Fedora Core 10 router cannot reach microsoft domains

vendetta007 · 01-30-2009, 09:58 PM

Ok, so i've recently installed a Fedora Core 10 box on my lan acting as router / firewall / samba / vpn. I've gotten everything configured and operating except for the odd behavior that I cannot get out to microsoft.com, msn.com, windowsupdate.com, or anything along those lines.

I attempted to dump the firewall and shutdown the samba and VPN services to see if this alleviated the problem with no success. So, when i traceroute out to www.windowsupdate.com this is the result i get:

Code:

traceroute to www.windowsupdate.com (207.46.18.94), 30 hops max, 60 byte packets
 1  L100.DSL-04.STTLWA.verizon-gni.net (71.113.17.1)  40.487 ms  45.622 ms  50.971 ms
 2  P3-2.LCR-02.STTLWA.verizon-gni.net (130.81.34.110)  55.626 ms  60.779 ms  66.664 ms
 3  P15-0.LCR-02.LSANCA.verizon-gni.net (130.81.28.166)  74.397 ms  80.023 ms  84.692 ms
 4  so-7-0-0-0.PEER-RTR1.SEA81.verizon-gni.net (130.81.17.139)  88.004 ms  93.420 ms  107.922 ms
 5  130.81.15.14 (130.81.15.14)  104.216 ms  109.359 ms  114.514 ms
 6  ge-7-3-0-59.wst-64cb-1b.ntwk.msn.net (207.46.36.253)  122.640 ms  39.749 ms  39.789 ms
 7  ge-0-1-0-0.sjc-64cb-1b.ntwk.msn.net (207.46.34.185)  65.981 ms  73.600 ms  76.507 ms
 8  ge-7-0-0-0.sjc-64cb-1a.ntwk.msn.net (207.46.37.61)  81.914 ms  86.825 ms  92.210 ms
 9  xe-2-0-2-0.bay-16c-1a.ntwk.msn.net (207.46.33.125)  95.761 ms  101.501 ms  106.808 ms
10  po33.bay-6nf-mcs-3a.ntwk.msn.net (64.4.63.82)  111.977 ms !X 
11  po34.bay-6nf-mcs-3a.ntwk.msn.net (64.4.63.86)  128.206 ms !X *

Other than this my network is working perfectly well. Any suggestions for a new direction to look in would be greatly appreciated.

Thanks for your help.

jailbait · 01-31-2009, 03:02 PM

When I click on your www.windowsupdate.com link I get through to the site. It gives me a message:

Code:

To use this site, you must be running Microsoft Internet Explorer 5 or later.

When I run traceroute on www.windowsupdate.com I get a route that ends in the same place that your traceroute does.

So I think that you are getting through to the site OK and Microsoft is refusing to service requests from any browser other than IE.

------------------
Steve Stites

tredegar · 01-31-2009, 03:28 PM

Quote:

To use this site, you must be running Microsoft Internet Explorer 5 or later.
[Snip].... Microsoft is refusing to service requests from any browser other than IE.

konqueror offers "Browser Identification" (Settings -configure konqueror - browser ID) so it'll report itself as IE-whatever as built-in work-around functionality. This solves a lot of stupid Browser-ID problems for stupid MS-centric web site designers.

Firefox has extensions that'll allow you to report yourself as "Running IE" (when you are not, but it'll work around their stupidity)

Try it.

I had a big moan at my bank a year or so ago. Now they do not bother with "Browser ID", but I doubt MS will be so receptive. So just learn to spoof your browser ID for now

vendetta007 · 01-31-2009, 08:05 PM

I apologize, i should have specified earlier. There are windows clients (XP and Vista) behind the linux box. None of them are capable of getting out to those domains while the linux box is running as the router, however, if I connect the modem directly to one of the windows clients there are no issues connecting to the domains.