Omega Owners Forum

Chat Area => General Discussion Area => Topic started by: CaptainZok on 29 November 2006, 17:51:10

Title: One for the networking experts
Post by: CaptainZok on 29 November 2006, 17:51:10
Got home yesterday to find that my desktop pc will only show the page below.
http://194.73.73.112/dns/dns-splash.htm
I'm not using BT yahoo any longer and now connect through a modem router.
All other pcs can browse fine so I don't think its a router problem.
I've tried various addresses and only get success if I use IP address not url.
Dns and default gateway for the ethernet connection are both pointing to the router and the nic is set with a static IP.
Tried pinging and internal addresses are fine, external ip addresses work as they should but all URLs get resolved to 194.73.73.50 then ping ok to that server.
Any of you network experts point me in the right direction please?
Title: Re: One for the networking experts
Post by: TheBoy on 29 November 2006, 17:55:27
I think those servers are being decommissioned. What DNS is your router using?
Title: Re: One for the networking experts
Post by: CaptainZok on 29 November 2006, 17:58:22
208.67.222.222 and 208.67.220.220
which is working fine for this laptop, wifes laptop and eldest lads pc upstairs
Title: Re: One for the networking experts
Post by: TheBoy on 29 November 2006, 18:04:28
have you restarted the dns client service on the duff machine? Or try a ipconfig /flushdns
Title: Re: One for the networking experts
Post by: CaptainZok on 29 November 2006, 18:07:38
flushed dns a few times, I assume a reboot would restart the dns service if so yes
Title: Re: One for the networking experts
Post by: TheBoy on 29 November 2006, 18:09:44
and ipconfig /all shows pc is using router for dns?
Title: Re: One for the networking experts
Post by: CaptainZok on 29 November 2006, 18:09:46
Just restarted dns service and flushed dns i still get this

C:\Documents and Settings\John.JOHNS>ipconfig /flushdns

Windows IP Configuration

Successfully flushed the DNS Resolver Cache.

C:\Documents and Settings\John.JOHNS>ping omegaowners.com

Pinging omegaowners.com [194.73.73.50] with 32 bytes of data:

Reply from 194.73.73.50: bytes=32 time=35ms TTL=49
Reply from 194.73.73.50: bytes=32 time=35ms TTL=49
Reply from 194.73.73.50: bytes=32 time=32ms TTL=49
Reply from 194.73.73.50: bytes=32 time=35ms TTL=49

Ping statistics for 194.73.73.50:
    Packets: Sent = 4, Received = 4, Lost = 0 (0% loss),
Approximate round trip times in milli-seconds:
    Minimum = 32ms, Maximum = 35ms, Average = 34ms

C:\Documents and Settings\John.JOHNS>
Title: Re: One for the networking experts
Post by: CaptainZok on 29 November 2006, 18:12:33
C:\Documents and Settings\John.JOHNS>ipconfig /all

Windows IP Configuration

        Host Name . . . . . . . . . . . . : johns
        Primary Dns Suffix  . . . . . . . :
        Node Type . . . . . . . . . . . . : Unknown
        IP Routing Enabled. . . . . . . . : Yes
        WINS Proxy Enabled. . . . . . . . : No

Ethernet adapter Local Area Connection:

        Connection-specific DNS Suffix  . :
        Description . . . . . . . . . . . : VIA Rhine II Fast Ethernet Adapter
        Physical Address. . . . . . . . . : 00-50-8D-FD-8E-8E
        Dhcp Enabled. . . . . . . . . . . : Yes
        Autoconfiguration Enabled . . . . : Yes
        IP Address. . . . . . . . . . . . : 192.168.0.104
        Subnet Mask . . . . . . . . . . . : 255.255.255.0
        IP Address. . . . . . . . . . . . : fe80::250:8dff:fefd:8e8e%4
        Default Gateway . . . . . . . . . : 192.168.0.1
        DHCP Server . . . . . . . . . . . : 192.168.0.1
        DNS Servers . . . . . . . . . . . : 192.168.0.1
                                            fec0:0:0:ffff::1%1
                                            fec0:0:0:ffff::2%1
                                            fec0:0:0:ffff::3%1
        Lease Obtained. . . . . . . . . . : Wednesday 29 November 2006 11:33 am
        Lease Expires . . . . . . . . . . : Thursday 30 November 2006 11:33 am

Tunnel adapter Teredo Tunneling Pseudo-Interface:

        Connection-specific DNS Suffix  . :
        Description . . . . . . . . . . . : Teredo Tunneling Pseudo-Interface
        Physical Address. . . . . . . . . : 00-00-00-00-00-00-00-00
        Dhcp Enabled. . . . . . . . . . . : No
        IP Address. . . . . . . . . . . . : fe80::5445:5245:444f%5
        Default Gateway . . . . . . . . . :
        NetBIOS over Tcpip. . . . . . . . : Disabled

Tunnel adapter Automatic Tunneling Pseudo-Interface:

        Connection-specific DNS Suffix  . :
        Description . . . . . . . . . . . : Automatic Tunneling Pseudo-Interface

        Physical Address. . . . . . . . . : C0-A8-00-68
        Dhcp Enabled. . . . . . . . . . . : No
        IP Address. . . . . . . . . . . . : fe80::5efe:192.168.0.104%2
        Default Gateway . . . . . . . . . :
        DNS Servers . . . . . . . . . . . : fec0:0:0:ffff::1%1
                                            fec0:0:0:ffff::2%1
                                            fec0:0:0:ffff::3%1
        NetBIOS over Tcpip. . . . . . . . : Disabled

