Cable Forum

Cable Forum (https://www.cableforum.uk/board/index.php)
-   Virgin Media Internet Service (https://www.cableforum.uk/board/forumdisplay.php?f=12)
-   -   No internet connectivity when phorm.com is blocked (split from monster phorm thread) (https://www.cableforum.uk/board/showthread.php?t=33631699)

Graham M 18-04-2008 15:38

Re: No internet connectivity when phorm.com is blocked (split from monster phrom thre
 
I'm confused, who is The Jackal?! :notopic:

The Jackal 18-04-2008 15:41

Re: No internet connectivity when phorm.com is blocked (split from monster phrom thre
 
Quote:

Originally Posted by Heed (Post 34531840)
I would be more than happy to put it down to something innocent like poor NTL DNS servers, but I can't escape the fact that several dozen times I have switched from blocking/unblocking phorm.com and each time it resulted in no connectivity (block) and connectivity (unblocked) when using the default NTL DNS servers. That can't be a coincidence, can it?

Well it seems like your connection is failing to do a name resolution this is hardly blocked internet access.

If you can when you say your internet is blocked can you do a

netstat -n so that we can see exactly where your machine is trying to connect to.

Repeat when connected.

Heed 18-04-2008 15:46

Re: No internet connectivity when phorm.com is blocked (split from monster phrom thre
 
Quote:

Originally Posted by The Jackal (Post 34531852)
Well it seems like your connection is failing to do a name resolution this is hardly blocked internet access.

If you can when you say your internet is blocked can you do a

netstat -n so that we can see exactly where your machine is trying to connect to.

Repeat when connected.

Well, when you can't resolve a domain name that's a lot of the internet unavailable. But let's not quibble about that.


C:\Documents and Settings\Heed>netstat -n

Active Connections

Proto Local Address Foreign Address State
TCP 82.11.31.190:4503 208.69.34.230:80 ESTABLISHED

C:\Documents and Settings\Heed>netstat -n

Active Connections

Proto Local Address Foreign Address State
TCP 82.11.31.190:4503 208.69.34.230:80 ESTABLISHED



No difference with phorm.com blocked or unblocked.

I'm back on the default DNS servers for testing purposes.

And as soon as phorm.com is blocked I can't resolve domain names and as soon as it's ublocked I can.

The Jackal 18-04-2008 15:51

Re: No internet connectivity when phorm.com is blocked (split from monster phrom thre
 
Quote:

Originally Posted by Heed (Post 34531857)
And as soon as phorm.com is blocked I can't resolve domain names and as soon as it's ublocked I can.

Try to trace what is happening to your DNS resolutions. (tcp/udp ports 53)

I don't know much about windows so maybe someone else can help get the tools that you need to monitor tcp connections.

I used to use a tcp/ip monitor but for the love of life can't remember what it was called.

Good luck - Let us know where it fails as I'd love to play with this further.

Thankyou

Cobbydaler 18-04-2008 15:55

Re: No internet connectivity when phorm.com is blocked (split from monster phrom thre
 
Quote:

Originally Posted by The Jackal (Post 34531864)
Try to trace what is happening to your DNS resolutions. (tcp/udp ports 53)

I don't know much about windows so maybe someone else can help get the tools that you need to monitor tcp connections.

I used to use a tcp/ip monitor but for the love of life can't remember what it was called.

Good luck - Let us know where it fails as I'd love to play with this further.

Thankyou

tcpmon?

Heed 18-04-2008 15:57

Re: No internet connectivity when phorm.com is blocked (split from monster phrom thre
 
Quote:

Originally Posted by The Jackal (Post 34531864)
Try to trace what is happening to your DNS resolutions. (tcp/udp ports 53)

I don't know much about windows so maybe someone else can help get the tools that you need to monitor tcp connections.

I used to use a tcp/ip monitor but for the love of life can't remember what it was called.

Good luck - Let us know where it fails as I'd love to play with this further.

Thankyou

Yeah, we've reached the extent of my networking and networking tools knowledge.

I've done another tracert and I'm still showing a fail (time out) on my third hop to midd-t3core-1b-ge-010-0.inet.ntl.com when phorm.com is blocked.

The Jackal 18-04-2008 15:57

Re: No internet connectivity when phorm.com is blocked (split from monster phrom thre
 
Quote:

Originally Posted by Cobbydaler (Post 34531867)

I love this guy. Spot on everytime.

