If this is your first visit, be sure to check out the FAQ by clicking the link above. You may have to register before you can post: click the register link above to proceed. To start viewing messages, select the forum that you want to visit from the selection below. |
|
|
|
Thread Tools | Display Modes |
#1
|
|||
|
|||
Can't connect to Web
This morning I suddenly lost my connection to the web while I was
browsing. Mail still worked, news still worked, but the web connection did not. I reset the router, rebooted my computer, but still nothing. I wondered if it was a browser fault (I use Firefox) so tried Internet Explorer. It too could not connect, but offered to run diagnostics. This is what was found: ---- diagnostic report ---- Last diagnostic run time: 05/26/17 09:44:37 HTTP, HTTPS, FTP Diagnostic HTTP, HTTPS, FTP connectivity info HTTP: Successfully connected to www.microsoft.com. warn HTTPS: Error 12157 connecting to www.microsoft.com: An error occurred in the secure channel support warn FTP (Passive): Error 12031 connecting to ftp.microsoft.com: The connection with the server was reset warn HTTPS: Error 12029 connecting to www.passport.net: A connection with the server could not be established warn FTP (Active): Error 12031 connecting to ftp.microsoft.com: The connection with the server was reset error Could not make an HTTPS connection. error Could not make an FTP connection. info Redirecting user to support call DNS Client Diagnostic DNS - Not a home user scenario info Using Web Proxy: no info Resolving name ok for (www.microsoft.com): yes No DNS servers DNS failure Gateway Diagnostic Gateway info The following proxy configuration is being used by IE: Automatically Detect Settingsisabled Automatic Configuration Script: Proxy Server: Proxy Bypass list: info This computer has the following default gateway entry(ies): 192.168.0.1 info This computer has the following IP address(es): 192.168.0.2 info The default gateway is in the same subnet as this computer info The default gateway entry is a valid unicast address info The default gateway address was resolved via ARP in 1 try(ies) info The default gateway was reached via ICMP Ping in 1 try(ies) info TCP port 80 on host 104.92.152.182 was successfully reached info The Internet host www.microsoft.com was successfully reached info The default gateway is OK IP Layer Diagnostic Corrupted IP routing table info The default route is valid info The loopback route is valid info The local host route is valid info The local subnet route is valid Invalid ARP cache entries action The ARP cache has been flushed IP Configuration Diagnostic Invalid IP address info Valid IP address detected: 192.168.0.2 Wireless Diagnostic Wireless - Service disabled Wireless - User SSID Wireless - First time setup Wireless - Radio off Wireless - Out of range Wireless - Hardware issue Wireless - Novice user Wireless - Ad-hoc network Wireless - Less preferred Wireless - 802.1x enabled Wireless - Configuration mismatch Wireless - Low SNR WinSock Diagnostic WinSock status info IrDA protocol is not found in Winsock catalog. info All base service provider entries are present in the Winsock catalog. info The Winsock Service provider chains are valid. info Provider entry MSAFD Tcpip [TCP/IP] passed the loopback communication test. info Provider entry MSAFD Tcpip [UDP/IP] passed the loopback communication test. info Provider entry RSVP UDP Service Provider passed the loopback communication test. info Provider entry RSVP TCP Service Provider passed the loopback communication test. info Connectivity is valid for all Winsock service providers. Network Adapter Diagnostic Network location detection info Using home Internet connection Network adapter identification info Network connection: Name=Local Area Connection 2, Device=Realtek PCIe FE Family Controller, MediaType=LAN, SubMediaType=LAN info Network connection: Name=MSN, Device=, MediaType=PHONE, SubMediaType=NONE info Network connection: Name=telkomsa9, Device=WAN Miniport (PPPOE), MediaType=PPPOE, SubMediaType=NONE info Ethernet connection selected Network adapter status info Network connection status: Connected HTTP, HTTPS, FTP Diagnostic HTTP, HTTPS, FTP connectivity warn FTP (Passive): Error 12031 connecting to ftp.microsoft.com: The connection with the server was reset info HTTP: Successfully connected to www.microsoft.com. warn HTTPS: Error 12157 connecting to www.microsoft.com: An error occurred in the secure channel support warn HTTPS: Error 12029 connecting to www.passport.net: A connection with the server could not be established warn FTP (Active): Error 12031 connecting to ftp.microsoft.com: The connection with the server was reset error Could not make an HTTPS connection. error Could not make an FTP connection. --- end diagnostic report --- Can any of you network gurus suggest what can be done to fix it? -- Steve Hayes http://www.khanya.org.za/stevesig.htm http://khanya.wordpress.com |
Ads |
#2
|
|||
|
|||
Can't connect to Web
Steve Hayes wrote on 5/26/2017 4:04 AM:
This morning I suddenly lost my connection to the web while I was browsing. Mail still worked, news still worked, but the web connection did not. I reset the router, rebooted my computer, but still nothing. I wondered if it was a browser fault (I use Firefox) so tried Internet Explorer. It too could not connect, but offered to run diagnostics. This is what was found: ---- diagnostic report ---- Last diagnostic run time: 05/26/17 09:44:37 HTTP, HTTPS, FTP Diagnostic HTTP, HTTPS, FTP connectivity info HTTP: Successfully connected to www.microsoft.com. warn HTTPS: Error 12157 connecting to www.microsoft.com: An error occurred in the secure channel support warn FTP (Passive): Error 12031 connecting to ftp.microsoft.com: The connection with the server was reset warn HTTPS: Error 12029 connecting to www.passport.net: A connection with the server could not be established warn FTP (Active): Error 12031 connecting to ftp.microsoft.com: The connection with the server was reset error Could not make an HTTPS connection. error Could not make an FTP connection. info Redirecting user to support call DNS Client Diagnostic DNS - Not a home user scenario info Using Web Proxy: no info Resolving name ok for (www.microsoft.com): yes No DNS servers DNS failure Gateway Diagnostic Gateway info The following proxy configuration is being used by IE: Automatically Detect Settingsisabled Automatic Configuration Script: Proxy Server: Proxy Bypass list: info This computer has the following default gateway entry(ies): 192.168.0.1 info This computer has the following IP address(es): 192.168.0.2 info The default gateway is in the same subnet as this computer info The default gateway entry is a valid unicast address info The default gateway address was resolved via ARP in 1 try(ies) info The default gateway was reached via ICMP Ping in 1 try(ies) info TCP port 80 on host 104.92.152.182 was successfully reached info The Internet host www.microsoft.com was successfully reached info The default gateway is OK IP Layer Diagnostic Corrupted IP routing table info The default route is valid info The loopback route is valid info The local host route is valid info The local subnet route is valid Invalid ARP cache entries action The ARP cache has been flushed IP Configuration Diagnostic Invalid IP address info Valid IP address detected: 192.168.0.2 Wireless Diagnostic Wireless - Service disabled Wireless - User SSID Wireless - First time setup Wireless - Radio off Wireless - Out of range Wireless - Hardware issue Wireless - Novice user Wireless - Ad-hoc network Wireless - Less preferred Wireless - 802.1x enabled Wireless - Configuration mismatch Wireless - Low SNR WinSock Diagnostic WinSock status info IrDA protocol is not found in Winsock catalog. info All base service provider entries are present in the Winsock catalog. info The Winsock Service provider chains are valid. info Provider entry MSAFD Tcpip [TCP/IP] passed the loopback communication test. info Provider entry MSAFD Tcpip [UDP/IP] passed the loopback communication test. info Provider entry RSVP UDP Service Provider passed the loopback communication test. info Provider entry RSVP TCP Service Provider passed the loopback communication test. info Connectivity is valid for all Winsock service providers. Network Adapter Diagnostic Network location detection info Using home Internet connection Network adapter identification info Network connection: Name=Local Area Connection 2, Device=Realtek PCIe FE Family Controller, MediaType=LAN, SubMediaType=LAN info Network connection: Name=MSN, Device=, MediaType=PHONE, SubMediaType=NONE info Network connection: Name=telkomsa9, Device=WAN Miniport (PPPOE), MediaType=PPPOE, SubMediaType=NONE info Ethernet connection selected Network adapter status info Network connection status: Connected HTTP, HTTPS, FTP Diagnostic HTTP, HTTPS, FTP connectivity warn FTP (Passive): Error 12031 connecting to ftp.microsoft.com: The connection with the server was reset info HTTP: Successfully connected to www.microsoft.com. warn HTTPS: Error 12157 connecting to www.microsoft.com: An error occurred in the secure channel support warn HTTPS: Error 12029 connecting to www.passport.net: A connection with the server could not be established warn FTP (Active): Error 12031 connecting to ftp.microsoft.com: The connection with the server was reset error Could not make an HTTPS connection. error Could not make an FTP connection. --- end diagnostic report --- Can any of you network gurus suggest what can be done to fix it? I've had this problem myself, but I can't remember what I had to do to fix it. I think I had to reset the network stack. Seems it gets in a funky state and rebooting the machine doesn't fix it unless you execute some commands first. Here is the batch file I use to deal with this if I remember correctly. Someone gave it to me so it has some stuff commented out that isn't needed. Also, one comment talks about reinstalling browsers, I've never had to do that. Resetting the machine is required. This file needs to be run in a command window with administrative privileges. :: This problem usually has to do with TCP/IP or Winsock