Must be a security setting or port forwarding issue but which one?

Page 2 - Seeking answers? Join the AnandTech community: where nearly half-a-million members share solutions and discuss the latest tech.

Storm

Diamond Member
Nov 5, 1999
3,952
0
76
Originally posted by: cleverhandle
Originally posted by: Storm
Its a wireless router but I connect via patch cables.
The screen shots of pinging and of ipconfig /all are of my computer and and my old computer.
Both with different patch cables. Both cannot get to the same websites. Like anandtech.com
OK, good. Now we're getting somewhere. Couple of things...

1) Just for the sake of troubleshooting, disable the VPN connection on the first computer. I highly doubt it's involved in any way, but's always better to keep things simple.

2) Also not related to your problem, but disable UPnP on your router - you don't want or need it.

3) OK, here's a shot at your problem, though it's a bit of a guess. Change the MTU size on your router to 1400. Also change the MTU on your NIC's to 1400 as well. You can do that with a regedit as shown here. This is a bit heavy-handed and I'd be lying if I said I understood the gory details of it, but other people here do and it may be illuminating.

Ok changing MTU to 1400 and in the registry kinda worked.
I can get to the websites I can't get to, but if I go to the credit card website and try to log in.. it hangs after loading the accounts. This is for Chase btw. If I then go to AT and log into the forums it hangs when I try to go ahead and post a reply on AT "waiting for www.anandtech.com" is the message.
 

Storm

Diamond Member
Nov 5, 1999
3,952
0
76
Originally posted by: spidey07
telnet to port 80 on a problem site (telnet www.anadtech.com 80). They type GET and hit return. That will verify layer4. If this works but you still can't get to them then it could be a MTU problem.

post output of "route print" from a command window and check if it's a routing problem. I don't like seeing that second IP interface for the VPN.

Route print

GET

Ok heres a couple noob questions

What do you mean by layer4?

What are you looking for in route print?

Now in my previous post it looks like the MTU size was the problem but what regulates that if there is no router?

 

Storm

Diamond Member
Nov 5, 1999
3,952
0
76
Originally posted by: Storm
Originally posted by: spidey07
telnet to port 80 on a problem site (telnet www.anadtech.com 80). They type GET and hit return. That will verify layer4. If this works but you still can't get to them then it could be a MTU problem.

post output of "route print" from a command window and check if it's a routing problem. I don't like seeing that second IP interface for the VPN.

Route print

GET

Ok heres a couple noob questions

What do you mean by layer4?

What are you looking for in route print?

Now in my previous post it looks like the MTU size was the problem but what regulates that if there is no router?

Picked up a Buffalo WHR-G125 and it worked right out of the box. I guess its time to retire the Netgear.
 

spidey07

No Lifer
Aug 4, 2000
65,469
5
76
That's really, really weird.

You had a good layer4, AND layer7 connection to the server. layer4 = the TCP port. Layer7 = the application protocol, in this case HTTP.

The server responded to you. This makes me think there was something weird going on with the router/security. You did reset to factory defaults? Is this your account and your router?
 

Storm

Diamond Member
Nov 5, 1999
3,952
0
76
Originally posted by: spidey07
That's really, really weird.

You had a good layer4, AND layer7 connection to the server. layer4 = the TCP port. Layer7 = the application protocol, in this case HTTP.

The server responded to you. This makes me think there was something weird going on with the router/security. You did reset to factory defaults? Is this your account and your router?

Yup, I reset back to the factory defaults and tried the different firmware. I even rolled back to a version that that Netgear specifically stated not to roll back to. Maybe that did it but it seems it either getting the latest and greatest firmware and rolling back to one I shouldn't have didnt make a difference.

What do you mean by this is my account? The Buffalo router will end up staying if its still works when I move out. Not sure what I am going to do with the Netgear.

Get this in the Buffalo configuration settings MTU is 1500.

*shurgs*
 

spidey07

No Lifer
Aug 4, 2000
65,469
5
76
Still can't rule out an MTU problem.

It is very difficult to isolate. All has to do with how your router handles it.

-edit-
thinking about it....

1) something in the router does not like the content - rare
2) you have a path MTU detection (PMTUD) problem. The cause of this can be anywhere along your path to the server and what kind of ICMP messages your routers default to blocking. This is in router software/settings/firewalling so it's fair to say that this is still a possibility.