Networking Forums

Networking Forums > Computer Networking > Windows Networking > 2003 server blocking all but ping after RRAS was temporarily confi

Reply
Thread Tools Display Modes

2003 server blocking all but ping after RRAS was temporarily confi

 
 
elb
Guest
Posts: n/a

 
      07-09-2008, 02:16 AM
I have a 2003 Server that I setup for some prototyping and thought I would
check out the RRAS features. After setting up a NAT/Basic Firewall
connection, I decided to go another approach and removed the RRAS server
role. However, now I am unable to do anything other than ping (LAN or
internet). Any type of TCP traffic seems to be blocked, but I have disabled
Windows Firewall (no 3rd party ones installed). DNS is resolving correctly
and everything was working before. I also tried "resetting" TCP and WinSock
with netsh, but nothing has helped.

Anyone know if there is a way to tell what is blocking the packets going out
- using netcap or wireshark I can see them trying to go out and the
addressing is correct, it just never gets out. All other computers on my
network have no issues - it just seems to be after I messed with RRAS.

Thanks
 
Reply With Quote
 
 
 
 
Robert L. \(MS-MVP\)
Guest
Posts: n/a

 
      07-09-2008, 02:57 PM
I would check the NAT/Firewall settings first. Assuming this is multihomed
computer, post the result of ipconfig /all may help.

--
Bob Lin, MS-MVP, MCSE & CNE
Networking, Internet, Routing, VPN Troubleshooting on
http://www.ChicagoTech.net
How to Setup Windows, Network, VPN & Remote Access on
http://www.HowToNetworking.com
"elb" <(E-Mail Removed)> wrote in message
news:CA183C57-7D7E-4A69-8DCF-(E-Mail Removed)...
>I have a 2003 Server that I setup for some prototyping and thought I would
> check out the RRAS features. After setting up a NAT/Basic Firewall
> connection, I decided to go another approach and removed the RRAS server
> role. However, now I am unable to do anything other than ping (LAN or
> internet). Any type of TCP traffic seems to be blocked, but I have
> disabled
> Windows Firewall (no 3rd party ones installed). DNS is resolving correctly
> and everything was working before. I also tried "resetting" TCP and
> WinSock
> with netsh, but nothing has helped.
>
> Anyone know if there is a way to tell what is blocking the packets going
> out
> - using netcap or wireshark I can see them trying to go out and the
> addressing is correct, it just never gets out. All other computers on my
> network have no issues - it just seems to be after I messed with RRAS.
>
> Thanks


 
Reply With Quote
 
elb
Guest
Posts: n/a

 
      07-09-2008, 04:49 PM
Windows Firewall is disabled (verified via) and no other firewall products
are installed. Here is the output of netdiag.exe from support tools and a
full ipconfig /all. The 192.168.1.111 is another server acting as DNS - there
is no difference in behavior (i.e. able to resolve/ping sites such as
www.google.com but can't browse) regardless of whether I use my local DNS or
direct to the ISP one.

Computer Name: OFSASVR2
DNS Host Name: ofsasvr2.ofsadom.austin
System info : Microsoft Windows Server 2003 R2 (Build 3790)
Processor : EM64T Family 6 Model 15 Stepping 11, GenuineIntel
List of installed hotfixes :
KB924667-v2
KB925398_WMP64
KB925902
KB926122
KB927891
KB929123
KB930178
KB932168
KB932596
KB933729
KB935839
KB935840
KB936021
KB936357
KB936782
KB938127-IE7
KB941202
KB941569
KB941644
KB941693
KB942763
KB942830
KB942831
KB943055
KB943460
KB943485
KB944653
KB945553
KB946026
KB948496
KB948590
KB950759-IE7
KB950760
KB950762
KB951698
Q147222

Netcard queries test . . . . . . . : Passed

Per interface results:

Adapter : Local Area Connection 2
Netcard queries test . . . : Passed

Host Name. . . . . . . . . : ofsasvr2
IP Address . . . . . . . . : 192.168.1.113
Subnet Mask. . . . . . . . : 255.255.255.0
Default Gateway. . . . . . : 192.168.1.1
Dns Servers. . . . . . . . : 192.168.1.111

