Intermittent Connection Problem to WWW

[parabellum]

I would very much appreciate any ideas that anyone has that might help me solve this problem please.
All was well at shut-down on Tuesday evening, when I opened up on Wednesday I could only get very intermittant and erratic connection via my ADSL line to the internet. Most times the browsers said either 'Cannot find server' or 'Internet Explorer' cannot open this page. A few websites were no trouble at all whilst others were hopeless. Email works perfectly, auto-up dates are hit and miss.



Pages that I CANNOT access or can only access after multiple attempt or multiple 'Refresh'
Are:
www.bom.gov.au/weather/vic
www.heraldsun.news.com.
www.manlyairportbus.com.au
www.dictionary.com
www.grisoft.com
www.ingdirect.com.au and several others including
www.myway.com and www.theage.com

Pages that I CAN access, with little or no trouble are:

http://www.bbc.co.uk
www.telegraph.co.uk
www.westpac.com.au (Success 99% of the time).
www.investorwrap.com.au
www.news.ninemsn.com.au
www.australiapost.com.au

Further information: OS is MSXP Pro, I have used four different browsers, IE7 is my default browser. I get 'unable to find server' messages or 'unable to open this page' messages on all browsers. When I check the connection, as suggested, in the 'Internet Explorer cannot open this page' message it usually shows all is well. On start-up the broadband connection shows every time as established.
I have un-installed "SiteHound" and disabled AVG anti-virus and ZoneAlarm Firewall. I have carried out spyware scans with Ewido, virus scans with AVG, both clean and have done a total disk clean up with BC Wipe including slack and free space. I have re-installed the OS from the CD-ROM. I have run a crossover connection from my four port ADSL Modem to my laptop and got similar intermittent failures to connect to the internet on the laptop, (using IE6). This problem first appeared when I started up on Wednesday morning, Tuesday night before shutdown all was well although opening an online Xmas card from www.123greetings.com caused several repeat unwanted 'pop-up' messages from a software provider who was selling a browser cleaner programme and wouldn't take 'No' for an answer. (I don't disable pop-ups as otherwise automatic updating for certain programmes won't work).
The tests that I can carry out on the modem all show it working properly.

I am not technical but I suspect my modem, (which appears to be working well), or the Telstra connection either along the line to the exchange or at the exchange. I recently upgraded to a faster DSL connection, now 1500 down and 256 up.
I have not changed any settings in my Browsers recently.

Any help or ideas would be much appreciated. Thanks.

(hope the connection holds long enough to post this!).

[All Ahead Full]

I would check with your ISP, as to whether there DNS servers have changed, or are having issues, as this would certainly show the problems your are experiencing.

If you check you IP configuration - run IPCONFIG /ALL from a command prompt, and see if you can PING the DNS Servers specified.

Examples below:

C>ipconfig /all

Windows IP Configuration

Ethernet adapter Local Area Connection:

Connection-specific DNS Suffix . : medusa.mezzonet.net
Description . . . . . . . . . . . : Marvell Yukon 88E8055 PCI-E Gigabit
Ethernet Controller
Physical Address. . . . . . . . . : 00-17-42-1B-0B-50
Dhcp Enabled. . . . . . . . . . . : Yes
Autoconfiguration Enabled . . . . : Yes
IP Address. . . . . . . . . . . . : 192.168.44.124
Subnet Mask . . . . . . . . . . . : 255.255.255.0
Default Gateway . . . . . . . . . : 192.168.44.1
DHCP Server . . . . . . . . . . . : 192.168.44.1
DNS Servers . . . . . . . . . . . : 81.171.143.18
85.133.19.2
212.227.39.54
Lease Obtained. . . . . . . . . . : 14 December 2006 11:45:21
Lease Expires . . . . . . . . . . : 13 January 2007 11:45:21

and

C>ping 212.227.39.54

Pinging 212.227.39.54 with 32 bytes of data:

Reply from 212.227.39.54: bytes=32 time=20ms TTL=52
Reply from 212.227.39.54: bytes=32 time=19ms TTL=52
Reply from 212.227.39.54: bytes=32 time=20ms TTL=52
Reply from 212.227.39.54: bytes=32 time=19ms TTL=52

Ping statistics for 212.227.39.54:
Packets: Sent = 4, Received = 4, Lost = 0 (0% loss),
Approximate round trip times in milli-seconds:
Minimum = 19ms, Maximum = 20ms, Average = 19ms

[IO540]

Isn't this kind of issue possibly to do with the wrong subnet mask, in one's router config?

