Weird TCP behavior

[Cos Pipero]

I have a problem: I can ping some addresses, DNS
seems to resolve them (nslookup responds fine), yet IE
cannot navigate to them by name (it can by IP).
Also my VPN client doesn't work (and I disabled ICF).
Ipconfig didn't help me, but maybe someone can find a
good solution (of course, I changed some info for my own
security)

Windows IP Configuration



Host Name . . . . . . . . . . . . : myhostname

Primary Dns Suffix . . . . . . . : SUB.DOMAIN.COM

Node Type . . . . . . . . . . . . : Hybrid

IP Routing Enabled. . . . . . . . : No

WINS Proxy Enabled. . . . . . . . : No

DNS Suffix Search List. . . . . . : SUB.DOMAIN.COM
DOMAIN.COM



Ethernet adapter Local Area Connection:



Media State . . . . . . . . . . . : Media
disconnected

Description . . . . . . . . . . . : 3Com 3C920
Integrated Fast Ethernet Controller (3C905C-TX Compatible)

Physical Address. . . . . . . . . : 00-08-75-3D-
E2-41



Ethernet adapter Wireless Network Connection:



Connection-specific DNS Suffix . :

Description . . . . . . . . . . . : Wireless-B
Notebook Adapter

Physical Address. . . . . . . . . : 00-0C-41-C5-
EB-DB

Dhcp Enabled. . . . . . . . . . . : Yes

Autoconfiguration Enabled . . . . : Yes

IP Address. . . . . . . . . . . . : 197.168.1.100

Subnet Mask . . . . . . . . . . . : 255.255.255.0

Default Gateway . . . . . . . . . : 197.168.1.1

DHCP Server . . . . . . . . . . . : 197.168.1.1

DNS Servers . . . . . . . . . . . : 151.195.0.37

151.195.0.36

NetBIOS over Tcpip. . . . . . . . : Disabled

Lease Obtained. . . . . . . . . . : Saturday,
April 10, 2004 1:02:19 PM

Lease Expires . . . . . . . . . . : Sunday, April
11, 2004 1:02:19 PM

 

[Chuck]

I have a problem: I can ping some addresses, DNS
seems to resolve them (nslookup responds fine), yet IE
cannot navigate to them by name (it can by IP).
Also my VPN client doesn't work (and I disabled ICF).
Ipconfig didn't help me, but maybe someone can find a
good solution (of course, I changed some info for my own
security)

Windows IP Configuration



Host Name . . . . . . . . . . . . : myhostname

Primary Dns Suffix . . . . . . . : SUB.DOMAIN.COM

Node Type . . . . . . . . . . . . : Hybrid

IP Routing Enabled. . . . . . . . : No

WINS Proxy Enabled. . . . . . . . : No

DNS Suffix Search List. . . . . . : SUB.DOMAIN.COM
DOMAIN.COM



Ethernet adapter Local Area Connection:



Media State . . . . . . . . . . . : Media
disconnected

Description . . . . . . . . . . . : 3Com 3C920
Integrated Fast Ethernet Controller (3C905C-TX Compatible)

Physical Address. . . . . . . . . : 00-08-75-3D-
E2-41



Ethernet adapter Wireless Network Connection:



Connection-specific DNS Suffix . :

Description . . . . . . . . . . . : Wireless-B
Notebook Adapter

Physical Address. . . . . . . . . : 00-0C-41-C5-
EB-DB

Dhcp Enabled. . . . . . . . . . . : Yes

Autoconfiguration Enabled . . . . : Yes

IP Address. . . . . . . . . . . . : 197.168.1.100

Subnet Mask . . . . . . . . . . . : 255.255.255.0

Default Gateway . . . . . . . . . : 197.168.1.1

DHCP Server . . . . . . . . . . . : 197.168.1.1

DNS Servers . . . . . . . . . . . : 151.195.0.37

151.195.0.36

NetBIOS over Tcpip. . . . . . . . : Disabled

Lease Obtained. . . . . . . . . . : Saturday,
April 10, 2004 1:02:19 PM

Lease Expires . . . . . . . . . . : Sunday, April
11, 2004 1:02:19 PM

Cos,

You're using strange DNS servers. Addresses 151.195.0.36 and .37 resolve to
somewhere past 136.142.48.2 (and deep in their private network), which resolves
to childrens.gw.pitt.edu. Or is that one of the info you changed?

The semantics of your problem description are a bit unclear. Can you just ping
some addresses, but not others? Or can you ping all addresses, but can't access
all using IE? Are the problem addresses local (on your LAN) or internet?

And Cos, please don't contribute to the spread of email address mining viruses.
Learn to munge your email address properly, to keep yourself a bit safer when
posting to open forums. Protect yourself and the rest of the internet - never
post your address unmunged.
http://www.mailmsg.com/SPAM_munging.htm

Cheers,
Chuck
Paranoia comes from experience - and is not necessarily a bad thing.

 

[Costantino Pipero]

Cos,

You're using strange DNS servers. Addresses 151.195.0.36 and .37 resolve to
somewhere past 136.142.48.2 (and deep in their private network), which resolves
to childrens.gw.pitt.edu. Or is that one of the info you changed?

The semantics of your problem description are a bit unclear. Can you just ping
some addresses, but not others? Or can you ping all addresses, but can't access
all using IE? Are the problem addresses local (on your LAN) or internet?

And Cos, please don't contribute to the spread of email address mining viruses.
Learn to munge your email address properly, to keep yourself a bit safer when
posting to open forums. Protect yourself and the rest of the internet - never
post your address unmunged.
http://www.mailmsg.com/SPAM_munging.htm

Cheers,
Chuck
Paranoia comes from experience - and is not necessarily a bad thing.

Thanks Chuck,

I'll try to munge my address...

And yes, I can pig them all but IE doesn't show some (internal and
external). And my VPN client doesn't seem to tunnel properly...

Appreciate your help

Cos

You got it right: the DNS numbers are fake.

 

[Chuck]

Thanks Chuck,

I'll try to munge my address...

And yes, I can pig them all but IE doesn't show some (internal and
external). And my VPN client doesn't seem to tunnel properly...

Appreciate your help

Cos

You got it right: the DNS numbers are fake.

Cos,

Does your VPN require IPV6? If not, why are you using it? Un installing it is
the first step I'd take, if I had your problems.

I experimented with it myself. Briefly. Obviously we have to know how to use
it, unless we can wait until IPV6 becomes native and doesn't require a tunnel,
but right now I see trouble from it so much.

Think it may be time to cruise over to the IPV6 forums (alt.comp.networking.ipv6
is kinda quiet tho) and see what if anything can be done with it.

Re your ipconfig data: You're right to feel paranoid, so faking something in
there is always a good idea. But when you're asking for help with a DNS
problem, masking your DNS server addresses is not the right way.

And masking with a result that you list ip addresses belonging to someone else,
IMHO, may be similar to munging your email so a valid domain gets listed.

Cheers,
Chuck
Paranoia comes from experience - and is not necessarily a bad thing.