AutoConfiguration results. . . . . . : Passed
Default gateway test . . . : Passed
NetBT name test. . . . . . : Passed
[WARNING] At least one of the <00> 'WorkStation Service', <03>
'Messenger Service', <20> 'WINS' names is missing.
WINS service test. . . . . : Skipped
There are no WINS servers configured for this interface.
Global results:
Domain membership test . . . . . . : Passed
NetBT transports test. . . . . . . : Passed
List of NetBt transports currently configured:
NetBT_Tcpip_{8E39AEF9-1626-4983-ACE9-CFFB98664328}
1 NetBt transport currently configured.
Autonet address test . . . . . . . : Passed
IP loopback ping test. . . . . . . : Passed
Default gateway test . . . . . . . : Passed
NetBT name test. . . . . . . . . . : Passed
[WARNING] You don't have a single interface with the <00> 'WorkStation
Service', <03> 'Messenger Service', <20> 'WINS' names defined.
Winsock test . . . . . . . . . . . : Passed
DNS test . . . . . . . . . . . . . : Passed
Redir and Browser test . . . . . . : Passed
List of NetBt transports currently bound to the Redir
NetBT_Tcpip_{8E39AEF9-1626-4983-ACE9-CFFB98664328}
The redir is bound to 1 NetBt transport.
List of NetBt transports currently bound to the browser
NetBT_Tcpip_{8E39AEF9-1626-4983-ACE9-CFFB98664328}
The browser is bound to 1 NetBt transport.
DC discovery test. . . . . . . . . : Passed
DC list test . . . . . . . . . . . : Passed
Trust relationship test. . . . . . : Passed
Secure channel for domain 'OFSADOM' is to '\\ofsasvr1.ofsadom.austin'.
Kerberos test. . . . . . . . . . . : Passed
LDAP test. . . . . . . . . . . . . : Passed
Bindings test. . . . . . . . . . . : Passed
WAN configuration test . . . . . . : Skipped
No active remote access connections.
Modem diagnostics test . . . . . . : Passed
IP Security test . . . . . . . . . : Skipped
Note: run "netsh ipsec dynamic show /?" for more detailed information

The command completed successfully

Windows IP Configuration

Host Name . . . . . . . . . . . . : ofsasvr2
Primary Dns Suffix . . . . . . . : ofsadom.austin
Node Type . . . . . . . . . . . . : Broadcast
IP Routing Enabled. . . . . . . . : No
WINS Proxy Enabled. . . . . . . . : No
DNS Suffix Search List. . . . . . : ofsadom.austin

Ethernet adapter Local Area Connection 2:
Connection-specific DNS Suffix . :

Description . . . . . . . . . . . : Intel(R) 82566DM-2 Gigabit Network
Connection
Physical Address. . . . . . . . . : 00-1E-4F-E5-49-F1
DHCP Enabled. . . . . . . . . . . : No
IP Address. . . . . . . . . . . . : 192.168.1.113
Subnet Mask . . . . . . . . . . . : 255.255.255.0
Default Gateway . . . . . . . . . : 192.168.1.1
DNS Servers . . . . . . . . . . . : 192.168.1.111

"Robert L. (MS-MVP)" wrote:

> I would check the NAT/Firewall settings first. Assuming this is multihomed
> computer, post the result of ipconfig /all may help.
>
> --
> Bob Lin, MS-MVP, MCSE & CNE
> Networking, Internet, Routing, VPN Troubleshooting on
> http://www.ChicagoTech.net
> How to Setup Windows, Network, VPN & Remote Access on
> http://www.HowToNetworking.com
> "elb" <(E-Mail Removed)> wrote in message
> news:CA183C57-7D7E-4A69-8DCF-(E-Mail Removed)...
> >I have a 2003 Server that I setup for some prototyping and thought I would
> > check out the RRAS features. After setting up a NAT/Basic Firewall
> > connection, I decided to go another approach and removed the RRAS server
> > role. However, now I am unable to do anything other than ping (LAN or
> > internet). Any type of TCP traffic seems to be blocked, but I have
> > disabled
> > Windows Firewall (no 3rd party ones installed). DNS is resolving correctly
> > and everything was working before. I also tried "resetting" TCP and
> > WinSock
> > with netsh, but nothing has helped.
> >
> > Anyone know if there is a way to tell what is blocking the packets going
> > out
> > - using netcap or wireshark I can see them trying to go out and the
> > addressing is correct, it just never gets out. All other computers on my
> > network have no issues - it just seems to be after I messed with RRAS.
> >
> > Thanks

