Looks like no one’s replied in a while. To start the conversation again, simply ask a new question.

User profile for user: Charles Mckee
Charles Mckee Author
User level: Level 1
2 points

Airport Extreme Website block..

OK, I've got one for somebody smarter than me out there ( a lot i'm sure).
I have an airport extreme (n) and there is one particular website that I cannot access through the extreme, but if I pull the airport out and hook up directly to the cable modem I can get to this website. What gives? I get a warning like this:
Access Denied

You don't have permission to access "http://www.choicehotels.com/?" on this server.
Reference #18.72b1208.1234794491.13f1c1a

I went through earthlink and we determined it has to do with the airport..

Oh, the website is www.choicehotels.com

I have been able to access this up until about 3 weeks ago..

any helpful ideas?

Thanks

IMAC 24", Mac OS X (10.5.6)

Posted on Feb 16, 2009 6:30 AM

Reply
158 replies
User profile for user: Mr. EMan
Mr. EMan
User level: Level 1
13 points

Oct 19, 2017 1:48 PM in response to Tezgno

I know this is an old thread, but I thought I would add some technical info to help clear some things up.


So what Tezgno wrote made sense to me except for one thing—I figured the cable modem used NAT so that it didn't matter what router (or computer) was plugged into it, and that you would always have one public IP address. I guess that's not the case. Any device plugged into my cable modem generates a new public IP address (at least with my ISP).


If you plug in a Airport Extreme (AE) into the cable modem, it gets a public IP address, and any computer attached to the AE base station gets the same IP address. If you bypass the AE base station with your computer, then that computer will get a brand new public IP address.


That means if your AE address got its IP banned, it's possible that if you get a new router, the same thing may happen again, which is what happened to me.


I got exactly the same problem a few days ago, about the same time my Mac had a hardware failure (2011 MacBook Pro 2nd graphic card/mother board failure, another known magical issue). At it was failing, it messed up the email accounts to my websites. Due to multiple failed login attempts, my own websites blocked my AE's IP address. Bypassing the router helped, until the bad email accounts tried to log back in to my websites, and then that new IP address got banned as well.


I had called my ISP (WoW), who reset the cable modem, which reset my IP address, and temporarily worked. When the Mail program ran again, my new IP got banned.


I called my website host, who unblocked my IP addresses (now many addresses, due to multiple AE base stations that I tried) from my websites, and then I fixed the email accounts on my computer. The problem seems to be solved.


I've used many routers in the past (D-Link, Netgear, Linksys, TP-Link), and always went back to the Airports because they've never had an issue (including not this one, apparently). I've owned every version, including the Express. I had one Express fail (not plugged into surge suppressor in a storm), and one pizza-box fail when I set the latest tall AE on top of it for a few weeks. Even though the pizza box was not plugged in, it refused to turn on afterwards. I think the new AE fried it being in close proximity for so long. Something to thing about as these signals go through us continuously.


So at least in my case, Tezgno had the correct diagnosis.

Reply
User profile for user: synaesthesiajpk
synaesthesiajpk
User level: Level 1
0 points

Feb 19, 2009 7:05 AM in response to Charles Mckee

I am now on my third router that has developed this problem.

At first I was completely stumped, especially since people seemed to be reporting it happening to websites they either own, or visit often, but now I have figured it out.

Basically, it seems to be a bug with the AE and routing tables. If you initiate too many simultaneous connections to a single site, it will eventually screw up the routing tables on the device and no longer allow access.

If the firmware, etc. were more open, it would be an easier thing to get to the bottom of, but it seems to be either preventing you from overwhelming the device, or just a simple bug in the firmware.

My first two AEs were connecting to a single server to check 6 different email addresses every 10 minutes. They each died within two weeks.

When I brought this down to three addresses, the third router survived for over three months until it died today. The only thing that fixes the issue is replacing the router. It doesn't seem to be a part of the device that is updated when you refresh the firmware.

