Unable To Connect To Certain Websites
laurin1
Enthusiast - Level 3

Starting this weekend, I have been unable to connect to certain websites. The one that consistenly is a problem (completly unable to connect to) is stackoverflow.com.

  • I can ping this host and tracert looks fine. I just spent 45 minutes chatting with a support representative, to no avail.
  • I can connect to this site from my work network or using an Internet Proxy just fine.
  • I can connect to this site from my iPhone over AT&T LTE just fine.
  • I've verified the issue exists from any of my desktop computers which are wired and connected directly to the FiOS router and from my iPhone over Wi-Fi.
  • I've rebooted the router.
  • I've had other sites with this issue as well, but the others are more intermittment.

Since I can ping the host, it seems to me that something is blocking port 80 and port 443 for this IP address or subnet.

1 Solution
cbenard
Enthusiast - Level 2

I put together a blog post on how to fix the issue:

How To Fix Verizon FiOS Problem Connecting To Websites

It's got screenshots on how to adjust your router's MTU and a good explanation of the problem. Thanks everyone in here who was a big help in getting this "solved" until Verizon fixes their issue: laurin1, mbabin.

View solution in original post

68 Replies
bluejay435
Newbie

Add me to the list, I can not access many common sites like LinkedIn and Stackoverflow and many of the sites I can access are having issues... I am in Texas as well.

0 Likes
Reply
philip23
Enthusiast - Level 2

Another weird data point. I can't connect to wfaa.com on my wired pc. I do a tracert and it seems to connect and return normally. I can connect to wffa.com on my samsung galaxy s4 connected wirelessly thru my the same router. I don't understand this at all.

It also turns out youtube videos will play, but exceedingly slow. It might take 5 minutes for a video to start.

0 Likes
Reply
laurin1
Enthusiast - Level 3
Changing IP addresses is most likely not the problem, though it's inconclusive on that first issue I had.

My solution is stated above and works for every sight I was having trouble with. Lower your MTU.
cbenard
Enthusiast - Level 2

I'm in Dallas and also have been having trouble with the following sites:

  • http://mitchribar.com Site never loads
  • http://youtube.com Site sometimes doesn't load. CSS sometimes doesn't load. Videos almost never load.
  • Random problems on other sites usually when loading CDN resources

Friends here in Dallas have been having problems with http://packagist.org as well, but I could load it fine.

I tried the MTU fix on my router by testing with ping. I lowered the MTU from 1500 to 1496. 1500 has worked for years.

Verizon, predictably, was no help at all. Traceroutes out of their network so they assume I'm a **bleep**. Even though it stopped working on all my xboxes, hardwired computers, laptops, chromebook, phones, tablets, and chromecasts.

The MTU fix appears to be working so far.

Anyone wanting to try this:

My Network -> Network Connections -> Broadband Connection -> Configure Connection

Adjust MTU to manual and set it to 1496. See if it solves your issues. Thanks laurin1.

philip23
Enthusiast - Level 2

My Network -> Network Connections -> Broadband Connection -> Configure Connection

Adjust MTU to manual and set it to 1496. See if it solves your issues. Thanks laurin1

Regarding the instruction above...

Everything looks the same on my router page until I get to Broadband Connection.

I don't see anything that says Configure Connection

There is a page the shows some Connection properties. Next to the title there is a button that says Enable. At the bottom of the page there is a settings button where I can change the MTU from default to manual. And the hit apply. What does the Enable button do before I go into settings?

0 Likes
Reply
mbabin1
Enthusiast - Level 2

My Network -> Network Connections

On the line that says "Broadband Connection (Ethernet/Coax)", I click on the icon in the Action column (Edit).

Select "Settings" (at the bottom).

Look for the "MTU" setting (7th line for me). Set to "Manual", and set the value to 1496 (was 1500).

Select the "Apply" button at the bottom of the settings.

philip23
Enthusiast - Level 2

Changing the MTU to 1496 seemed to clear up a bunch of problems for me. In addition to websites not loading, the ones that were loading were not loading css and they looked weird. So far, that seems to have cleared up.

0 Likes
Reply
philip23
Enthusiast - Level 2

I've never used these forums before so this is probably a very naive question... Why don't any Verizon reps get on here and explain what is going on?

0 Likes
Reply
mbabin1
Enthusiast - Level 2

Adjusting the MTU to 1496 seems to have eliminated (or most likely, worked around) the problem for me.

Was having the same issues connecting to certain sites (cnbc, stackoverflow, etc). No problems since adjusting the MTU.

Thanks to the posts here that identified the MTU change as a potential workaround. And thanks to cbenard for the clear pointer on how to make the change on the router (my initial test was changing the MTU setting on my wireless network setting for my laptop - MacBookPro).

0 Likes
Reply
cbenard
Enthusiast - Level 2

mbabin, I adjusted my original reply. I incorrectly stated 1468. 1468 was the max ping size I got working, but I forgot to add back the IP header of 28 bytes. I changed the MTU back up to 1496 and it's still working, and I'm only losing 4 bytes now from the default, rather than 32.

Hope this helps.

gamer99
Contributor - Level 1

is there a workaround for this?

0 Likes
Reply
mbabin1
Enthusiast - Level 2

cbenard, Thanks for the update. I also changed the MTU setting on the router to 1496 and am still not experiencing the problem. I've also edited my original reply to you with the updated MTU setting (so as to avoid potential confusion to others who might be reading through the discussion thread).

