cannot connect to MSFT sites

[davidd]

Hello- we have an issue where we cannot connect to or ping microsoft.com msn.com hotmail.com, etc.. All other sites seem to work fine such as cnn.com google.com, yahoo.com gmail.com.

we have tried to adjust mtu and such as initially we thought it is a fragmentation issue. but clearly it is not. From the firstspot server we can visit any of the microsoft sites but if we are a hotspot user we cannot.

[philip]

Hi, would please post us the config.ini(file) which located in firstspot directory.
_________________
~ Patronsoft Limited ~

[dtarullo]

I am having the issue where you can't get to any Microsoft sites. msn.com, hotmail.com, microsoft.com, etc. I was able to get to them for a brief period before it stopped. When I do a traceroute to a site, it goes about 19 hops bfore stopping somewhere outside of our network, which is very wierd. All other internet sites seem to work fine.

[philip]

Would you please post us the result of "nslookup" from both client machine & FirstSpot server.

Please use "d2 nslookup" as shown below:
prompt>nslookup
prompt>set d2
prompt>microsoft.com

Cheers,
Philip
_________________
~ Patronsoft Limited ~

[dtarullo]

Server:

C:\>nslookup
Default Server: firstspot.org
Address: 172.30.5.1

> set d2
> microsoft.com
Server: firstspot.org
Address: 172.30.5.1

------------
SendRequest(), len 31
HEADER:
opcode = QUERY, id = 2, rcode = NOERROR
header flags: query, want recursion
questions = 1, answers = 0, authority records = 0, additional = 0

QUESTIONS:
microsoft.com, type = A, class = IN

------------
------------
Got answer (463 bytes):
HEADER:
opcode = QUERY, id = 2, rcode = NOERROR
header flags: response, want recursion, recursion avail.
questions = 1, answers = 2, authority records = 13, additional = 11

