Invisible gateway from Windows XP pro SP2 machine, but other local machines are visible?

28 Nov 2006 6:02 PM

wilkonator

I have two Windows XP SP2 machines (AMD 3500 and 3800+), a windows 2003
server and a network printer connected in one local network (10.0.0.x
addresses with 255.255.0.0 subnet mask and 10.0.0.1 gateway).

Two days ago I uninstalled Mcafee from the XP machines, and since then
I lost the network connection on both machines. I managed to repair the
connection on the first machine (3800+), but the trick (disabling the
onboard gigabit ethernet card with a PCI card and then removing the PCI
card and enabling the onboard card) failed on the second machine
(3500+).

>From the server and the 3800+ machine, I can surf the internet, go to

shares on the network, ping the gateway (10.0.0.1) and access the web
interface on the gateway (586 machine with freeBSD M0n0wall firewall).

What's strange is that from the 3500+ machine I can ping the server,
the printer and the 3800+ machine. I can also go to network shares on
the server and 3800+ machine. With a web browser I can see the website
on both the network printer and the server and if I ping anything (IP
address or URL, like for example microsoft.com) outside my local
network (10.0.0.x with 255.255.0.0 subnet mask), I see DNS resolution
(URL plus IP address) but get time out errors. Tracert gives similar
results.

So:
Pinging the localhost works.
Pinging the server (10.0.0.14), network printer (10.0.0.15) or 3800+
machine (10.0.0.13) works.
Accessing network drives or shares on the 3800+ and server works.
Pinging the gateway (10.0.0.1) or anything outside the local 10.0.0.x
range fails, but I do get DNS (from my ISP's DNS servers) resolving the
URL into a IP address.
Accessing shares from the 3500+ machine on other machines and vica
versa works.

I checked the 3500+ machine's ipconfig /all settings several times,
they are identical to the 3800+ machine, except for the manually set IP
address (10.0.0.16). The route table is basically the same as on the
server and 3800+ machine, except for the unique IP address.There are no
strange things in the hosts file (only the localhost). I use no DHCP on
my home network.

What I already did or tried:

I replaced the drivers on the network card (Marvell Yukon embedded card
in the A8R-MVP mainboard), checked the Winsock, IPv4 route table,
changed the IP address for the card in the network settings, disabled
the card in the BIOS, checked the windows firewall settings (still
disabled), disabled the Sygate software firewall... I'm not sure what
is going on, but I would like to prevent reinstalling Windows XP on
that machine, if possible.

Any help is greatly appreciated!

Wilko

--
Wilko van den Bergh wilko<a t)dse(d o t>nl
Eindhoven The Netherlands Europe
---Look at the possibilities, don't worry about the limitations.---
http://kayaker.nl/

29 Nov 2006 1:51 PM

Marbles

Hello Wilko

In your home network it seems you have a good grasp on all the technical
issues. The main problem your facing at the moment is that your ping command
and tracert is not working correctly for the one machine.

In most cases a re-install for that machine is very unlikely. The problem
that it sounds like your having is some how ICMP problems being blocked. As
you know ICMP is crucial for the operation for the ping & tracert command.
Even thou your firewall might allow ICMP just in general, it may be blocking
a sub group of the ICMPv4. One item it may be blocking is ICMPv4 Type 11 Code
0. Time Exceeded is the type 11 and Code 0 is Time to Live exceeded in
Transit. This is usually the culprit in pinging and tracert timeouts.

Make sure your router is configured correctly...not blocking ICMP, not
blocking users on the lan. What is the config router using NAT ?

The next step thou most likely not necessary is to re-set your TCP/IP stack
for the computer that can't ping outside network.

Hope this helps ...first try looking around for that ICMP problem I have a
good hunch that may be the fix.

Cheers!

29 Nov 2006 1:55 PM

Marbles

Here's a good resource for ICMP sub groups

ICMP Types and Codes

http://www.iana.org/assignments/icmp-parameters