Can't connect to ANY websites, Can ping just fine, strangest problem I've ever seen!

[Sky-Knight]

@drnick5, I mentioned Killer specifically here, because the firewall is actually built into the NIC driver itself, and it's VERY EASY to miss that it's there.

I don't think that's the case here, because a USB NIC would have bypassed it.

My next suggestions would be to example the TCP/IP stack common SSL faults... system clock set correctly? Have you run a memory diagnostic? Have you pulled the drive and used something like DBAN on it? That may be required to remove some forms of malware that can actually persist beyond a nuke and pave.

But I'll admit, I'm grasping at straws on this too.

*Edit* I just looked up that unit and it's equipped with an RTL8111G LAN adapter, that's a SOFTWARE adapter... so if you have a flaky memory stick... it will react very poorly. All USB interfaces fall into this category as well. So I'd be checking that RAM! If the unit has an SSD in it, it can ALSO cause this behavior for the same reasons.

 

[drnick5]

@drnick5, I mentioned Killer specifically here, because the firewall is actually built into the NIC driver itself, and it's VERY EASY to miss that it's there.

I don't think that's the case here, because a USB NIC would have bypassed it.

My next suggestions would be to example the TCP/IP stack common SSL faults... system clock set correctly? Have you run a memory diagnostic? Have you pulled the drive and used something like DBAN on it? That may be required to remove some forms of malware that can actually persist beyond a nuke and pave.

But I'll admit, I'm grasping at straws on this too.

*Edit* I just looked up that unit and it's equipped with an RTL8111G LAN adapter, that's a SOFTWARE adapter... so if you have a flaky memory stick... it will react very poorly. All USB interfaces fall into this category as well. So I'd be checking that RAM! If the unit has an SSD in it, it can ALSO cause this behavior for the same reasons.

No worries man, I appreciate the suggestion. I'm obliviously grasping at straws here as well! I've never seen ANYTHING like this in all my years.
It has a brand new SSD installed (it originally came in with a HDD, but I replaced it and put in a new SSD, with new windows 10 install, no clone or data transfer or anything)

I'll check the ram just for the hell of it, but you'd think bad ram might have other issues like blue screens or what not. Although I've seen plenty of strange issues caused by bad ram, so its worth a shot!

 

[drnick5]

Just finished a RAM test, its run 2 passes so far, and no errors. I'm letting it run a few more just to be sure.... but it doesn't seem to be RAM related.

 

[timeshifter]

Random thought: turn off TCP/IP 6 on all network adapters.

 

[drnick5]

Random thought: turn off TCP/IP 6 on all network adapters.

I didn't mention this, but turning off IPv6 was one of the first things I tried

 

[Tech Savvy]

Does your edge device do any ssl inspections/virus scanning, application control... etc

I’m on board with using wireshark to see what’s happening to the packets.


Sent from my iPhone using Tapatalk

 

[drnick5]

Does your edge device do any ssl inspections/virus scanning, application control... etc

I’m on board with using wireshark to see what’s happening to the packets.

Sent from my iPhone using Tapatalk

I connected to a neighbors open network as a test, to take my network entirely out of the loop, no luck.
Also tried using my Mobile hotspot, to take my ISP out of the loop, same problem.

What I've been able to narrow it down to, is its definitely a problem with SSL. since most every site is https these days, it effects nearly all sites.

I've tested with www.neverssl.com which is a site I know doesn't use SSL, and that connects fine.

But I still can't figure out why SSL won't work on this computer with various versions of windows, but appears to work in Linux just fine.

 

[Sky-Knight]

Just here to remind you that brand new SSD doesn't mean known good... indeed if the SSD is bad, now is the time for it to reveal itself.

Got another disk to slap in there for another fresh install to test?

But yeah... bad SSD or bad RAM usually means random weird... not consistent weird.

 

[drnick5]

Just here to remind you that brand new SSD doesn't mean known good... indeed if the SSD is bad, now is the time for it to reveal itself.

Got another disk to slap in there for another fresh install to test?

But yeah... bad SSD or bad RAM usually means random weird... not consistent weird.

I mean, you're not wrong, but it came in with this problem on a normal HDD. I removed it and put in a new SSD. which has the same issue, it doesn't seem like a hard drive problem, as I'd likely notice other stuff drive related. It boots and shutdown fast, and has no problems opening up programs, or doing anything else I tell it.

 

[Markverhyden]

If it works on Linux doesn't absolutely mean it's 100% software. Over the years I've had a handful of machines that simply would not run any Windoze. Period. Linux ran all day long with no error. Including, what was in the day a really nice Wintel laptop, Sony Vaio FX280. Have you tried a USB NIC?

