I have a series of subnets, (private), whose oubound path to the web would be:-

1. local machine
2. Local router (default route to local firewall)
3. Local firewall (default route to demil router)
4. Demil router (default route to ISP)

The issue was noticed when I tried to connect from a local machine through the local router to www.microsoft.com.... It failed.... as did updates/windowsupdates...etc.... The local machine can connect to any other web site.... The local machine gives the same nslookup as another machine on a different network using a different ISP, clearing the dnscache and retrying gets the same dns results. Connecting directly to the router, (through the console port), there are no routes other than:-

0.0.0.0 0.0.0.0 xxx.xxx.xxx

Furthermore, checking ACL's there are none.

Tracert's from local machines get past the demil router except to www.microsoft.com etc. which stops at the demil saying "destination unreachable". Everything else goes past the demil. From my subnets that go out a different T1 they all get anywhere..... Just on these subnets through that router, Microsoft is unreachable. I've looked everywhere I know and I can't work out why M$ sites are blocked/dropped by a router that is outside any restrictive software I have in place... it can't ping M$ in any way...traceroutes fail too from the router too, at the router...... It's the demil that gives the "destination unreachable".

Has someone "F"ed with my demil router or I am "F"ing stupid???????

I'm confused and therefore a tad peeved......

Any assistance is gratefully accepted.....