Can't get to login.microsoft.com
-
@dcihon said in Can't get to login.microsoft.com:
C:\WINDOWS\system32>tracert login.microsoft.com
Tracing route to san.current.a.prd.aadg.akadns.net [40.126.0.70]So notice the 40.126 address... Now notice his routing table...
40.0.0.0/5 link#3 U 2827313 1500 bce1No shit he can not get there ;)
I take it there is a shit ton of stuff he can not get to - and this is just 1 has noticed.
40.0.0.0 - 47.255.255.255
That is a LOT Of addresses... He thinks are directly attacked to his link#3 ;)
Someone has a typo on their mask would be my guess.
-
So can you give me some help on how to fix this?
Where do I go in pfsense to change it so it doesn't route there or whatever I should do to fix this. -
@dcihon said in Can't get to login.microsoft.com:
So can you give me some help on how to fix this?
What is your WAN IP / LAN IP ?
WAN is static ? DHCP ? -
Looks like maybe someone pulled some IP range out of their you know what and said lets use this..
What network is connected to bce1?
Looks like the default route is on that /29 network on bce0
-
My WAN IP is : 47.47.60.90
There are 2 internet connections at this office .
Lan IP is 192.168.1.60
WAN is static.
DHCP coming from pfsense LAN interface. -
More info about this one :
@dcihon said in Can't get to login.microsoft.com:My WAN IP is : 47.47.60.90
Where did it came from ? Mask ?
( @johnpoz : let's get ready for the ROFL )
-
Not sure how to answer these questions.
Does this help.
Windstream WINDSTREAMWAN 66.148.187.137 66.148.187.137 Windstream Gateway
WSvlan1GWE LAN 192.168.1.5 192.168.1.5 vlan1 IP on WS Router
WindstreamWANGW WINDSTREAMWAN 40.139.91.17 40.139.91.17
CharterWANGW (default) CHARTERWAN 47.47.60.89 47.47.60.89 Charter -
@dcihon said in Can't get to login.microsoft.com:
40.0.0.0/5 link#3 U 2827313 1500 bce1
40.139.91.18 link#3 UHS 0 16384 lo0Where did that come from... Looks someone put a 40.139.91.18 address on pfsense with a mask of /5
WindstreamWANGW WINDSTREAMWAN 40.139.91.17 40.139.91.17
That is not suppose to be a /5 that is for sure ;)
-
It was already here when I got here.
There are 2 ISP's coming in.
I am going to get rid of one of them but I can't yet.
It is running their phone system and I can't get rid of it yet.
It is the 40. address I believe.
I know the 47. ISP is the one I want for Internet traffic. -
40.139.91.18 address on pfsense with a mask of /5
I changed this to /24 and it fixed the problem.
Not sure if I caused some other problem.
Thanks for everyone's help. -
You need to check to see what the mask is actually suppose to be - a /24 seems large as well.. See the other one you have with a /29 that is more realistic for IP space an ISP would give you, etc.
I would check with ISP what the settings should be!!!
What I can tell you for sure though - is not suppose to be a /5 ;) That is a freaking HUGE!!!!!! 134 Million addresses!!!
If I had to make an educated guess if that address is assigned to you I would guess either a /30 or /29 would be the most logical.. Those or maybe a /28 would put the wire at .16 and would make sense for your .17 gateway and .18 address.
With that /5 you wouldn't of been able to access any internet site using any of those 134 some million addresses..
