Geekzone: technology news, blogs, forums
Guest
Welcome Guest.
You haven't logged in yet. If you don't have an account you can register now.




10 posts

Wannabe Geek


Topic # 242655 7-Nov-2018 22:05
Send private message quote this post

So our company is on 2degrees fibre for business for about 1 year and all has been running great, always online.

 

This is the first problem we have experienced and in talking to various tech support people at 2degrees and other internet providers as well as IRD themselves, we are not getting very far in resolving our problem.

 

Problem

 

When any computer or device tries to access the MyIR login area (https://services.ird.govt.nz) it won't load the login page at all. 

 

Steps to try and fix the issue so far...

 

     

  1. We have tried all different types of browsers, cleared cookies, caches and flushdns (not fixed)
  2. We run with an SBS Windows server domain and out gateway is usually set to the local IP of the server. So we conected straight to the modem as used that as the gateway (not fixed)
  3. We then called IRD to see if they were blocking our static IP address (203.86.206.44). They said they don't block IP address at all. (not fixed)
  4. We called 2degrees and they said that the tracert from our network to "services.ird.govt.nz" was getting aborted when it reached sparkdigital.co.nz (Spark). It seems sparkdigital host the IRD websites. Sparkdigital suggested we change our static IP address to resolve the issue (possible a big job though). Not going to do that yet until I understand what the cause of the issue is. (not tried yet)
  5. We called sparkdigital.co.nz and talked to their technical support team in web services. They said they don't block IP addresses, but they could not explain why the timeout would occur at their server. (not fixed)
  6. The only other thing I can think of is our router has been hacked or that our IP is on a blacklist and IRD/sparkdigital are blocking it unknowingly (not looked yet)

 

Please, if anyone has experience on at least where to look or what to check, we would be very grateful. Tracert below.

 

 

 

Thanks,
Dan

 

 

 

Microsoft Windows [Version 6.1.7601]
Copyright (c) 2009 Microsoft Corporation. All rights reserved.

 

C:\Users\Dan>tracert services.ird.govt.nz

 

Tracing route to services.ir1.ird.govt.nz [222.153.202.43]
over a maximum of 30 hops:

 

1 <1 ms 9 ms 8 ms 192.168.60.1
2 6 ms 1 ms 1 ms 111-69-1-254.core.snap.net.nz [111.69.1.254]
3 28 ms 18 ms 18 ms 38.27.69.111.static.snap.net.nz [111.69.27.38]
4 26 ms 19 ms 17 ms 39.27.69.111.static.snap.net.nz [111.69.27.39]
5 19 ms 20 ms 18 ms ae9-44.akcr11.global-gateway.net.nz [122.56.127.
209]
6 19 ms 18 ms 21 ms mdr-ip24-dom.msc.global-gateway.net.nz [122.56.1
16.10]
7 19 ms 19 ms 23 ms 222-153-223-166.sparkdigital.co.nz [222.153.223.
166]
8 * * * Request timed out.
9 * * * Request timed out.
10 * * * Request timed out.
11 * * * Request timed out.
12 * * * Request timed out.
13 * * * Request timed out.
14 * * * Request timed out.
15 * * * Request timed out.
16 * * * Request timed out.
17 * * * Request timed out.
18 * * * Request timed out.
19 * * * Request timed out.
20 * * * Request timed out.
21 * * * Request timed out.
22 * * * Request timed out.
23 * * * Request timed out.
24 * * * Request timed out.
25 * * * Request timed out.
26 * * * Request timed out.
27 * * * Request timed out.
28 * * * Request timed out.
29 * * * Request timed out.
30 * * * Request timed out.

 

Trace complete.

 

C:\Users\Dan>


View this topic in a long page with up to 500 replies per page Create new topic
 1 | 2 | 3
1292 posts

Uber Geek
+1 received by user: 295


  Reply # 2121829 7-Nov-2018 22:13
Send private message quote this post

I'm getting connection reset for https://services.ird.govt.nz from where I am too, not on 2degrees.

 

 

You sure you are using the correct URL? Following the links from the homepage works to log into myIR.

117 posts

Master Geek
+1 received by user: 9


  Reply # 2121830 7-Nov-2018 22:18
Send private message quote this post

I'm on 2degrees and its working fine for me. I wouldn't read too much into the traceroute. I ran the same and similar results. 

 

Ensure you are loading https://services.ird.govt.nz/irsso/newlogin?id=rightnav as opposed to https://services.ird.govt.nz

 

I've tried it from ~ 4 different ISP's and all have exact same results = working but not directly on https://services.ird.govt.nz/ as it seems to drop the connection. This could be the way its setup on IRD's end with their gateway device. Site setups a session on load of login. But the full URL works fine or from their main page.