requiring a reset. :: Winsock entries tells Windows 7 how to access your network services. :: Additionally, your TCP/IP protocol can be corrupted. :: The TCP/IP protocol is a stack of 4 layers that includes several :: transport layers, but when this stack is corrupt you will constantly :: have connectivity issues. :: You need Admin access to enter the codes below. Windows button + x, :: then choose Command Prompt (Admin) :: reset winsock entries netsh winsock reset catalog :: reset TCP/IP stack netsh int ip reset c:\reset.log :: You may have to reinstall Chrome and Firefox or reboot to have :: the chnage take place. :: netsh int ip uninstall :: netsh int ip install :: HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Contro l\Nsi\{eb004a00-9b1a-11d4-9123-0050047759bc} 26 -- Rick C |
#3
|
|||
|
|||
Can't connect to Web
Steve Hayes wrote:
This morning I suddenly lost my connection to the web while I was browsing. Mail still worked, news still worked, but the web connection did not. I reset the router, rebooted my computer, but still nothing. I wondered if it was a browser fault (I use Firefox) so tried Internet Explorer. It too could not connect, but offered to run diagnostics. This is what was found: ---- diagnostic report ---- Last diagnostic run time: 05/26/17 09:44:37 HTTP, HTTPS, FTP Diagnostic HTTP, HTTPS, FTP connectivity info HTTP: Successfully connected to www.microsoft.com. warn HTTPS: Error 12157 connecting to www.microsoft.com: An error occurred in the secure channel support warn FTP (Passive): Error 12031 connecting to ftp.microsoft.com: The connection with the server was reset warn HTTPS: Error 12029 connecting to www.passport.net: A connection with the server could not be established warn FTP (Active): Error 12031 connecting to ftp.microsoft.com: The connection with the server was reset error Could not make an HTTPS connection. error Could not make an FTP connection. info Redirecting user to support call DNS Client Diagnostic DNS - Not a home user scenario info Using Web Proxy: no info Resolving name ok for (www.microsoft.com): yes No DNS servers DNS failure Gateway Diagnostic Gateway info The following proxy configuration is being used by IE: Automatically Detect Settingsisabled Automatic Configuration Script: Proxy Server: Proxy Bypass list: info This computer has the following default gateway entry(ies): 192.168.0.1 info This computer has the following IP address(es): 192.168.0.2 info The default gateway is in the same subnet as this computer info The default gateway entry is a valid unicast address info The default gateway address was resolved via ARP in 1 try(ies) info The default gateway was reached via ICMP Ping in 1 try(ies) info TCP port 80 on host 104.92.152.182 was successfully reached info The Internet host www.microsoft.com was successfully reached info The default gateway is OK IP Layer Diagnostic Corrupted IP routing table info The default route is valid info The loopback route is valid info The local host route is valid info The local subnet route is valid Invalid ARP cache entries action The ARP cache has been flushed IP Configuration Diagnostic Invalid IP address info Valid IP address detected: 192.168.0.2 Wireless Diagnostic Wireless - Service disabled Wireless - User SSID Wireless - First time setup Wireless - Radio off Wireless - Out of range Wireless - Hardware issue Wireless - Novice user Wireless - Ad-hoc network Wireless - Less preferred Wireless - 802.1x enabled Wireless - Configuration mismatch Wireless - Low SNR WinSock Diagnostic WinSock status info IrDA protocol is not found in Winsock catalog. info All base service provider entries are present in the Winsock catalog. info The Winsock Service provider chains are valid. info Provider entry MSAFD Tcpip [TCP/IP] passed the loopback communication test. info Provider entry MSAFD Tcpip [UDP/IP] passed the loopback communication test. info Provider entry RSVP UDP Service Provider passed the loopback communication test. info Provider entry RSVP TCP Service Provider passed the loopback communication test. info Connectivity is valid for all Winsock service providers. Network Adapter Diagnostic Network location detection info Using home Internet connection Network adapter identification info Network connection: Name=Local Area Connection 2, Device=Realtek PCIe FE Family Controller, MediaType=LAN, SubMediaType=LAN info Network connection: Name=MSN, Device=, MediaType=PHONE, SubMediaType=NONE info Network connection: Name=telkomsa9, Device=WAN Miniport (PPPOE), MediaType=PPPOE, SubMediaType=NONE info Ethernet connection selected Network adapter status info Network connection status: Connected HTTP, HTTPS, FTP Diagnostic HTTP, HTTPS, FTP connectivity warn FTP (Passive): Error 12031 connecting to ftp.microsoft.com: The connection with the server was reset info HTTP: Successfully connected to www.microsoft.com. warn HTTPS: Error 12157 connecting to www.microsoft.com: An error occurred in the secure channel support warn HTTPS: Error 12029 connecting to www.passport.net: A connection with the server could not be established warn