C:\Documents and Settings\John.JOHNS>

I believe so btw I've set the nic to get its ip from the dhcp on the router which hasn't made any difference
Title: Re: One for the networking experts
Post by: TheBoy on 29 November 2006, 18:25:13
can you type nslookup - this should return the dns server that its using?
Title: Re: One for the networking experts
Post by: CaptainZok on 29 November 2006, 18:27:29
C:\Documents and Settings\John.JOHNS>nslookup
*** Can't find server name for address 194.73.73.94: Server failed
*** Default servers are not available
Default Server:  UnKnown
Address:  194.73.73.94

>

Weird eh?
Title: Re: One for the networking experts
Post by: sounds2k on 29 November 2006, 18:33:02
well the fact that your default gateway and DNS server is the same IP address would indicate to me that you connect via the router - so you'll need to check if that has hard-coded DNS server entries too - if the router is set to dynamically acquire DNS server addresses then you could disconnect & reconnect the internet connection or just reboot the router ...
Title: Re: One for the networking experts
Post by: TheBoy on 29 November 2006, 18:35:36
Quote
C:\Documents and Settings\John.JOHNS>nslookup
*** Can't find server name for address 194.73.73.94: Server failed
*** Default servers are not available
Default Server:  UnKnown
Address:  194.73.73.94

>

Weird eh?
Very.  What you get if you hard code working dns servers into that client?
Title: Re: One for the networking experts
Post by: CaptainZok on 29 November 2006, 18:36:53
The router is using hard coded dns which I can specify in the config pages but its working fine for 3 other pcs and I rebooted it last night but it didn't clear the prob on that one pc.
Title: Re: One for the networking experts
Post by: Taxi_Driver on 29 November 2006, 18:39:32
Is your ISP still with BT?
Coz those ip addresses are BT servers?
Title: Re: One for the networking experts
Post by: CaptainZok on 29 November 2006, 18:41:01
I have tried the same dns servers used on the router and the 4.2.2.1, 4.2.2.2 dns servers but it still gives the same results
Title: Re: One for the networking experts
Post by: Taxi_Driver on 29 November 2006, 18:44:49
Quote
I have tried the same dns servers used on the router and the 4.2.2.1, 4.2.2.2 dns servers but it still gives the same results

Might solve the prob if you set the router to obtain DNS via DHCP
Title: Re: One for the networking experts
Post by: CaptainZok on 29 November 2006, 18:46:58
Nope TD im using bulldog nowadays.
this box used to connect to BT using the old blue fish dsl modem and ran ics for the rest of the network but since I replaced the modem with a router it is just another terminal now.
Title: Re: One for the networking experts
Post by: sounds2k on 29 November 2006, 18:48:02
hmmm ... not anything to do with the "Tunnel adapter Automatic Tunneling Pseudo-Interface" you have on that machine is it ???
Title: Re: One for the networking experts
Post by: CaptainZok on 29 November 2006, 18:53:21
Router now set to auto its dns and guess what all pcs but one still connect fine :(
Sounds I dunno what that tunnelling thingy is so I dunno.
Title: Re: One for the networking experts
Post by: Taxi_Driver on 29 November 2006, 18:55:23
Quote
Nope TD im using bulldog nowadays.
this box used to connect to BT using the old blue fish dsl modem and ran ics for the rest of the network but since I replaced the modem with a router it is just another terminal now.

I just set my laptop to use those dns servers you posted......it did get there with OO.com but was a lot slower at resolving than my isp....

Hmmm suggest you delete all the network connections except the ethernet adaptor one.....any reason as Sounds says for the other network connections??

Give it a reboot and see what happens
Title: Re: One for the networking experts
Post by: TheBoy on 29 November 2006, 18:59:51
The tunnel may be some vpn connections you may have set up? for work?

If none of others suggestions work, uninstall NIC, reboot, then reinstall NIC.  Seems its using btnet servers whatever is set against NIC. So either, VPN taking priority (find out when you delete tunnels), or registry corruption has 'dangle berries'ed current settings.
Title: Re: One for the networking experts
Post by: CaptainZok on 29 November 2006, 19:01:49
Ok network connections shown are nic, two firewire connections for the video card and mobo firewire ports (neither are connected to anything) and a bluetooth network which doesn't give the option to delete but is disabled anyway.
Title: Re: One for the networking experts
Post by: CaptainZok on 29 November 2006, 20:17:33
Uninstalled any unnecessary networking stuff from windows.
Uninstalled NIC
Rebooted
system reinstalled on reboot
still getting that bloody page   :(
Any more ideas guys?
Title: Re: One for the networking experts
Post by: Omega-MV6 on 29 November 2006, 20:34:48
Sorry, your ISP is Bulldog, and this page is the only page you can get?
yet Ping an IP, and you get a responce... andit seems you ping a name like Omegaowners.com, and get a reply..... So the TCP/IP on the PC is fine.so it's a browsing issue.
Are you using NAT, or are your PC's directly on the net??
Sounds like HTTP requestes from that IP are being forwarded the a specific host...(normally done when you don't pay your bill)....  :P

Cheers.

Matt
Title: Re: One for the networking experts
Post by: Omega-MV6 on 29 November 2006, 20:38:55
Also are there oany Outbound NATs on the router? Maybe one has been created in the router's moment of madness or something.
Finally aret there any Proxy server settings in your IE config?

Cheers.

Matt
Title: Re: One for the networking experts
Post by: CaptainZok on 29 November 2006, 20:55:51
Quote
Sorry, your ISP is Bulldog, and this page is the only page you can get?
yet Ping an IP, and you get a responce... andit seems you ping a name like Omegaowners.com, and get a reply..... So the TCP/IP on the PC is fine.so it's a browsing issue.
Are you using NAT, or are your PC's directly on the net??
Sounds like HTTP requestes from that IP are being forwarded the a specific host...(normally done when you don't pay your bill)....  :P

Cheers.

