5000 VV's to whomever can fix my problem...

Drewno · Post by **Drewno** » August 31, 2003, 5:42 am

So i use windowsXP - Which is most likely the problem here since windows is a stinky peice of shit - but that's beside the point.

Here's my situation:

Using XP
On a LAN here at my university
Internet is working fine EXCEPT...
I cannot ping ANYTHING outside the scope of localhost and my DHCP server
I can't even ping my own DNS servers....pastes inc...
C:\DOCUME~1\DREWNO>ipconfig

Windows IP Configuration

Ethernet adapter Local Area Connection 2:

Connection-specific DNS Suffix . :
IP Address. . . . . . . . . . . . : 128.255.167.152
Subnet Mask . . . . . . . . . . . : 255.255.255.0
Default Gateway . . . . . . . . . : 128.255.167.1

C:\DOCUME~1\DREWNO>ipconfig /release

Windows IP Configuration

Ethernet adapter Local Area Connection 2:

Connection-specific DNS Suffix . :
IP Address. . . . . . . . . . . . : 0.0.0.0
Subnet Mask . . . . . . . . . . . : 0.0.0.0
Default Gateway . . . . . . . . . :

C:\DOCUME~1\DREWNO>ipconfig /renew

Windows IP Configuration

Ethernet adapter Local Area Connection 2:

Connection-specific DNS Suffix . :
IP Address. . . . . . . . . . . . : 128.255.167.152
Subnet Mask . . . . . . . . . . . : 255.255.255.0
Default Gateway . . . . . . . . . : 128.255.167.1

C:\DOCUME~1\DREWNO>ping 128.255.3.243 ***DHCP Server***

Pinging 128.255.3.243 with 32 bytes of data:

Reply from 128.255.3.243: bytes=32 time<1ms TTL=254
Reply from 128.255.3.243: bytes=32 time<1ms TTL=254
Reply from 128.255.3.243: bytes=32 time<1ms TTL=254
Reply from 128.255.3.243: bytes=32 time<1ms TTL=254

Ping statistics for 128.255.3.243:
Packets: Sent = 4, Received = 4, Lost = 0 (0% loss),
Approximate round trip times in milli-seconds:
Minimum = 0ms, Maximum = 0ms, Average = 0ms

C:\DOCUME~1\DREWNO>ping 128.255.1.8 ***DNS Server #1***

Pinging 128.255.1.8 with 32 bytes of data:

Request timed out.
Request timed out.
Request timed out.
Request timed out.

Ping statistics for 128.255.1.8:
Packets: Sent = 4, Received = 0, Lost = 4 (100% loss),

C:\DOCUME~1\DREWNO>ping 128.255.3.8 ***DNS Server #2***

Pinging 128.255.3.8 with 32 bytes of data:

Request timed out.
Request timed out.
Request timed out.
Request timed out.

Ping statistics for 128.255.3.8:
Packets: Sent = 4, Received = 0, Lost = 4 (100% loss),

C:\DOCUME~1\DREWNO>ping 128.255.64.11 ***DNS Server #3***

Pinging 128.255.64.11 with 32 bytes of data:

Request timed out.
Request timed out.
Request timed out.
Request timed out.

Ping statistics for 128.255.64.11:
Packets: Sent = 4, Received = 0, Lost = 4 (100% loss),

C:\DOCUME~1\DREWNO>ping 128.255.167.1 ***Gateway***

Pinging 128.255.167.1 with 32 bytes of data:

Reply from 128.255.167.1: bytes=32 time<1ms TTL=255
Reply from 128.255.167.1: bytes=32 time<1ms TTL=255
Reply from 128.255.167.1: bytes=32 time<1ms TTL=255
Reply from 128.255.167.1: bytes=32 time<1ms TTL=255

Ping statistics for 128.255.167.1:
Packets: Sent = 4, Received = 4, Lost = 0 (0% loss),
Approximate round trip times in milli-seconds:
Minimum = 0ms, Maximum = 0ms, Average = 0ms

C:\DOCUME~1\DREWNO>ping http://www.yahoo.com ***Same Results for *all* IP's and Websites***

Pinging http://www.yahoo.akadns.net [216.109.118.70] with 32 bytes of data:

Request timed out.
Request timed out.
Request timed out.
Request timed out.

Ping statistics for 216.109.118.70:
Packets: Sent = 4, Received = 0, Lost = 4 (100% loss),

A few things to be said before any attempts to help me:

#1: I'm absolutely sure i have the latest drivers for my NIC
#2: I'm absolutely sure my computer has all of the latest security patches/updates from microsoft
#3: I'm absolutely sure my computer is virus free
#4: Firewall settings on my computer are all deactivated
------------------------------------------------------------------
I'm connecting through a 3com NIC that i've had for about two years now and I have never had a problem with it. I am connecting over Ethernet in a dorm at college - This is my second year at college and I had no problems over the first year.

Next thing i'm about to try would be reformatting and reinstalling the devil, but i'd like to hear from any of you guys that might have any suggestions as to what in the hell to do.

PLEASE HELP ME!!1!

Post by **pyrella** » August 31, 2003, 6:37 am

I'm assuming you can surf to sites no problem, just can't ping them. Sounds like your uni disabled ICMP to prevent there nice fat pipes from being used in DoS attacks and other nastiness.

Forthe · Post by **Forthe** » August 31, 2003, 9:28 am

Yeah ICMP isn't being routed on your gateway.