I have not had it myself but it does come up often. Google should turn up thousands of hits on "some sites not working" etc.

[jetcollie]

This definitely sounds like a DNS resolution problem. You seem to have tried most things but have you switched off your router and disconnected from the BT line- leave it disconnected for at least 20 mins then boot it up again. This will clear all stale sessions and hopefully get you up and running again.

[Saab Dastard]

Possible causes - MTU set too high/low. Malware interfering with your hosts file or DNS settings. Malware has changed your browser security settings. ISP having problems. Sites mis-identifying your browser.

Isn't this kind of issue possibly to do with the wrong subnet mask, in one's router config?

Highly unlikely - unless you have been assigned a fixed IP address, this will be provided by the ISP along with IP address and default gateway. Of course, if the ISP has screwed up something this simple, it's time to change ISP!

Ping the list of names:

www.bom.gov.au
www.heraldsun.news.com.au
www.manlyairportbus.com.au
www.dictionary.com
www.grisoft.com
www.ingdirect.com.au
www.myway.com
www.theage.com

Do they resolve to an IP address and do you get a response?

SD

[parabellum]

Thanks for all your responses. Disconnecting the modem/router didn't work, I'm afraid.
Now going to work my way through the other suggestions.
My ISP, (Bigpond) want me to run a Trace Route but claim they don't support any software that will enable me to do this.
When I signed up for this BB connection some eons ago they only supported a USB connection so as well as other possibilities I am going to reinstall my BB connection and try the Ethernet option as that is what they now suggest to new subscribers.
Once again, thanks for your thoughts.
PB

Should have mentioned, when I want to open my browser it comes up with a MSN 'runonce' blank blue page telling me to select my settings, have tried to block this and all other MS pages but it doesn't work, my selected home page, www.bom.gov.au/weather/vic never shows up.

[HughMartin]

I had exactly this problem a couple of weeks ago. Pprune was one of the sites I had problems with and others like BBC.co.uk were fine. I am with BTinternet and I eventually used their Help system and they admitted they were having problems with their servers but they wouldn't say why they weren't posting the problem on their service status page.

Problem disappeared after a few days.

[Keef]

Originally Posted by parabellum

Should have mentioned, when I want to open my browser it comes up with a MSN 'runonce' blank blue page telling me to select my settings, have tried to block this and all other MS pages but it doesn't work, my selected home page, www.bom.gov.au/weather/vic never shows up.

That sounds fishy. Might not be the cause, but I'd be inclined to go after it anyway. I assume you're using MS Internet Exploder? It might be worth downloading Firefox, which is a better browser all round.

The problem sounds very much like a DNS server problem - I've seen the same happen from time to time.

However ... I can't connect to http://www.heraldsun.news.com either, so maybe they changed DNS and it hasn't percolated through yet.

If you can't get to your weather site at bom.gov.au then try this link, which should take you to exactly the same place (it's the URL of that site):
http://134.178.63.140/weather/vic/

If that works, then it's a DNS server thing. Wait another day or two to see if it sorts itself out.

[parabellum]

Thanks for that link to www.bom.gov etc Keef, browser went straight to it in a nano second.

I do have four browsers, IE7, Firefox, Opera and SlimBrowser but get problems on all of them!

Going to try and wade through the Trace Route thingy now, my ISP are being less than helpful at the moment.

[Keef]

If all four browsers do it, the problem is either with the DNS server set up in your PC or the ditto at your ISP. If you can't get to bom.gov.au but that link works, that narrows it down to a DNS problem.

Open a command window and type ipconfig /all

You'll get a load of stuff, among which will be the DNS server address. If you're using a router, it may give the router address (same string as DHCP server and Default Gateway). In that case, disconnect the power from the router for a minute or two and reconnect. That might shake the router into updating itself.

If you get a DNS server address that's not your router, then look it up (if you know how) to see what it is. Otherwise, post it here and I'll take a look.

The other possibility is that something has played around with the "personal" DNS file in your PC. I can never remember the filename/location, but it's a place where you can put a specific IP address to use for certain URLs - someone'll come along in a minute and tell us the name :) If those addresses of yours are in there, with a wrong DNS, then you'll get the effect you're noticing.

EDIT: found it - c:\windows\system32\drivers\etc\hosts - with no filename suffix.
Open that with Notepad (or whatever you prefer) and check that there are no addresses in there for the ones you're having trouble with.

