Geekzone: technology news, blogs, forums
Guest
Welcome Guest.
You haven't logged in yet. If you don't have an account you can register now.


dvanwijk

10 posts

Wannabe Geek


#242655 7-Nov-2018 22:05
Send private message

So our company is on 2degrees fibre for business for about 1 year and all has been running great, always online.

 

This is the first problem we have experienced and in talking to various tech support people at 2degrees and other internet providers as well as IRD themselves, we are not getting very far in resolving our problem.

 

Problem

 

When any computer or device tries to access the MyIR login area (https://services.ird.govt.nz) it won't load the login page at all. 

 

Steps to try and fix the issue so far...

 

     

  1. We have tried all different types of browsers, cleared cookies, caches and flushdns (not fixed)
  2. We run with an SBS Windows server domain and out gateway is usually set to the local IP of the server. So we conected straight to the modem as used that as the gateway (not fixed)
  3. We then called IRD to see if they were blocking our static IP address (203.86.206.44). They said they don't block IP address at all. (not fixed)
  4. We called 2degrees and they said that the tracert from our network to "services.ird.govt.nz" was getting aborted when it reached sparkdigital.co.nz (Spark). It seems sparkdigital host the IRD websites. Sparkdigital suggested we change our static IP address to resolve the issue (possible a big job though). Not going to do that yet until I understand what the cause of the issue is. (not tried yet)
  5. We called sparkdigital.co.nz and talked to their technical support team in web services. They said they don't block IP addresses, but they could not explain why the timeout would occur at their server. (not fixed)
  6. The only other thing I can think of is our router has been hacked or that our IP is on a blacklist and IRD/sparkdigital are blocking it unknowingly (not looked yet)

 

Please, if anyone has experience on at least where to look or what to check, we would be very grateful. Tracert below.

 

 

 

Thanks,
Dan

 

 

 

Microsoft Windows [Version 6.1.7601]
Copyright (c) 2009 Microsoft Corporation. All rights reserved.

 

C:\Users\Dan>tracert services.ird.govt.nz

 

Tracing route to services.ir1.ird.govt.nz [222.153.202.43]
over a maximum of 30 hops:

 

1 <1 ms 9 ms 8 ms 192.168.60.1
2 6 ms 1 ms 1 ms 111-69-1-254.core.snap.net.nz [111.69.1.254]
3 28 ms 18 ms 18 ms 38.27.69.111.static.snap.net.nz [111.69.27.38]
4 26 ms 19 ms 17 ms 39.27.69.111.static.snap.net.nz [111.69.27.39]
5 19 ms 20 ms 18 ms ae9-44.akcr11.global-gateway.net.nz [122.56.127.
209]
6 19 ms 18 ms 21 ms mdr-ip24-dom.msc.global-gateway.net.nz [122.56.1
16.10]
7 19 ms 19 ms 23 ms 222-153-223-166.sparkdigital.co.nz [222.153.223.
166]
8 * * * Request timed out.
9 * * * Request timed out.
10 * * * Request timed out.
11 * * * Request timed out.
12 * * * Request timed out.
13 * * * Request timed out.
14 * * * Request timed out.
15 * * * Request timed out.
16 * * * Request timed out.
17 * * * Request timed out.
18 * * * Request timed out.
19 * * * Request timed out.
20 * * * Request timed out.
21 * * * Request timed out.
22 * * * Request timed out.
23 * * * Request timed out.
24 * * * Request timed out.
25 * * * Request timed out.
26 * * * Request timed out.
27 * * * Request timed out.
28 * * * Request timed out.
29 * * * Request timed out.
30 * * * Request timed out.

 

Trace complete.

 

C:\Users\Dan>


View this topic in a long page with up to 500 replies per page Create new topic
 1 | 2 | 3
yitz
2238 posts

Uber Geek
+1 received by user: 594


  #2121829 7-Nov-2018 22:13
Send private message

I'm getting connection reset for https://services.ird.govt.nz from where I am too, not on 2degrees.

 

 

You sure you are using the correct URL? Following the links from the homepage works to log into myIR.



Jiriteach
1139 posts

Uber Geek
+1 received by user: 373

ID Verified
Trusted
Lifetime subscriber

  #2121830 7-Nov-2018 22:18
Send private message

I'm on 2degrees and its working fine for me. I wouldn't read too much into the traceroute. I ran the same and similar results. 

 

Ensure you are loading https://services.ird.govt.nz/irsso/newlogin?id=rightnav as opposed to https://services.ird.govt.nz

 

I've tried it from ~ 4 different ISP's and all have exact same results = working but not directly on https://services.ird.govt.nz/ as it seems to drop the connection. This could be the way its setup on IRD's end with their gateway device. Site setups a session on load of login. But the full URL works fine or from their main page.