 

[Sky-Knight]

I despise realtek NICs... my money is on the driver being mismatched because that Lenovo needs the IBM tweaked one instead of the generic one that Windows stuffs in.

With RAM checking out... and two drives in the mix... it's either some oddly specific malware buried in the firmware somewhere... or a defective TCP/IP stack due to a bad driver in that category. And said bad driver, has to be coming from Microsoft via Windows Update.

 

[drnick5]

More updates.
Was able to get webpages to work in edge by turning off tls 1.2 and 1.1
I was then able to hit google, install chrome, etc. But after chrome is installed, it won't access pages (obviously)
turning tls 1.2 and 1.1 back on, chrome still can't connect to anything.

I'm using driver booster (which i normally hate these programs) to install all latest drivers. Driver booster wouldn't connect to download drivers previously, but with tls 1.2 turned off, (and 1.1 and 1.0 enabled) it now connects to download drivers.

 

[drnick5]

If it works on Linux doesn't absolutely mean it's 100% software. Over the years I've had a handful of machines that simply would not run any Windoze. Period. Linux ran all day long with no error. Including, what was in the day a really nice Wintel laptop, Sony Vaio FX280. Have you tried a USB NIC?

I've tried 4 different networks cards. internal wired (intel) and wireless (Qualcom) as well as USB NIC and a USB wireless nic (both TPlink)

 

[drnick5]

I despise realtek NICs... my money is on the driver being mismatched because that Lenovo needs the IBM tweaked one instead of the generic one that Windows stuffs in.

With RAM checking out... and two drives in the mix... it's either some oddly specific malware buried in the firmware somewhere... or a defective TCP/IP stack due to a bad driver in that category. And said bad driver, has to be coming from Microsoft via Windows Update.

I hear ya on realtek, but in this case...I've bypassed that with an external USB nic, as well as a usb wireless. same problem exists.

 

[Porthos]

I'm using driver booster (which i normally hate these programs) to install all latest drivers

If I was to use driver update software, It would only be snappy driver origin. Do not need internet to use it if you keep it updated on a flash drive.

 

[drnick5]

To update more, the error chrome is giving is "Status_Breakpoint" when I try to load a page.

At this point it definitely seems to be a ssl/tls issue, but no idea what could be causing it. all drivers are now updated as late as I can get them.

 

[Porthos]

all drivers are now updated as late as I can get

Sometimes newer is not better.
Get the network drivers from the source. https://pcsupport.lenovo.com/us/en/...00-series/aio-700-27ish/downloads/driver-list

 

[glennd]

all drivers are now updated as late as I can get them.

I'll just grasp at these straws. I know from painful experience that the "latest" is not always the best or optimal. I've come across machines where only one specific version of a driver will work, later ones will not work. Or possibly a particular targeted version of a driver. Someone alluded to this earlier.

If you're doing a clean install of Windows and allowing it to install it's own drivers, it may well be installing the wrong ones, even though they appear to work and Device Manager says everything is good. Have you made a point of installing drivers from the manufacturer targeted for that model?

And when you've run out of straws to grasp at, my last ditch effort has occasionally worked which is to fire up SDIO, start at the latest and work your way back through every compatible driver, installing each one and testing. Painful but occasionally fruitful.

 

[glennd]

Sometimes newer is not better.
Get the network drivers from the source. https://pcsupport.lenovo.com/us/en/...00-series/aio-700-27ish/downloads/driver-list

O-) this arrived as I was clicking the Post button.

 

[drnick5]

I originally tried using all the drivers from the Lenovo product page. This didn't help
They are missing chipset drivers entirely for win 10, so I had to get those from intels site.

When none of that worked, after everything else I tried, I went and updated all drivers to latest using driver booster. No luck.

In my opinion, this doesn't seem to be a driver problem. but at this point, anything is possible.

its an issue with TLS I'm pretty sure. just no idea the cause. This is unlike anything I've ever seen. But at this point, I've now spent way too much time on this problem. (1.5 days of my labor, along with my techs time who oroginally looked at the problem, and my partners time to double check that im not a crazy person) I'm about ready to throw in the towel. It's more of me being stubborn and wanting to find a solution, but im not sure one exists. Whatever I charge for this isn't enough, and I'm at the point where even if I did fix it, I'd be worried it comes back and i'd be on the hook for it again.

They'll likely need to replace the computer, and since I don't sell all in ones, will prob have to get that somewhere else unless I can convince them to go with a normal tower and monitor. (I hate all in ones with a passion, and this situation certainly isn't helping that cause)