FTP (Active): Error 12031 connecting to ftp.microsoft.com: The connection with the server was reset error Could not make an HTTPS connection. error Could not make an FTP connection. --- end diagnostic report --- Can any of you network gurus suggest what can be done to fix it? Microsoft dropped their FTP server and why you cannot connect to it. That happened long after Windows XP was released and when its troubleshooter was coded. There seems to be a listener on port 21 on their host but their FTP server program won't respond. You can connect via HTTP but not HTTPS. When you use a web browser to connect to https://www.microsoft.com/, it should report an error but it should also let you look at the details, like clicking on an icon in the address bar to get more info. That will tell you more. In IE, and when going to this HTTPS site, there should be a padlock icon in its address bar. Click on it. Do you use something that interrogates your HTTPS traffic? I use Avast Free and it has its HTTPS scanner. It uses a MITM (man-in-the-middle) scheme to intercept web traffic: it pretends to your client that it is the other endpoint (server) and it pretends to the server that it is your endpoint (client). That works by installing a root certificate into your certificate store. Windows has its own certificate store that is used by all web browsers EXCEPT Firefox which has its own private certificate store and into where Avast must install its root store. If HTTPS scanning is enabled in Avast but its root cert is missing, expired, or revoked in whichever cert store your web browser uses then the cert authentication will fail to its proxy trying to use that cert for the MITM scheme. If using Avast (or anything else that interrogates your HTTPS traffic), is it configured to scan your HTTPS traffic? If you use Firefox, is the avast cert listed in its private cert store (Options - Advanced - Certificates - View Certificates)? In Windows' cert store (certmgr.msc), is the "avast email/web shield" cert listed under Trusted Root Certificates? It can also depend on which web browser you use. Google made a change in version 53 of Chrome that requires the SA (Subject Alternate) field in a cert be populated. In the past, it was sufficient for a single domain to just populate the Subject field with the domain name. Still works okay in Firefox which does not demand the SA field be populated but Google decided to be assholes. If only one domain is specified, the Subject field has it and there has never been a requirement the SA field also be populated. The SA field is only to be used when more than one host or domain is listed for a cert. That lets sites use one cert for multiple targets rather than buy a cert for each one. I have another program (Applian Replay Media Capture aka RMC) that intercepts HTTPS traffic to capture video streams. It uses the MITM scheme to grab the HTTPS stream. Since it specifies only one domain, only the Subject field in the cert is populated. The SA field is empty (as it should be). I can use Firefox to visit a site and have RMC capture a video stream. Google Chrome will refuse to allow HTTPS connects when RMC is loaded (and using its cert for its proxy) because they require the SA field be populated but which is NOT required when just one domain is specified in the Subject field. The RMC cert is self-signed as are all root certs. Google is okay with the other root certs so I don't know why they don't like RMC's cert. That Google doesn't like RMC's root cert is why I cannot do anything HTTPS in Chrome when RMC's proxy is intercepting HTTPS traffic. I have to use Firefox (in which RMC added its cert to Firefox's private cert store) to use RMC with HTTPS sites. So check what you have running. In one case, it could be HTTPS scanning in some security program. In another case, it could be some software you use that intercepts HTTPS traffic. For either case, you must have the program's cert installed in whichever cert store that your program uses. If I disable HTTPS support in RMC, I cannot capture video streams from HTTPS sites because I cannot get their proxy to connect to HTTPS sites. With Avast, I could disable its HTTPS scanning feature but that means it can no longer inspect the content of a delivered web page to determine if anything untoward is in there. |
#4
|
|||
|
|||
Can't connect to Web
On 26/05/2017 09:04, Steve Hayes wrote:
Can any of you network gurus suggest what can be done to fix it? Move your residence to where there is a good network connection!! South Africa is not known to have a good internet service. -- With over 500 million devices now running Windows 10, customer satisfaction is higher than any previous version of windows. |
#5
|
|||
|
|||
Can't connect to Web
"Steve Hayes" wrote in message
... This morning I suddenly lost my connection to the web while I was browsing. Me Too So I Open Control Panel Click On Windows Updates And Stop Auto Updates Restart Pc It Work For Me Today |
#6
|
|||
|
|||
Can't connect to Web
On Fri, 26 May 2017 04:47:44 -0400, rickman wrote:
Steve Hayes wrote on 5/26/2017 4:04 AM: This morning I suddenly lost my connection to the web while I was browsing. Mail still worked, news still worked, but the web connection did not. I reset the router, rebooted my computer, but still nothing. I've had this problem myself, but I can't remember what I had to do to fix it. I think I had to reset the network stack. Seems it gets in a funky state and rebooting the machine doesn't fix it unless you execute some commands first. Here is the batch file I use to deal with this if I remember correctly. Someone gave it to me so it has some stuff commented out that isn't needed. Also, one comment talks about reinstalling browsers, I've never had to do that. Resetting the machine is required. This file needs to be run in a command window with administrative privileges. Thanks very much. :: This problem usually has to do with TCP/IP or Winsock requiring a reset. :: Winsock entries tells Windows 7 how to access your network services. :: Additionally, your TCP/IP protocol can be corrupted. :: The TCP/IP protocol is a stack of 4 layers that includes several :: transport layers, but when this stack is corrupt you will constantly :: have connectivity issues. :: You need Admin access to enter the codes below. Windows button + x, :: then choose Command Prompt (Admin) :: reset winsock entries netsh winsock reset catalog :: reset TCP/IP stack netsh int ip reset c:\reset.log :: You may have to reinstall Chrome and Firefox or reboot to have :: the chnage take place. :: netsh int ip uninstall :: netsh int ip install :: HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Contr ol\Nsi\{eb004a00-9b1a-11d4-9123-0050047759bc} 26 Are the double colons a necessary part of the command? -- Steve Hayes http://www.khanya.org.za/stevesig.htm http://khanya.wordpress.com |
#7
|
|||
|
|||
Can't connect to Web
Steve Hayes wrote:
Are the double colons a necessary part of the command? Comment lines in a batch file can either begin with "rem " (that's "rem" followed by a space or tab character) or with "::". |
#8
|
|||
|
|||
Can't connect to Web
Steve Hayes wrote on 5/28/2017 12:21 AM:
On Fri, 26 May 2017 04:47:44 -0400, rickman wrote: Steve Hayes wrote on 5/26/2017 4:04 AM: This morning I suddenly lost my connection to the web while I was browsing. Mail still worked, news still worked, but the web connection did not. I reset the router, rebooted my computer, but still nothing. I've had this problem myself, but I can't remember what I had to do to fix it. I think I had to reset the network stack. Seems it gets in a funky state and rebooting the machine doesn't fix it unless you execute some commands first. Here is the batch file I use to deal with this if I remember correctly. Someone gave it to me so it has some stuff commented out that isn't needed. Also, one comment talks about reinstalling browsers, I've never had to do that. Resetting the machine is required. This file needs to be run in a command window with administrative privileges. Thanks very much. :: This problem usually has to do with TCP/IP or Winsock requiring a reset. :: Winsock entries tells Windows 7 how to access your network services. :: Additionally, your TCP/IP protocol can be corrupted. :: The TCP/IP protocol is a stack of 4 layers that includes several :: transport layers, but when this stack is corrupt you will constantly :: have connectivity issues. :: You need Admin access to enter the codes below. Windows button + x, :: then choose Command Prompt (Admin) :: reset winsock entries netsh winsock reset catalog :: reset TCP/IP stack netsh int ip reset c:\reset.log :: You may have to reinstall Chrome and Firefox or reboot to have :: the chnage take place. :: netsh int ip uninstall :: netsh int ip install :: HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Contro l\Nsi\{eb004a00-9b1a-11d4-9123-0050047759bc} 26 Are the double colons a necessary part of the command? I believe the double colons are comment markers. I just used the file verbatim. There's really only two commands. Unfortunately you have to reboot the computer to get it to work. Let us know if this helps. -- Rick C |
#9
|
|||
|
|||
Can't connect to Web
rickman wrote:
Steve Hayes wrote on 5/28/2017 12:21 AM: On Fri, 26 May 2017 04:47:44 -0400, rickman wrote: Steve Hayes wrote on 5/26/2017 4:04 AM: This morning I suddenly lost my connection to the web while I was browsing. Mail still worked, news still worked, but the web connection did not. I reset the router, rebooted my computer, but still nothing. I've had this problem myself, but I can't remember what I had to do to fix it. I think I had to reset the network stack. Seems it gets in a funky state and rebooting the machine doesn't fix it unless you execute some commands first. Here is the batch file I use to deal with this if I remember correctly. Someone gave it to me so it has some stuff commented out that isn't needed. Also, one comment talks about reinstalling browsers, I've never had to do that. Resetting the machine is required. This file needs to be run in a command window with administrative privileges. Thanks