 

Cheers

 

 





-- opinions expressed by me are solely my own. ie - personal


dvanwijk

10 posts

Wannabe Geek


  #2121839 7-Nov-2018 22:34
Send private message

Hi,

 

Yes, we normally load the login screen from the main IRD homepage as you mentioned to get to https://services.ird.govt.nz/irsso/newlogin?id=rightnav and this full link doesn't work for us on any browser or on any device within our network, but it does on networks outside our organisation.

 

Any further thoughts on where to look?

 

Thanks,
Dan




Jiriteach
1139 posts

Uber Geek
+1 received by user: 373

ID Verified
Trusted
Lifetime subscriber

  #2121855 7-Nov-2018 22:42
Send private message

dvanwijk:

 

Hi,

 

Yes, we normally load the login screen from the main IRD homepage as you mentioned to get to https://services.ird.govt.nz/irsso/newlogin?id=rightnav and this full link doesn't work for us on any browser or on any device within our network, but it does on networks outside our organisation.

 

Any further thoughts on where to look?

 

Thanks,
Dan

 

 

Exactly what error do you get? So you can load other parts of the IRD website? Can you load this page for example - https://e-services.ird.govt.nz/login/newRegistration.do





-- opinions expressed by me are solely my own. ie - personal


dvanwijk

10 posts

Wannabe Geek


  #2121862 7-Nov-2018 22:49
Send private message

Jiriteach:

 

dvanwijk:

 

Hi,

 

Yes, we normally load the login screen from the main IRD homepage as you mentioned to get to https://services.ird.govt.nz/irsso/newlogin?id=rightnav and this full link doesn't work for us on any browser or on any device within our network, but it does on networks outside our organisation.

 

Any further thoughts on where to look?

 

Thanks,
Dan

 

 

Exactly what error do you get? So you can load other parts of the IRD website? Can you load this page for example - https://e-services.ird.govt.nz/login/newRegistration.do

 

 

Yes, we can load https://e-services.ird.govt.nz/login/newRegistration.do 

 

When we try to load https://services.ird.govt.nz/irsso/newlogin?id=rightnav in chrome, I get the following error...

 

This site can’t be reached

 

services.ird.govt.nz took too long to respond.

 

 

 

 

 

 

Try:

 

     

  • Checking the connection
  • Checking the proxy and the firewall
  • Running Windows Network Diagnostics

 

ERR_CONNECTION_TIMED_OUT

 

 

 

If I use internet explorer 11 to load https://services.ird.govt.nz/irsso/newlogin?id=rightnav I get the following...

 

 

 

 

 

This page can’t be displayed

 

 

     

  • Make sure the web address https://services.ird.govt.nz is correct.
  • Look for the page with your search engine.
  • Refresh the page in a few minutes.

 

 

 

 

 

 


Jiriteach
1139 posts

Uber Geek
+1 received by user: 373

ID Verified
Trusted
Lifetime subscriber

  #2121866 7-Nov-2018 22:53
Send private message

dvanwijk:

 

Jiriteach:

 

dvanwijk:

 

Hi,

 

Yes, we normally load the login screen from the main IRD homepage as you mentioned to get to https://services.ird.govt.nz/irsso/newlogin?id=rightnav and this full link doesn't work for us on any browser or on any device within our network, but it does on networks outside our organisation.

 

Any further thoughts on where to look?

 

Thanks,
Dan

 

 

Exactly what error do you get? So you can load other parts of the IRD website? Can you load this page for example - https://e-services.ird.govt.nz/login/newRegistration.do

 

 

Yes, we can load https://e-services.ird.govt.nz/login/newRegistration.do 

 

When we try to load https://services.ird.govt.nz/irsso/newlogin?id=rightnav in chrome, I get the following error...

 

This site can’t be reached

 

services.ird.govt.nz took too long to respond.

 

Try:

 

     

  • Checking the connection
  • Checking the proxy and the firewall
  • Running Windows Network Diagnostics

ERR_CONNECTION_TIMED_OUT   If I use internet explorer 11 to load https://services.ird.govt.nz/irsso/newlogin?id=rightnav I get the following...   This page can’t be displayed

 

     

  • Make sure the web address https://services.ird.govt.nz is correct.
  • Look for the page with your search engine.
  • Refresh the page in a few minutes.

 

Ok - Interesting. What about - http://www2.e-services.ird.govt.nz ? This should re-direct to the login page.

 

Are you running through a proxy at all on your end? 