QUESTIONS:
microsoft.com, type = A, class = IN
ANSWERS:
-> microsoft.com
type = A, class = IN, dlen = 4
internet address = 207.46.250.119
ttl = 3470 (57 mins 50 secs)
-> microsoft.com
type = A, class = IN, dlen = 4
internet address = 207.46.130.108
ttl = 3470 (57 mins 50 secs)
AUTHORITY RECORDS:
-> com
type = NS, class = IN, dlen = 20
nameserver = J.GTLD-SERVERS.NET
ttl = 165347 (1 day 21 hours 55 mins 47 secs)
-> com
type = NS, class = IN, dlen = 4
nameserver = K.GTLD-SERVERS.NET
ttl = 165347 (1 day 21 hours 55 mins 47 secs)
-> com
type = NS, class = IN, dlen = 4
nameserver = L.GTLD-SERVERS.NET
ttl = 165347 (1 day 21 hours 55 mins 47 secs)
-> com
type = NS, class = IN, dlen = 4
nameserver = M.GTLD-SERVERS.NET
ttl = 165347 (1 day 21 hours 55 mins 47 secs)
-> com
type = NS, class = IN, dlen = 4
nameserver = A.GTLD-SERVERS.NET
ttl = 165347 (1 day 21 hours 55 mins 47 secs)
-> com
type = NS, class = IN, dlen = 4
nameserver = B.GTLD-SERVERS.NET
ttl = 165347 (1 day 21 hours 55 mins 47 secs)
-> com
type = NS, class = IN, dlen = 4
nameserver = C.GTLD-SERVERS.NET
ttl = 165347 (1 day 21 hours 55 mins 47 secs)
-> com
type = NS, class = IN, dlen = 4
nameserver = D.GTLD-SERVERS.NET
ttl = 165347 (1 day 21 hours 55 mins 47 secs)
-> com
type = NS, class = IN, dlen = 4
nameserver = E.GTLD-SERVERS.NET
ttl = 165347 (1 day 21 hours 55 mins 47 secs)
-> com
type = NS, class = IN, dlen = 4
nameserver = F.GTLD-SERVERS.NET
ttl = 165347 (1 day 21 hours 55 mins 47 secs)
-> com
type = NS, class = IN, dlen = 4
nameserver = G.GTLD-SERVERS.NET
ttl = 165347 (1 day 21 hours 55 mins 47 secs)
-> com
type = NS, class = IN, dlen = 4
nameserver = H.GTLD-SERVERS.NET
ttl = 165347 (1 day 21 hours 55 mins 47 secs)
-> com
type = NS, class = IN, dlen = 4
nameserver = I.GTLD-SERVERS.NET
ttl = 165347 (1 day 21 hours 55 mins 47 secs)
ADDITIONAL RECORDS:
-> C.GTLD-SERVERS.NET
type = A, class = IN, dlen = 4
internet address = 192.26.92.30
ttl = 165580 (1 day 21 hours 59 mins 40 secs)
-> D.GTLD-SERVERS.NET
type = A, class = IN, dlen = 4
internet address = 192.31.80.30
ttl = 165580 (1 day 21 hours 59 mins 40 secs)
-> E.GTLD-SERVERS.NET
type = A, class = IN, dlen = 4
internet address = 192.12.94.30
ttl = 165581 (1 day 21 hours 59 mins 41 secs)
-> F.GTLD-SERVERS.NET
type = A, class = IN, dlen = 4
internet address = 192.35.51.30
ttl = 165580 (1 day 21 hours 59 mins 40 secs)
-> G.GTLD-SERVERS.NET
type = A, class = IN, dlen = 4
internet address = 192.42.93.30
ttl = 165580 (1 day 21 hours 59 mins 40 secs)
-> H.GTLD-SERVERS.NET
type = A, class = IN, dlen = 4
internet address = 192.54.112.30
ttl = 165581 (1 day 21 hours 59 mins 41 secs)
-> I.GTLD-SERVERS.NET
type = A, class = IN, dlen = 4
internet address = 192.43.172.30
ttl = 5684 (1 hour 34 mins 44 secs)
-> J.GTLD-SERVERS.NET
type = A, class = IN, dlen = 4
internet address = 192.48.79.30
ttl = 165581 (1 day 21 hours 59 mins 41 secs)
-> K.GTLD-SERVERS.NET
type = A, class = IN, dlen = 4
internet address = 192.52.178.30
ttl = 165580 (1 day 21 hours 59 mins 40 secs)
-> L.GTLD-SERVERS.NET
type = A, class = IN, dlen = 4
internet address = 192.41.162.30
ttl = 5684 (1 hour 34 mins 44 secs)
-> M.GTLD-SERVERS.NET
type = A, class = IN, dlen = 4
internet address = 192.55.83.30
ttl = 165580 (1 day 21 hours 59 mins 40 secs)

------------
Non-authoritative answer:
Name: microsoft.com
Addresses: 207.46.250.119, 207.46.130.108
**********************************************************
**********************************************************
Client:


C:\>nslookup
Default Server: firstspot.org
Address: 172.30.5.1

> set d2
> microsoft.com
Server: firstspot.org
Address: 172.30.5.1

------------
SendRequest(), len 45
HEADER:
opcode = QUERY, id = 2, rcode = NOERROR
header flags: query, want recursion
questions = 1, answers = 0, authority records = 0, additional = 0

QUESTIONS:
microsoft.com.firstspot.org, type = A, class = IN

------------
------------
Got answer (90 bytes):
HEADER:
opcode = QUERY, id = 2, rcode = NXDOMAIN
header flags: response, auth. answer, want recursion, recursion avail.
questions = 1, answers = 0, authority records = 1, additional = 0

QUESTIONS:
microsoft.com.firstspot.org, type = A, class = IN
AUTHORITY RECORDS:
-> firstspot.org
type = SOA, class = IN, dlen = 33
ttl = 86400 (1 day)
primary name server = ns1.firstspot.org
responsible mail addr = root.firstspot.org
serial = 2
refresh = 28800 (8 hours)
retry = 7200 (2 hours)
expire = 604800 (7 days)
default TTL = 86400 (1 day)

------------
------------
SendRequest(), len 31
HEADER:
opcode = QUERY, id = 3, rcode = NOERROR
header flags: query, want recursion
questions = 1, answers = 0, authority records = 0, additional = 0

QUESTIONS:
microsoft.com, type = A, class = IN

------------
------------
Got answer (463 bytes):
HEADER:
opcode = QUERY, id = 3, rcode = NOERROR
header flags: response, want recursion, recursion avail.
questions = 1, answers = 2, authority records = 13, additional = 11

