Help - IP address on block lists

colinsunderland · 20-07-2010, 09:47

For the last week I've not been able to access a range of websites, such as halifax.co.uk, any .gov.uk and quite a few others.

This only happens when I connect the modem directly to the computer, but if I add a router inbetween or use a site such as hidemyass I can connect perfectly. I'm not great on the network side of things but the little knowledge I have led me to think it was possibly a dns or ip address problem.

Rang tech support last night

First time he answered the call, then cut me off
Second time he decided it was a computer problem and put me through to digital home support who wanted to charge me to fix the problem.
Third time insisted on talking to a higher level tech, who still didn't fix it but at least got closer to the problem.

Ran some tracert's to affected websites and each time when it failed the tech support guy said it wasn't virgin to blame, there was a problem with the server of the machine I was trying to get to. When I asked how come he could get on ok, he said 'thats what happens sometimes'.
I told him I thought my ip address had been blocked and he said he didn't think so. I then asked could I be assigned a new IP address to see if it fixed the problem and he said no it was impossible, but the lease runs out on Friday at 23.30 so I should be assigned a new one then, but there was nothing he could do before then.

So after I got off the phone, I did some checks and it turns out the ip range is on some blocked lists, explaining why some sites can't be accessed.

It can't be right that I only have reduced internet access due to this and nothing can be done. What happens if on Friday I'm assigned another IP within the same range?

Anyone got any idea's what can be done please?

Kymmy · 20-07-2010, 09:50

The router gets a different IP because it has a different MAC from your internal network card.

Just change the MAC on your NIC or use the router..

colinsunderland · 20-07-2010, 09:59

The router isn't mine so thats not an option, it was one I borrowed to test something when it started happening.
How do I change the MAC please on the NIC?
Will that change the IP address? I thought that was assigned by Virgin (thats certainly what tech support told me last night)

Stuart · 20-07-2010, 10:05

Quote:

Originally Posted by colinsunderland

The router isn't mine so thats not an option, it was one I borrowed to test something when it started happening.
How do I change the MAC please on the NIC?
Will that change the IP address? I thought that was assigned by Virgin (thats certainly what tech support told me last night)

It is assigned by Virgin, but changing the MAC will force them to issue a new IP as their system will assume a new device has been plugged in.

Kymmy · 20-07-2010, 10:08

Quote:

Originally Posted by colinsunderland

How do I change the MAC please on the NIC?
Will that change the IP address? I thought that was assigned by Virgin (thats certainly what tech support told me last night)

A new MAC will force a new IP lease, to change it it depends on the NIC, try searching with google

colinsunderland · 20-07-2010, 10:30

excellent, thanks very much for the replies, will try it when i get home this evening

Kymmy · 20-07-2010, 10:35

Begs the question though as to why an IP block would be in place or even possible over many websites, you'll probably find that it's a current routing problem with the IP address block

Griffin · 20-07-2010, 10:59

Quote:

Originally Posted by Kymmy

Begs the question though as to why an IP block would be in place or even possible over many websites, you'll probably find that it's a current routing problem with the IP address block

You may find they are running something similar to peerblock. If an ip has been used by a snooping firm at anytime then it will will end up on a blocklist, trouble is when the ip addresses get reassigned some poor user gets stuck with an iffy ip.

Toto · 20-07-2010, 10:59

Quote:

Originally Posted by colinsunderland

For the last week I've not been able to access a range of websites, such as halifax.co.uk, any .gov.uk and quite a few others.

This only happens when I connect the modem directly to the computer, but if I add a router inbetween or use a site such as hidemyass I can connect perfectly. I'm not great on the network side of things but the little knowledge I have led me to think it was possibly a dns or ip address problem.

Rang tech support last night

First time he answered the call, then cut me off
Second time he decided it was a computer problem and put me through to digital home support who wanted to charge me to fix the problem.
Third time insisted on talking to a higher level tech, who still didn't fix it but at least got closer to the problem.

Ran some tracert's to affected websites and each time when it failed the tech support guy said it wasn't virgin to blame, there was a problem with the server of the machine I was trying to get to. When I asked how come he could get on ok, he said 'thats what happens sometimes'.
I told him I thought my ip address had been blocked and he said he didn't think so. I then asked could I be assigned a new IP address to see if it fixed the problem and he said no it was impossible, but the lease runs out on Friday at 23.30 so I should be assigned a new one then, but there was nothing he could do before then.

So after I got off the phone, I did some checks and it turns out the ip range is on some blocked lists, explaining why some sites can't be accessed.