 

 

 

 





-- opinions expressed by me are solely my own. ie - personal


 
 
 
 

Shop now for Lego sets and other gifts (affiliate link).
dvanwijk

10 posts

Wannabe Geek


  #2121877 7-Nov-2018 22:58
Send private message

Jiriteach:

 

dvanwijk:

 

Jiriteach:

 

dvanwijk:

 

Hi,

 

Yes, we normally load the login screen from the main IRD homepage as you mentioned to get to https://services.ird.govt.nz/irsso/newlogin?id=rightnav and this full link doesn't work for us on any browser or on any device within our network, but it does on networks outside our organisation.

 

Any further thoughts on where to look?

 

Thanks,
Dan

 

 

Exactly what error do you get? So you can load other parts of the IRD website? Can you load this page for example - https://e-services.ird.govt.nz/login/newRegistration.do

 

 

Yes, we can load https://e-services.ird.govt.nz/login/newRegistration.do 

 

When we try to load https://services.ird.govt.nz/irsso/newlogin?id=rightnav in chrome, I get the following error...

 

This site can’t be reached

 

services.ird.govt.nz took too long to respond.

 

Try:

 

     

  • Checking the connection
  • Checking the proxy and the firewall
  • Running Windows Network Diagnostics

ERR_CONNECTION_TIMED_OUT   If I use internet explorer 11 to load https://services.ird.govt.nz/irsso/newlogin?id=rightnav I get the following...   This page can’t be displayed

 

     

  • Make sure the web address https://services.ird.govt.nz is correct.
  • Look for the page with your search engine.
  • Refresh the page in a few minutes.

 

Ok - Interesting. What about - http://www2.e-services.ird.govt.nz ? This should re-direct to the login page.

 

Are you running through a proxy at all on your end? 

 

 

 

 

 

 

Unfortunately, http://www2.e-services.ird.govt.nz does not work either (same browser errors as above).

 

We are not running a proxy server.


Jiriteach
1139 posts

Uber Geek
+1 received by user: 373

ID Verified
Trusted
Lifetime subscriber

  #2121878 7-Nov-2018 23:11
Send private message

dvanwijk:

 

Jiriteach:

 

dvanwijk:

 

Jiriteach:

 

dvanwijk:

 

Hi,

 

Yes, we normally load the login screen from the main IRD homepage as you mentioned to get to https://services.ird.govt.nz/irsso/newlogin?id=rightnav and this full link doesn't work for us on any browser or on any device within our network, but it does on networks outside our organisation.

 

Any further thoughts on where to look?

 

Thanks,
Dan

 

 

Exactly what error do you get? So you can load other parts of the IRD website? Can you load this page for example - https://e-services.ird.govt.nz/login/newRegistration.do

 

 

Yes, we can load https://e-services.ird.govt.nz/login/newRegistration.do 

 

When we try to load https://services.ird.govt.nz/irsso/newlogin?id=rightnav in chrome, I get the following error...

 

This site can’t be reached

 

services.ird.govt.nz took too long to respond.

 

Try:

 

     

  • Checking the connection
  • Checking the proxy and the firewall
  • Running Windows Network Diagnostics

ERR_CONNECTION_TIMED_OUT   If I use internet explorer 11 to load https://services.ird.govt.nz/irsso/newlogin?id=rightnav I get the following...   This page can’t be displayed

 

     

  • Make sure the web address https://services.ird.govt.nz is correct.
  • Look for the page with your search engine.
  • Refresh the page in a few minutes.

 

Ok - Interesting. What about - http://www2.e-services.ird.govt.nz ? This should re-direct to the login page.

 

Are you running through a proxy at all on your end? 

 

 

Unfortunately, http://www2.e-services.ird.govt.nz does not work either (same browser errors as above).

 

We are not running a proxy server.

 

 

Wondering if it's a wider and intermittant issue with some of the government sites or their providers. How long have you experienced this for? I was just trying to browse the Companies site which is run by MBIE and I am able to search for a company but getting timeouts for viewing any of the details of the company. Again tried from several connections/ISP's and same issue. 

 

The only other suggestion would be the raise it with IRD and have them investigate.





-- opinions expressed by me are solely my own. ie - personal


hio77
'That VDSL Cat'
13036 posts

Uber Geek
+1 received by user: 3896

ID Verified
Trusted
Lizard Networks
Subscriber

  #2121880 7-Nov-2018 23:17
Send private message

Given that you run a business, so probably dont wanna change the IP..

 

 

 

Have you tried switching to a generic login? IIRC that drops your profile and static.

 

@nickmack would be able to confirm the exact configuration.

 

 

 

Would atleast assist you in confirming  if your seeing a network configuration or something outside.