QUESTIONS:
microsoft.com, type = A, class = IN
ANSWERS:
-> microsoft.com
type = A, class = IN, dlen = 4
internet address = 207.46.130.108
ttl = 3600 (1 hour)
-> microsoft.com
type = A, class = IN, dlen = 4
internet address = 207.46.250.119
ttl = 3600 (1 hour)
AUTHORITY RECORDS:
-> com
type = NS, class = IN, dlen = 20
nameserver = F.GTLD-SERVERS.NET
ttl = 165477 (1 day 21 hours 57 mins 57 secs)
-> com
type = NS, class = IN, dlen = 4
nameserver = G.GTLD-SERVERS.NET
ttl = 165477 (1 day 21 hours 57 mins 57 secs)
-> com
type = NS, class = IN, dlen = 4
nameserver = H.GTLD-SERVERS.NET
ttl = 165477 (1 day 21 hours 57 mins 57 secs)
-> com
type = NS, class = IN, dlen = 4
nameserver = I.GTLD-SERVERS.NET
ttl = 165477 (1 day 21 hours 57 mins 57 secs)
-> com
type = NS, class = IN, dlen = 4
nameserver = J.GTLD-SERVERS.NET
ttl = 165477 (1 day 21 hours 57 mins 57 secs)
-> com
type = NS, class = IN, dlen = 4
nameserver = K.GTLD-SERVERS.NET
ttl = 165477 (1 day 21 hours 57 mins 57 secs)
-> com
type = NS, class = IN, dlen = 4
nameserver = L.GTLD-SERVERS.NET
ttl = 165477 (1 day 21 hours 57 mins 57 secs)
-> com
type = NS, class = IN, dlen = 4
nameserver = M.GTLD-SERVERS.NET
ttl = 165477 (1 day 21 hours 57 mins 57 secs)
-> com
type = NS, class = IN, dlen = 4
nameserver = A.GTLD-SERVERS.NET
ttl = 165477 (1 day 21 hours 57 mins 57 secs)
-> com
type = NS, class = IN, dlen = 4
nameserver = B.GTLD-SERVERS.NET
ttl = 165477 (1 day 21 hours 57 mins 57 secs)
-> com
type = NS, class = IN, dlen = 4
nameserver = C.GTLD-SERVERS.NET
ttl = 165477 (1 day 21 hours 57 mins 57 secs)
-> com
type = NS, class = IN, dlen = 4
nameserver = D.GTLD-SERVERS.NET
ttl = 165477 (1 day 21 hours 57 mins 57 secs)
-> com
type = NS, class = IN, dlen = 4
nameserver = E.GTLD-SERVERS.NET
ttl = 165477 (1 day 21 hours 57 mins 57 secs)
ADDITIONAL RECORDS:
-> C.GTLD-SERVERS.NET
type = A, class = IN, dlen = 4
internet address = 192.26.92.30
ttl = 165710 (1 day 22 hours 1 min 50 secs)
-> D.GTLD-SERVERS.NET
type = A, class = IN, dlen = 4
internet address = 192.31.80.30
ttl = 165710 (1 day 22 hours 1 min 50 secs)
-> E.GTLD-SERVERS.NET
type = A, class = IN, dlen = 4
internet address = 192.12.94.30
ttl = 165711 (1 day 22 hours 1 min 51 secs)
-> F.GTLD-SERVERS.NET
type = A, class = IN, dlen = 4
internet address = 192.35.51.30
ttl = 165710 (1 day 22 hours 1 min 50 secs)
-> G.GTLD-SERVERS.NET
type = A, class = IN, dlen = 4
internet address = 192.42.93.30
ttl = 165710 (1 day 22 hours 1 min 50 secs)
-> H.GTLD-SERVERS.NET
type = A, class = IN, dlen = 4
internet address = 192.54.112.30
ttl = 165711 (1 day 22 hours 1 min 51 secs)
-> I.GTLD-SERVERS.NET
type = A, class = IN, dlen = 4
internet address = 192.43.172.30
ttl = 5814 (1 hour 36 mins 54 secs)
-> J.GTLD-SERVERS.NET
type = A, class = IN, dlen = 4
internet address = 192.48.79.30
ttl = 165711 (1 day 22 hours 1 min 51 secs)
-> K.GTLD-SERVERS.NET
type = A, class = IN, dlen = 4
internet address = 192.52.178.30
ttl = 165710 (1 day 22 hours 1 min 50 secs)
-> L.GTLD-SERVERS.NET
type = A, class = IN, dlen = 4
internet address = 192.41.162.30
ttl = 5814 (1 hour 36 mins 54 secs)
-> M.GTLD-SERVERS.NET
type = A, class = IN, dlen = 4
internet address = 192.55.83.30
ttl = 165710 (1 day 22 hours 1 min 50 secs)

