Bizarre 2012 Server Cant ping or tracert google

[jenking]

Hi guys

 

I am in-between Virtualisation our estate. Iv only got a few more servers to bring over. Last week I started with a vinillar build 2012 server ready to install a few apps on. These apps been 4matrix, our spicewoks desktop and Softlink's Oliver.

 

4matrix, Spiceworks were easy, working fine. Softlink remotely installed Oliver, they ran into a few difficulties installing SQL 2012, so resorted to 2008 instead! Oliver seemed to be installed and working, until our librarian informed me that Z-cataloging was not working. (Z-cataloging, takes the books ISBN number, and pulls info from a list of sites - that provide information for the Oliver system... eg the blurb, book title, author and so on)

 

So we have a smoothwall controlled by the LEA, we have limited access. I usually pop the IP off our severs in to the exceptions list, bypassing any filtering. Via a browser Http traffic works as it should.

 

The server Is set up no different to any of the others, static ip reserved for my servers and switches. Windows server update to date , firewall off, UCA set to never notify and Trend Office scan installed.

 

So here is the bizarre part, I cant Ping or Trccert google - or anything really!

 

[ATTACH=CONFIG]29817[/ATTACH]

 

I have tried all the obvious, checked over DNS, flushing the DNS. Remove and re-added the NIC, assigned a different IP and so on. I have relocated Spiceworks and 4Matrix to a new server just in case there was conflict there!

 

Some times when I reboot, or say change the Ip. It lets me then ping google, this is not for long though! A few minutes down the line it then comes back same the result in the image.

 

Its a tricky one this! I have no idea to could be causing this.

 

All suggestions welcome.

 

Many thanks,

 

 

Giles

[themightymrp]

Your attachment isn't working :-/ ??

 

Are you using Hyper-V as your virtualization program?

[jenking]

C:\Users\administrator.CANONLEE>tracert 8.8.8.8

 

Tracing route to google-public-dns-a.google.com [8.8.8.8]

over a maximum of 30 hops:

 

1 <1 ms <1 ms <1 ms schoolguardian.canonlee.york.sch.uk [?.?.?.?]

 

2 schoolguardian.canonlee.york.sch.uk [?.?.?.?] reports: Destination pro

tocol unreachable.

 

Trace complete.

 

C:\Users\administrator.CANONLEE>ping 8.8.8.8

 

Pinging 8.8.8.8 with 32 bytes of data:

Reply from ?.?.?.?: Destination port unreachable.

Reply from ?.?.?.?: Destination port unreachable.

Reply from ?.?.?.?: Destination port unreachable.

Reply from ?.?.?.?: Destination port unreachable.

 

Ping statistics for 8.8.8.8:

Packets: Sent = 4, Received = 4, Lost = 0 (0% loss),

 

C:\Users\administrator.CANONLEE>

 

 

The picture I attached was supposed to be a tracert and ping report to 8.8.8.8. As above, The ?.?.?.? are the smooth walls internal IP.

 

We use Hyper-V

 

Iv just realised when I do the same ping from another server on the same Hyper-V host I get the following.

 

C:\Users\administrator.CANONLEE>ping 8.8.8.8

 

Pinging 8.8.8.8 with 32 bytes of data:

Reply from 8.8.8.8: bytes=32 time=9ms TTL=44

Reply from 8.8.8.8: bytes=32 time=8ms TTL=44

Reply from 8.8.8.8: bytes=32 time=7ms TTL=44

Reply from 8.8.8.8: bytes=32 time=12ms TTL=44

 

Ping statistics for 8.8.8.8:

Packets: Sent = 4, Received = 4, Lost = 0 (0% loss),

Approximate round trip times in milli-seconds:

Minimum = 7ms, Maximum = 12ms, Average = 9ms

 

C:\Users\administrator.CANONLEE>

 

Why the smoothwall wont let the tracert get further than the smoothwall, i don't know!!

 

Cheers,

 

Giles

[themightymrp]

It must be a filtering setting on the smoothwall for the IP of your server. We don't have smoothwall so can't point the exact setting but that must be it. Can you ping and tracert from the troublesome server to another internal server without issue? If that's successful it point to the web filter/firewall

[jenking]

Yea internal pings and look-ups work a treat! Ill try change the Ip to address of a server I can take down for the day, this server can definitely ping google fine. After that ill see what the LA say!

[sted]

just a thought you have put in the proxy server settings on that box if youre using smoothwall

[jenking]

Yea, we use our smoothwall/proxy internal ip & port for our workstations and some servers! With exception of using a different port that bypasses the filtering when adding the Ip in the exceptions list within smoothwall. Iv tried various combinations, obviously we can browse the net fine! The default gateway is set to the smoothwall as on all our other Servers/Workstations!

 

Cheers Guys, ill try change the IP on the server one last time! I'm cracking up, it should just work!

 

Giles

[jenking]

Iv quickly changed the IP address on the Softlink Oliver, the IP taken from a server I host the intranet and a few SEN apps. Theses are all internal apps that don't require any out side connection. Low and behold I can now ping Google and telnet to the required z-cataloging sites.

 

Looking good!

 

The funny thing is Iv already tried three other Static Ip's - Im sure these were free from been used else where, i think they were old switches that are now extinct. None of them would let me ping out! In theory any Ip I use should be at least be able to ping Google if the proxy and IP protocol settings are correct. Ill check my serves and see how my others statics behave! Not to mention my DHCP workstations!

 

 

Ill do some more digging with the Statics that's wont let me ping out, maybe a question for the smoothwall bunch or our LA. They keep seem to be changing things around, can never be sure where to point the figure.

 

Can I thank you all for assistance, it is always much appreciated. I see we're all Yorkshire, cheers guys.

 

Giles

[themightymrp]

I see we're all Yorkshire, cheers guys.

 

Well basing it on the Canonlee name shown above, I'm not far from you at all (Boston Spa)

[jenking]

I'm from Just near Tadcaster - Sherburn - In - Elmet. We have just bought our first house in York. So yea, not too far at all

 

Cheers

[themightymrp]

Very close then! Back to the point in hand it sounds like a smoothwall setting to me. But seeing as we don't use it I can't help ya :-/