Trouble accessing internet on SBS 2003 network

atld...@aol.com

unread,

Jan 6, 2008, 8:19:30 AM1/6/08

to

Recently I have been having problems accessing the Internet from
clients and the server on my SBS 2003 network. The Internet was
working well until about 6 weeks ago, when it suddenly started having
problems. Many websites are not found when the web address is typed
into IE. I am able to resolve all internal sites without problems.
Initially I thought I was having trouble with my old DSL modem, but
this was replaced with a new one and the issue has continued.

I have uninstalled and reinstalled the DNS on the SBS 2003 server and
this helped somewhat. I can now get some web sites but most do not
come up. Interestingly, I can go to Google, do a search for the
website I want and open it through the Google link without problem,
except for being a little slow to start loading the page.

When I connected my laptop computer directly to the DSL modem, I had
no problems going to any website and there was no delay in loading
pages.

I cannot think of anything that has changed with my network other than
the fact that I recently accessed my server from home using Remote
Desktop over my Watchguard Firebox VPN connection. This was the first
time I had done this since setting up the network. I am not sure about
the timing between doing this and having the Internet problems because
I usually do not use the network (it is in my wife's office).

Any suggestions on how to fix this?

Meinolf Weber

unread,

Jan 6, 2008, 8:38:14 AM1/6/08

to

Hello atld...@aol.com,

Please post an unedited ipconfig /all from the SBS machine here. And also
from one client.

Best regards

Meinolf Weber
Disclaimer: This posting is provided "AS IS" with no warranties, and confers
no rights.
** Please do NOT email, only reply to Newsgroups
** HELP us help YOU!!! http://www.dts-l.org/goodpost.htm

Kevin D. Goodknecht Sr. [MVP]

unread,

Jan 6, 2008, 9:04:02 AM1/6/08

to

Read inline please.

In news:ba1815b7-4d84-41df...@e10g2000prf.googlegroups.com,
atld...@aol.com <atld...@aol.com> typed:

In addition to posting the ipconfig /all from the SBS and a client, you
should verify that it is actually DNS causing this by using nslookup to
resolve sites that do not open.
You should also verify it is not an MTU problem by pinging the sites with a
1472 byte non-fragmented packet to sites that are pingable.
ping -f www.yahoo.com -l 1472

--
Best regards,
Kevin D. Goodknecht Sr. [MVP]
Hope This Helps

===================================
When responding to posts, please "Reply to Group"
via your newsreader so that others may learn and
benefit from your issue, to respond directly to
me remove the nospam. from my email address.
===================================
http://www.lonestaramerica.com/
http://support.wftx.us/
http://message.wftx.us/
===================================
Use Outlook Express?... Get OE_Quotefix:
It will strip signature out and more
http://home.in.tum.de/~jain/software/oe-quotefix/
===================================
Keep a back up of your OE settings and folders
with OEBackup:
http://www.oehelp.com/OEBackup/Default.aspx
===================================

Dave

unread,

Jan 6, 2008, 5:34:37 PM1/6/08

to

Here are the ipconfig /all for the server and a client. I also tried
nslookup for yahoo.com and tried pinging with a non-fragmented
packet. The results are at the bottom. As a note, I am actually
posting this from a computer on the network, so obviously I can get
some Internet sites!

The ipconfig for the Server:

C:\Documents and Settings\Administrator>ipconfig /all

Windows IP Configuration

Host Name . . . . . . . . . . . . : ADHMSVR
Primary Dns Suffix . . . . . . . : adhm.local
Node Type . . . . . . . . . . . . : Unknown
IP Routing Enabled. . . . . . . . : Yes
WINS Proxy Enabled. . . . . . . . : Yes
DNS Suffix Search List. . . . . . : adhm.local

Ethernet adapter WAN:

Connection-specific DNS Suffix . : adhm.local
Description . . . . . . . . . . . : Realtek RTL8139 Family PCI Fast
Ethernet NIC
Physical Address. . . . . . . . . : 00-48-54-85-65-5B
DHCP Enabled. . . . . . . . . . . : Yes
Autoconfiguration Enabled . . . . : Yes
IP Address. . . . . . . . . . . . : 192.168.16.13
Subnet Mask . . . . . . . . . . . : 255.255.255.0
Default Gateway . . . . . . . . . : 192.168.16.1
DHCP Server . . . . . . . . . . . : 192.168.16.100
DNS Servers . . . . . . . . . . . : 192.168.16.100
Primary WINS Server . . . . . . . : 192.168.16.100
NetBIOS over Tcpip. . . . . . . . : Disabled
Lease Obtained. . . . . . . . . . : Friday, January 04, 2008
10:55:39 AM
Lease Expires . . . . . . . . . . : Saturday, January 12, 2008
10:55:39 AM