 

Cheers

 

 


 
 
 
 




10 posts

Wannabe Geek


  Reply # 2121839 7-Nov-2018 22:34
Send private message quote this post

Hi,

 

Yes, we normally load the login screen from the main IRD homepage as you mentioned to get to https://services.ird.govt.nz/irsso/newlogin?id=rightnav and this full link doesn't work for us on any browser or on any device within our network, but it does on networks outside our organisation.

 

Any further thoughts on where to look?

 

Thanks,
Dan


117 posts

Master Geek
+1 received by user: 9


  Reply # 2121855 7-Nov-2018 22:42
Send private message quote this post

dvanwijk:

 

Hi,

 

Yes, we normally load the login screen from the main IRD homepage as you mentioned to get to https://services.ird.govt.nz/irsso/newlogin?id=rightnav and this full link doesn't work for us on any browser or on any device within our network, but it does on networks outside our organisation.

 

Any further thoughts on where to look?

 

Thanks,
Dan

 

 

Exactly what error do you get? So you can load other parts of the IRD website? Can you load this page for example - https://e-services.ird.govt.nz/login/newRegistration.do




10 posts

Wannabe Geek


  Reply # 2121862 7-Nov-2018 22:49
Send private message quote this post

Jiriteach:

 

dvanwijk:

 

Hi,

 

Yes, we normally load the login screen from the main IRD homepage as you mentioned to get to https://services.ird.govt.nz/irsso/newlogin?id=rightnav and this full link doesn't work for us on any browser or on any device within our network, but it does on networks outside our organisation.

 

Any further thoughts on where to look?

 

Thanks,
Dan

 

 

Exactly what error do you get? So you can load other parts of the IRD website? Can you load this page for example - https://e-services.ird.govt.nz/login/newRegistration.do

 

 

Yes, we can load https://e-services.ird.govt.nz/login/newRegistration.do 

 

When we try to load https://services.ird.govt.nz/irsso/newlogin?id=rightnav in chrome, I get the following error...

 

This site can’t be reached

 

services.ird.govt.nz took too long to respond.

 

 

 

 

 

 

Try:

 

     

  • Checking the connection
  • Checking the proxy and the firewall
  • Running Windows Network Diagnostics

 

ERR_CONNECTION_TIMED_OUT

 

 

 

If I use internet explorer 11 to load https://services.ird.govt.nz/irsso/newlogin?id=rightnav I get the following...

 

 

 

 

 

This page can’t be displayed

 

 

     

  • Make sure the web address https://services.ird.govt.nz is correct.
  • Look for the page with your search engine.
  • Refresh the page in a few minutes.

 

 

 

 

 

 


117 posts

Master Geek
+1 received by user: 9


  Reply # 2121866 7-Nov-2018 22:53
Send private message quote this post

dvanwijk:

 

Jiriteach:

 

dvanwijk:

 

Hi,

 

Yes, we normally load the login screen from the main IRD homepage as you mentioned to get to https://services.ird.govt.nz/irsso/newlogin?id=rightnav and this full link doesn't work for us on any browser or on any device within our network, but it does on networks outside our organisation.

 

Any further thoughts on where to look?

 

Thanks,
Dan

 

 

Exactly what error do you get? So you can load other parts of the IRD website? Can you load this page for example - https://e-services.ird.govt.nz/login/newRegistration.do

 

 

Yes, we can load https://e-services.ird.govt.nz/login/newRegistration.do 

 

When we try to load https://services.ird.govt.nz/irsso/newlogin?id=rightnav in chrome, I get the following error...

 

This site can’t be reached

 

services.ird.govt.nz took too long to respond.

 

Try:

 

     

  • Checking the connection
  • Checking the proxy and the firewall
  • Running Windows Network Diagnostics

ERR_CONNECTION_TIMED_OUT   If I use internet explorer 11 to load https://services.ird.govt.nz/irsso/newlogin?id=rightnav I get the following...   This page can’t be displayed

 

     

  • Make sure the web address https://services.ird.govt.nz is correct.
  • Look for the page with your search engine.
  • Refresh the page in a few minutes.

 

Ok - Interesting. What about - http://www2.e-services.ird.govt.nz ? This should re-direct to the login page.

 

Are you running through a proxy at all on your end? 