Matt

Not quite right Matt, pinging OOC should use the IP 217.155.56.220 but it pings 194.73.73.50, and any other url I try to ping gets the same ip address.
Its connected thru a router which I believe uses NAT
No outbound NATs or any other forwarding set up on router
No proxy set in browser prob also occurs with ftp proggy but can be resolved by using ip addy of site rather than name.
Title: Re: One for the networking experts
Post by: Omega-MV6 on 29 November 2006, 21:06:18
Sorry I misread your problem.

So everything you try and do points to the same IP?

Sounds like you have a duff Transport Agent.

Get hold of "hijack this" (It's Free) run it on the duff PC, and post the output here...
Should be able to pick it up, and select the one to remove

Cheers.

Matt
Title: Re: One for the networking experts
Post by: Omega-MV6 on 29 November 2006, 21:08:30
Oh also what happens if you ping the other PC's on your own Subnet/Network?

Matt
Title: Re: One for the networking experts
Post by: CaptainZok on 29 November 2006, 21:30:49
Logfile of HijackThis v1.99.1
Scan saved at 9:29 pm, on 29/11/2006
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\System32\Ati2evxx.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Common Files\Symantec Shared\ccProxy.exe
C:\Program Files\Common Files\Symantec Shared\ccSetMgr.exe
C:\Program Files\Norton Internet Security\ISSVC.exe
C:\Program Files\Common Files\Symantec Shared\SNDSrvc.exe
C:\Program Files\Common Files\Symantec Shared\SPBBC\SPBBCSvc.exe
C:\Program Files\Common Files\Symantec Shared\ccEvtMgr.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\system32\ctfmon.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\system32\netdde.exe
C:\Program Files\Symantec\LiveUpdate\ALUSchedulerSvc.exe
C:\Program Files\WIDCOMM\Bluetooth Software\bin\btwdins.exe
C:\PROGRA~1\COSIDS\BIN\TbMux32.exe
C:\Program Files\HighPoint Technologies, Inc\HighPoint Storage Management Software\service\hptsvr.exe
C:\WINDOWS\System32\imapi.exe
C:\Program Files\Norton Internet Security\Norton AntiVirus\navapsvc.exe
C:\WINDOWS\System32\tcpsvcs.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Common Files\Symantec Shared\CCPD-LC\symlcsvc.exe
C:\WINDOWS\TWAIN_32\D66U\D066UUTY.EXE
C:\Program Files\ScanSoft\OmniPagePro12.0\Opware12.exe
C:\Program Files\Microsoft Hardware\Mouse\point32.exe
C:\Program Files\Microsoft Hardware\Keyboard\type32.exe
C:\Program Files\Common Files\Symantec Shared\ccApp.exe
C:\Program Files\ATI Multimedia\RemCtrl\ATIRW.exe
C:\Program Files\MSN Messenger\msnmsgr.exe
C:\Program Files\Microsoft ActiveSync\wcescomm.exe
C:\WINDOWS\System32\svchost.exe
C:\PROGRA~1\MI3AA1~1\rapimgr.exe
C:\WINDOWS\System32\rundll32.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\rdpclip.exe
C:\WINDOWS\system32\logonui.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\system32\taskmgr.exe
C:\WINDOWS\system32\logon.scr
C:\Temp\New Folder\HijackThis.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.google.co.uk/
F1 - win.ini: run= C:\WESTWOOD\C&C95\INSTICON.EXE
O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 6.0\Reader\ActiveX\AcroIEHelper.dll
O2 - BHO: Windows Live Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: WinZip IBS - {99A10100-66BB-11D4-A02A-00600818E7D8} - C:\PROGRA~1\WINZIP\wziebs.dll
O2 - BHO: Norton Internet Security - {9ECB9560-04F9-4bbc-943D-298DDF1699E1} - C:\Program Files\Common Files\Symantec Shared\AdBlocking\NISShExt.dll
O2 - BHO: NAV Helper - {BDF3E430-B101-42AD-A544-FADC6B084872} - C:\Program Files\Norton Internet Security\Norton AntiVirus\NavShExt.dll
O2 - BHO: FlashFXP Helper for Internet Explorer - {E5A1691B-D188-4419-AD02-90002030B8EE} - C:\PROGRA~1\FlashFXP\IEFlash.dll
O3 - Toolbar: Easy-WebPrint - {327C2873-E90D-4c37-AA9D-10AC9BABA46C} - C:\Program Files\Canon\Easy-WebPrint\Toolband.dll
O3 - Toolbar: Norton Internet Security - {0B53EAC3-8D69-4b9e-9B19-A37C9A5676A7} - C:\Program Files\Common Files\Symantec Shared\AdBlocking\NISShExt.dll
O3 - Toolbar: Norton AntiVirus - {42CDD1BF-3FFB-4238-8AD1-7859DF00B1D6} - C:\Program Files\Norton Internet Security\Norton AntiVirus\NavShExt.dll
O4 - HKLM\..\Run: [Jet Detection] "C:\Program Files\Creative\SBLive\PROGRAM\ADGJDet.exe"
O4 - HKLM\..\Run: [D066UUtility] C:\WINDOWS\TWAIN_32\D66U\D066UUTY.EXE
O4 - HKLM\..\Run: [Opware12] "C:\Program Files\ScanSoft\OmniPagePro12.0\Opware12.exe"
O4 - HKLM\..\Run: [POINTER] C:\Program Files\Microsoft Hardware\Mouse\point32.exe
O4 - HKLM\..\Run: [IntelliType] "C:\Program Files\Microsoft Hardware\Keyboard\type32.exe"
O4 - HKLM\..\Run: [ATI DeviceDetect] C:\Program Files\ATI Multimedia\\Program Files\ATI Multimedia\main\ATIDtct.EXE
O4 - HKLM\..\Run: [ATIPTA] C:\PROGRAM FILES\ATI TECHNOLOGIES\ATI CONTROL PANEL\ATIPTAXX.EXE
O4 - HKLM\..\Run: [NeroFilterCheck] C:\WINDOWS\system32\NeroCheck.exe
O4 - HKLM\..\Run: [ccApp] "C:\Program Files\Common Files\Symantec Shared\ccApp.exe"
O4 - HKLM\..\Run: [Symantec NetDriver Monitor] C:\PROGRA~1\SYMNET~1\SNDMon.exe /Consumer
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [ATI Remote Control] C:\Program Files\ATI Multimedia\RemCtrl\ATIRW.exe
O4 - HKCU\..\Run: [msnmsgr] "C:\Program Files\MSN Messenger\msnmsgr.exe" /background
O4 - HKCU\..\Run: [H/PC Connection Agent] "C:\Program Files\Microsoft ActiveSync\wcescomm.exe"
O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~4\Office10\EXCEL.EXE/3000
O8 - Extra context menu item: Easy-WebPrint Add To Print List - res://C:\Program Files\Canon\Easy-WebPrint\Resource.dll/RC_AddToList.html
O8 - Extra context menu item: Easy-WebPrint High Speed Print - res://C:\Program Files\Canon\Easy-WebPrint\Resource.dll/RC_HSPrint.html
O8 - Extra context menu item: Easy-WebPrint Preview - res://C:\Program Files\Canon\Easy-WebPrint\Resource.dll/RC_Preview.html
O8 - Extra context menu item: Easy-WebPrint Print - res://C:\Program Files\Canon\Easy-WebPrint\Resource.dll/RC_Print.html