Ethernet adapter Local Area Connection:

Connection-specific DNS Suffix . :
Description . . . . . . . . . . . : Broadcom NetXtreme Gigabit
Ethernet
Physical Address. . . . . . . . . : 00-12-3F-7E-CB-92
DHCP Enabled. . . . . . . . . . . : No
IP Address. . . . . . . . . . . . : 192.168.16.100
Subnet Mask . . . . . . . . . . . : 255.255.255.0
Default Gateway . . . . . . . . . :
DNS Servers . . . . . . . . . . . : 192.168.16.100
Primary WINS Server . . . . . . . : 192.168.16.100

And for a client:

C:\Documents and Settings\dpurselle>ipconfig /all

Windows IP Configuration

Host Name . . . . . . . . . . . . : ADHM1
Primary Dns Suffix . . . . . . . : adhm.local
Node Type . . . . . . . . . . . . : Hybrid
IP Routing Enabled. . . . . . . . : No
WINS Proxy Enabled. . . . . . . . : No
DNS Suffix Search List. . . . . . : adhm.local
adhm.local

Ethernet adapter Local Area Connection:

Connection-specific DNS Suffix . : adhm.local
Description . . . . . . . . . . . : Broadcom 440x 10/100
Integrated Controller
Physical Address. . . . . . . . . : 00-0B-DB-CD-E3-C8
Dhcp Enabled. . . . . . . . . . . : Yes
Autoconfiguration Enabled . . . . : Yes
IP Address. . . . . . . . . . . . : 192.168.16.9
Subnet Mask . . . . . . . . . . . : 255.255.255.0
Default Gateway . . . . . . . . . : 192.168.16.100
DHCP Server . . . . . . . . . . . : 192.168.16.100
DNS Servers . . . . . . . . . . . : 192.168.16.100
Primary WINS Server . . . . . . . : 192.168.16.100
Lease Obtained. . . . . . . . . . : Saturday, January 05, 2008
9:10:39 AM
Lease Expires . . . . . . . . . . : Sunday, January 13, 2008
9:10:39 AM

I tried nslookup for yahoo.com and tried pinging it with a non-
fragmented packet. No success:

C:\Documents and Settings\dpurselle>ping -f www.yahoo.com -l 1472
Ping request could not find host www.yahoo.com. Please check the name
and try again.

C:\Documents and Settings\dpurselle>nslookup www.yahoo.com
Server: adhmsvr.adhm.local
Address: 192.168.16.100

DNS request timed out.
timeout was 2 seconds.
*** Request to adhmsvr.adhm.local timed-out

C:\Documents and Settings\dpurselle>

Meinolf Weber

unread,

Jan 6, 2008, 5:48:56 PM1/6/08

to

Hello Dave,

Seems that the server has 2 different ip addresses, one via DHCP and one
fixed. This is not the best solution, on a server only use a fixed ip from
one NIC and disable the other NIC if you use no teaming.
The XP looks ok.

Best regards

Meinolf Weber
Disclaimer: This posting is provided "AS IS" with no warranties, and confers
no rights.
** Please do NOT email, only reply to Newsgroups
** HELP us help YOU!!! http://www.dts-l.org/goodpost.htm

> Here are the ipconfig /all for the server and a client. I also tried

Kevin D. Goodknecht Sr. [MVP]

unread,

Jan 6, 2008, 6:05:11 PM1/6/08

to

Read inline please.

In news:af5059ff-60e8-4050...@q39g2000hsf.googlegroups.com,
Dave <atld...@aol.com> typed:

> Here are the ipconfig /all for the server and a client. I also tried
> nslookup for yahoo.com and tried pinging with a non-fragmented
> packet. The results are at the bottom. As a note, I am actually
> posting this from a computer on the network, so obviously I can get
> some Internet sites!
>

This won't work, you need to isolate the WAN network from the Local Area
Connection network and put them on different subnets.

Even better and simpler would be to disable the WAN adapter, add the
Router's IP for the gateway on the Local Area Connection, then have DHCP
assign the 192.168.16.1 IP in option 003.

