Lose Web access after installing KAV.

[MartinSigns]

XP Pro SP2
NAT and Fully Automatic DHCP
No HTP or SMTP server
I just upgraded to WG 6.1 and KAV 2 and am not able to get the KAV to work. I also upgraded my KAV license key at the same time as my KAV v 1 key had expired.
After installing KAV, I loose internet access. I can still bring it up on the server if I uncheck use proxy in the connection tab of internet options but all clients loose it. The clients try for about 60 seconds and they pop up with a standard error message.
Anybody else run across this problem or know what I am doing wrong?

[adrien]

Hi

What error does your client browser come up with?

Adrien

[MartinSigns]

Standard dnserror.htm page.
"The page cannot be displayed"
"Cannot find server or DNS error"

I can ping IPs like google (216.239.57.99) on the client computers but not the url. If I ping the url I get an error after a few seconds that says unable to find blah blah blah....

[adrien]

OK, sounds like a DNS issue, related to upgrading WinGate. Which version of WinGate were you running before?

do your client machines use WinGate as their DNS and/or DHCP server?

Adrien

[MartinSigns]

Whichever version was before this. I upgrade each time there is an update.
Yes, everything goes through Wingate. There are no other programs running.

[Pascal]

Check in GateKeeper that the DNS Service is started and set to start Automatically. If that is the case, please enable debug logging for the WinGate DNS Service and for the WinGate DNS/WINS Resolver. Try a lookup and post the results here, please.

[MartinSigns]

Here is the log. I deleted all the stuff @ the top because it was from where it was working OK and there was a lot of it.
One thing that I didn't notice before. It all worked great after I intstalled KAV untill I rebooted the server. KAV was blocking test files except for ssl pages, but the problem came back as soon as I rebooted