Mindcrimes
Newbie

Tried lowering my MTU but was greeted by an elevation restriction..how can i elevate through the command line?

0 Likes
Reply
Mindcrimes
Newbie

I had Verizon release and renew my public IP and all is well..

0 Likes
Reply
laurin1
Enthusiast - Level 3

First of all, the very first site that I found that said how to change your MTU in Windows 7...I can't open. 🙂

But I can from my work computer (RDP):

http://www.richard-slater.co.uk/archives/2009/10/23/change-your-mtu-under-vista-windows-7-or-windows...

This site has a great set of instructions:

In the Command Prompt type:

 

The host name should be a site you can not reach, -f marks the packet as one that should not be fragmented the -l 1472 sets the size of the packet (1472 = Ethernet Default MTU – Packet Header, where the Ethernet Default MTU is 1500 and the Packet Header is 28 bytes)

 

So...

>ping packagist.org -f -l 1472

Pinging packagist.org [87.98.253.214] with 1472 bytes of data:
Request timed out.

But

>ping packagist.org -f -l 1452

Pinging packagist.org [87.98.253.214] with 1452 bytes of data:
Reply from 87.98.253.214: bytes=1452 time=172ms TTL=49
Reply from 87.98.253.214: bytes=1452 time=169ms TTL=49

In fact, using this method I determined that the maximum MTU that will pass is:

>ping packagist.org -f -l 1468

Pinging packagist.org [87.98.253.214] with 1468 bytes of data:
Reply from 87.98.253.214: bytes=1468 time=169ms TTL=49

And the winner is...


netsh interface ipv4 set subinterface "Local Area Connection" mtu=1468 store=persistent

laurin1
Enthusiast - Level 3

Ok, that fixed stackoverflow.com, but I still can't acces this one:

http://youtrack.jetbrains.com/

And now I have a new one (maybe not new, did not test this one before):

https://packagist.org/

0 Likes
Reply
smith6612
Community Leader
Community Leader

@laurin1 wrote:

Ok, that fixed stackoverflow.com, but I still can't acces this one:

http://youtrack.jetbrains.com/

And now I have a new one (maybe not new, did not test this one before):

https://packagist.org/


Try dropping your MTU on the computer by about 20 bytes to see if you have any improvement in connectivity. FiOS should be able to use 1500 end to end, but sometimes that doesn't always work out if there are transit issues.

jsegars1
Enthusiast - Level 1

I had the same problem as the original poster.  I was unable to access jsfiddle.net throughout the day but could ping and traceroute to it.

Meanwhile, coworkers on a separate FIOS connection were able to access jsfiddle.net but unable to access git.typo3.org. After my coworkers managed to get an IP on a separate subnet, git.typo3.org began working but jsfiddle.net no longer worked.

 

After a nice long call with tech support, they believe it is a router issue and have a replacement on the way. Meanwhile, I adjusted my MTU and jsfiddle.net is working again.

 

somegirl
Champion - Level 3

I'm going to post Justin's reply from this thread, as it sounds like this might be a BOGON filter issue.

Short answer: Get a new IP address, and the issue will probably clear up.


@Justin wrote:

If you Google "bogon filter" you will find a Wikipedia article that talks about this problem, plus of course plenty of other links to articles, etc. Basically what has happened is that many "bad guys" have used IP addresses in the past for nefarious uses, so to protect themselves many websites use a "bogon filter" to block those addresses. But IP addresses that were once used for bad things in the past can be used for good ones now; as ISPs expand their networks they acquire blocks of IP addresses and start using them for legitimate purposes. But it is up to each website to manage their own bogon filters, and many don't keep them up to date very well.

For you, probably you recently got a new IP address (this happens regularly for people who do not pay for and have static IP addresses) and the new address was on a bogon filter list for those sites, and still is. The only way to get your current IP address removed from the list is to contact the websites, or just wait, eventually they will probably update their filter and then you will be able to access the sites.

Another option for you is to record your IP address right now, then turn off your router overnight, turn it on tomorrow and see what IP address you get. If it is on another block of IP addresses the odds are good that you will then be able to reach the sites just fine.

Oh, and I too can get to those websites just fine, I am also a FiOS user.

Hope this helps.

__________________________________
Justin
FiOS TV, 25/25 Internet, and Digital Voice user
QIP7232, QIP7100-P2, IMG 1.9
Keller, TX 76248


Mindcrimes
Newbie

Somegirl,

I live in Grapevine, TX..right down the road from you..currently I cannot  hit two sites...Bankofamerica.com nor Star Wars, The Old Republic game servers..which alot of people on their forums are from North Texas complaining about this.  I have called Verizon about it and Bioware...noone can tell me what to do..I guess i could try to refresh and renew my IP but will likely get the same one...any suggestions? 

0 Likes
Reply
vespir
Enthusiast - Level 2

I'm in Dallas and I've had MANY websites affected including all Apple services (iCloud, iTunes Match, iCloud e-mail) as well as some pretty normal websites such as mozilla.org and 500px.com just to name a few. I depend on quite a few of these sites that I can't access for my job and this needs to get fixed soon. Been dealing with this since this morning.

0 Likes
Reply