O8 - Extra context menu item: QuickDefine - C:\Program Files\Common Files\Microsoft Shared\Reference Titles\eddefine.htm
O8 - Extra context menu item: QuickTranslate - C:\Program Files\Common Files\Microsoft Shared\Reference Titles\edtrans.htm
O8 - Extra context menu item: Send To &Bluetooth - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie_ctx.htm
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\WINDOWS\system32\msjava.dll
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\WINDOWS\system32\msjava.dll
Title: Re: One for the networking experts
Post by: CaptainZok on 29 November 2006, 21:31:52
O9 - Extra button: Create Mobile Favorite - {2EAF5BB1-070F-11D3-9307-00C04FAE2D4F} - C:\PROGRA~1\MI3AA1~1\INetRepl.dll
O9 - Extra button: ATI TV - {44226DFF-747E-4edc-B30C-78752E50CD0C} - C:\Program Files\ATI Multimedia\tv\EXPLBAR.DLL
O9 - Extra button: ICQ Pro - {6224f700-cba3-4071-b251-47cb894244cd} - C:\PROGRA~1\ICQ\ICQ.exe
O9 - Extra 'Tools' menuitem: ICQ - {6224f700-cba3-4071-b251-47cb894244cd} - C:\PROGRA~1\ICQ\ICQ.exe
O9 - Extra button: AIM - {AC9E2541-2814-11d5-BC6D-00B0D0A1DE45} - C:\Program Files\AIM95\aim.exe
O9 - Extra button: @btrez.dll,-4015 - {CCA281CA-C863-46ef-9331-5C8D4460577F} - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie.htm
O9 - Extra 'Tools' menuitem: @btrez.dll,-4017 - {CCA281CA-C863-46ef-9331-5C8D4460577F} - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie.htm
O9 - Extra button: @C:\Program Files\Messenger\Msgslang.dll,-61144 - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: @C:\Program Files\Messenger\Msgslang.dll,-61144 - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O12 - Plugin for .mid: C:\Program Files\Internet Explorer\PLUGINS\npqtplugin2.dll
O16 - DPF: {00B71CFB-6864-4346-A978-C0A14556272C} (Checkers Class) - http://messenger.zone.msn.com/binary/msgrchkr.cab
O16 - DPF: {1F2F4C9E-6F09-47BC-970D-3C54734667FE} (LSSupCtl Class) - https://www-secure.symantec.com/techsupp/asa/LSSupCtl.cab
O16 - DPF: {2917297F-F02B-4B9D-81DF-494B6333150B} (Minesweeper Flags Class) - http://messenger.zone.msn.com/binary/MineSweeper.cab
O16 - DPF: {2BC66F54-93A8-11D3-BEB6-00105AA9B6AE} (Symantec AntiVirus scanner) - http://security.symantec.com/sscv6/SharedContent/vc/bin/AvSniff.cab
O16 - DPF: {665585FD-2068-4C5E-A6D3-53AC3270ECD4} (FileSharingCtrl Class) - http://appdirectory.messenger.msn.com/AppDirectory/P4Apps/FileSharing/en/filesharingctrl.cab
O16 - DPF: {814EA0DA-E0D9-4AA4-833C-A1A6D38E79E9} (DASWebDownload Class) - http://das.microsoft.com/activate/cab/x86/i486/NTANSI/retail/DASAct.cab
O16 - DPF: {8E0D4DE5-3180-4024-A327-4DFAD1796A8D} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsClient.cab
O16 - DPF: {9059F30F-4EB1-4BD2-9FDC-36F43A218F4A} (Microsoft RDP Client Control (redist)) - http://laptop/tsweb/msrdp.cab
O16 - DPF: {B38870E4-7ECB-40DA-8C6A-595F0A5519FF} (MsnMessengerSetupDownloadControl Class) - http://messenger.msn.com/download/msnmessengersetupdownloader.cab
O16 - DPF: {E77C0D62-882A-456F-AD8F-7C6C9569B8C7} (ActiveDataObj Class) - https://www-secure.symantec.com/techsupp/activedata/ActiveData.cab
O16 - DPF: {EF791A6B-FC12-4C68-99EF-FB9E207A39E6} (McFreeScan Class) - http://download.mcafee.com/molbin/iss-loc/vso/en-us/tools/mcfscan/1,5,0,4321/mcfscan.cab
O18 - Protocol: livecall - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\MSNMES~1\MSGRAP~1.DLL
O18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\MSNMES~1\MSGRAP~1.DLL
O23 - Service: Adobe LM Service - Unknown owner - C:\Program Files\Common Files\Adobe Systems Shared\Service\Adobelmsvc.exe
O23 - Service: Ati HotKey Poller - Unknown owner - C:\WINDOWS\System32\Ati2evxx.exe
O23 - Service: ATI Smart - Unknown owner - C:\WINDOWS\system32\ati2sgag.exe
O23 - Service: Automatic LiveUpdate Scheduler - Symantec Corporation - C:\Program Files\Symantec\LiveUpdate\ALUSchedulerSvc.exe
O23 - Service: Bluetooth Service (btwdins) - WIDCOMM, Inc. - C:\Program Files\WIDCOMM\Bluetooth Software\bin\btwdins.exe
O23 - Service: Symantec Event Manager (ccEvtMgr) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\ccEvtMgr.exe
O23 - Service: Symantec Network Proxy (ccProxy) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\ccProxy.exe
O23 - Service: Symantec Password Validation (ccPwdSvc) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\ccPwdSvc.exe
O23 - Service: Symantec Settings Manager (ccSetMgr) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\ccSetMgr.exe
O23 - Service: COSIDS_TB - TransAction Software, D 81737 Munich - C:\PROGRA~1\COSIDS\BIN\TbMux32.exe
O23 - Service: HighPoint Storage Management Service (hptsvr) - Unknown owner - C:\Program Files\HighPoint Technologies, Inc.\HighPoint Storage Management Software\service\hptsvr.exe
O23 - Service: ISSvc (ISSVC) - Symantec Corporation - C:\Program Files\Norton Internet Security\ISSVC.exe
O23 - Service: LiveUpdate - Symantec Corporation - C:\PROGRA~1\Symantec\LIVEUP~1\LUCOMS~1.EXE
O23 - Service: Norton AntiVirus Auto-Protect Service (navapsvc) - Symantec Corporation - C:\Program Files\Norton Internet Security\Norton AntiVirus\navapsvc.exe
O23 - Service: SAVScan - Symantec Corporation - C:\Program Files\Norton Internet Security\Norton AntiVirus\SAVScan.exe
O23 - Service: ScriptBlocking Service (SBService) - Symantec Corporation - C:\PROGRA~1\COMMON~1\SYMANT~1\SCRIPT~1\SBServ.exe
O23 - Service: Symantec Network Drivers Service (SNDSrvc) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\SNDSrvc.exe
O23 - Service: Symantec SPBBCSvc (SPBBCSvc) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\SPBBC\SPBBCSvc.exe
O23 - Service: Symantec Core LC - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\CCPD-LC\symlcsvc.exe
O23 - Service: X10 Device Network Service (x10nets) - Unknown owner - C:\PROGRA~1\ATIMUL~1\RemCtrl\x10nets.exe (file missing)