>
>

 
Reply With Quote
 
elb
Guest
Posts: n/a

 
      07-09-2008, 04:55 PM
Sent too quick - Windows Firewall is disabled, which was verified via
connection properties->advanced.

"elb" wrote:

> Windows Firewall is disabled (verified via) and no other firewall products
> are installed. Here is the output of netdiag.exe from support tools and a
> full ipconfig /all. The 192.168.1.111 is another server acting as DNS - there
> is no difference in behavior (i.e. able to resolve/ping sites such as
> www.google.com but can't browse) regardless of whether I use my local DNS or
> direct to the ISP one.
>
> Computer Name: OFSASVR2
> DNS Host Name: ofsasvr2.ofsadom.austin
> System info : Microsoft Windows Server 2003 R2 (Build 3790)
> Processor : EM64T Family 6 Model 15 Stepping 11, GenuineIntel
> List of installed hotfixes :
> KB924667-v2
> KB925398_WMP64
> KB925902
> KB926122
> KB927891
> KB929123
> KB930178
> KB932168
> KB932596
> KB933729
> KB935839
> KB935840
> KB936021
> KB936357
> KB936782
> KB938127-IE7
> KB941202
> KB941569
> KB941644
> KB941693
> KB942763
> KB942830
> KB942831
> KB943055
> KB943460
> KB943485
> KB944653
> KB945553
> KB946026
> KB948496
> KB948590
> KB950759-IE7
> KB950760
> KB950762
> KB951698
> Q147222
>
> Netcard queries test . . . . . . . : Passed
>
> Per interface results:
>
> Adapter : Local Area Connection 2
> Netcard queries test . . . : Passed
>
> Host Name. . . . . . . . . : ofsasvr2
> IP Address . . . . . . . . : 192.168.1.113
> Subnet Mask. . . . . . . . : 255.255.255.0
> Default Gateway. . . . . . : 192.168.1.1
> Dns Servers. . . . . . . . : 192.168.1.111
>
> AutoConfiguration results. . . . . . : Passed
> Default gateway test . . . : Passed
> NetBT name test. . . . . . : Passed
> [WARNING] At least one of the <00> 'WorkStation Service', <03>
> 'Messenger Service', <20> 'WINS' names is missing.
> WINS service test. . . . . : Skipped
> There are no WINS servers configured for this interface.
> Global results:
> Domain membership test . . . . . . : Passed
> NetBT transports test. . . . . . . : Passed
> List of NetBt transports currently configured:
> NetBT_Tcpip_{8E39AEF9-1626-4983-ACE9-CFFB98664328}
> 1 NetBt transport currently configured.
> Autonet address test . . . . . . . : Passed
> IP loopback ping test. . . . . . . : Passed
> Default gateway test . . . . . . . : Passed
> NetBT name test. . . . . . . . . . : Passed
> [WARNING] You don't have a single interface with the <00> 'WorkStation
> Service', <03> 'Messenger Service', <20> 'WINS' names defined.
> Winsock test . . . . . . . . . . . : Passed
> DNS test . . . . . . . . . . . . . : Passed
> Redir and Browser test . . . . . . : Passed
> List of NetBt transports currently bound to the Redir
> NetBT_Tcpip_{8E39AEF9-1626-4983-ACE9-CFFB98664328}
> The redir is bound to 1 NetBt transport.
> List of NetBt transports currently bound to the browser
> NetBT_Tcpip_{8E39AEF9-1626-4983-ACE9-CFFB98664328}
> The browser is bound to 1 NetBt transport.
> DC discovery test. . . . . . . . . : Passed
> DC list test . . . . . . . . . . . : Passed
> Trust relationship test. . . . . . : Passed
> Secure channel for domain 'OFSADOM' is to '\\ofsasvr1.ofsadom.austin'.
> Kerberos test. . . . . . . . . . . : Passed
> LDAP test. . . . . . . . . . . . . : Passed
> Bindings test. . . . . . . . . . . : Passed