Dave

unread,

Jan 6, 2008, 6:35:13 PM1/6/08

to

When I initially setup the server, I followed instructions provided
through Microsoft. It was working well until just recently. Here is
the hellp I got then:

http://groups.google.com/group/microsoft.public.windows.server.sbs/browse_thread/thread/a7f49aae777159b4/cd09d3c43dd52133?lnk=st&q=#cd09d3c43dd52133

I thought having 2 NICs was a better way to have the network setup, 1
for the WAN and 1 for the LAN. Is it actually better to just use 1
NIC for both?

Kevin D. Goodknecht Sr. [MVP]

unread,

Jan 6, 2008, 8:39:40 PM1/6/08

to

Read inline please.

In news:0ee4a181-f31c-4eec...@c23g2000hsa.googlegroups.com,
Dave <atld...@aol.com> typed:

It is better to not have to Multi-home DCs, even SBS, which has wizards that
set it up for multi-homing. That said, unless you are using NIC teaming,
each NIC must be on different IP subnets. Both your NICs are on the same
subnet, which messes up routing. If your WAN NIC were using a different
subnet, ex, 192.168.0.0/24, It would work by using the LAN NIC for the
Gateway address if NAT is enabled on the server, it just complicates
matters.

Kerry Brown

unread,

Jan 7, 2008, 9:35:41 AM1/7/08

to

Change the subnet for the router and the Realtek NIC. Alternatively disable
the Realtek NIC. Run the SBS CEICW wizard. It will setup DHCP, DNS, WINS,
etc for either configuration. You may have to change the Broadcom NIC IP to
be outside of the DHCP scope that SBS likes to set up i.e. 192.168.16.2
instead of 192.168.16.100

http://support.microsoft.com/kb/825763

From the configuration it looks like you are not using the wizards to manage
SBS. This is a big mistake. SBS is a very complicated setup with some things
that are not the normal "best practices". Trying to manage it without using
the wizards usually leads to trouble.

http://www.microsoft.com/downloads/details.aspx?familyid=71211053-CCD6-4F2B-BBD9-5E7B97C232EC&displaylang=en

--
Kerry Brown
Microsoft MVP - Shell/User
http://www.vistahelp.ca/phpBB2/

"Dave" <atld...@aol.com> wrote in message
news:0ee4a181-f31c-4eec...@c23g2000hsa.googlegroups.com...

Dave

unread,

Jan 19, 2008, 11:08:46 AM1/19/08

to

I have disabled the RealTek NIC as suggested above. I now seem to be
able to get web pages more easily, but they are very slow to download.
Additionally, I cannot resolve pages on the clients unless I include
http:// when I type the site into IE. Here is the current IPconfig:

C:\Documents and Settings\Administrator>ipconfig /all

Windows IP Configuration

Host Name . . . . . . . . . . . . : ADHMSVR
Primary Dns Suffix . . . . . . . : adhm.local
Node Type . . . . . . . . . . . . : Unknown
IP Routing Enabled. . . . . . . . : Yes
WINS Proxy Enabled. . . . . . . . : Yes
DNS Suffix Search List. . . . . . : adhm.local

Ethernet adapter Local Area Connection:

Connection-specific DNS Suffix . :
Description . . . . . . . . . . . : Broadcom NetXtreme Gigabit
Ethernet
Physical Address. . . . . . . . . : 00-12-3F-7E-CB-92
DHCP Enabled. . . . . . . . . . . : No
IP Address. . . . . . . . . . . . : 192.168.16.100
Subnet Mask . . . . . . . . . . . : 255.255.255.0

Default Gateway . . . . . . . . . : 192.168.16.1

Meinolf Weber

unread,

Jan 19, 2008, 11:24:43 AM1/19/08

to

Hello Dave,

Have you configured forwarders on the DNS server properties, which are pointing
to your ISP's DNS server?

Best regards

Meinolf Weber
Disclaimer: This posting is provided "AS IS" with no warranties, and confers
no rights.
** Please do NOT email, only reply to Newsgroups

** HELP us help YOU!!! http://www.blakjak.demon.co.uk/mul_crss.htm

Dave

unread,

Jan 21, 2008, 8:57:50 AM1/21/08

to

Yes, I have configured the forwarders for the primary and alternate
DNS servers provided by my ISP.