Web surfing puzzle

[Deleted User]

mgfvvc said:

Deleted_User said:

2. Confirm the same happens with these 3 exact links clicked or pasted into address bar - ie secure / non-secure (looks like they have HSTS enabled so non-secure should redirect to HTTPS anyway)

http://www.bekospares.co.uk
https://www.bekospares.co.uk

also

https://www.gocomics.com

The reason I ask is that both bekospares.co.uk and gocomics.com (without the www.) have a 301 permanent redirect in the http header and that could be blocked by your browser or security settings.

This seems to be the nub of the issue. The http links fail, the https links work fine.

I wonder what could cause that? It showed the same issue in Firefox debugging mode, so it doesn't seem to be an extension.

Nice, happy to see a workaround although we don't know exactly what the problem is.

Do you have those websites bookmarked? If the bookmark is a specific http rather than https then it change it to https.

Normally browsers are happy with the re-directs, have you checked if there is a proxy configured, this is typical proxy behaviour messing with redirects.

The way I'd diagnose gets a bit technical but if you want to have a play then use:

chrome://net-export/

Close chrome completely before doing it so you don't get any noise from other tabs that are open, start a tracing session and then type http://bekospares.co.uk in a new tab, as soon as the site loads, go back to the net-export and stop the logging.

Then go to the following and load the log up you just saved

https://netlog-viewer.appspot.com/

You can then trace what is happening in the events, so for example here is the http response to the initial enquiry:







As you can see, it immediately redirects from http://bekospares.co.uk to https: //www.bekospares.co.uk (space in the link because it kept making a smiley).



Then in the next entries you should be able to see what is going on when it tries to connect to the redirect and figure out at what stage it grinds to a halt.





EDIT:

Try neverssl.com and see if it lets you connect ok - it is a forced non-secure site, just trying to eliminate whether something is prevent port 80 or HTTP.

mgfvvc

I can telnet to port 80, both www.google.com and www.neverssl.com, at least from the Linux box, but I still get the connection reset error from browsers.

mgfvvc

I have rebooted my router and that seems to have resolved my networking issues.

GDB2222

mgfvvc said:

I have rebooted my router and that seems to have resolved my networking issues.

It's taken you over a fortnight, though! 

One of those things that the support guys always do is make the customers switch *everything* off, leave it off for a while, then reboot it. The customers all think it's hooey, but I understand that it works 9 times out of 10.

[Deleted User]

mgfvvc said:

I have rebooted my router and that seems to have resolved my networking issues.

Yep, was step 7 in my guide because I didn't want to be that IT guy that says "have you tried turning if off and on again".

Not unusual, should have had it has step 1 - as I advise all my support staff to do in the day job!

Anyway, not unusual (especially with cheap free ISP routers) for the routing tables to overflow or corrupt, quite possible the NAT-PMP port mappings had got in a mess.

mgfvvc

GDB2222 said:

mgfvvc said:

I have rebooted my router and that seems to have resolved my networking issues.

It's taken you over a fortnight, though! 

One of those things that the support guys always do is make the customers switch *everything* off, leave it off for a while, then reboot it. The customers all think it's hooey, but I understand that it works 9 times out of 10.

I'd rebooted everything else and I don't know why I hadn't rebooted the router. It's kind of obvious that I should reboot that one last thing I haven't done yet. It's in an awkward location and maybe my subconscious was avoiding getting into moving heavy furniture to access the router? No you can't reboot it from the web interface. It's weird, but that's the way it is.

cx6

One other thing that may or may not be relevant to anyone having this type of problem (and you may have already mentioned it) is to check there is not an entry for bekospares.com in the hosts file. 

No reason why there should be of course but stranger things have happened.