It can't be right that I only have reduced internet access due to this and nothing can be done. What happens if on Friday I'm assigned another IP within the same range?

Anyone got any idea's what can be done please?

Sorry, but seeing your IP address on a block list does not explain the issue.

You are able to get to the sites with a direct connection to your modem, but are having problems with your router. Whilst you would be on a different IP address for the direct and then routed connection, the address assignment would be in the same subnet.

I'd suggest, as has others, that there is a local problem with your router.

IP address block lists are generally used by email network systems for SMTP traffic, not websites using port 80, 8080 and 443.

Whilst the direct connection route solves the problem, I suspect something in your router is the issue.

Can you provide a link to one of the block lists, obviously editing out your IP address.

20-07-2010, 11:07

Changing the mac on the router aint gonna do any harm to the router anyway. The guy would not even know as he would have to power cycle the equipment anyway to get his kit to work

colinsunderland · 20-07-2010, 12:19

Quote:

Originally Posted by Toto

Sorry, but seeing your IP address on a block list does not explain the issue.

You are able to get to the sites with a direct connection to your modem, but are having problems with your router. Whilst you would be on a different IP address for the direct and then routed connection, the address assignment would be in the same subnet.

I'd suggest, as has others, that there is a local problem with your router.

IP address block lists are generally used by email network systems for SMTP traffic, not websites using port 80, 8080 and 443.

Whilst the direct connection route solves the problem, I suspect something in your router is the issue.

Can you provide a link to one of the block lists, obviously editing out your IP address.

You have that the wrong way round, when going through the router, everything is fine. When directly connected to the modem is when i get the problems

I can't post anthing until I get home around 6 but will do then

---------- Post added at 13:19 ---------- Previous post was at 13:13 ----------

actually, i do have some stuff from the other day, mainly pings though - don't know if it will help

Quote:

Microsoft Windows [Version 6.0.6000]
Copyright (c) 2006 Microsoft Corporation. All rights reserved.

C:\>ping halifax.co.uk

Pinging halifax.co.uk [212.140.245.97] with 32 bytes of data:

Reply from 62.172.161.126: Destination net unreachable.
Request timed out.
Reply from 62.172.161.126: Destination net unreachable.
Reply from 62.172.161.126: Destination net unreachable.

Ping statistics for 212.140.245.97:
Packets: Sent = 4, Received = 3, Lost = 1 (25% loss),

C:\>

C:\>ping www.opsi.gov.uk

Pinging www.opsi.gov.uk [195.99.1.70] with 32 bytes of data:

Request timed out.
Request timed out.
Request timed out.
Request timed out.

Ping statistics for 195.99.1.70:
Packets: Sent = 4, Received = 0, Lost = 4 (100% loss),

C:\>

Quote:

Microsoft Windows [Version 6.0.6000]
Copyright (c) 2006 Microsoft Corporation. All rights reserved.

C:\Users\Colin>cd..

C:\Users>cd..

C:\>nslookup -debug www.halifax.co.uk
------------
Got answer:
HEADER:
opcode = QUERY, id = 1, rcode = NOERROR
header flags: response, want recursion, recursion avail.
questions = 1, answers = 1, authority records = 0, additional = 0

QUESTIONS:
100.4.168.194.in-addr.arpa, type = PTR, class = IN
ANSWERS:
-> 100.4.168.194.in-addr.arpa
name = cache1.service.virginmedia.net
ttl = 34317 (9 hours 31 mins 57 secs)

------------
Server: cache1.service.virginmedia.net
Address: 194.168.4.100:53

------------
Got answer:
HEADER:
opcode = QUERY, id = 2, rcode = NOERROR
header flags: response, want recursion, recursion avail.
questions = 1, answers = 1, authority records = 0, additional = 0

QUESTIONS:
www.halifax.co.uk.cable.virginmedia.net, type = A, class = IN
ANSWERS:
-> www.halifax.co.uk.cable.virginmedia.net
internet address = 81.200.64.50
ttl = 0 (0 secs)

------------
Non-authoritative answer:
Name: www.halifax.co.uk.cable.virginmedia.net
Address: 81.200.64.50

thats the only data I have here though, but will do some more stuff this evening

Ignitionnet · 20-07-2010, 13:22

Oh I see.

When you have your PC directly connected you need to opt out of the crappy Advanced Network Error thing again.

