customer states site's down for them and others, but it always works for us.

[schwim]

Hi there guys,

I've got a customer that states that their site is down for them and that other people have called in stating the same. they have stated that the problem occurs most mornings. We have yet to be able to duplicate the problem. I'm waiting on some specific times, but in the interim, I thought I'd check the log emails. Under unusual server events, I found some odd blocks by the firewall for their IP(they have a dedicated IP).

log info

I was wondering if these look odd to anyone. First, I find it strange that a large portion of the blocks are outgoing(their IP on the page is 200.100.100.200). There are times that seem to coincide with their complaints where a transmission is getting blocked to a particular IP almost every 10 seconds.

If you don't think that the firewall blocks would have anything to do with it, I ask:

1) Where might I begin looking to find where the problem might lie?
2) Is there something I can tell them to do when the problem occurs that would help me determine if the problem is at the server or at their end?

I am looking for some suggestions on troubleshooting this, as I've never had a site that some people can't contact.

thanks,
json

[Intelisourceit]

Does the site work for them IP based?

[schwim]

The next time the problem occurs, I will ask them to check. Thanks very much for the idea.

Any other suggestions or ideas are welcome.

thanks,
json

[Lyttek]

What firewall are you using? CSF, blah blah blah...