[parabellum]

Thanks again, Keef, Saab Dastard and All Ahead Full I have followed your instructions and although unable to print it here, (doesn't seem to be a copy and paste facility in the window), the ipconfig/all looks to be very ordinary. Went to cwindows\system32\drivers\ but again, nothing to cause alarm.

I have been through TraceRoute and Pinging with my ISP, one minute they seem keen to help the next they just want to ensure that they are not at fault. Trace routed nine different sites three times and got different results quite often, sometimes the trace could not be resolved, sometimes it timed out and occasionally it completed, I've tried to explain all this to Mr Po Tung at my ISP Help Desk and await his advice! I've suggested reloading the broadBand software and using the ethernet connection this time but they are silent on that so far. I powered down the modem/router but nothing changed.

Very much appreciate the time and trouble people have taken, - will let you know when I get a result!

[All Ahead Full]

You can cut and paste from a DOS Windows - need to left click on the top left hand corner of the window, a menu will appear, choose Edit, then Mark from the submenu. You can then use the mouse to DRAG across the area you wish to copy, then when the text is slected, press return, and then goto another window, and paste the text in the normal way.

Do that with you IPCONFIG/ALL printout, and we can check your settings.

[Saab Dastard]

You can cut and paste from a DOS Windows

I find it quicker to just pipe it straight out to a text file:

IPCONFIG /all > c: \myfolder\ipconfig.txt

SD

[Duff beer]

parabellum I had exactly the same problem. I managed to cure mine by doing the following.

open the following page;

www.dslreports.com/drtcp

and download the file;

DRTCP021.exe.

If you cant open this web page, then you need to use a friends pc and save the above file on a memory stick then transfer it to yours.

Open up the exe file to a small grey window called DR TCP.

the bottom window has the title ADAPTER SETTINGS with an MTU field next to it.

In the MTU field insert 1392 for every connection listed in the ADAPTER SETTINGS.

Restart the pc. Every web site should be available to you know. Start enjoying the free porn the WWW provides!!!

let me know how you get on

DB

[Keef]

Dr TCP is a useful utility, but changing all the MTUs might not do it - especially if there's a router in between.

parabellum - what's the DNS address in your ipconfig /all?

You can check it (and a whole load more of this stuff) here. That's a useful way to find out what's going on.

Ipconfig also has some utilities to clear out stuff - every so often, I have to type ipconfig /flushdns at my laptop to get it to work.
I have no idea what's causing it, but it's quick and easy to fix like that so I don't bother.

[Saab Dastard]

ipconfig /flushdns

Keef,

Thanks for that link - nice group of utilities!

To clarify for others - the DNS resolver cache does NOT survive a reboot! It is cleared when the IP stack is reloaded either manually or following a reboot.

The utility exists primarily for servers, where it is not possible to interrupt the service they provide, but it is required to remove an old DNS entry, rather than allow it to age out - the default is 24 hours to age out.

SD

[parabellum]

Thanks again everyone. Have done the iconfig /flushdns and restarted modem and PC but nothing changed!

ipconfig /all came up with this:



Windows IP Configuration



Host Name . . . . . . . . . . . . : stuart01

Primary Dns Suffix . . . . . . . :

Node Type . . . . . . . . . . . . : Unknown

IP Routing Enabled. . . . . . . . : Yes

WINS Proxy Enabled. . . . . . . . : No

DNS Suffix Search List. . . . . . : vic.bigpond.net.au



Ethernet adapter Local Area Connection:



Media State . . . . . . . . . . . : Media disconnected

Description . . . . . . . . . . . : 3Com 3C920 Integrated Fast Ethernet Controller (3C905C-TX Compatible)

Physical Address. . . . . . . . . : 00-B0-D0-36-C1-19



Ethernet adapter Local Area Connection 2:



Connection-specific DNS Suffix . : vic.bigpond.net.au

Description . . . . . . . . . . . : SMC EZ Connect USB/Ethernet Series Converter

Physical Address. . . . . . . . . : 00-04-E2-7B-60-67

Dhcp Enabled. . . . . . . . . . . : Yes

Autoconfiguration Enabled . . . . : Yes

IP Address. . . . . . . . . . . . : 10.0.0.1

Subnet Mask . . . . . . . . . . . : 255.0.0.0

Default Gateway . . . . . . . . . : 10.0.0.138

DHCP Server . . . . . . . . . . . : 10.0.0.138

DNS Servers . . . . . . . . . . . : 61.9.192.14

61.9.192.15

Lease Obtained. . . . . . . . . . : Tuesday, 19 December 2006 3:01:50 PM

Lease Expires . . . . . . . . . . : Tuesday, 19 December 2006 5:01:50 PM

I have passed this back to my ISP who also suggested the flush, that said it had been satisfactorily completed.
Haven't tried Duff Beer's suggestion yet as it sounds a bit radical but am getting desperate enough too soon!