Yeh that's the one I used.

Heed 18-04-2008 16:02

Re: No internet connectivity when phorm.com is blocked (split from monster phrom thre
 
Okay, running tcpmon now. With phorm.com blocked it shows nothing when I try to hit a site -- no connections nothing in the log.

The Jackal 18-04-2008 16:29

Re: No internet connectivity when phorm.com is blocked (split from monster phrom thre
 
And what do you see in the logs when you ping the bbc as follows

ping 212.58.226.20

---------- Post added at 16:29 ---------- Previous post was at 16:27 ----------

oops tcpmon doesn't monitor pings.

instead try

telnet 212.58.226.20 80

You should see the ack sent and possibly an established state

Heed 18-04-2008 16:44

Re: No internet connectivity when phorm.com is blocked (split from monster phrom thre
 
With phorm.com ublocked:

16:41:11 | 82. 11. 31.190: 4750 | 212. 58.226. 20:HTTP | established

With phorm.com blocked:

16:43:25 | 82. 11. 31.190: 4751 | 212. 58.226. 20:HTTP | established

The Jackal 18-04-2008 16:50

Re: No internet connectivity when phorm.com is blocked (split from monster phrom thre
 
Quote:

Originally Posted by Heed (Post 34531914)
With phorm.com ublocked:

16:41:11 | localip: 4750 | 212. 58.226. 20:HTTP | established

With phorm.com blocked:

16:43:25 | localip: 4751 | 212. 58.226. 20:HTTP | established

So you're connected but you can't see it in a browser. What about opera , IE , firefox, erm lynx for windows even :)

Within the terminal

telnet 212.58.226.20 80

hit ctrl-c several times

hit the return key and you should see the HTML from the bbc site.

And when you're blocked you can't do nslookups ?

---------- Post added at 16:50 ---------- Previous post was at 16:48 ----------

ps what happens when you put this in your browser ?

http://212.58.226.20/

Heed 18-04-2008 16:51

Re: No internet connectivity when phorm.com is blocked (split from monster phrom thre
 
If I hit ctrl+c or enter I just get "Bad request" and "connection to host lost".

The Jackal 18-04-2008 16:53

Re: No internet connectivity when phorm.com is blocked (split from monster phrom thre
 
Quote:

Originally Posted by Heed (Post 34531924)
If I hit ctrl+c or enter I just get "Bad request" and "connection to host lost".

Thats excellent and in the browser (opera/IE/firefox) ?

http://212.58.226.20/

Rchivist 18-04-2008 16:56

Re: No internet connectivity when phorm.com is blocked (split from monster phrom thre
 
Quote:

Originally Posted by Gavin (Post 34531779)
Tracing those 3 IPs, I can't see a link to Phorm.

88.208.250.66 > live-servers.net > Fasthosts
88.208.250.85 > live-servers.net > Fasthosts
207.44.186.90 > ThePlanet

So i'm guessing sites not hosted or routed through those companies should still work?

Fasthosts is where the BT Webwise pages are hosted
www.webwise.bt.com
- they used to be on Phorm related IP's looked after in Houston Texas by GODADDY, but now they are with the cheap budget hosting site Fasthosts. When Fasthosts went down earlier this week BT Webwise pages went down too.

Heed 18-04-2008 17:04

Re: No internet connectivity when phorm.com is blocked (split from monster phrom thre
 
Quote:

Originally Posted by The Jackal (Post 34531926)
Thats excellent and in the browser (opera/IE/firefox) ?

http://212.58.226.20/

Yes, I can reach that when I have phorm.com blocked.

Actually, I can reach it in Opera but not IE or FF2. I'm going to do a machine reboot and double check.

Hmm, after a machine reboot I can still get there in Opera, but not IE and FF2. This might be somehow related to the behaviour I noted earlier where if I visited a site successfully I could then get back most of the time after phorm.com was blocked.

EDIT: Finally loaded in FF2 without any images except the banner title (showing a lookup pending for newsimg.bbc.co.uk). Have got the banner title but no more to show up in IE.


All times are GMT. The time now is 00:54.

Powered by vBulletin® Version 3.8.11
Copyright ©2000 - 2026, vBulletin Solutions Inc.
All Posts and Content are © Cable Forum