis and CWShredder
may be found on this page:
http://aumha.org/a/parasite.htm.


See this link for information about malware:
http://arstechnica.com/articles/paedia/malware.ars

If nothing there helps, please post back to this thread.

--
Frank Saunders, MS-MVP, IE/OE
Please respond in Newsgroup only. Do not send email
http://www.fjsmjs.com
Protect your PC
http://www.microsoft.com/security/protect/

 

[Alan P. Biddle]

Frank,

Well, the "new" CWShredder, Ad-Aware, Spybot, Pest Patrol, and Spy
Sweeper, all fully updated, come back negative. Sorry I did not
mention that in the original post.

Will pursue the HijackThis option. Thanks!

Alan

 

[Guest]

This is for Andrew, (sorry Alan I think you have a diffrent issue)

I had a very similar issue dealing with "RFC1191 Path MTU Discovery
standard" about 3 years ago on PacBell DSL PPPoE ... If you're using PPPoE
with NAT you might have the same issue.

My client computers were not able to open some websites becouse the MTU
settings did not match the MTU values on my gateway/router. After changing
all the MTU values to match on my network, I was able to access all websites
with no problems.

I would start with changing the XP SP2 computers to match the MTU set on
your gateway/router. (1492 is the Max for PPPoE)

Changin the MTU in Win XP:
http://support.microsoft.com/default.aspx?scid=kb;EN-US;q283165#2
http://www.dslreports.com/faq/707

If after matching all the MTU values on your computers you still can't
reach those sites.....look around on dslreports.com or speedguide.net forums

Good Luck

Finding the MaxMTU:
http://www.dslreports.com/faq/695
RFC1191 Path MTU Discovery standard

 

[Andrew Chalk]

Thanks -- I'll check it.

- Andrew

This is for Andrew, (sorry Alan I think you have a diffrent issue)

I had a very similar issue dealing with "RFC1191 Path MTU Discovery
standard" about 3 years ago on PacBell DSL PPPoE ... If you're using PPPoE
with NAT you might have the same issue.

My client computers were not able to open some websites becouse the MTU
settings did not match the MTU values on my gateway/router. After changing
all the MTU values to match on my network, I was able to access all websites
with no problems.

I would start with changing the XP SP2 computers to match the MTU set on
your gateway/router. (1492 is the Max for PPPoE)

Changin the MTU in Win XP:
http://support.microsoft.com/default.aspx?scid=kb;EN-US;q283165#2
http://www.dslreports.com/faq/707

If after matching all the MTU values on your computers you still can't
reach those sites.....look around on dslreports.com or speedguide.net forums

Good Luck

Finding the MaxMTU:
http://www.dslreports.com/faq/695
RFC1191 Path MTU Discovery standard