 

 

 

 




10 posts

Wannabe Geek


  Reply # 2121877 7-Nov-2018 22:58
Send private message quote this post

Jiriteach:

 

dvanwijk:

 

Jiriteach:

 

dvanwijk:

 

Hi,

 

Yes, we normally load the login screen from the main IRD homepage as you mentioned to get to https://services.ird.govt.nz/irsso/newlogin?id=rightnav and this full link doesn't work for us on any browser or on any device within our network, but it does on networks outside our organisation.

 

Any further thoughts on where to look?

 

Thanks,
Dan

 

 

Exactly what error do you get? So you can load other parts of the IRD website? Can you load this page for example - https://e-services.ird.govt.nz/login/newRegistration.do

 

 

Yes, we can load https://e-services.ird.govt.nz/login/newRegistration.do 

 

When we try to load https://services.ird.govt.nz/irsso/newlogin?id=rightnav in chrome, I get the following error...

 

This site can’t be reached

 

services.ird.govt.nz took too long to respond.

 

Try:

 

     

  • Checking the connection
  • Checking the proxy and the firewall
  • Running Windows Network Diagnostics

ERR_CONNECTION_TIMED_OUT   If I use internet explorer 11 to load https://services.ird.govt.nz/irsso/newlogin?id=rightnav I get the following...   This page can’t be displayed

 

     

  • Make sure the web address https://services.ird.govt.nz is correct.
  • Look for the page with your search engine.
  • Refresh the page in a few minutes.

 

Ok - Interesting. What about - http://www2.e-services.ird.govt.nz ? This should re-direct to the login page.

 

Are you running through a proxy at all on your end? 

 

 

 

 

 

 

Unfortunately, http://www2.e-services.ird.govt.nz does not work either (same browser errors as above).

 

We are not running a proxy server.


117 posts

Master Geek
+1 received by user: 9


  Reply # 2121878 7-Nov-2018 23:11
Send private message quote this post

dvanwijk:

 

Jiriteach:

 

dvanwijk:

 

Jiriteach:

 

dvanwijk:

 

Hi,

 

Yes, we normally load the login screen from the main IRD homepage as you mentioned to get to https://services.ird.govt.nz/irsso/newlogin?id=rightnav and this full link doesn't work for us on any browser or on any device within our network, but it does on networks outside our organisation.

 

Any further thoughts on where to look?

 

Thanks,
Dan

 

 

Exactly what error do you get? So you can load other parts of the IRD website? Can you load this page for example - https://e-services.ird.govt.nz/login/newRegistration.do

 

 

Yes, we can load https://e-services.ird.govt.nz/login/newRegistration.do 

 

When we try to load https://services.ird.govt.nz/irsso/newlogin?id=rightnav in chrome, I get the following error...

 

This site can’t be reached

 

services.ird.govt.nz took too long to respond.

 

Try:

 

     

  • Checking the connection
  • Checking the proxy and the firewall
  • Running Windows Network Diagnostics

ERR_CONNECTION_TIMED_OUT   If I use internet explorer 11 to load https://services.ird.govt.nz/irsso/newlogin?id=rightnav I get the following...   This page can’t be displayed

 

     

  • Make sure the web address https://services.ird.govt.nz is correct.
  • Look for the page with your search engine.
  • Refresh the page in a few minutes.

 

Ok - Interesting. What about - http://www2.e-services.ird.govt.nz ? This should re-direct to the login page.

 

Are you running through a proxy at all on your end? 

 

 

Unfortunately, http://www2.e-services.ird.govt.nz does not work either (same browser errors as above).

 

We are not running a proxy server.

 

 

Wondering if it's a wider and intermittant issue with some of the government sites or their providers. How long have you experienced this for? I was just trying to browse the Companies site which is run by MBIE and I am able to search for a company but getting timeouts for viewing any of the details of the company. Again tried from several connections/ISP's and same issue. 

 

The only other suggestion would be the raise it with IRD and have them investigate.


'That VDSL Cat'
9062 posts

Uber Geek
+1 received by user: 1993

Trusted
Spark
Subscriber

  Reply # 2121880 7-Nov-2018 23:17
Send private message quote this post

Given that you run a business, so probably dont wanna change the IP..

 

 

 

Have you tried switching to a generic login? IIRC that drops your profile and static.

 

@nickmack would be able to confirm the exact configuration.

 

 

 

Would atleast assist you in confirming  if your seeing a network configuration or something outside.





#include <std_disclaimer>

 

Any comments made are personal opinion and do not reflect directly on the position my current or past employers may have.


2196 posts

Uber Geek
+1 received by user: 671

Subscriber

  Reply # 2121881 7-Nov-2018 23:17
Send private message quote this post

Yeah, what router are you using, is it doing any sort of L7 filtering or anything?