> WAN configuration test . . . . . . : Skipped
> No active remote access connections.
> Modem diagnostics test . . . . . . : Passed
> IP Security test . . . . . . . . . : Skipped
> Note: run "netsh ipsec dynamic show /?" for more detailed information
>
> The command completed successfully
>
> Windows IP Configuration
>
> Host Name . . . . . . . . . . . . : ofsasvr2
> Primary Dns Suffix . . . . . . . : ofsadom.austin
> Node Type . . . . . . . . . . . . : Broadcast
> IP Routing Enabled. . . . . . . . : No
> WINS Proxy Enabled. . . . . . . . : No
> DNS Suffix Search List. . . . . . : ofsadom.austin
>
> Ethernet adapter Local Area Connection 2:
> Connection-specific DNS Suffix . :
>
> Description . . . . . . . . . . . : Intel(R) 82566DM-2 Gigabit Network
> Connection
> Physical Address. . . . . . . . . : 00-1E-4F-E5-49-F1
> DHCP Enabled. . . . . . . . . . . : No
> IP Address. . . . . . . . . . . . : 192.168.1.113
> Subnet Mask . . . . . . . . . . . : 255.255.255.0
> Default Gateway . . . . . . . . . : 192.168.1.1
> DNS Servers . . . . . . . . . . . : 192.168.1.111
>
> "Robert L. (MS-MVP)" wrote:
>
> > I would check the NAT/Firewall settings first. Assuming this is multihomed
> > computer, post the result of ipconfig /all may help.
> >
> > --
> > Bob Lin, MS-MVP, MCSE & CNE
> > Networking, Internet, Routing, VPN Troubleshooting on
> > http://www.ChicagoTech.net
> > How to Setup Windows, Network, VPN & Remote Access on
> > http://www.HowToNetworking.com
> > "elb" <(E-Mail Removed)> wrote in message
> > news:CA183C57-7D7E-4A69-8DCF-(E-Mail Removed)...
> > >I have a 2003 Server that I setup for some prototyping and thought I would
> > > check out the RRAS features. After setting up a NAT/Basic Firewall
> > > connection, I decided to go another approach and removed the RRAS server
> > > role. However, now I am unable to do anything other than ping (LAN or
> > > internet). Any type of TCP traffic seems to be blocked, but I have
> > > disabled
> > > Windows Firewall (no 3rd party ones installed). DNS is resolving correctly
> > > and everything was working before. I also tried "resetting" TCP and
> > > WinSock
> > > with netsh, but nothing has helped.
> > >
> > > Anyone know if there is a way to tell what is blocking the packets going
> > > out
> > > - using netcap or wireshark I can see them trying to go out and the
> > > addressing is correct, it just never gets out. All other computers on my
> > > network have no issues - it just seems to be after I messed with RRAS.
> > >
> > > Thanks

> >
> >

 
Reply With Quote
 
 
 
Reply

Thread Tools
Display Modes

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is On
HTML code is Off
Trackbacks are On
Pingbacks are On
Refbacks are Off


Similar Threads
Thread Thread Starter Forum Replies Last Post
Cannot PING Windows 2008 RRAS server IP N D Windows Networking 6 09-24-2008 07:41 PM
My 2003 server is blocking e-mails from a MAC? João Parracho Windows Networking 3 11-09-2006 01:03 PM
Windows 2003 Server SP1 Blocking Internet Access Alan van der Vyver Windows Networking 1 06-17-2005 04:40 PM
Server 2003 VPN blocking access to non-domain machines tprebble@gmail.com Windows Networking 1 04-02-2005 07:57 AM
crazy question: temporarily blocking self from selected domains? Jim Linux Networking 2 02-25-2005 08:42 PM



1 2 3 4 5 6 7 8 9 10 11