very much. :: This problem usually has to do with TCP/IP or Winsock requiring a reset. :: Winsock entries tells Windows 7 how to access your network services. :: Additionally, your TCP/IP protocol can be corrupted. :: The TCP/IP protocol is a stack of 4 layers that includes several :: transport layers, but when this stack is corrupt you will constantly :: have connectivity issues. :: You need Admin access to enter the codes below. Windows button + x, :: then choose Command Prompt (Admin) :: reset winsock entries netsh winsock reset catalog :: reset TCP/IP stack netsh int ip reset c:\reset.log :: You may have to reinstall Chrome and Firefox or reboot to have :: the chnage take place. :: netsh int ip uninstall :: netsh int ip install :: HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Contro l\Nsi\{eb004a00-9b1a-11d4-9123-0050047759bc} 26 Are the double colons a necessary part of the command? I believe the double colons are comment markers. I just used the file verbatim. There's really only two commands. Unfortunately you have to reboot the computer to get it to work. Let us know if this helps. No one seems to have made any comments about the registry key at the end. Am I missing a post ? There is a picture here, of someone modifying the permissions on the "26" entry for Full Control, instead of it being just Read. https://www.eightforums.com/network-...p-stack-2.html On later OSes, those two netsh commands are part of the network troubleshooter. And I hadn't heard of the 26 thing before. I wonder how it gets set to just "Read" ? HTH, Paul |
#10
|
|||
|
|||
Can't connect to Web
Paul wrote on 5/28/2017 2:17 AM:
rickman wrote: Steve Hayes wrote on 5/28/2017 12:21 AM: On Fri, 26 May 2017 04:47:44 -0400, rickman wrote: Steve Hayes wrote on 5/26/2017 4:04 AM: This morning I suddenly lost my connection to the web while I was browsing. Mail still worked, news still worked, but the web connection did not. I reset the router, rebooted my computer, but still nothing. I've had this problem myself, but I can't remember what I had to do to fix it. I think I had to reset the network stack. Seems it gets in a funky state and rebooting the machine doesn't fix it unless you execute some commands first. Here is the batch file I use to deal with this if I remember correctly. Someone gave it to me so it has some stuff commented out that isn't needed. Also, one comment talks about reinstalling browsers, I've never had to do that. Resetting the machine is required. This file needs to be run in a command window with administrative privileges. Thanks very much. :: This problem usually has to do with TCP/IP or Winsock requiring a reset. :: Winsock entries tells Windows 7 how to access your network services. :: Additionally, your TCP/IP protocol can be corrupted. :: The TCP/IP protocol is a stack of 4 layers that includes several :: transport layers, but when this stack is corrupt you will constantly :: have connectivity issues. :: You need Admin access to enter the codes below. Windows button + x, :: then choose Command Prompt (Admin) :: reset winsock entries netsh winsock reset catalog :: reset TCP/IP stack netsh int ip reset c:\reset.log :: You may have to reinstall Chrome and Firefox or reboot to have :: the chnage take place. :: netsh int ip uninstall :: netsh int ip install :: HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Contro l\Nsi\{eb004a00-9b1a-11d4-9123-0050047759bc} 26 Are the double colons a necessary part of the command? I believe the double colons are comment markers. I just used the file verbatim. There's really only two commands. Unfortunately you have to reboot the computer to get it to work. Let us know if this helps. No one seems to have made any comments about the registry key at the end. Am I missing a post ? Maybe the one where I posted the file? The registry key is just a comment. In later posts it is broken onto a new line by the 72 character limitation. There is a picture here, of someone modifying the permissions on the "26" entry for Full Control, instead of it being just Read. https://www.eightforums.com/network-...p-stack-2.html On later OSes, those two netsh commands are part of the network troubleshooter. And I hadn't heard of the 26 thing before. I wonder how it gets set to just "Read" ? That rings a bell... I didn't remember that. -- Rick C |
#11
|
|||
|
|||
Can't connect to Web
rickman wrote:
Paul wrote on 5/28/2017 2:17 AM: No one seems to have made any comments about the registry key at the end. Am I missing a post ? Maybe the one where I posted the file? The registry key is just a comment. In later posts it is broken onto a new line by the 72 character limitation. And I hadn't heard of the 26 thing before. I wonder how it gets set to just "Read" ? That rings a bell... I didn't remember that. But a value is worthless (the HKEY) unless added, changed, or deleted by a program (the registry editor). You entering HKEY... on a command line is just going to return an error message. You would need to put the key in a .reg file (along with data names and their values since a key along doesn't specify anything unless a placeholder for a non-named "*" default value) and use regedit.exe /s file.reg to load the settings into the registry or use reg.exe for each directive that was in the .reg file. Something has to use the key. A house key laying beside the door won't unlock/lock the door. Someone has to use the key. https://technet.microsoft.com/en-us/...(v=ws.10).aspx https://support.microsoft.com/en-us/...tshell-utility Since all the netsh programs do is to reset the winsock params to their defaults and the same for the IP bind, those won't help since the OP already said they were able to protocols *other* than HTTPS to connect to other Internet hosts. They could even use HTTP. Sockets are working just fine. They are used for the other protocols, too. His IP binding works just fine since he can do e-mail, news[groups], and other protocols. If his IP binding had expired or no longer permitted by his ISP, he couldn't get anywhere onto or past his ISP's network no matter what network protocol he used. Sans all the comment lines, all that batch file has a netsh winsock reset catalog netsh int ip reset c:\reset.log HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Contro l\Nsi\{eb004a00-9b1a-11d4-9123-0050047759bc} 26 ^ there was probably supposed to be a backslash here --' and the command interpreter would puke up an error on the last line since HKEY...bc} is not a program (external or internal to the cmd.exe interpreter in its console or shell). By the way, NSI = Network Store Interface. Go into services (run services.msc) and read its description. http://maximumpcguides.com/windows-7...e-nsi-service/ If the NSI service was unusable, stopped, or disabled, and according to its definition, the OP would be incapable of doing e-mail and new[groups] as he stated, not just problems with HTTPS (but with HTTP still working). https://www.windows-security.org/win...erface-service If NSI wasn't working, DNS doesn't work. It is unlikely the OP is specifying IP addresses to connect to web sites but instead uses hostnames. Humans like names. Computers demand numbers for addressing. The OP very likely specified hostnames for the e-mail and NNTP servers, not IP addresses, in his e-mail and newsgroups clients. Without the DHCP client, his host would not be able to connect to an upstream DHCP server (in his router/cable modem) that assigns him a dynamic IP address (but he might be using a static one in his TCP config). Back in services.msc, go into the properties of the NSI service. Look under the dependencies tab. You can see all the other services that are dependent on NSI being available. Only a value is given in that invalid HKEY line (it's not a command or program) in your batch file so it is unclear if the original author meant it to be a value for a data item somewhere under that key or the name of a key. I went to HKLM\System\CurrentControlSet\Control\NSI and, for me, under that GUID, there is no "26" named subkey and none of the data items under any subkey for that GUID-named key have a value of 26. So the original author had something create that subkey but that doesn't mean it is applicable to anyone else. The problem is not with the NSI service nor with IP binding nor with sockets. The OP said he can do e-mail, news[groups], and the diagnostics said he can do HTTP. He has a valid IP binding, NSI is running, DNS works, and sockets work because other network protocols do work. Looks like "can't connect to web" really means he can go to http:// sites but not to https:// sites. Whoever wrote that batch file that you use doesn't know networking. They just proliferated some babble that they copied from somewhere else. He recites the OSI networking model he was taught in school or read somewhere. The author intended his netsh commands to fix something which is not the problem the OP is experiencing. |
#12
|
|||
|
|||
Can't connect to Web
On 26/5/2017 01:04, Steve Hayes wrote:
This morning I suddenly lost my connection to the web while I was browsing. Mail still worked, news still worked, but the web connection did not. I reset the router, rebooted my computer, but still nothing. I wondered if it was a browser fault (I use Firefox) so tried Internet Explorer. It too could not connect, but offered to run diagnostics. This is what was found: ---- diagnostic report ---- [snip] DNS Client Diagnostic DNS - Not a home user scenario info Using Web Proxy: no info Resolving name ok for (www.microsoft.com): yes No DNS servers DNS failure I haven't read the entire thread, but this is mostly likely your problem. Your default Domain Name Server is down or can't be accessed. When you can't access "The Web" with your browser, but mail, ftp, etc work (they don't use DNS), that's where I'd start the troubleshooting. Here's a couple articles https://www.lifewire.com/find-the-ip...eb-site-818155 https://www.lifewire.com/what-is-the...-google-818153 Google's web site is hardly ever down. It's a good place to test if your DNS is down using its IP addresses. You may get some kind of error notice, but as long the number IP address you entered is replaced with a URL with "google" in it, it's working even if typing in www.google.com doesn't. pinging both the domain name of a site and its IP address will test the DNS, too. Check your DNS entries in your configs both through the Windows interface and directly with your router. Windows has a nastly habit of corrupting configs. Stef |