#include <std_disclaimer>

 

Any comments made are personal opinion and do not reflect directly on the position my current or past employers may have. 


lxsw20
3689 posts

Uber Geek
+1 received by user: 2174

Subscriber

  #2121881 7-Nov-2018 23:17
Send private message

Yeah, what router are you using, is it doing any sort of L7 filtering or anything?


NickMack
977 posts

Ultimate Geek
+1 received by user: 831

Trusted
In memoriam
Lifetime subscriber

  #2121884 7-Nov-2018 23:32
Send private message

Hiya - You state you are using Windows SBS - does thisnincludd ISA/proxy server? Can you plug a laptop directly into your router to bypass all of that and retest?




 
 
 
 

Shop now on Samsung phones, tablets, TVs and more (affiliate link).
dvanwijk

10 posts

Wannabe Geek


  #2121888 7-Nov-2018 23:38
Send private message

hio77:

 

Have you tried switching to a generic login? IIRC that drops your profile and static.

 

 

Sorry but I don't understand. What should I trying a generic login on exactly?

 

Thanks,

 

Dan


fe31nz
1294 posts

Uber Geek
+1 received by user: 423


  #2121889 7-Nov-2018 23:38
Send private message

Your traceroute is pretty similar to mine, so I do not see any problem there:

 

[D:\]tracert services.ird.govt.nz

 

Tracing route to services.ir1.ird.govt.nz [222.153.202.43]
over a maximum of 30 hops:

 

1 <1 ms <1 ms <1 ms erl.jsw.gen.nz [10.0.1.251]
2 1 ms 1 ms 1 ms 104.7.69.111.static.snap.net.nz [111.69.7.104]
3 14 ms 14 ms 13 ms 38.27.69.111.static.snap.net.nz [111.69.27.38]
4 13 ms 13 ms 13 ms 39.27.69.111.static.snap.net.nz [111.69.27.39]
5 14 ms 14 ms 14 ms ae9-44.akcr11.global-gateway.net.nz [122.56.127.209]
6 14 ms 14 ms 14 ms mdr-ip24-dom.msc.global-gateway.net.nz [122.56.116.10]
7 15 ms 15 ms 15 ms 222-153-223-166.sparkdigital.co.nz [222.153.223.166]
8 * * * Request timed out.
9 * * * Request timed out.
10 * * * Request timed out.
11 * * * Request timed out.
12 * * * Request timed out.
13 * * * Request timed out.
14 * * * Request timed out.
15 * * * Request timed out.
16 * ^C

 

The sparkdigital.co.nz routers seem to be blocking the traceroute, but I can connect fine to https://services.ird.govt.nz/irsso/newlogin?id=rightnav.

 

Tracetcp on the https port gets through all the way, as expected:

 

[d:\]tracetcp.exe services.ird.govt.nz:https

 

Tracing route to 222.153.202.43 on port 443
Over a maximum of 30 hops.
1 2 ms 1 ms 1 ms 10.0.1.251 [erl.jsw.gen.nz]
2 3 ms 15 ms 2 ms 111.69.7.104 [104.7.69.111.static.snap.net.nz]
3 16 ms 56 ms 15 ms 111.69.27.38 [38.27.69.111.static.snap.net.nz]
4 20 ms 14 ms 15 ms 111.69.27.39 [39.27.69.111.static.snap.net.nz]
5 20 ms 17 ms 15 ms 122.56.127.33 [ae9-42.akcr11.global-gateway.net.nz]
6 15 ms 15 ms 15 ms 122.56.116.10 [mdr-ip24-dom.msc.global-gateway.net.nz]
7 16 ms 15 ms 16 ms 222.153.223.166 [222-153-223-166.sparkdigital.co.nz]
8 Destination Reached in 16 ms. Connection established to 222.153.202.43
Trace Complete.

 

Tracetcp is available from here: http://simulatedsimian.github.io/tracetcp.html


dvanwijk

10 posts

Wannabe Geek


  #2121891 7-Nov-2018 23:39
Send private message

NickMack: ... Can you plug a laptop directly into your router to bypass all of that and retest?

 

Already tried that. Same result.


yitz
2238 posts

Uber Geek
+1 received by user: 594


  #2121894 7-Nov-2018 23:41
Send private message

Is your router secured properly, why can I see a Mikrotik login page.

 1 | 2 | 3
View this topic in a long page with up to 500 replies per page Create new topic








Geekzone Live »

Try automatic live updates from Geekzone directly in your browser, without refreshing the page, with Geekzone Live now.



Are you subscribed to our RSS feed? You can download the latest headlines and summaries from our stories directly to your computer or smartphone by using a feed reader.