none
Server 2008 R2 unable to access some websites

    Question

  • Hello all,

       I've got a server 2008 R2 box with Exchange 2010 installed on it. Several weeks ago it stopped being able to connect to Windows Update. After troubleshooting I found that it is unable to connect to ANY https site and is unable to connect to many http sites as well.

    Internet explorer returns "Internet explorer cannot display the webpage"  I'm also unable to access https and many http sites after installed firefox on the server as well.

    Here's the configuration and things i've tried. Any help would be very appreciated!

    Server 2008 R2
    Exchange 2010 sp1
    Windows Firewall is turned off and disabled
    I've tried resetting bits and re-registering it's associated DLL's
    I've cleared the SSL Slate
    I've reset IE
    It is not using a Proxy server
    I CAN ping sites. For example I can ping www.gmail.com and it resolves successfully. But IE and Firefox cannot connect to it.

    I've run Fiddler and it shows the following :

    HTTPS connection failed.

    System.Net.Sockets.SocketException: A connection attempt failed because the connected party did not properly respond after a period of time, or established connection failed because connected host has failed to respond

     

    Thanks!

    Anyone have any ideas? This is really beating me up.
    Monday, September 20, 2010 6:20 PM

Answers

  • Hi,

     

    Did you import the Internet Explorer (IE) settings when installing Firefox?

     

    I would like to suggest you run the following command with administrator permission to reset WinSock to check the result.

     

    Netsh WinSock reset

     

    If it does not work, I would like to suggest you run Internet Explorer (No Add-ons) to test the issue.

     

    You may also re-register the following Internet Explorer .dll files:

     

    regsvr32 softpub.dll

    regsvr32 wintrust.dll

    regsvr32 initpki.dll

    regsvr32 dssenh.dll

    regsvr32 rsaenh.dll

    regsvr32 gpkcsp.dll

    regsvr32 sccbase.dll

    regsvr32 slbcsp.dll

    regsvr32 cryptdlg.dll

     

    For more information, please read the following Microsoft KB article:

    You cannot log in to or connect to secured Web sites in Internet Explorer

    http://support.microsoft.com/Default.aspx?id=813444

     

    If the issue persists, would you please send me more information for analyzing. For your convenience, I have created a workspace for you.  You can upload the information files to the following link.  (Please choose "Send Files to Microsoft")

     

    Workspace URL: https://sftasia.one.microsoft.com/choosetransfer.aspx?key=d8babb5e-28c7-4be9-978c-551f5314cd77

    Password: vlH_jC^IpRR^^

     

    Note: Due to differences in text formatting with various email clients, the workspace link above may appear to be broken.  Please be sure to include all text between '(' and ')' when typing or copying the workspace link into your browser. Meanwhile, please note that files uploaded for more than 72 hours will be deleted automatically. Please ensure to notify me timely after you have uploaded the files. Thank you for your understanding.

     

    Collect HiJackThis log

    ==============

    Please download HijackThis from the following link:

    http://www.techspot.com/download317.html

     

    HijackThis is a tool to collect some system settings information which is useful for further troubleshooting.

     

    Note: The third-party products discussed here are manufactured by vendors independent of Microsoft. We make no warranty, implied or otherwise, regarding these products' performance or reliability.

     

    1. Unzip the hijcakthis.zip file to obtain the hijackthis.exe file.

    2. Right click the “hijackthis.exe” file and choose "Run as administrator". Provide administrator password or click “Allow” if you are prompted to do so.

    3. Click the "Do a system scan and save a logfile" Button.

    4. A Notepad window will appear, please click File->Save as... to save it as HJT.log (or other file name you like) on the Desktop. Please send this log file to the link I provided.

     

    Regards,


    Please remember to click “Mark as Answer” on the post that helps you, and to click “Unmark as Answer” if a marked post does not actually answer your question. This can be beneficial to other community members reading the thread.
    Tuesday, September 21, 2010 9:55 AM
    Moderator

All replies

  • Please try to re-install your browsers.

    If this does not solve your problem, please check if there is a router filter or a firewall that is blocking your traffic.

    You can use 8.8.8.8 as a primary DNS server and check if all is okay or not.

     


    This posting is provided "AS IS" with no warranties or guarantees , and confers no rights.
    Monday, September 20, 2010 6:48 PM
  • are there any group policies affecting IE? run rsop.msc on the server
    Monday, September 20, 2010 7:00 PM
  • Thanks for the suggestions.

    I tried switching out my dns to 8.8.8.8 and same issue. Note with current settings I can successfully ping sites from the server by name and they resolve correctly. I just can't get to them via browser

    I've gone over the firewall and our routers and can't see any differences between this servers routes and the routes for other servers that are able to get out.