When plugged in directly go to https://my.virginmedia.com/advancederrorsearch/settings

colinsunderland · 20-07-2010, 21:48

ok, tried changing the MAC and didn't make a difference (or change IP)

using http://www.blacklistalert.org/ I get the following result
not sure if it means anything

Quote:

Reverse DNS (PTR) exists and claims to be: cpc2-sund8-0-0-cust766.know.cable.virginmedia.com.

Forward DNS for cpc2-sund8-0-0-cust766.know.cable.virginmedia.com is: 213.106.xx.xxx

WARNING: Forward-DNS does NOT match Reverse-DNS.
DNS is INCONSISTENT.
Please request your Admin or Provider to fix this.

tracert shows the following

Quote:

Microsoft Windows [Version 6.0.6000]
Copyright (c) 2006 Microsoft Corporation. All rights reserved.

C:\Windows\system32>cd..

C:\Windows>cd..

C:\>tracert www.halifax.co.uk

Tracing route to www.halifax.co.uk [212.140.245.97]
over a maximum of 30 hops:

1 190 ms 168 ms 171 ms 10.37.68.1
2 113 ms 123 ms 128 ms midd-cam-1b-v135.network.virginmedia.net [213.10
6.239.101]
3 259 ms 216 ms 189 ms midd-core-1b-ae1-0.network.virginmedia.net [195.
182.176.113]
4 190 ms 214 ms 418 ms manc-bb-1b-as6-0.network.virginmedia.net [213.10
5.75.49]
5 158 ms 111 ms 135 ms popl-bb-1a-as4-0.network.virginmedia.net [212.43
.162.85]
6 195 ms 197 ms 219 ms popl-bb-1b-ae0-0.network.virginmedia.net [213.10
5.174.230]
7 169 ms 174 ms 207 ms tele-ic-2-as0-0.network.virginmedia.net [62.253.
184.6]
8 251 ms 175 ms 177 ms 195.99.125.113
9 162 ms 192 ms 228 ms core2-pos0-6-4-0.ealing.ukcore.bt.net [195.99.12
5.194]
10 252 ms 255 ms 210 ms core2-pos7-0.sheffield.ukcore.bt.net [62.172.103
.114]
11 283 ms 258 ms 280 ms 217.32.171.118
12 206 ms 176 ms 165 ms 213.121.143.190
13 62.172.161.126 reports: Destination net unreachable.

Trace complete.

Kymmy · 20-07-2010, 22:01

Never trust pings, they're low priority on most networks and on many are totally ignored with no response.

---------- Post added at 23:01 ---------- Previous post was at 22:57 ----------

For example Halifax works for me fine yet the final ping still shows as unreachable

Code:

Tracing route to www.halifax.co.uk [212.140.245.97]
over a maximum of 30 hops:

  1    <1 ms    <1 ms    <1 ms  192.168.0.1 
  2    10 ms     8 ms     7 ms  10.136.124.1 
  3    11 ms     9 ms     8 ms  lutn-cam-1a-v113.network.virginmedia.net [80.4.118.17] 
  4    89 ms   151 ms   116 ms  lutn-core-1a-ae1-0.network.virginmedia.net [195.182.174.169] 
  5    10 ms    14 ms    13 ms  popl-bb-1a-as5-0.network.virginmedia.net [213.105.175.149] 
  6     9 ms     9 ms    10 ms  popl-bb-1b-ae0-0.network.virginmedia.net [213.105.174.230] 
  7     9 ms     9 ms    10 ms  tele-ic-2-as0-0.network.virginmedia.net [62.253.184.6] 
  8    14 ms    15 ms    16 ms  195.99.125.113 
  9    14 ms    16 ms    15 ms  core1-te-0-3-4-0.ilford.ukcore.bt.net [62.172.102.26] 
 10   130 ms    97 ms   144 ms  62.172.103.126 
 11    21 ms    23 ms    23 ms  217.32.171.114 
 12    22 ms    23 ms    23 ms  213.121.143.190 
 13  62.172.161.126  reports: Destination net unreachable.

Trace complete.

colinsunderland · 20-07-2010, 22:14

yes, but in my case the site won't load either - bit unsure of what other tests to do to fault find?

This is exactly what I get when I try www.halifax.co.uk

Quote:

The connection was reset

The connection to the server was reset while the page was loading.

* The site could be temporarily unavailable or too busy. Try again in a few
moments.

* If you are unable to load any pages, check your computer's network
connection.

* If your computer or network is protected by a firewall or proxy, make sure
that Firefox is permitted to access the Web.

Its teh same with IE or google chrome