I also have a hijacked browser and don't seem to be able to get rid of the highjackers!
When I first attempt to go into my browser it does not come up with my chosen default page but comes up with
http://go.microsoft.com/fwlink/?linkid54834 and after a few seconds changes to http://runonce.msn.com/runonce2.aspx which shows a blank page with the tab, (IE7), saying "customise settings" - I don't understand this and my efforts in privacy and security to block these two sites doesn't work either.

I'll reload IE7 and see if that helps.

EDIT My ISP came back and said my DNS settings were wrong, (but didn't give me the correct ones to insert manually!), and that I should go into Internet Connections and ensure that the boxes "Obtain Automatically" were ticked, which they were, so no change there and reloading IE7 made no difference, my browser is still hijacked! Have passed the ball back to ISP in the hope that they have some better ideas, Duff Beers suggestion gets more attractive by the minute!

2nd EDIT
received these instructions from ISP:

Dear Stuart,

Thank you for your email dated 19/12/2006 regarding DNS settings.

The DNS servers which your connection appears to be using are old, invalid DNS servers not currently used by BigPond. Please complete the following steps:

* click Start,
* click Control Panel,
* click Network Connections,
* right-click Local Area Connection (Description Alcatel SpeedTouch, SpeedStream Ethernet, or the SMC EZ Connect USB/Ethernet Series Converter),
* click Properties,
* highlight Internet Protocol (TCP/IP),
* click Properties,
* select "Use the following IP address",
* enter 10.0.0.1 as the IP Address (Can also use 10.0.0.2 - 3 - 4 and so on),
* enter 255.255.255.0 as the Sub net mask,
* enter 10.0.0.138 as the Default Gateway,
* select "Use the following DNS Server Addresses",
* enter 10.0.0.138 as the Preferred DNS Server,
* click on the Advanced button,
* click on the DNS tab,.
* select "Append these DNS suffixes (in order):",
* click on the Add button,
* type "vic.bigpond.net.au" (without quotations),
* click on the Add button,
* click on the Add button again,
* type x.bigpond.net.au where x=your state (New South Wales and ACT = nsw, Queensland=qld, South Australia=nt, Western Australia=wa),
* click OK 3 times to return to the connection window.


but they changed nothing, (well I lost my email too but reverted to old settings and it seems to be back) Also right at the bottom where it says, "click on the Add button again" - it won't accept the information as it is identical to that just above, "type vic.bigpond.net.au"
Life is becoming a green swirling mass at the moment and tall buildings are starting to look attractive! Just kidding, but it is a pain in the nether regions!.

[Saab Dastard]

parabellum,

It looks more and more like your ISP is making a dog's breakfast of this.

I'm assuming that you have your PC directly connected to their ADSL modem.

You have your PC set to obtain IP and associated settings via DHCP - i.e. automatically. So the only place you can get them is from the ISP. If they are wrong it is totally down to your ISP to fix it.

All Ahead Full has posted a working DNS server 212.227.39.54 - I have tested with it and I can use it, so please can you enter that into your IP settings:

select "Use the following DNS Server Addresses",
* enter 212.227.39.54 as the Preferred DNS Server.

See what happens.

SD

[Keef]

parabellum
Referring to your second edit:
I can't remember for sure, but I think the subnet mask for 10.0.0.n is 255.0.0.0 not 255.255.255.0 - which makes me wonder if the person at the ISP knows what he/she is doing.


I looked up the DNS for vic.bigpond.net.au and found this:
ns1.bigpond.net.au. [61.9.128.17] [TTL=86400] [AU]
ns2.bigpond.net.au. [61.9.192.17] [TTL=86400] [AU]

- which is close to the 61.9.192.14 reported by your system, but different enough to be strange.

The address 212.227.39.54 belongs to a firm in Germany - I hope they don't mind you using it. Before loading that one into "Preferred server", I would be inclined to try with 61.9.128.17 and 61.9.192.17 (assuming there are two boxes in your setup).

[parabellum]

Tried both the above options and neither worked so had to go back to auto find to regain any kind of connection. After twelve emails from my ISP Help desk that advise me that my problem has been 'elevated' to the next Tech level and I must continue by 'phone for security reasons! Awaiting their call.