#13
|
|||
|
|||
Can't connect to Web
In news
but mail, ftp, etc work (they don't use DNS), Unless the IP addresses for the servers are hard-coded into the client, they certanly do. -- St. Paul, MN |
#14
|
|||
|
|||
Can't connect to Web
Stef wrote:
Steve Hayes wrote: This morning I suddenly lost my connection to the web while I was browsing. Mail still worked, news still worked, but the web connection did not. I reset the router, rebooted my computer, but still nothing. I wondered if it was a browser fault (I use Firefox) so tried Internet Explorer. It too could not connect, but offered to run diagnostics. This is what was found: ---- diagnostic report ---- [snip] DNS Client Diagnostic DNS - Not a home user scenario info Using Web Proxy: no info Resolving name ok for (www.microsoft.com): yes No DNS servers DNS failure I haven't read the entire thread, but this is mostly likely your problem. Your default Domain Name Server is down or can't be accessed. When you can't access "The Web" with your browser, but mail, ftp, etc work (they don't use DNS), that's where I'd start the troubleshooting. WRONG. Anytime you use a hostname (host.domain.tld) to specify a host, like for an e-mail or ftp or "etc" server, DNS gets used. Humans like names. Computers demand numbers. How many times have you encountered a user that specifies the IP address address for their e-mail server when configuring an account within their local e-mail client? Look at your own e-mail config in whatever local e-mail client you use. Did you enter a hostname or an IP address? Unless you do the DNS lookup when configuring the e-mail account in your e-mail client, you don't get that info from the e-mail provider as they give you hostnames. How many web pages have you visited where absolute references (non-relative or just a path under the current location) to sources in a web page use IP addresses instead of hostnames? If DNS were unusable to the OP, he wouldn't be doing e-mail or newsgroups. If the OP were having to use IP addresses for everything, he would've mentioned it and maybe how he got those IP addresses. Here's a couple articles https://www.lifewire.com/find-the-ip...eb-site-818155 Requires DNS be working. https://www.lifewire.com/what-is-the...-google-818153 Requires DNS be working. Also, if DNS was unusable, how would the OP get to the lifewire site? You didn't give him the IP address for that site. pinging both the domain name of a site and its IP address will test the DNS, too. That depends on the site. They can disable echo request in ICMP or block it in their firewall which means ping won't work to there. Besides, you don't need to rely on ping to convert a hostname to an IP address. Just use nslookup. You can also ping by hostname (which obviously requires a DNS server to get the IP address and then do the actual ping) or ping by IP address. How is the OP going to get the IP address (to ensure the site actually responds to echo requests) if DNS is unusable? The OP said e-mail and newsgroups worked. It is extremely rare a user enters IP addresses for the server hostnames in the configuration of their local clients. So DNS is working because the OP said he can do e-mail and newsgroups. Per the OP's statement, we don't even know HOW the OP is doing e-mail and newsgroups. He could be using a local client (in which case, he specified hostnames, not IP addresses) or he could be using HTTP to a web page (in which case, "can't connect" is misleading because the OP can get to some sites but it's probably the HTTPS ones he cannot establish a session). |
#15
|
|||
|
|||
Can't connect to Web
On Sun, 28 May 2017 17:16:01 +0000 (UTC), Stef
wrote: Google's web site is hardly ever down. It's a good place to test if your DNS is down using its IP addresses. You may get some kind of error notice, but as long the number IP address you entered is replaced with a URL with "google" in it, it's working even if typing in www.google.com doesn't. pinging both the domain name of a site and its IP address will test the DNS, too. Having read the replies to your post, I think the DNS thing is unlikely, but last week Google appeared to be down quite a bit, but only in some places. I had to resort to Bing for searches, and was quite surprised at how quickly it appeared, much faster than Google, probably because it has less traffic. Sites that connect to Google were also much slower to load -- they seemed to hang until the Google connection timed out. From people I asked, it seemed that Google's servers in the east of South Africa and in New Zealand were down, but not in the UK or USA. -- Steve Hayes http://www.khanya.org.za/stevesig.htm http://khanya.wordpress.com |
|
Thread Tools | |
Display Modes | |
|
|