New
#11
2xg I noticed this in post #7 could it be a problem. To the best of my memory this is done by a corporation or a government agency.
2xg is the expert so I will go back to watching.I am behind multiple Firewalls
2xg I noticed this in post #7 could it be a problem. To the best of my memory this is done by a corporation or a government agency.
2xg is the expert so I will go back to watching.I am behind multiple Firewalls
Are the firewalls running NAT at all? Are they performing stateful monitoring of traffic or are there any manually configured policies in place?
When you place DNS in the mix it can cause issues.
If you're connected via a domain your primary DNS server should be pointing to the domain controller... I would then consider looking at whether the issue is with regards to how the domain controller forwards DNS requests out to public DNS servers.
Just my input,
Josh :)
@ Suranjit - you have a complex issue and a bit confusing to us. Please help us clarify:
In Post# 4, I've asked..... "I'm assuming that this issue is occurring in a business network? Are you the Network Admin?"
We all think that the DNS configuration is probably at fault. How is it configured? Thru a Server, Router or a Firewall device? Do you maintain a Server as well?
Just need to confirm your statement here:
"Actually I am not logged into any domain"
Do you have any spare computer from your remote location and see if you can replicate the issue? We need to know if the issue is coming from only one computer and others are not affected.
Do you work as a Consultant?
"However, I am behind a firewall which I maintain and made sure it's not causing any issues. I have correct dns setting in there too. Same problem happens when I connected to home wireless network!"
@Lady Back Bear....
"2xg is the expert so I will go back to watching."
We all await for another update.
@Shadowjk:
- Yes, We have NAT enabled in those firewalls but I don't see any traffic to the first firewall (used wireshark and firewall's generic packet capture but for any domain, there is no traffic. However, I can see ICMP packets when pinging any IP address at that time) when I start pinging to any URL during that time. It seems that the traffic is never leaving the computer. Also, I am not connected via any domain controller.
@2xg:
- I am working for a firewall vendor, Fortinet and from my understanding and troubleshooting it seems that something within my computer causing this issue. To prove this point, I have configured Access Point in the firewall and then connected my computer there. I am still having same issue. However when one of my colleague joined that SSID (and no other connection, either wired or wireless in that laptop), he is able to browse to any website with URL without any issues.
Other than the system logs (events), is there any other debugging or troubleshooting I can do to find out why DNS is not working in my Windows 7 Pro x64 machine? Currently, I have manually configured the DNS as 8.8.8.8 and 8.8.4.4 now.
During that time, I receive following errors repeatedly (mostly for Dnscache service):
A timeout (50000 milliseconds) was reached while waiting for a transaction response from the Dnscache service.
Warning: Name resolution for the name www.kwoff.com timed out after none of the configured DNS servers responded. (DNS Client Events, ID: 1014) - sometimes.
A timeout (50000 milliseconds) was reached while waiting for a transaction response from the LanmanWorkstation service.
A timeout (50000 milliseconds) was reached while waiting for a transaction response from the CryptSvc service.
Thanks,
Suranjit
Suranjit is this a customers computer that you are working on in behalf for Fortinet?
From post # 14
- I am working for a firewall vendor, Fortinet
What does your HOSTS file state? Unless DNS is explicitly blocked your requests should be seen inbound on the firewalls... if not then it may be a routing issue however if it was, your ICMP messages wouldn't be reaching the internet unless some policy based routing is in place (Routing on factors other than destination IP address) ... but highly unlikely and I'm getting ahead of myself.
You may also want to try safe mode with networking to see if a third party application or service is interfering with the DNS requests.
Can you boot the machine into Safe Mode with Networking and test connectivity.
To do so please follow this tutorial (OPTION ONE ONLY) - Safe Mode
NotePlease replace all references of Safe Mode with Safe Mode with Networking. This will help to see if there is any third party application causing issues.
The internet routing table routes based on IP addresses and if it was an issue the pings wouldn't return. DNS is an application layer protocol and runs on top of IP (UDP port 53) Should the pings destined to a public IP address have failed then this would indicate a routing problem...PeaB4YouGo said:
I'm going to drop back on this one so the OP isn't overwhelmed with responses :)
Best of Luck,
Josh!
Thank you for your advice. I need to try from Safe Mode with Networking.
I will update here if I find something after testing from Safe Mode.
By the way, is there any reason I am unable view Ethernet adapter from Network Connection? It's not visible anymore (attachment in the first page).
Thanks,
Suranjit
In addition, I'd recommend a virus and malware scan since you weren't able to replicate your issue using a different computer. You may either use Malwarebytes or SuperAntiSpyware Free edition.
Also, check for any proxy settings in your browser and see if it has been hijacked, you may disable the proxy.
I'd also suggest to try using a different browser.
Another thing, create a new User Profile from your computer, use the new User Account and see if the issue persist.
Hi,
I am currently using Malwarebytes Anti-Exploit and MSE. Recently scanned my device with Sophos Virus Removal Tool and Kaspersky Virus Removal Tool but nothing was detected.
No proxy is being used and tested with Chrome, Firefox, IE but no avail.
I was able to test only once using 'Safe Mode with Networking' due to time constraint. Once I manually configured IP address/subnet/gateway/dns, it started working within couple of minutes. I was able to browse any URL. However, after restarting the computer to normal mode, I got some strange issues! I could see from Local Area Connection adapter that it was assigned IP addresses but from Command prompt, it was showing me 169.254 addresses! Once the gateway information was removed automatically from adapter settings!
By the way, after uninstalling and reinstalling the Ethernet adapter, I am able to see that adapter from Network Connections now.
I had also removed all adapters other than Wired and virtual one, and but same problem.
This morning, it started working within few minutes and I did not see any errors from Event viewer. I am still observing.
Thanks,
Suranjit