New ISP provider - Strange Web Issues

bubbles84

Junior Member
Apr 20, 2016
2
0
0
Hi Guys!

I'm new here to the forums.. but not to networking. Hopefully I can receive some help -- and be a help to some of you as well in the future. :D:thumbsup:

Well, straight to the issue!

I recently moved to a new location and just signed up with a new ISP. Now, the internet connection seems to be nailed up just fine. I won't loose a ping. I'm running their equipment in bridge mode.. passing the public address onto my Cisco ASA firewall which then is powering a few PoE AP's, etc. Same setup as I had a my previous location which worked with no issues.

Well, anyway, I noticed that webpages started timing out waiting for them to fully load... and then of course half loaded pages as well. I can't even get to speedtest.net to save my life. I was using public DNS servers (4.2.2.2, 8.8.8.8), which I've never had a problem with before.. but, I decided to try using my new ISP's DNS servers instead. I've had quite some trouble finding a list of FairPoint Communications DNS servers... but I came across two finally. I put them in and it seemed to help... a little... well, no... some of these pages are still not loading.

That's when I decided to try another test. I fired up my VPN client that tunnels all my traffic back to work.. and sure enough, all the pages loaded instantly. It's blazing fast and working like a charm. I disconnect from the VPN client and the issue returns.

I ran a few wireshark captures and seen a lot of TCP out of orders and what not. I decided to adjust the MTU size in the firewall out to the WAN.. but, didn't help at all. I've tried other DNS servers.. no luck their either.

Has anyone ever run into this before? I suppose in the morning when I'm not so tired, I will plug my laptop directly into the ISP's equipment and establish my PPPOE connection from there and bypass the firewall to see if there's something there... but, I kind of doubt it seeing as how I can use my VPN client to access everything I need. Which to me says that.. it's all going over the same wire... it's just the ISP can't manipulate my traffic in someway or another when it's encrypted. So, what am I doing that they don't like or that's causing an issue. Phew! So frustrating! o_O

Anyway, again, glad to be here and hope to hear from you all!
 

AnonymouseUser

Diamond Member
May 14, 2003
9,943
107
106
The only time I ever had an issue like this was when my ISP's new DSL modem was installed and I was using Mandrake Linux 8.2 or so (~2003?). It turned out that the modem was not IPv6 capable, and I had to turn off IPv6 in Mandrake. After that it was smooth sailing. I would really be surprised if any modem in service in 2016 is not IPv6 capable, but I thought I would throw that out.
 

frowertr

Golden Member
Apr 17, 2010
1,372
41
91
What about bypassing DNS and just typing in straight IP addresses in your browser? Can you get to Speedtest, Yahoo, ESPN, etc., by going straight to their IP?

You may want to login to your cable modem and see what DNS it is pulling down from the provider are listed in its DHCP config.
 

bubbles84

Junior Member
Apr 20, 2016
2
0
0
Looks like the FairPoint DSL modem is IPv6 capable... but all routing is turned off due to it being in bridge mode. I'll go in and disable it when I get home to see if that helps. I've seen strange issues like that as well. Good call.

As far as by-passing DNS going to it directly by IP address -- same issues. Since the DSL modem is in bridge mode, nothing is passed down to that device. My Cisco ASA is doing the PPPoE authentication and the public address, subnet, and gateway is passed down.. but not the DNS servers. No way to configure the ASA to pull the DNS info. At this point, I have the FairPoint modem configuration saved... I may just try putting it into routed mode tonight and see if that works out. Though it's bonded DSL and FairPoint said that their upstream configuration is different for those using bridge mode. I don't see how as it's just PPPoE authentication and DHCP to send down the address.

Either way, thanks for the good ideas!
 

VirtualLarry

No Lifer
Aug 25, 2001
56,587
10,227
126
PPPoE? DSL? Most likely an MTU issue if web pages are timing out on you.

Either that, or the ISP really, really, sucks.