    I just ran rsop.msc and went through the policies and there are no policies affecting IE.

    Still broken.

    Caleb

    Monday, September 20, 2010 7:10 PM
  • Since you have verified name resolution and basic connectivity, have you check perimeter firewall settings?

     


    Visit: anITKB.com, an IT Knowledge Base.
    Monday, September 20, 2010 7:17 PM
  • anything at all in the event logs that may indicate a problem?
    Monday, September 20, 2010 7:20 PM
  • "A connection attempt failed because the connected party did not properly respond after a period of time"

    are you able to plug into a different switch port or try a different NIC?

    Monday, September 20, 2010 7:24 PM
  • If you disable all your security softwares (antivirus, internal firewall ...), the result is the same?
    Are you sure that there is no proxy config applied on the browsers (You may have configured a config and fogot to delete it).

     


    This posting is provided "AS IS" with no warranties or guarantees , and confers no rights.
    Monday, September 20, 2010 7:24 PM
  • Thanks again for all the ideas. This one is really beating me down.

    I've checked the perimeter firewall and I can see traffic heading outbound on 443 from the server when I try and connect to a site.

    The logs are empty of warnings or errors.

    I've double and triple checked that there is no proxy set up....both in the browser tools and from the shell.

    I've disabled the antivirus and tried it with the same result.

    It is a guest on a Hyper-V 2008 server, however other guests on the same server that are assigned the same virtual network can access the same web sites without problem.

     

     

    Monday, September 20, 2010 8:10 PM
  • If the only node having an issue is the Guest on the virtual server, then I would continue to focus your efforts on that box.  Maybe its time to pull out the packet capture software and take a look at the traffic in more detail.

     


    Visit: anITKB.com, an IT Knowledge Base.
    Monday, September 20, 2010 8:21 PM
  • There are a few thing in this article that may be worth a try

    http://support.microsoft.com/kb/956196

    Monday, September 20, 2010 8:31 PM
  • Walked through that article with no luck.

    Thanks

    Caleb

    Monday, September 20, 2010 9:39 PM
  • Hi,

     

    Did you import the Internet Explorer (IE) settings when installing Firefox?

     

    I would like to suggest you run the following command with administrator permission to reset WinSock to check the result.

     

    Netsh WinSock reset

     

    If it does not work, I would like to suggest you run Internet Explorer (No Add-ons) to test the issue.

     

    You may also re-register the following Internet Explorer .dll files:

     

    regsvr32 softpub.dll

    regsvr32 wintrust.dll

    regsvr32 initpki.dll

    regsvr32 dssenh.dll

    regsvr32 rsaenh.dll

    regsvr32 gpkcsp.dll

    regsvr32 sccbase.dll

    regsvr32 slbcsp.dll

    regsvr32 cryptdlg.dll

     

    For more information, please read the following Microsoft KB article:

    You cannot log in to or connect to secured Web sites in Internet Explorer

    http://support.microsoft.com/Default.aspx?id=813444

     

    If the issue persists, would you please send me more information for analyzing. For your convenience, I have created a workspace for you.  You can upload the information files to the following link.  (Please choose "Send Files to Microsoft")

     

    Workspace URL: https://sftasia.one.microsoft.com/choosetransfer.aspx?key=d8babb5e-28c7-4be9-978c-551f5314cd77

    Password: vlH_jC^IpRR^^

     

    Note: Due to differences in text formatting with various email clients, the workspace link above may appear to be broken.  Please be sure to include all text between '(' and ')' when typing or copying the workspace link into your browser. Meanwhile, please note that files uploaded for more than 72 hours will be deleted automatically. Please ensure to notify me timely after you have uploaded the files. Thank you for your understanding.

     

    Collect HiJackThis log

    ==============

    Please download HijackThis from the following link:

    http://www.techspot.com/download317.html

     

    HijackThis is a tool to collect some system settings information which is useful for further troubleshooting.

     

    Note: The third-party products discussed here are manufactured by vendors independent of Microsoft. We make no warranty, implied or otherwise, regarding these products' performance or reliability.

     

    1. Unzip the hijcakthis.zip file to obtain the hijackthis.exe file.

    2. Right click the “hijackthis.exe” file and choose "Run as administrator". Provide administrator password or click “Allow” if you are prompted to do so.

    3. Click the "Do a system scan and save a logfile" Button.

    4. A Notepad window will appear, please click File->Save as... to save it as HJT.log (or other file name you like) on the Desktop. Please send this log file to the link I provided.

     

    Regards,


    Please remember to click “Mark as Answer” on the post that helps you, and to click “Unmark as Answer” if a marked post does not actually answer your question. This can be beneficial to other community members reading the thread.
    Tuesday, September 21, 2010 9:55 AM
    Moderator