Title: Re: One for the networking experts
Post by: CaptainZok on 29 November 2006, 21:33:01
can ping internal pcs fine
Title: Re: One for the networking experts
Post by: TheBoy on 29 November 2006, 21:43:45
tis defo a dns issue, for some reason your pc is only using a decommissioned bt.net dns server - nslookup proves that...
Title: Re: One for the networking experts
Post by: Omega-MV6 on 29 November 2006, 21:50:16
Ping 195.60.0.1... do you get a reply from that Server?

Matt
Title: Re: One for the networking experts
Post by: Omega-MV6 on 29 November 2006, 21:52:41
Quote
tis defo a dns issue, for some reason your pc is only using a decommissioned bt.net dns server - nslookup proves that...

I thought the problem was that all web traffic was going to that IP.. not that it was just URL's....I'll go back and re-read it... again. :-?
Although whats the deal with Displaying IP Addresses as HEX in the IPConfig page??

Matt
Title: Re: One for the networking experts
Post by: TheBoy on 29 November 2006, 21:54:33
No, his problem is all DNS is resolving to same IP.  Whatever his PC settings, the machine is ignoring and using some old DNS servers.  The rest of his PCs are working fine...
Title: Re: One for the networking experts
Post by: Omega-MV6 on 29 November 2006, 21:59:54
Quote
No, his problem is all DNS is resolving to same IP.  Whatever his PC settings, the machine is ignoring and using some old DNS servers.  The rest of his PCs are working fine...

I see. :y

"Hosts" file on that PC maybe changed - but that would not account for the NSLookup entry.

Thats the last thing I can think of.

Matt
Title: Re: One for the networking experts
Post by: CaptainZok on 29 November 2006, 22:08:18
C:\Documents and Settings\John.JOHNS>ping 195.60.0.1

Pinging 195.60.0.1 with 32 bytes of data:

Reply from 195.60.0.1: bytes=32 time=23ms TTL=52
Reply from 195.60.0.1: bytes=32 time=30ms TTL=52
Reply from 195.60.0.1: bytes=32 time=28ms TTL=52
Reply from 195.60.0.1: bytes=32 time=26ms TTL=52

Ping statistics for 195.60.0.1:
    Packets: Sent = 4, Received = 4, Lost = 0 (0% loss),
Approximate round trip times in milli-seconds:
    Minimum = 23ms, Maximum = 30ms, Average = 26ms

C:\Documents and Settings\John.JOHNS>
Title: Re: One for the networking experts
Post by: CaptainZok on 29 November 2006, 22:10:17
# Copyright (c) 1993-1999 Microsoft Corp.
#
# This is a sample HOSTS file used by Microsoft TCP/IP for Windows.
#
# This file contains the mappings of IP addresses to host names. Each
# entry should be kept on an individual line. The IP address should
# be placed in the first column followed by the corresponding host name.
# The IP address and the host name should be separated by at least one
# space.
#
# Additionally, comments (such as these) may be inserted on individual
# lines or following the machine name denoted by a '#' symbol.
#
# For example:
#
#      102.54.94.97     rhino.acme.com          # source server
#       38.25.63.10     x.acme.com              # x client host

127.0.0.1       localhost
  
Title: Re: One for the networking experts
Post by: Omega-MV6 on 29 November 2006, 22:10:53
Do you have any settings in the "alternate configuration" in the properties of TCP/IP of the Local Area Connection?
Also how about the Advanced Settings of TCP/IP of the Local Area Connection.
There is a DNS Tab in there.
That DNS Server has to be set somewhere....

