Problem connecting to secure servers through my ISP. Could my XP Pro System Network Protocol setup be the cause?

LurkingInNC

Senior member
Nov 2, 2001
517
1
81
I've got win XP pro with version 5.1.2600 service pack 2 build 2600 installed. I have a computer with an Athlon 1600+ (usually overclocked to just under 1600 actual) with 512 MB memory. No intended networking (unless you consider a conection to my printer and scanner as networking) but if you read my other post you'll see that I probably don't have XP pro set up to reflect that yet.

I live out in the sticks, and have no option for high speed connection other than satellite, which I can't afford right now. I'm using Earthlink dial-up with it's Accelerator softare. Because of the outdated phone equipment between me and the small town my line goes through to reach the nearest local-call ISP servers (in Durham NC), I'm usually connecting at speeds like 9.6 Kbps. Painful, but fortunately the Earthlink accelerator software makes it seem like around 40 Kbps, and I always have several windows open so I can browse something while the next thing is loadiing. I'm still completely screwed on any file downloads, though.

For the pasat week or so I've been unable to connect to a secure site through my dial-up connection. Although the Earthlink support people have been trying to help diagnose and fix, numerous calls haven't solved the problem. I'm wondering if it might have to do with my XP settings. (have turned off all firewalls & virus software at times and that didn't help).

I pulled up System Information and took a look at Components; Network; Protocol. I've got 3 'pairs' (a TCP/IP and a UDP/IP) of protocols listed:

PropelLSP
MSAFP
RSVP

I noticed they have identical values, EXCEPT the only ones that list "Yes" for 'Supports Encryption' are the RSVP UDP and RSVP TCP protocols.

I've also got 4 "pairs" of MSAFD NetBIOS protocols listed, each pair with a unique Tcpip(?) number and a SEQPACKETx and DATAGRAMx protocol listed (x=1-4). Each of the four SEQPACKETs have the same values and each of the four DATAGRAMs have the same values. 'Support Encryption' is listed as 'No' for all 8 entries.

Might my problem have to do with the multiple Network Protocols, and if so, any ideas as to how I clean it up?

Much thanks for any help!



 

Atheus

Diamond Member
Jun 7, 2005
7,313
2
0
OK... all those network protocols are normal, you don't have anything extra. Netbios is used for local file sharing on windows networks, you don't need to worry about that.

What kind of secure site are you referring to? Is it an https connection? It would say https:// in front of the address in your web browser.

Your problem is almost certainly this accelerator thingy or norton firewall - as I understand it the accelerator messes with websites, only selecting parts it deems important to download. Norton is notorious for causing strange problems, and errors trying to remove it are common. Try this


 

ScottMac

Moderator<br>Networking<br>Elite member
Mar 19, 2001
5,471
2
0
You probably need to reduce your MTU size to ~1496 or perhaps as low as 1476.

Since you're dial-up, you may even see some benefit to dropping it to ~512.

A common scenario is that you are sending a packet/frame of max size, then after a proxy tag and / or encryption, the packet/frame becomes too large. Unencrypted traffic would be fragmented ... but encrypted traffic does not allow for fragmentation ... so it gets dropped.

The way it usually appears is: You connect to the front-end site, all is well. Then you sign in and the site switches to an encrypted mode, and the site appears to freeze or time-out.

Depending on the quality of your line, by dropping the size of the packet/frame to something ~512, you reduce the chances that a glitch will interfere with your traffic and cause it to be dropped and (,usually,) re-transmitted. Dial-up almost always does better with small MTU sizes. It does introduce some additional overhead, but you usually gain in efficiency from reducing the number of re-transmissions (and the time to re-transmit a smaller packet/frame).

DSLreports.com has a tool called "Dr TCP" that you can use to adjust your MTU (and some other parameters). First, try their test suite (speed test, etc), then make the adjustments they recommend.

Good Luck

Scott
 

LurkingInNC

Senior member
Nov 2, 2001
517
1
81
The problem does seem to be with https sites. Like the screen to sign into my eBay account or trying to log onto my bank account. I get the 'The page you are looking for is currently unavailable' message.

Don't think the problem is the acelerator, been using that for 7 or 8 months with no problem. I think it compresses the HTML code as well as giving me a choice as to lowering the resolution for pictures on the page. When I tested speeds on a regular web page, with pics at the lowest resolution, I saw about a 400% increase in 'access speed', going from 9.6 kbps to just under 40 kbps (I know the physical transfer speed is the same, but the web page gets to me that much quicker). No help with file downloads, though.

I also had the Norton software loaded for months with no problem. I think I might have started the problem when I installed 2 utilities that got good reviews on cnet, The Ad Police and Startup Inspector. I suspect it was the first one, but uninstalled both. Cleared out all of my hosts files and restricted sites files based on instructions from Earthlink support, but that didn't do it.

After the above I ran virus scan and someof the other systemworks utilitiiles to clean my computer, but my Norton subscription had expired in Oct. so I knew I didn't have the latest updates. I uninstalled systemworks 2004 and installed systemworks 2005. Only problem there is that the new installation needs alot of updates to make it current, and the way Norton has live update configured it tries to download all of the updates before installing them, so even if my connection stays live long enough to download an update for one of the systemworks components (hours at 9.6 kbps), systemworks update quits before all of the updates download and I've got nothing.

Wondering if I created other problems with having Norton Firewall 2004 and Norton Systemworks 2004 on at the same time, then uninstalling systemworks 2004 and installing systemworks 2005. Will remove both using the help provided above (thanks).

Will also look at the MTU issue to see if that helps (thanks again).

I'll let y'all know if any of this resolves the problem. Probably a foolish decision to poke around XP myself trying to find the problem (lots of time wasted), hopefully some of your suggestions will help.

 

LurkingInNC

Senior member
Nov 2, 2001
517
1
81
Success (of sorts)!

I removed all Symatec stuff & established a manual connection to Earthlink rather than using their Total Access software. Took hours to get the Noton stuff off. Had a 2002 version of Personal Firewall, 2005 version of Internet Security, so had to use at least 3 different utilties Symantec had on the help sites you guys linked.

Also removed the Earthlink Total Access software, as I had an older version with no way to update it and it seemed kind of "entangled" in the norton stuff.

Wasn't able to run the MTU utility at the time, will try again now that it seems I've got things working.

Will still need to work out best options for my system. EarthLinks Total Access software has antii-virus, firewall, & spyware options. I've also got freeAR copies of Symantec SystemWorks 2005 & Symantec Personal Firewall 2005 on hand. Also aware that some of the anti-virus & firewall freeware is supposed to be very good & less resource intensive than the Symantec stuff. Need to figure out the most efficient combo to protect my computer. (have been & still using the free Ad Aware & Spy Bot utilities for spyware).

The one thing I absolutely need is the Earthlink Accelerator software. It really does make a big difference in browsing speed with my dial-up account, even if it doesn't help at all with file transfers.

Thanks for the help so far! Any further suggestions as to most efficient protection setup given what I've got would also be welcome.