Sorry to bear bad news, but I have to call and get mine fixed again myself.
Reply
User profile for user: hbruce13
hbruce13
User level: Level 1
0 points

Feb 26, 2009 3:53 AM in response to synaesthesiajpk

I use a website for work. After weeks of problem-free access, I suddenly couldn't resolve the URL. After troubleshooting I finally found my Airport Extreme router was blocking the site. I could get everywhere else, but not to the one site. I took the router to an Apple store, and it worked fine: I could access the site. I brought back and it blocked the site. I bought a new router, installed it, and not problems accessing. So clearly something happened to something in the AE. Might have happened after it was updated to firmware 7.3.2?
Reply
User profile for user: Duane
Duane
User level: Level 10
124,267 points

Feb 26, 2009 4:29 AM in response to hbruce13

hbruce13, Welcome to the discussion area!

I took the router to an Apple store, and it worked fine: I could access the site. ... So clearly something happened to something in the AE.


?? It appears that the AirPort Extreme base station (AEBS) is working fine. There must be some sort of incompatible setting with your home equipment.
Reply
User profile for user: hbruce13
hbruce13
User level: Level 1
0 points

Feb 26, 2009 7:04 AM in response to Duane

I made no changes to my network. Everything was working on Friday and only the one website stopped working on Monday. Settings on the new AE are identical to the previous AE. Macbook connected to the cable modem and accessed my work site. Old AE is under warranty so is being replaced with "same model." Apparently there was a model change and the Apple store didn't have that one in stock (?) so they were ordering a replacement. All the model info is the same however.
Reply
User profile for user: synaesthesiajpk
synaesthesiajpk
User level: Level 1
0 points

Feb 28, 2009 4:38 AM in response to Duane

When you connect an Airport Extreme at the Apple Store - it goes into double NAT. The switches running the Apple Store network do the address translation, and it appears your Airport is working fine. It is not. The NAT tables on the AEBS are FUBAR.

I had that EXACT same issue happen when taking it to the Apple Store. Look in the Airport Utility to confirm that it is double NAT. If you can get a connection that is single NAT, allowing the AEBS to do the address lookup, then you can reproduce the problem.
Reply
User profile for user: chad131
chad131
User level: Level 1
0 points

Jun 23, 2009 2:42 PM in response to Charles Mckee

I finally landed here after hours of Googling. And... to my shame, yelling @ Comcast. My home network is not able to access a single IP address, everything else on the Internet is accessible. Using the same laptop, i can connect via a 3G card, directly from the cable modem, but as soon as I plug into my Time Capsule (via WiFi or Ethernet) the site is inaccessible. DNS will resolve, but i cannot ping access http, ftp, etc.. I can go to the coffee shop next door (which also uses Comast on my same subnet) and access the site just fine.

This is absolutely the Time Capsule.

After additional testing, this also seems to impact other IP addresses on that subnet.

So... I reset the TC to factory defaults using the AirPort software and set everything back up... the problem persists.

Also, another problem that I am having which may or may not be related is that my AppleTV (connected via WiFi) is losing connections to my G5 running iTunes. Every time I want to watch something I have to reboot the G5, and the AppleTV.

Any ideas on escalation? The IP address in question for me is my hosting provider. I trade large files with clients through this site, so if I can't access it... I'm out of business.
Reply
User profile for user: chad131
chad131
User level: Level 1
0 points

Jun 25, 2009 1:32 PM in response to Charles Mckee

I spent over an hour on the phone with Apple Care this morning on this issue. My ticket has been escalated to the development engineers.

I also have an appointment at the Apple Genius Bar to confirm that it is not isolated to my ISP or cable modem. i.e. They are going to hook my Time Capsule up to their network and confirm that the IP addresses in question are still unaccessible.

Finally, I have Comcast coming out next week to replace my cable modem.

I will get to the bottom of this!!
Reply

Airport Extreme Website block..

Welcome to Apple Support Community
A forum where Apple customers help each other with their products. Get started with your Apple ID.
Learn more Sign up