Try this Registry Location....
[HKey_Local_Machine\System\CurrentControlSet\Services\Tcpip\Parameters\]
"NameServer" = REG_SZ:"<IP Address>"

Have a look here as well....
http://support.microsoft.com/kb/286834/EN-US/ - I know it's win 2k, but might be the problem for winXP.

Matt
Title: Re: One for the networking experts
Post by: CaptainZok on 29 November 2006, 22:20:24
Private IP address
IP settings  DHCP enabled
DNS blank append primary & connection radio ticked append parent ticked
WINS blank enable LM lookup ticked default radio ticked
options TCP/IP filtering not ticked but 3 radio buttons ticked to permit only
Title: Re: One for the networking experts
Post by: CaptainZok on 29 November 2006, 22:22:51
Quote
Do you have any settings in the "alternate configuration" in the properties of TCP/IP of the Local Area Connection?
Also how about the Advanced Settings of TCP/IP of the Local Area Connection.
There is a DNS Tab in there.
That DNS Server has to be set somewhere....

Try this Registry Location....
[HKey_Local_Machine\System\CurrentControlSet\Services\Tcpip\Parameters\]
"NameServer" = REG_SZ:"<IP Address>"

Have a look here as well....
http://support.microsoft.com/kb/286834/EN-US/ - I know it's win 2k, but might be the problem for winXP.

Matt
[HKey_Local_Machine\System\CurrentControlSet\Services\Tcpip\Parameters\]
"NameServer" = REG_SZ:"<IP Address>" Its blank, any idea what it needs?
Title: Re: One for the networking experts
Post by: TheBoy on 29 November 2006, 22:25:02
Quote
Quote
Do you have any settings in the "alternate configuration" in the properties of TCP/IP of the Local Area Connection?
Also how about the Advanced Settings of TCP/IP of the Local Area Connection.
There is a DNS Tab in there.
That DNS Server has to be set somewhere....

Try this Registry Location....
[HKey_Local_Machine\System\CurrentControlSet\Services\Tcpip\Parameters\]
"NameServer" = REG_SZ:"<IP Address>"

Have a look here as well....
http://support.microsoft.com/kb/286834/EN-US/ - I know it's win 2k, but might be the problem for winXP.

Matt
[HKey_Local_Machine\System\CurrentControlSet\Services\Tcpip\Parameters\]
"NameServer" = REG_SZ:"<IP Address>" Its blank, any idea what it needs?
That is correct for DHCP config...
Title: Re: One for the networking experts
Post by: Omega-MV6 on 29 November 2006, 22:26:23
I **presume** the correct DNS Server address.... but PC may need a reboot afterwards.

I found it here... http://techtasks.com/code/viewbookcode/1314

Matt
Title: Re: One for the networking experts
Post by: Omega-MV6 on 29 November 2006, 22:27:54
Quote
Quote
Quote
Do you have any settings in the "alternate configuration" in the properties of TCP/IP of the Local Area Connection?
Also how about the Advanced Settings of TCP/IP of the Local Area Connection.
There is a DNS Tab in there.
That DNS Server has to be set somewhere....

Try this Registry Location....
[HKey_Local_Machine\System\CurrentControlSet\Services\Tcpip\Parameters\]
"NameServer" = REG_SZ:"<IP Address>"

Have a look here as well....
http://support.microsoft.com/kb/286834/EN-US/ - I know it's win 2k, but might be the problem for winXP.

Matt
[HKey_Local_Machine\System\CurrentControlSet\Services\Tcpip\Parameters\]
"NameServer" = REG_SZ:"<IP Address>" Its blank, any idea what it needs?
That is correct for DHCP config...
Fair enough...beat me to it... ;D

Cheers
Title: Re: One for the networking experts
Post by: TheBoy on 29 November 2006, 22:30:48
so what happens again if you specify a different dns server?
Title: Re: One for the networking experts
Post by: miked on 29 November 2006, 22:32:10
Think I'm going to have to go on a networking course...
Title: Re: One for the networking experts
Post by: Omega-MV6 on 29 November 2006, 22:35:17
 ;D
This ain't Networking... this is sodding windows!!! :(

EIGRP, and BGP, OSPF, and VLSM....... now thats Networking... :D :y

Cheers.

Matt
Title: Re: One for the networking experts
Post by: TheBoy on 29 November 2006, 22:36:35
Quote
;D
This ain't Networking... this is sodding windows!!! :(

EIGRP, and BGP, OSPF, and VLSM....... now thats Networking... :D :y

Cheers.

