I have a website running from my internal network available at the example IP 192.168.1.5.
When I type this in to the browser, it redirects to my domain name ie, "example.com", and gives me Error code: ERR_CONNECTION_REFUSED.
Any other machine that is inside of the network can access the website. The website is also accessible outside of the network. Other services from the server, like file sharing or ftp, are available to all machines in the network including the one i'm having issues http issues with.
The issue may be linked to a proxy service, but from my understanding the service has been completely disabled and any executable have been uninstalled from the machine.
I am wondering if there is some residual proxy information remaining on the machine that limits the connection. I'm fairly positive that "example.com" is what is being blocked by the local machine, and not an IP address being blocked or a faulty connection.
When I examine the hosts file, there are no redirects to the local machine for "example.com".
There was a rule, as on my other machines within the network:
192.168.1.5 example.com
But i have since removed that for troubleshooting purposes. What intrigued me is that when I use the actual IP, the IP address will redirect to the domain in the browser and THEN say ERR_CONNECTION_REFUSED.
Server-Side Results
The server logs are reporting this:
example.com ::1 - - [Date & time] "OPTIONS * HTTP/1.0" 200 126 "-" "Apache/2.
2.22 (Unix) (internal dummy connection)"
However, this seems to be irrelevant as it is not triggered when I try to connect to the server with the specified machine.
Fiddler results:
Host: *example.com*
Proxy-Connection: keep-alive
Chrome-Side
[Fiddler] The connection to 'example.com' failed.
Error: ConnectionRefused (0x274d).
System.Net.Sockets.
SocketException
No connection could be made because
the target machine actively refused it 01.23.45.67:80
01.23.45.67:80 would be the external IP, which the server and the machine in question both share.
I am doing so reading into 0x274d and its coming back with .NET web.config information. I am still at a loss to what to do with this information.
I have WireShark running as well. Theres is a lot of sensitive information in the readout and I'm not sure what to extract from it. Either way, if it helps, I can access that information if anyone would like me to.
Thanks for the help!
