question

ManoelFranciscoQuintasCorreia-9650 avatar image
0 Votes"
ManoelFranciscoQuintasCorreia-9650 asked OlgaOS-msft edited

In my Azure VM, I cannot open web site especific

i need my VM to connect to this website(https://portal.trt23.jus.br/portal/) But sometime VM cannot connect to web site. In my desktop its work. Thanks.

azure-virtual-machinesazure-dns
5 |1600 characters needed characters left characters exceeded

Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.

OlgaOS-msft avatar image
0 Votes"
OlgaOS-msft answered

I am sorry to hear you have issues connection to the website from the Azure VM.

As I understood you are not able to connect from the VM to Internet (Outbound Connectivity).

The following diagnostic steps can help you to identify issues that affect the internet connectivity of Microsoft Azure virtual machines.

The most common issues in this scenario are blocking network security groups (NSGs) and virtual machine (VM) firewall and application issues.

Please follow up the next steps:

  1. In the Azure portal, navigate to the Virtual Machine resource that is experiencing the outbound internet connectivity issue. The resource will default to the Overview blade in the left pane.

  2. Scroll to the bottom of the Overview blade, and select Connection Troubleshoot under the Support + Troubleshooting header.

  3. Select Outbound Connections, and then specify the following options:

  • Connection Destination: Other IP address/CIDR

  • IP address/CIDR: the internet protocol (IP) address that you are trying to connect to (or enter 8.8.8.8 for a general internet connectivity check)

  • Service: HTTPS

  • Port: Leave set as 443

  • Protocol: Leave set as TCP

  1. Select Test connection.

  2. If the connection fails, the test results will indicate which NSG or UDR is interfering with connectivity.

  3. If the connection is successful, this means that the Azure platform is allowing outbound internet connectivity. Check within the VM for configuration issues in the destination configuration.

Recommended Documents:

Network security groups - Outbound
Check remote endpoint connectivity


Hope above will help you easily resolve the issue.

5 |1600 characters needed characters left characters exceeded

Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.

ManoelFranciscoQuintasCorreia-9650 avatar image
0 Votes"
ManoelFranciscoQuintasCorreia-9650 answered OlgaOS-msft commented

Hi, Thans.

I did everything, but it still doesn't work.

have any other ideas?

· 3
5 |1600 characters needed characters left characters exceeded

Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.

Oh! Sorry about it.

I have few more questions:

  • What response did you get in the "test connection"?

  • Are you not able to connect to 1 specific website or don't have outbound connection at all?

One more guess is your VM behind an Internal Load balancer (ILB) Standard SKU. This will block all internet traffic and it's doing exactly as it should do.

0 Votes 0 ·

Hi, Thanks for your answer.

The response of test connection is everythink ok.

just 2 website i cant connect (https://portal.trt23.jus.br/portal/) and (https://pje.trt7.jus.br/primeirograu/login.seam)

In my local machine its work fine.

0 Votes 0 ·
OlgaOS-msft avatar image OlgaOS-msft ManoelFranciscoQuintasCorreia-9650 ·

Okay! Are you able to connect to any website from the VM?

0 Votes 0 ·
ManoelFranciscoQuintasCorreia-9650 avatar image
0 Votes"
ManoelFranciscoQuintasCorreia-9650 answered OlgaOS-msft commented

Yes, my VM open any website.

· 1
5 |1600 characters needed characters left characters exceeded

Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.

Okay! Could you test the Outbound connection under the Connection Troubleshoot and use as destination your website ip address?

Please post the output there.

84602-image.png

Second website is not loading for me at all.



0 Votes 0 ·
image.png (100.1 KiB)
AndreasBaumgarten avatar image
0 Votes"
AndreasBaumgarten answered OlgaOS-msft edited

I just tested this and here are my findings:

Website works from my local computer, German provider (using url or IP in Edge and Chrome)
Name resolves to 201.182.224.228

Website does not work from my Azure VM located in Azure region North-Europe (using url or IP in Edge or Chrome)
Name resolves to 201.182.224.228

I don't think it's a problem of DNS or name resolution.

Could it be possible the website/webserver is blocking inbound/outbound traffic of Azure IPs? Or someone else on the way from Azure datacenter to this website is blocking the traffic?
Sounds maybe weird ... but you never know ;-)

Short update:
Azure VM in North-Europe:
My IP: 40.127.189.31 (Azure NE) -> Website does not work (using url or IP in Edge or Chrome)
Using a free webproxy on the same VM in Azure NE -> Website works (using url or IP in Edge or Chrome)
Used WebProxy: https://www.proxysite.com/

Based on this I would assume the Azure IPs are maybe blocked or black-listed at the webserver.


(If the reply was helpful please don't forget to upvote and/or accept as answer, thank you)

Regards
Andreas Baumgarten

· 10
5 |1600 characters needed characters left characters exceeded

Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.

Good finding @AndreasBaumgarten. Do you think this ip address could be "blacklisted"?

0 Votes 0 ·

Hi @olgaoos ,

please see my update "above".

Based on my update and tests I would assume the Azure IPs are maybe blocked or black-listed at the webserver.
At least it's not an issue of the Azure VM or Azure network. I tested this on a Windows 10 VM in Azure region North-Europe.


(If the reply was helpful please don't forget to upvote and/or accept as answer, thank you)

Regards
Andreas Baumgarten



0 Votes 0 ·

Understood. Great findings.

@ManoelFranciscoQuintasCorreia-9650 could you please do the same testing as @AndreasBaumgarten above?

0 Votes 0 ·
Show more comments
ManoelFranciscoQuintasCorreia-9650 avatar image
0 Votes"
ManoelFranciscoQuintasCorreia-9650 answered AndreasBaumgarten commented

Hi, Thanks.

I tested with https://www.proxysite.com and its works.

My VM is in South_Brazil, but i tested with VM in East_US and its dont work too.

Any idea @olgaoos @AndreasBaumgarten ?

Thanks

· 1
5 |1600 characters needed characters left characters exceeded

Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.

@ManoelFranciscoQuintasCorreia-9650 ,

your Azure VM in Azure reqion South-Brasil using https://www.proxysite.com is able to connect to the website https://portal.trt23.jus.br/portal ?
But an Azure VM in region East_US using thehttps://www.proxysite.com doesn't work?

As I wrote before: For me it looks like the website/webserver https://portal.trt23.jus.br is "blocking Azure IPs".
If this is the case there is not much to do on Azure site.
Maybe there is a chance to get in contact with the owner of the website to get support?


(If the reply was helpful please don't forget to upvote and/or accept as answer, thank you)

Regards
Andreas Baumgarten





0 Votes 0 ·