Matt
;D   :y
Title: Re: One for the networking experts
Post by: miked on 29 November 2006, 22:37:42
Quote
;D
This ain't Networking... this is sodding windows!!! :(

I sodding windows different to windows XP then?
Title: Re: One for the networking experts
Post by: Omega-MV6 on 29 November 2006, 22:39:25
Not really but "Sodding Windows" is by far the most popular, as everyone seems to have it.... ;D

Matt
Title: Re: One for the networking experts
Post by: CaptainZok on 29 November 2006, 22:49:32
Ok I've set dns to 4.2.2.1 and 4.2.2.2 on the nic
C:\Documents and Settings\John.JOHNS>ping www.omegaowners.com

Pinging www.omegaowners.com [194.73.73.50] with 32 bytes of data:

Reply from 194.73.73.50: bytes=32 time=45ms TTL=49
Reply from 194.73.73.50: bytes=32 time=36ms TTL=49
Reply from 194.73.73.50: bytes=32 time=38ms TTL=49
Reply from 194.73.73.50: bytes=32 time=34ms TTL=49

Ping statistics for 194.73.73.50:
    Packets: Sent = 4, Received = 4, Lost = 0 (0% loss),
Approximate round trip times in milli-seconds:
    Minimum = 34ms, Maximum = 45ms, Average = 38ms

C:\Documents and Settings\John.JOHNS>


C:\Documents and Settings\John.JOHNS>nslookup
*** Can't find server name for address 194.73.73.94: Server failed
*** Default servers are not available
Default Server:  UnKnown
Address:  194.73.73.94
Title: Re: One for the networking experts
Post by: miked on 29 November 2006, 22:55:10
Still need to go on a networking course though, struggling to get our APMS servers to talk through our OPC servers via our APMS tunnellers and still struggling to interrogate our managed switches over SNMP using HIOPC.

I'm sticking to the stuff I understand...
Title: Re: One for the networking experts
Post by: Omega-MV6 on 29 November 2006, 22:55:48
Quote
Ok I've set dns to 4.2.2.1 and 4.2.2.2 on the nic
C:\Documents and Settings\John.JOHNS>ping www.omegaowners.com

Pinging www.omegaowners.com [194.73.73.50] with 32 bytes of data:

Reply from 194.73.73.50: bytes=32 time=45ms TTL=49
Reply from 194.73.73.50: bytes=32 time=36ms TTL=49
Reply from 194.73.73.50: bytes=32 time=38ms TTL=49
Reply from 194.73.73.50: bytes=32 time=34ms TTL=49

Ping statistics for 194.73.73.50:
    Packets: Sent = 4, Received = 4, Lost = 0 (0% loss),
Approximate round trip times in milli-seconds:
    Minimum = 34ms, Maximum = 45ms, Average = 38ms

C:\Documents and Settings\John.JOHNS>


C:\Documents and Settings\John.JOHNS>nslookup
*** Can't find server name for address 194.73.73.94: Server failed
*** Default servers are not available
Default Server:  UnKnown
Address:  194.73.73.94

What is 4.2.2.1 and 4.2.2.1... according to the Reverse DNS Entry for those servers, they are.....
vnsc-bak.sys.gtei.net
vnsc-pri.sys.gtei.net
Are they Bulldog's DNS Servers?

Matt
Title: Re: One for the networking experts
Post by: CaptainZok on 29 November 2006, 22:57:31
theyre a couple of free to use dns servers I got from another forum I use
Title: Re: One for the networking experts
Post by: Omega-MV6 on 29 November 2006, 23:05:57
Ok well FYI...

;; QUESTION SECTION:
;bulldog.net.                   IN      NS

;; ANSWER SECTION:
bulldog.net.            172800  IN      NS      ns1.bulldogdsl.com.
bulldog.net.            172800  IN      NS      ns2.bulldogdsl.com.

;; ADDITIONAL SECTION:
ns2.bulldogdsl.com.     3563    IN      A       212.158.192.2
ns1.bulldogdsl.com.     3563    IN      A       212.158.192.3

Bulldog DSL Name Servers...  ;)

Matt
Title: Re: One for the networking experts
Post by: Omega-MV6 on 29 November 2006, 23:08:34
Quote
Still need to go on a networking course though, struggling to get our APMS servers to talk through our OPC servers via our APMS tunnellers and still struggling to interrogate our managed switches over SNMP using HIOPC.

I'm sticking to the stuff I understand...

With the Switches, make sure SNMP Community is the same on the SNMP Server as it is on the device, and the server has at least read access to the device. also the SNMP Version has to be the same.... I have no idea what APMS, and OPC is..  ;D

Matt

EDIT: Just did a google for them... now I understand... :)

Title: Re: One for the networking experts
Post by: Taxi_Driver on 30 November 2006, 07:12:42
Quote
theyre a couple of free to use dns servers I got from another forum I use

Just noticed you have IP routing turned on.......what do you get if you type route print at cmd prompt?
And why is node type 'unknown'......not sure on this, someone else will prolly know.
Title: Re: One for the networking experts
Post by: Omega-MV6 on 30 November 2006, 08:22:30
Almost ALL windows OSs have RIPv1 installed by default IIRC, it so you can add more than one gateway to specific Network Addresses, (though using it in a Corporate Network is considered BAD network Design) >:( tut tut

The default route though (the route used to get to any other subnet, incl the Internet) will still look like:
0.0.0.0 0.0.0.0 192.168.0.1 (or whatever your Routers IP Address is)

It has to, as IP address pings get to the host, as proven by being able to ping 195.60.0.1, and the fact that this External BT DNS Server is replying, on behalf of any other DNS name.

Very odd with the host unknown part, and again, what are IPv4 IP Addresses being displayed in HEX......

You havn't got IPV6 installed as well by any chance have you?
Although I have never seen IPV6 addresses that look like those ones listed...  ::)

Matt
Title: Re: One for the networking experts
Post by: nixoro on 30 November 2006, 10:29:51
What AV firewall software do you use?

If Norton I had a problem with it not recognising the DNS server turns out it was blocking the IP range for the DNS Server.

Maybe worth a look :y
Title: Re: One for the networking experts
Post by: CaptainZok on 30 November 2006, 16:22:44
Yes IP v6 is installed.