------------
Non-authoritative answer:
Name: microsoft.com
Addresses: 207.46.130.108, 207.46.250.119

[philip]

Hi, please post us the config.ini(file) which located in firstspot directory.

davidd, did you solve your problem?
_________________
~ Patronsoft Limited ~

[dtarullo]

;
; Description : FirstSpot setting ini file
;
; Filename : config.ini
;

; Note: use a backslash to separate directories and files, those lines starting with
; a semi-colon are considered as comments.
;
; Warning : please don't change this file without supervision of a PatronSoft Engineer
; It is highly recommended that you change the FirstSpot setting in the Web-based Configuration Manager

[version]
version=Trial
versionDesc=4.0.12

[MNS]
; number of return paths
num_return_path=2
return_path0=172.30.7.1 255.255.255.0 172.30.5.2
return_path1=172.30.6.1 255.255.255.0 172.30.5.2

[DHCP]
leasetime=2880
num_ignored_addr=0
ignore_addr0=

[Port Filter]
flt_num=
flt_0=

[QOS]
dl=
ul=
qos_num=
qos_0=

[Client Pass]
num_mac_addr=0
mac_0=
num_ip_addr=0
ip_0=

[proxyARP]
ip_num=
ip_addr0=

;
; Redirect Login Page php file
;
[loginPhp]
Login_enable0=0
Login_php_Num0=
Login_enable1=0
Login_php_Num1=

;
; Gateway Settings
;
[gateway]
;Print Log Table
Datasource_Printlog=printlog

;Shared Secret Table Name
Datasource_Shared_Secret_Tablename=fssecret

;maximum timelimit per session in minutes (global), 0 = never
sessionlimit =

;URL tracking, default off
Trace_URL=0

;URL tracking interval, do not log the same url for particular user in x mins
Trace_URL_Interval=30

;URL tracking table
Datasource_URL_Log_Tablename=fsurl

;extra-information field table name
Datasource_extra_field_table = aexlog

;demo_mode=on, off (default)
;
;This demo_mode parameter is for FirstSpot channel partners demonstration purpose
;If demo_mode=on, FirstSpot DNS Server and Web Server will perform a catch-all on all
;requests. After the user login, the client will always see the "firstspotdemo" page.
demo_mode=off

;redirect user to cart.php when login fails
redirect_cart=1

;Client Isolation, NetBIOS over TCP/IP, Default is Disabled
netbios=0

;Scenario 2 (Distributed Network Topology)
scenario2=0

; Post-Startup Batch File Path Name
batch_filePath =

; lan's subnet mask (please change this through Configuration Manager only)
;
subnet_mask =255.255.255.0

; domain name server IP address
;
DNS =0.0.0.0

; domain name server IP address
;
preferred_DNS =0.0.0.0

; domain name server IP address
;
alternate_DNS =0.0.0.0

; username
;
user =14226adm

; password
;
pass =a375c2eb44050f86dc5e87a75aace759

;Number of maximum administrator account
max_admin_account = 10

;Administrator username
admin_username0 =FrontDesk
admin_username1 =
admin_username2 =
admin_username3 =
admin_username4 =
admin_username5 =
admin_username6 =
admin_username7 =
admin_username8 =
admin_username9 =

;Administrator password
admin_password0 =142aa956f63770217844752f2d7fdd08
admin_password1 =
admin_password2 =
admin_password3 =
admin_password4 =
admin_password5 =
admin_password6 =
admin_password7 =
admin_password8 =
admin_password9 =