11/28/05 15:30:48 DNS Resolver thread starting
11/28/05 15:31:06 Request: request [00abbda8] A lookup "www.msn.com."
11/28/05 15:31:07 Request: request [028d95d8] A lookup "www.msn.com."
11/28/05 15:31:08 Request: request [028e0590] A lookup "www.msn.com."
11/28/05 15:31:10 Request: request [028edbd8] A lookup "www.msn.com."
11/28/05 15:31:12 Error: bounce request [028edbd8]<2> to try 3 (no good servers)
11/28/05 15:31:14 Request: request [028dbea0] A lookup "www.msn.com."
11/28/05 15:31:14 Error: bounce request [028dbea0]<1> to try 3 (no specific and cannot select)
11/28/05 15:31:56 Debug: DNS registry entry scan (0 total entries)
11/28/05 15:31:59 Debug: DNS registry entry scan (0 total entries)
11/28/05 15:32:02 Debug: DNS registry entry scan (0 total entries)
11/28/05 15:32:02 Debug: completed "192.168.7.3" (Internal reverse lookup - DHCP client)
11/28/05 15:32:02 Request: request [028dbea0] A lookup "www.microsoft.com."
11/28/05 15:32:02 Debug: bounce request [028dbea0]<0> to try 1 (nothing useful in cache)
11/28/05 15:32:02 Error: bounce request [028dbea0]<1> to try 3 (no specific and cannot select)
11/28/05 15:32:02 Debug: multicast request [028dbea0]<3> (3 known servers)
11/28/05 15:32:02 Debug: request [028dbea0](ID 40) sent to 24.159.64.23 <IP helper> (35 bytes)
11/28/05 15:32:02 Debug: request [028dbea0](ID 41) sent to 24.159.64.20 <IP helper> (35 bytes)
11/28/05 15:32:02 Debug: request [028dbea0](ID 42) sent to 24.159.64.21 <IP helper> (35 bytes)
11/28/05 15:32:03 Request: request [02903690] A lookup "www.microsoft.com."
11/28/05 15:32:03 Debug: bounce request [02903690]<0> to try 1 (nothing useful in cache)
11/28/05 15:32:03 Error: bounce request [02903690]<1> to try 3 (no specific and cannot select)
11/28/05 15:32:03 Debug: multicast request [02903690]<3> (3 known servers)
11/28/05 15:32:03 Debug: request [02903690](ID 43) sent to 24.159.64.23 <IP helper> (35 bytes)
11/28/05 15:32:03 Debug: request [02903690](ID 44) sent to 24.159.64.20 <IP helper> (35 bytes)
11/28/05 15:32:03 Debug: request [02903690](ID 45) sent to 24.159.64.21 <IP helper> (35 bytes)
11/28/05 15:32:03 Debug: request [028dbea0] "www.microsoft.com." (no response on try 3)
11/28/05 15:32:03 Debug: multicast request [028dbea0]<4> (3 known servers)
11/28/05 15:32:03 Debug: request [028dbea0](ID 46) sent to 24.159.64.23 <IP helper> (35 bytes)
11/28/05 15:32:03 Debug: request [028dbea0](ID 47) sent to 24.159.64.20 <IP helper> (35 bytes)
11/28/05 15:32:03 Debug: request [028dbea0](ID 48) sent to 24.159.64.21 <IP helper> (35 bytes)
11/28/05 15:32:04 Request: request [02926db8] A lookup "www.microsoft.com."
11/28/05 15:32:04 Debug: bounce request [02926db8]<0> to try 1 (nothing useful in cache)
11/28/05 15:32:04 Error: bounce request [02926db8]<1> to try 3 (no specific and cannot select)
11/28/05 15:32:04 Debug: multicast request [02926db8]<3> (3 known servers)
11/28/05 15:32:04 Debug: request [02926db8](ID 49) sent to 24.159.64.23 <IP helper> (35 bytes)
11/28/05 15:32:04 Debug: request [02926db8](ID 50) sent to 24.159.64.20 <IP helper> (35 bytes)
11/28/05 15:32:04 Debug: request [02926db8](ID 51) sent to 24.159.64.21 <IP helper> (35 bytes)
11/28/05 15:32:04 Debug: request [02903690] "www.microsoft.com." (no response on try 3)
11/28/05 15:32:04 Debug: multicast request [02903690]<4> (3 known servers)
11/28/05 15:32:04 Debug: request [02903690](ID 52) sent to 24.159.64.23 <IP helper> (35 bytes)
11/28/05 15:32:04 Debug: request [02903690](ID 53) sent to 24.159.64.20 <IP helper> (35 bytes)
11/28/05 15:32:04 Debug: request [02903690](ID 54) sent to 24.159.64.21 <IP helper> (35 bytes)
11/28/05 15:32:05 Debug: DNS registry entry scan (0 total entries)
11/28/05 15:32:05 Debug: request [02926db8] "www.microsoft.com." (no response on try 3)
11/28/05 15:32:05 Debug: multicast request [02926db8]<4> (3 known servers)
11/28/05 15:32:05 Debug: request [02926db8](ID 55) sent to 24.159.64.23 <IP helper> (35 bytes)
11/28/05 15:32:05 Debug: request [02926db8](ID 56) sent to 24.159.64.20 <IP helper> (35 bytes)
11/28/05 15:32:05 Debug: request [02926db8](ID 57) sent to 24.159.64.21 <IP helper> (35 bytes)
11/28/05 15:32:06 Request: request [029285a8] A lookup "www.microsoft.com."
11/28/05 15:32:06 Debug: bounce request [029285a8]<0> to try 1 (nothing useful in cache)
11/28/05 15:32:06 Error: bounce request [029285a8]<1> to try 3 (no specific and cannot select)
11/28/05 15:32:06 Debug: multicast request [029285a8]<3> (3 known servers)
11/28/05 15:32:06 Debug: request [029285a8](ID 58) sent to 24.159.64.23 <IP helper> (35 bytes)
11/28/05 15:32:06 Debug: request [029285a8](ID 59) sent to 24.159.64.20 <IP helper> (35 bytes)