273 posts

Ultimate Geek
+1 received by user: 212

Trusted
2degrees

  Reply # 2121884 7-Nov-2018 23:32
Send private message quote this post

Hiya - You state you are using Windows SBS - does thisnincludd ISA/proxy server? Can you plug a laptop directly into your router to bypass all of that and retest?



10 posts

Wannabe Geek


  Reply # 2121888 7-Nov-2018 23:38
Send private message quote this post

hio77:

 

Have you tried switching to a generic login? IIRC that drops your profile and static.

 

 

Sorry but I don't understand. What should I trying a generic login on exactly?

 

Thanks,

 

Dan


387 posts

Ultimate Geek
+1 received by user: 79


  Reply # 2121889 7-Nov-2018 23:38
One person supports this post
Send private message quote this post

Your traceroute is pretty similar to mine, so I do not see any problem there:

 

[D:\]tracert services.ird.govt.nz

 

Tracing route to services.ir1.ird.govt.nz [222.153.202.43]
over a maximum of 30 hops:

 

1 <1 ms <1 ms <1 ms erl.jsw.gen.nz [10.0.1.251]
2 1 ms 1 ms 1 ms 104.7.69.111.static.snap.net.nz [111.69.7.104]
3 14 ms 14 ms 13 ms 38.27.69.111.static.snap.net.nz [111.69.27.38]
4 13 ms 13 ms 13 ms 39.27.69.111.static.snap.net.nz [111.69.27.39]
5 14 ms 14 ms 14 ms ae9-44.akcr11.global-gateway.net.nz [122.56.127.209]
6 14 ms 14 ms 14 ms mdr-ip24-dom.msc.global-gateway.net.nz [122.56.116.10]
7 15 ms 15 ms 15 ms 222-153-223-166.sparkdigital.co.nz [222.153.223.166]
8 * * * Request timed out.
9 * * * Request timed out.
10 * * * Request timed out.
11 * * * Request timed out.
12 * * * Request timed out.
13 * * * Request timed out.
14 * * * Request timed out.
15 * * * Request timed out.
16 * ^C

 

The sparkdigital.co.nz routers seem to be blocking the traceroute, but I can connect fine to https://services.ird.govt.nz/irsso/newlogin?id=rightnav.

 

Tracetcp on the https port gets through all the way, as expected:

 

[d:\]tracetcp.exe services.ird.govt.nz:https

 

Tracing route to 222.153.202.43 on port 443
Over a maximum of 30 hops.
1 2 ms 1 ms 1 ms 10.0.1.251 [erl.jsw.gen.nz]
2 3 ms 15 ms 2 ms 111.69.7.104 [104.7.69.111.static.snap.net.nz]
3 16 ms 56 ms 15 ms 111.69.27.38 [38.27.69.111.static.snap.net.nz]
4 20 ms 14 ms 15 ms 111.69.27.39 [39.27.69.111.static.snap.net.nz]
5 20 ms 17 ms 15 ms 122.56.127.33 [ae9-42.akcr11.global-gateway.net.nz]
6 15 ms 15 ms 15 ms 122.56.116.10 [mdr-ip24-dom.msc.global-gateway.net.nz]
7 16 ms 15 ms 16 ms 222.153.223.166 [222-153-223-166.sparkdigital.co.nz]
8 Destination Reached in 16 ms. Connection established to 222.153.202.43
Trace Complete.

 

Tracetcp is available from here: http://simulatedsimian.github.io/tracetcp.html




10 posts

Wannabe Geek


  Reply # 2121891 7-Nov-2018 23:39
Send private message quote this post

NickMack: ... Can you plug a laptop directly into your router to bypass all of that and retest?

 

Already tried that. Same result.


1292 posts

Uber Geek
+1 received by user: 295


  Reply # 2121894 7-Nov-2018 23:41
Send private message quote this post

Is your router secured properly, why can I see a Mikrotik login page.

 1 | 2 | 3
View this topic in a long page with up to 500 replies per page Create new topic



Twitter »

Follow us to receive Twitter updates when new discussions are posted in our forums:



Follow us to receive Twitter updates when news items and blogs are posted in our frontpage:



Follow us to receive Twitter updates when tech item prices are listed in our price comparison site:



Geekzone Live »

Try automatic live updates from Geekzone directly in your browser, without refreshing the page, with Geekzone Live now.



Are you subscribed to our RSS feed? You can download the latest headlines and summaries from our stories directly to your computer or smartphone by using a feed reader.

Alternatively, you can receive a daily email with Geekzone updates.