;Administrator parameter
admin_parameter0 =000100000000000001
admin_parameter1 =
admin_parameter2 =
admin_parameter3 =
admin_parameter4 =
admin_parameter5 =
admin_parameter6 =
admin_parameter7 =
admin_parameter8 =
admin_parameter9 =

; network interface card connected to Internet (after modify this, need to restart FirstSpot)
;
publicNIC=Internet Connection

; network interface card connected Hotspots or visitor-based networks (after modify this, need to bind the FirstHop driver
; to this new card and unbind the FirstHop driver from ALL other cards, then reboot Windows)
;
privateNIC=Inside Connection

; data source for user login
;
Datasource =C:\Program Files\FirstSpot\datasource\firstspot.dsn

; datasource table for user login
;
Datasource_Tablename =fsusr

; datasource table for user login
Datasource_Plans_Tablename =fsplans

; enable session logging into the datasource log table
session_log =ON

; datasource table for user session logging
;
Datasource_Log_Tablename =fsusrlog

; datasource table for PayPal
;
Datasource_PayPal_Table=ppal

; port used by Gateway Service
;
port =5786

; port used by Authentication Server
;
auth_port =5788

; port used by ssl site
;
ssl_port =5789

; Greeting message displayed in login page
;
greeting_msg =Welcome to our Hotspot!

; Enable to show InfoBox
;
show_infobox =off

; Login page picture (filename)
;
loginpage_pic_name=computer.jpg

; authentication server IP address (please change this through Configuration Manager only)
; Note: different from gateway_IP when it is not installed in gateway (not officially supported in this version)
;
auth_IP =172.30.5.1

; login page filename which dispatcher will call
;
loginpage =login_select.php

; login form filename which login_select.php will call
;
loginform =login_form.php

; anonymous login form filename which login_select.php will call
;
a_loginform =alogin_form.php

; authentication form filename which authentication.php will call
;
reauthenticationform =reauth_form.php

; anonymous authentication form filename which authentication.php will call
;
a_reauthenticationform =alogout_form.php

; idle time (minutes) allowed for authenticated users
;
idle_timeout =10

; private network (please change this through Configuration Manager only)
;
private_IP =172.30.5.0

; gateway IP address (please change this through Configuration Manager only)
;
gateway_IP =172.30.5.1

; allow access to config manager from private network?
;
access_from_private =off

; allow access to config manager from public network?
;
access_from_public =ON

; license file path
;
licensepath =C:\Program Files\FirstSpot\

; session handling mode, 0 for MAC-based, 1 for IP-based
session_handling =1

; path for dhcp config
dhcppath =C:\Program Files\FirstSpot\dhcp\dhcpservice.ini

; dhcp mode, 0 = auto, 1 = static, 2 = disabled
dhcpmode =0

; for static dhcp only, path of the Ip MAC mapping list
static_dhcp_path =C:\Program Files\FirstSpot\StaticDHCP.txt

; anonymous login
anonymous_login =on

; secret enable
secret_enable=on

; secret code
secret_code=0aed120c6f7090a5b26a4c93df382b21

; anonymous login user table name
Datasource_Anonymous_Tablename =fsa

; anonymous login log table name
Datasource_Anonymous_Log_Tablename =fsalog

; password offloading mode
pwd_offload =off

; password encryption directory path
encrypt_path =C:\Program Files\FirstSpot\dispatcher\encrypt_pwd.exe

; initial air time in minutes for self signup users
self_sign_up_credit=0

; self signup filtering
self_signup_filter=1

;allow self-signup without an ip/mac, 0=yes, 1=no
self_signup_no_mac=1

; null=no filter, 0 = signup once, >0 after x mins
self_signup_period=

;use 3 party ssl cert 0=yes 1=no
ssl_cert=1

;secure socket layer for authentication
;443 for enabled SSL, auth_port=ssl_auth_port for disabled ssl
ssl_auth_port=5788

;rewrite engine for http to https redirection
rewrite_engine=off

;NAT
nat=0

;maximum fail attempt allowed
max_attempt=

;If user accesses http://10.20.7.1:5788 directly, redirect the request to any non-existing ip,
;so that driver can capture the request properly.
;DO NOT put any unresolvable domain name here
redirect_address=http://70.61.91.2/logged_in.html