11/28/05 15:32:06 Debug: request [029285a8](ID 60) sent to 24.159.64.21 <IP helper> (35 bytes)
11/28/05 15:32:07 Debug: request [029285a8] "www.microsoft.com." (no response on try 3)
11/28/05 15:32:07 Debug: multicast request [029285a8]<4> (3 known servers)
11/28/05 15:32:07 Debug: request [029285a8](ID 61) sent to 24.159.64.23 <IP helper> (35 bytes)
11/28/05 15:32:07 Debug: request [029285a8](ID 62) sent to 24.159.64.20 <IP helper> (35 bytes)
11/28/05 15:32:07 Debug: request [029285a8](ID 63) sent to 24.159.64.21 <IP helper> (35 bytes)
11/28/05 15:32:08 Debug: DNS registry entry scan (0 total entries)
11/28/05 15:32:08 Debug: request [028dbea0] "www.microsoft.com." (retry termination)
11/28/05 15:32:09 Debug: request [02903690] "www.microsoft.com." (retry termination)
11/28/05 15:32:10 Debug: request [02926db8] "www.microsoft.com." (retry termination)
11/28/05 15:32:11 Debug: DNS registry entry scan (0 total entries)
11/28/05 15:32:12 Debug: request [029285a8] "www.microsoft.com." (retry termination)
11/28/05 15:32:14 Debug: DNS registry entry scan (0 total entries)
11/28/05 15:32:17 Debug: DNS registry entry scan (0 total entries)
11/28/05 15:32:20 Debug: DNS registry entry scan (0 total entries)
11/28/05 15:32:23 Debug: DNS registry entry scan (0 total entries)
11/28/05 15:32:26 Debug: DNS registry entry scan (0 total entries)
11/28/05 15:32:29 Debug: DNS registry entry scan (0 total entries)
11/28/05 15:32:32 Debug: DNS registry entry scan (0 total entries)
11/28/05 15:32:35 Debug: DNS registry entry scan (0 total entries)
11/28/05 15:32:38 Debug: DNS registry entry scan (0 total entries)
11/28/05 15:32:41 Debug: DNS registry entry scan (0 total entries)
11/28/05 15:32:44 Debug: DNS registry entry scan (0 total entries)
11/28/05 15:32:47 Debug: DNS registry entry scan (0 total entries)
11/28/05 15:32:48 Debug: DNS registry entry scan (0 total entries)
11/28/05 15:32:50 Debug: DNS registry entry scan (0 total entries)
11/28/05 15:32:51 Debug: completed "192.168.7.3" (Internal reverse lookup - DHCP client)
11/28/05 15:32:53 Debug: DNS registry entry scan (0 total entries)
11/28/05 15:32:56 Debug: DNS registry entry scan (0 total entries)
11/28/05 15:32:59 Debug: DNS registry entry scan (0 total entries)
11/28/05 15:33:02 Debug: DNS registry entry scan (0 total entries)
11/28/05 15:33:05 Debug: DNS registry entry scan (0 total entries)
11/28/05 15:33:08 Debug: DNS registry entry scan (0 total entries)
11/28/05 15:33:11 Debug: DNS registry entry scan (0 total entries)
11/28/05 15:33:11 Debug: completed "192.168.7.2" (Internal reverse lookup - DHCP client)
11/28/05 15:33:14 Debug: DNS registry entry scan (0 total entries)
11/28/05 15:33:17 Debug: DNS registry entry scan (0 total entries)
11/28/05 15:33:20 Debug: DNS registry entry scan (0 total entries)
11/28/05 15:33:23 Debug: DNS registry entry scan (0 total entries)
11/28/05 15:33:26 Debug: DNS registry entry scan (0 total entries)
11/28/05 15:33:29 Debug: DNS registry entry scan (0 total entries)
11/28/05 15:33:32 Debug: DNS registry entry scan (0 total entries)
11/28/05 15:33:35 Debug: DNS registry entry scan (0 total entries)
11/28/05 15:33:38 Debug: DNS registry entry scan (0 total entries)
11/28/05 15:33:41 Debug: DNS registry entry scan (0 total entries)
11/28/05 15:33:44 Debug: DNS registry entry scan (0 total entries)
11/28/05 15:33:47 Debug: DNS registry entry scan (0 total entries)
11/28/05 15:33:48 Debug: DNS registry entry scan (0 total entries)
11/28/05 15:33:50 Debug: DNS registry entry scan (0 total entries)
11/28/05 15:33:53 Debug: DNS registry entry scan (0 total entries)
11/28/05 15:33:56 Debug: DNS registry entry scan (0 total entries)
11/28/05 15:33:59 Debug: DNS registry entry scan (0 total entries)
11/28/05 15:34:02 Debug: DNS registry entry scan (0 total entries)
11/28/05 15:34:05 Debug: DNS registry entry scan (0 total entries)
11/28/05 15:34:08 Debug: DNS registry entry scan (0 total entries)
11/28/05 15:34:11 Debug: DNS registry entry scan (0 total entries)
11/28/05 15:34:14 Debug: DNS registry entry scan (0 total entries)
11/28/05 15:34:17 Debug: DNS registry entry scan (0 total entries)
11/28/05 15:34:20 Debug: DNS registry entry scan (0 total entries)
11/28/05 15:34:23 Debug: DNS registry entry scan (0 total entries)
11/28/05 15:34:26 Debug: DNS registry entry scan (0 total entries)
11/28/05 15:34:29 Debug: DNS registry entry scan (0 total entries)
11/28/05 15:34:32 Debug: DNS registry entry scan (0 total entries)
11/28/05 15:34:35 Debug: DNS registry entry scan (0 total entries)
11/28/05 15:34:38 Debug: DNS registry entry scan (0 total entries)
11/28/05 15:34:41 Debug: DNS registry entry scan (0 total entries)

