Utterly confused.... Routing issue? or something else?
I have a series of subnets, (private), whose oubound path to the web would be:-
1. local machine
2. Local router (default route to local firewall)
3. Local firewall (default route to demil router)
4. Demil router (default route to ISP)
The issue was noticed when I tried to connect from a local machine through the local router to www.microsoft.com.... It failed.... as did updates/windowsupdates...etc.... The local machine can connect to any other web site.... The local machine gives the same nslookup as another machine on a different network using a different ISP, clearing the dnscache and retrying gets the same dns results. Connecting directly to the router, (through the console port), there are no routes other than:-
0.0.0.0 0.0.0.0 xxx.xxx.xxx
Furthermore, checking ACL's there are none.
Tracert's from local machines get past the demil router except to www.microsoft.com etc. which stops at the demil saying "destination unreachable". Everything else goes past the demil. From my subnets that go out a different T1 they all get anywhere..... Just on these subnets through that router, Microsoft is unreachable. I've looked everywhere I know and I can't work out why M$ sites are blocked/dropped by a router that is outside any restrictive software I have in place... it can't ping M$ in any way...traceroutes fail too from the router too, at the router...... It's the demil that gives the "destination unreachable".
Has someone "F"ed with my demil router or I am "F"ing stupid???????
I'm confused and therefore a tad peeved......
Any assistance is gratefully accepted.....
Well........ What can I say......
As an old friend in this business who taught me an awful lot once said:-
"Sometimes this stuff is just voodoo"...... :eek:
So, I come in this morning and my snort box on that last subnet before "the world" has been whining all night about "destination unreachable, (Host Unreachable)"........ Ok, it's still not working thinks me......
Term Serv onto a the local machine with the console connection to the router and do a quick ping of M$ to determine the resolved address, which resolves to the same place it was last night and the bloody thing responded.... So I pinged it again...... It responded again..... I sat back, stared somewhat blankly at the screen and tracerted it..... Perfect - all the way through..... Hmmm.... Tracert windowsupdate.microsoft.com.... Perfect..... Hmmmm..... Open IE.... goto www.microsoft.com.... There's the page..... wtf.... Voodoo, Ghosts, Poltergeists.... I dunno but it seems like the hour I wasted last night was just that - wasted.....
Or maybe it's the evil Gates screwing with me..... He's probably laughing his ass off at me right now while he decides when he'll play the same prank again.... ;)
Thanks to those who replied..... At least you made me feel sane - for a while...... :D