;port to handle https request in apache when user is not authenticate
redirect_port=5790

restricted_redirect=0

; Allowed Hosts Settings
;
[allowed hosts]
; allowed hosts keywords file path
;
hosts_keywords_path =C:\Program Files\FirstSpot\AllowedHostsKeywords.txt

; allowed hosts IPs file path
;
hosts_ips_path =C:\Program Files\FirstSpot\AllowedHostsIps.txt


; Bandwidth Throttle Settings
[bw_throttle]
; Bandwidth Throttle Mode
bt_mode =0

; Overall Upload Limit (at least 20KB/s recommended)
bt_ul_limit =0

; Overall Download Limit (at least 20KB/s recommended)
bt_dl_limit =0

; low, medium and high definition
bt_low=100
bt_medium=50
bt_high=20
bt_drop_period=2

[bwreset]
bwresetmethod=
bwresetperiod=
lastresetbw=

[creditcard]
payment_method=ppal

[paypal]
; Business id
;
ppal_business=your_business_id@your_email.com

; URL for successful transactions
;
ppal_return=http://10.20.7.1:5788/cart.php

; URL for cancelled transactions
;
ppal_cancel_return=http://10.20.7.1:5788/cart.php

; trust "Pending"=="Complete"?
;
ppal_pending_release=no

; the settlement currency
;
ppal_base_currency=USD

; URL for notify
;
ppal_notify_url=http://fixed_ip:5789

; Starting number for invoice
;
ppal_invoice_start=1

[worldpay]
; Installation id
;
wpay_instID=your_installation_ID

; the settlement currency
;
wpay_base_currency=USD

; URL for notify
;
wpay_notify_url=http://fixed_ip:5789

; Test Mode
; 100 : test mode - always successful validation
; 101 : test mode - always failed validation
; 0 : test mode - live mode, not testing
;
wpay_testmode=0

[AuthorizeNet]

;login id
aNet_id=

;transaction key
aNet_key=

aNet_hash=

aNet_base_currency=USD

; URL for notify
aNet_notify_url=http://fixed_ip

; Test Mode
; 0 : test mode - live mode, not testing
; 1 : test mode - testing only
aNet_testmode=0

[PrinterOn]

PrintSupport=0
SiteURL=
SiteUID=
SiteAuth=
; show siteURL
show_URL_login=1
show_URL_infobox=1

[lang]
; default language file
default_lang_file=lang.php
default_lang_file_attributes=English;en,en-us;iso-8859-1
; number of other language files
lang_fileNumber=0
; other luguage files
lang_file1=
lang_file1_attributes=
lang_file2=
lang_file2_attributes=
lang_file3=
lang_file3_attributes=
lang_file4=
lang_file4_attributes=
lang_file5=
lang_file5_attributes=
; show character encoding
; 0 : hide
; 1 : show
show_charset=1

lang_pack_file=custom_lang.php
cmlang_pack_file=custom_cmlang.php
last_logout=logout
this_logout=logout
last_info=infobox
this_info=infobox
last_cart=cart
this_cart=cart
key_0=
url_0=
signup01=off
signup02=off
signup03=off
signup04=off
signup05=off
signup06=off
signup07=off
signup08=off
signup09=off
signup10=off
ReqSignUp01=off
ReqSignUp02=off
ReqSignUp03=off
ReqSignUp04=off
ReqSignUp05=off
ReqSignUp06=off
ReqSignUp07=off
ReqSignUp08=off
ReqSignUp09=off
ReqSignUp10=off

; Setting of cart description
[cart]
max_slot_open=0

[radius]
use_radius=false
ServerIP=10.20.7.1
AuthPort=1812
AccPort=1813
Secret=secret
FSVendorID=2004
Datasource=C:\Program Files\FirstSpot\datasource\radius.dsn
Datasource_Tablename=fsRadius
Acc_Start=true
Acc_Stop=true
;Acc_FSLogin=true
;Acc_FSLogout=true
;Acc_FSWriteLog=true

[radiusAuthentication]
NAS_IDENTIFIER=FirstSpot
;NAS_IP_ADDRESS=the private nic ip, this can be edited.
;CALLING_STATION_ID=client nic mac or ip, depends on the Firstspot setting, this can not be edited.
;CALLED_STATION_ID=firstspot private nic mac, this can not be edited.