C:\Documents and Settings\John.JOHNS>route print
===========================================================================
Interface List
0x1 ........................... MS TCP Loopback interface
0x10003 ...00 50 8d fd 8e 8e ...... VIA Rhine II Fast Ethernet Adapter
===========================================================================
===========================================================================
Active Routes:
Network Destination        Netmask          Gateway       Interface  Metric
          0.0.0.0          0.0.0.0      192.168.0.1   192.168.0.103       20
        127.0.0.0        255.0.0.0        127.0.0.1       127.0.0.1       1
      192.168.0.0    255.255.255.0    192.168.0.103   192.168.0.103       20
    192.168.0.103  255.255.255.255        127.0.0.1       127.0.0.1       20
    192.168.0.255  255.255.255.255    192.168.0.103   192.168.0.103       20
        224.0.0.0        240.0.0.0    192.168.0.103   192.168.0.103       20
  255.255.255.255  255.255.255.255    192.168.0.103   192.168.0.103       1
Default Gateway:       192.168.0.1
===========================================================================
Persistent Routes:
  None

C:\Documents and Settings\John.JOHNS>

Regarding the Norton issue yes I have got NIS installed but I'm uninstalling now to see if it has any effect.
Thanks
John
Title: Re: One for the networking experts
Post by: Taxi_Driver on 30 November 2006, 19:55:20
Quote
Yes IP v6 is installed.

C:\Documents and Settings\John.JOHNS>route print
===========================================================================
Interface List
0x1 ........................... MS TCP Loopback interface
0x10003 ...00 50 8d fd 8e 8e ...... VIA Rhine II Fast Ethernet Adapter
===========================================================================
===========================================================================
Active Routes:
Network Destination        Netmask          Gateway       Interface  Metric
          0.0.0.0          0.0.0.0      192.168.0.1   192.168.0.103       20
        127.0.0.0        255.0.0.0        127.0.0.1       127.0.0.1       1
      192.168.0.0    255.255.255.0    192.168.0.103   192.168.0.103       20
    192.168.0.103  255.255.255.255        127.0.0.1       127.0.0.1       20
    192.168.0.255  255.255.255.255    192.168.0.103   192.168.0.103       20
        224.0.0.0        240.0.0.0    192.168.0.103   192.168.0.103       20
  255.255.255.255  255.255.255.255    192.168.0.103   192.168.0.103       1
Default Gateway:       192.168.0.1
===========================================================================
Persistent Routes:
  None

C:\Documents and Settings\John.JOHNS>

Regarding the Norton issue yes I have got NIS installed but I'm uninstalling now to see if it has any effect.
Thanks
John

Well the route print shows there isnt any persistant routes set......so sorry that didnt show anything  :(
Title: Re: One for the networking experts
Post by: miked on 30 November 2006, 21:38:07
Quote
[EDIT: Just did a google for them... now I understand... :)

It’s really not my thing (its all abbreviations and buzz words), my colleagues seem to be struggling to get user screens at the top end to be reliable.  I write the software for boiler and turbine controls which interfaces to the top end stuff.  What I do know is that when it all stops talking and there is a boiler and turbine on the end of it, everyone starts to s**t them selves (including me)
Title: Re: One for the networking experts
Post by: Omega-MV6 on 01 December 2006, 09:18:28
I assume that IPv6 is not required.... :) Unless you like making life difficult for yourself... :P

Can you either remove it or check the windows IPv6 config for that BT DNS Server...????

So whats special about those HIOPC Switch then? are ther sheilded.... NASA has Choosen HP Procurve for the IIS... :D it beat a Cisco Catalyst... LMAO... :y

Cheers.

Matt

Title: Re: One for the networking experts
Post by: CaptainZok on 01 December 2006, 18:38:52
Ok IPv6 gone Internet security gone and it still wants to use those bloody bt servers.
I've blocked them on the router so now it just reports can't find page rather than displaying it.
Was hoping it would default to the servers in the search list but no. :(
Title: Re: One for the networking experts
Post by: CaptainZok on 01 December 2006, 19:02:49
Just got this from windows firewall log when I try to open a browser window pointed to www.google.co.uk

2006-12-01 18:57:36 OPEN UDP 192.168.0.2 194.73.73.94 1062 53 - - - - - - - - -

Think it means port 1062 on the pc is forwarding to the dns service on the bt dns server so we know how its doing it, but why and how do I fix it.
Title: Re: One for the networking experts
Post by: TheBoy on 01 December 2006, 19:06:14
Haven't got proxies enabled on IE, inc automatic proxy discovery?
Title: Re: One for the networking experts
Post by: CaptainZok on 01 December 2006, 19:11:14
automatic settings was ticked but its not now.
Still the same.
Title: Re: One for the networking experts
Post by: Omega-MV6 on 01 December 2006, 21:31:20
That high Port is ok, as it's the source Port, so it is fine. so long as it's destination port is 53 then that is fine....

Cheers.

Matt
Title: Re: One for the networking experts
Post by: CaptainZok on 01 December 2006, 22:53:18
 ;D ;D
Yaaaaaaaaaaaay I've cured it.
Found two registry entries that hard code the dns servers replaced em with the ip of my router and bingo normal service is resumed
 ;D ;D
Thanks very much for all your help guys.
Just shows you can post questions about virtually anything on here and get good advice. :y
Title: Re: One for the networking experts
Post by: Taxi_Driver on 02 December 2006, 08:41:01
Quote
;D ;D
Yaaaaaaaaaaaay I've cured it.
Found two registry entries that hard code the dns servers replaced em with the ip of my router and bingo normal service is resumed
 ;D ;D
Thanks very much for all your help guys.
Just shows you can post questions about virtually anything on here and get good advice. :y

Well done Captain  :y
Title: Re: One for the networking experts
Post by: TheBoy on 02 December 2006, 12:31:22
Quote
;D ;D
Yaaaaaaaaaaaay I've cured it.
Found two registry entries that hard code the dns servers replaced em with the ip of my router and bingo normal service is resumed
 ;D ;D
Thanks very much for all your help guys.
Just shows you can post questions about virtually anything on here and get good advice. :y
:y