[Pascal]

"retry termination" is the clue in that log file. If you scan through it you will see that WinGate's DNS tries to get a response from three servers, 24.159.64.23 , 24.159.64.21, 24.159.64.20 and receives no response from any of them.

I just tested those servers and they do come back with a response, so I suspect the problem might be elsewhere. This should not be affected by KAV though, as KAV does not see DNS traffic.

The first thing to check would be the bindings on the DNS Service. Make sure that those are set correctly. Then, double check that you are not seeing any firewall hits when a DNS is attempted. (From the WinGate Server)

Can you run "nslookup" from the server and do a lookup to one of those servers, please? [Run "nslookup" from the command prompt. When it has launched, type "SERVER 24.159.64.20" and once the server has been changed, try typing "www.microsoft.com". If that lookup succeeds, we know that the server is not actively blocking a response.

(I assume the Server can access the internet without any problems?)

[MartinSigns]

I looks like I have found the problem. Under the KAV settings tab I had always marked the "scan for possible virus signatures..." and the "scan broken exe, zip..." I usually change these settings before I reboot the server as I have to reinstall KAV any time I want to test something, but this time I forgot and rebooted before. I checked the clients and they were working!
Then I remembered to change the settings to scan for possible virus and scan broken exe. After I did, the clients stoped working again.
I changed it back and they are working again!
When I get some more time I will try to figure out if it is just one of the two options that causes the problem.

[adrien]

Hi

That's really odd. We haven't had a problem with those options before. One thing is they use a lot more CPU. What sort of machine is this running on?

Adrien

[MartinSigns]

Well......I was wrong. I had to reboot the server for an unrelated issue and the problem is back. I don't know why it was working fine for a while. I will go back to trying your suggestions on the previous post.
I had looked and the DNS service when everything was working fine and it was bound to my internal network and the loopback. I am assuming that is correct.
It is a Dell Dimension 4600 with 2.4ghz
I had to hurry up and uninstall KAV when it stopped working again because everyone was getting mad. I will try to look at it in the morning.

[Pascal]

Well......I was wrong. I had to reboot the server for an unrelated issue and the problem is back. I don't know why it was working fine for a while.

I'm still pegging DNS as an issue. (Or perhaps a related connectivity issue). There are a few possible things to try. Firstly, when the problem occurs - can you still access the internet from the WinGate Server itself? If you cannot, the problem is likely with the link between WinGate and your ISP somewhere. If you can, the problem is more likely to be between the clients and WinGate.

Then, in the DNS/WINS Resolver configuration you have the option of manually specifying a server. As at times there are no responses from your DNS Server, can you try adding another DNS server in there (from a different ISP) to see if that helps?

[MartinSigns]

You are correct. Everything works fine on the server even if KAV is installed. However, I do get the same problem on the server if I check 'use proxy' under 'internet options' - 'connection' tab - 'LAN settings'. I had originally had it (the server) set up that way before in order to protect it with KAV and I unchecked 'use proxy' in order to have internet on the server when I upgraded and the problem started.

FYI: Before I originally posted this problem, I had tried manually putting in my three dns servers (my isp, the ones listed in the above error log) and that had not helped. The odds of the problem being with the dns servers in my opinion are right there next to impossible since everything works fine every one of the 12 or so times I have uninstalled KAV.

My experience with weird, odd problems like this is that I will have to reinstall windows to fix this. That is not such a bad thing since there is very little software to reinstall compared to a workstation. Besides, I need to swap the server over to a RAID 5 and I might as well do that at the same time.