[radiusCustomAttribute]
;Vendor spec type for Firstspot
;fixed value can not be changed.
;
;FS_AUTH_TIMELEFT=1
;FS_AUTH_ACCUMBW=2
;FS_AUTH_BWQUOTA=3
;FS_AUTH_BWCOUNT=4
;FS_AUTH_ULLIMIT=5
;FS_AUTH_DLLIMIT=6
;FS_AUTH_LOGINTIME=7
;FS_AUTH_LOGOUTTIME=8
;FS_AUTH_TIMEDIFF=9
;FS_AUTH_BWUSAGE=10

;Account Status Type Attributes, can be changed.
;
;default ACCT_STATUS_FSLOGIN=217
;default ACCT_STATUS_FSLOGOUT=218
;default ACCT_STATUS_FSWRITELOG=219

[prepaidCard]
random_usr_prefix=usr_
random_usr_suffix_salt=abcdefghjkmnpqrstuvwxyzABCDEFGHJKMNPQRSTUVWXYZ123456789
random_usr_suffix_length=5
pwd_salt=abcdefghjkmnpqrstuvwxyzABCDEFGHJKMNPQRSTUVWXYZ123456789
pwd_length=7

[ACL]
num_acl=0

[fssmtp]
smtp =false
IspSmtpDomain=

[misc]
show_cart=no
enable_chgpwd=0
block_icmp=off
block_udp=on
_debug=1
pkt_period=20
oem=C:\WINDOWS\INF\oem1.inf
PublicAdapterIP=70.61.91.2
PublicAdapterIpMask=255.255.255.248
PublicAdapterGateway=70.61.91.1
PrivateMAC=00065bb03e63
[DataTransfer]
bwcount_dl=0
bwcount_ul=0

[philip]

Hi, would you please do the following test:
1. Check if any of your client machine or FirstSpot server has proxy setting.
2. Check if you can access microsoft.com on the local segment, in your case 10.20.7.0
3. Check if you can access microsoft.com on FirstSpot server.
4. If everything above work fine, try to turn on FirstSpot NAT and test.
_________________
~ Patronsoft Limited ~

[davinman]

This still does not function for us.

1 there are no proxy settings
2 we can access all sites from server
3 not from client behind FS
4 Firstspot NAT turned on does not work

Also tried adding sites as exception sites and it does not work either

[alan]

davinman, you are continuing from the dtarullo posting, right?

Your problem is related to routing though I cannot pinpoint exactly what is wrong. I notice you are using Multiple Network Segments. Have you tried to access via the client in the "local" network segments 172.30.5.x (just like Scenario 1)?
_________________
~ Patronsoft Limited ~

[davinman]

Alan,


I tested it locally no problems and I also brought up another site with remote site with out problems (they can reach the MS sites). Do you think that it could be my choice of IP subnet for that site (172.30.7.0/24) ?

I have looked at the router configs until my eyes are blury and I can not find the problem. I used the same config on the other site but using 172.30.6.0/24 and everything is working.

Any suggestions?

[alan]

Technically speaking, 172.30.x.x is a valid Private IP address range, but it is not as common as 10.x.x.x and 192.168.x.x so it is subject to less real-life testing. You might want to switch to another Private IP range just as a test.

Maybe your existing Windows settings (e.g. RRAS) for the first machine interfere with msft sites? You can use tools like Ethereal to pinpoint exactly which packet is failing. This requires deep understanding of Windows and networking. Sometimes it is just faster to reinstall FirstSpot in another machine (though I don't recommend reinstall every time you have an issue)...
_________________
~ Patronsoft Limited ~

[davinman]

Alan,

I have already re-installed this set on a new machine. We had problems on our test system when we used the trial but ran out of time so we were not able to completely trouble shoot. The production version is running on a brand new system with new install.

I will try a different subnet or even a different range.

I will let you know.

[dtarullo]

We had to enable fragmentation on the remote router. For some reason Microsoft sees it necessary to have larger frames than the rest of the world.

[alan]

One of our customer that has this problem claims to resolve it by using TCPOptimizer, which recommends changing the MTU value within the FirstSpot machine to 1500.
_________________
~ Patronsoft Limited ~