No problem with your machine.

Sabek · Post by **Sabek** » August 31, 2003, 9:59 am

Yes the fact that you can ping by name and get an ip back for Yahoo indicates that you have network connectivity to at least one of your DNS servers. As Py said they most likely have blocked ICMP. You could do tracert ipofdnsserver and see what IP address it stops at. I would imagine the traceroute doesnt get past your default gateway.

Neost · Post by **Neost** » August 31, 2003, 10:27 am

ICMP was most likely disabled due to the nachi variant of blaster. It floods the network with icmp echo requests looking for other hosts to "fix".

Xaem · Post by **Xaem** » August 31, 2003, 12:29 pm

Where are you going to get 5000 VVs from?

Drewno · Post by **Drewno** » August 31, 2003, 2:02 pm

I have just over 19,000 saved up.

I would agree that it seems that my Univ simply disabled ICMP for security reasons, and that's what is stopping me from pinging shizzle - But would it make sense that I can still actively ping from any other comp at the university? (At this point, I have only tried those at two of our libraries, and one of the labs - all three worked fine) I still believe the problem lies within my computer =/

Lohrno · Post by **Lohrno** » August 31, 2003, 2:11 pm

It could also be that you have some kind of firewall you installed on your computer too. If you really suspect it's your computer, check someone else's computer who lives in the dorms. If they can't do it either, then they blocked it from the dorms. If they can then probably yes, it's your computer.

-=Lohrno

Cracc · Post by **Cracc** » August 31, 2003, 3:34 pm

So whats the point of disabling icmp traffic when most DoS attacks usually are SYN attacks anyhow?

Sabek · Post by **Sabek** » August 31, 2003, 8:43 pm

Cracc wrote:So whats the point of disabling icmp traffic when most DoS attacks usually are SYN attacks anyhow?

Ummm no.

Neost · Post by **Neost** » August 31, 2003, 9:53 pm

Ping floods are the most basic and prevalent dos type attack. Get a router/firewall/pc answering ping responses from spoofed addresses or non-existent addresses and watch em choke.

Janx · Post by **Janx** » August 31, 2003, 10:03 pm

Rofl. Thtats what I told you in IRC Drew =P ICMP packets are being blocked.. VV's pls.

Marbus · Post by **Marbus** » September 2, 2003, 2:14 pm

So since you really didn't have a problem and almost everyone who posted is correct, do we all get the VVs?

Marb

Drewno · Post by **Drewno** » September 2, 2003, 3:10 pm

I can ping anything from any other computer in the residence halls....So no - My problem isn't fixed.

Cartalas · Post by **Cartalas** » September 2, 2003, 3:12 pm

Drewno wrote:I can ping anything from any other computer in the residence halls....So no - My problem isn't fixed.

That makes sense Drewno if ICMP traffic is blocked at the Router level everything with in that class C should be pingable.

Marbus · Post by **Marbus** » September 2, 2003, 3:17 pm

But you can surf right? or at least it sounds like you are getting out to the Internet but you just can't ping things outside your LAN.

In the Campus networks I have designed or helped to design we always used a tiered approach. They are probably using Layer 3 switches to push Gig between the dorms or buildings. When doing so that is where they would be blocking ICMP. That would be why you can ping things inside your local lan but not on the greater campus.

You might try to ping your gateway, if you can get out but not ping it then they are bocking at that point.

Marb

Lohrno · Post by **Lohrno** » September 2, 2003, 5:02 pm

Cartalas wrote:That makes sense Drewno if ICMP traffic is blocked at the Router level everything with in that class C should be pingable.

Yeah, by anything, make sure you can do something like http://www.veeshanvault.org, or http://www.yahoo.com

If you can, then look on your computer for any firewall or content censoring programs, and uninstall them.

-=Lohrno

Zaelath · Post by **Zaelath** » September 2, 2003, 5:47 pm

Drewno wrote:I can ping anything from any other computer in the residence halls....So no - My problem isn't fixed.

You can ping machines internal to your network, regardless of what subnet they're on because; ICMP is being killed at the border as is the usual case in universities. The unusual step is to kill ICMP replies, but not unheard of and not anything wrong with your machine.

Now, if your next door neighbour could bring their laptop in, connect to your network jack, and ping anywhere in the world, that would be ... interesting.

Drewno · Post by **Drewno** » September 2, 2003, 9:15 pm

That is the exact problem
Re read what i posted before.

I can ping sites, such as yahoo, etc.... from other computers at the residence halls. I'm not talking about computers at my classes, but about computers TEN FEET from mine. That is why i'm strongly leaning towards a problem with my computer.

Edit Note: Computers that i have tested in my dorms have all been running some form of Windows.

Lohrno · Post by **Lohrno** » September 2, 2003, 10:20 pm

Well, you probably should have said exactly that then.

Anyhoo, It's definitely a problem with your computer exactly. You need to uninstall/reconfigure your firewall. Find out what ports ping is (I'm no networking guy, so I don't know, but 5 minutes on google would probably yield that.) , then see if your firewall is blocking it. If it is, open those ports for ping, and your problem has been solved.

-=Lohrno

Post by **TheMachine** » September 2, 2003, 10:44 pm

Type this in your run line

netsh int ip reset c:\resetlog.txt

VeeshanVault

5000 VV's to whomever can fix my problem...

5000 VV's to whomever can fix my problem...

Ok...