Can't Connect to the Macrium Reflect servers

Post by D***@MadCow.net
Here we go again.
I want to download the latest Marcrim Reflect Free (full installer and
PE, if possible) to install on a friends computer.
I have ReflectDLHF.exe downloader file from Major Geeks (tried from MR
as well).
"The download agent could not connect to the Macrium Reflect servers
for download options"
and: "The system cannot find the file specified."
Tried running as Admin too, but no help.
Also, The target computer is a Lenovo IdeaPad.
It says it has a x64 processor and a 32-bit OS (Win 10). Is 32-bit
software the right choice?
Thanks,
DC

It is Saturday, maybe doing maintance.

D***@MadCow.net

2018-06-17 15:50:54 UTC

Post by KenW

It is Saturday, maybe doing maintance.

Also didn't work on Friday, or today, Sunday.

DC

Paul

2018-06-16 21:52:01 UTC

Why would you use Majorgeeks.com to get the stub downloader ?

The Macrium site should have it. And
it will point to the current server, where ever
it is located. The file might well be the same version,
but it never hurts to be sure.

https://www.macrium.com/reflectfree

http://updates.macrium.com/reflect/v7/ReflectDLHF.exe

3,758,120 bytes
SHA1: 10C0CFB5F19B7D95FAF7B651026C0441C5EF5425

The physical download comes from cloudfront.net and
that might be a CDN (content distribution network).

v7.1.3196_reflect_setup_free_x86.exe

59,232,896 bytes
SHA1: C65E77DA980D83DE362CD3F21E696A85125BDDBA

I didn't have a problem getting a download of the
main program installer. That's the 59MB thing.

The WinPE stuff likely comes from a Microsoft CDN,
so if downloading both portions (installer and WinPE),
the second file comes from elsewhere. There's no reason
to assume the Microsoft CDN is down.

Paul

D***@MadCow.net

2018-06-17 16:08:41 UTC

Post by Paul

Why would you use Majorgeeks.com to get the stub downloader ?

You said this was a safe place, a while ago.

Post by Paul
The Macrium site should have it. And
it will point to the current server, where ever
it is located. The file might well be the same version,
but it never hurts to be sure.
https://www.macrium.com/reflectfree
http://updates.macrium.com/reflect/v7/ReflectDLHF.exe

Tried both of these links. Received the same file as before.
ReflectDLHF.exe, 3,758,120 bytes. Got the same message when running
them.

Post by Paul
3,758,120 bytes
SHA1: 10C0CFB5F19B7D95FAF7B651026C0441C5EF5425
The physical download comes from cloudfront.net and
that might be a CDN (content distribution network).
v7.1.3196_reflect_setup_free_x86.exe
59,232,896 bytes
SHA1: C65E77DA980D83DE362CD3F21E696A85125BDDBA
I didn't have a problem getting a download of the
main program installer. That's the 59MB thing.
The WinPE stuff likely comes from a Microsoft CDN,
so if downloading both portions (installer and WinPE),
the second file comes from elsewhere. There's no reason
to assume the Microsoft CDN is down.
Paul

I'd like to get the main program installer (above) and the PE for Win
10 in the same download. That's what I expected and have done in the
past (I think).

Still no idea why the ReflectDLHF.exe isn't working.

DC

VanguardLH

2018-06-16 21:58:52 UTC

Post by D***@MadCow.net
I have ReflectDLHF.exe downloader file from Major Geeks (tried from MR
as well).
"The download agent could not connect to the Macrium Reflect servers
for download options"
and: "The system cannot find the file specified."
Tried running as Admin too, but no help.
Also, The target computer is a Lenovo IdeaPad.
It says it has a x64 processor and a 32-bit OS (Win 10). Is 32-bit
software the right choice?

Unclear if the problem is you cannot download the ReflectDLHF.exe file
or that program cannot find the server (to retrieve the full
installers).

http://updates.macrium.com/reflect/v7/ReflectDLHF.exe
That downloaded okay.

http://www.majorgeeks.com/files/details/macrium_reflect_free_edition.html
pick their download:
http://www.majorgeeks.com/mg/getmirror/macrium_reflect_free_edition,1.html
That downloaded okay, too (and faster than from Macrium's site).

Did you boot Windows into its safe mode with networking to check if the
.exe runs in safe mode? Don't know if the installer will run in safe
mode or not. If it uses MSI then probably not; however, it might do the
full installer retrieve, like into the %temp% folder where you can copy
it out, before attempting to do the install.

I'd also try downloading and installing with your security software
(firewall, anti-virus, anti-malware, etc) all temporarily disabled.

D***@MadCow.net

2018-06-17 16:15:01 UTC

Unclear if the problem is you cannot download the ReflectDLHF.exe file
or that program cannot find the server (to retrieve the full
installers).

I can get the ReflectDLHF.exe file. When I run it, the program gives
me the message (above)..

Post by VanguardLH
http://updates.macrium.com/reflect/v7/ReflectDLHF.exe
That downloaded okay.
http://www.majorgeeks.com/files/details/macrium_reflect_free_edition.html
http://www.majorgeeks.com/mg/getmirror/macrium_reflect_free_edition,1.html
That downloaded okay, too (and faster than from Macrium's site).

Tried all these links. Same result.

Post by VanguardLH
Did you boot Windows into its safe mode with networking to check if the
.exe runs in safe mode? Don't know if the installer will run in safe
mode or not. If it uses MSI then probably not; however, it might do the
full installer retrieve, like into the %temp% folder where you can copy
it out, before attempting to do the install.
I'd also try downloading and installing with your security software
(firewall, anti-virus, anti-malware, etc) all temporarily disabled.

Tried with AV disabled, too. Same result.

DC

VanguardLH

2018-06-17 18:24:53 UTC

Post by VanguardLH
Did you boot Windows into its safe mode with networking to check if
the .exe runs in safe mode? Don't know if the installer will run in
safe mode or not. If it uses MSI then probably not; however, it
might do the full installer retrieve, like into the %temp% folder
where you can copy it out, before attempting to do the install.

Did this fail, too? Are you using a firewall (other than the one
included in Windows)? Look at the contents of the 'hosts' file to check
the target host is getting blocked, or just rename the 'hosts' file,
say, to 'hosts.OLD', purge the local DNS cache (ipconfig.exe /flushdns),
and then try to run the program.

Use a network monitor (e.g., SysInternals' TCPview) to see to where the
.exe is trying to connect. Then open a command shell and do a
traceroute (tracert <hostname>) to see if you can actually get a route
between the endpoints (your host and theirs). If you cannot reach the
target host then neither will the .exe program.

Paul

2018-06-17 19:00:12 UTC

Post by D***@MadCow.net
"The download agent could not connect to the Macrium Reflect servers
for download options"
and: "The system cannot find the file specified."

I can get the ReflectDLHF.exe file. When I run it, the program gives
me the message (above)..

So it's a network problem of some sort.

1) Main macrium.com domain server not responding ?
DNS translation of the macrium.com thing not working ?

2) The cloudfront download server isn't likely to be
the culprit.

It could be that a DNS table change is causing (1).
Not everyone in the world sees the same thing.

Wireshark could show attempts to contact the server,
for whatever that is worth.

Paul

Big Al

2018-06-16 22:32:05 UTC

And to answer your last question about 64/32 bit.
Your OS is 32 bit so you can ONLY run 32 bit programs.

D***@MadCow.net

2018-06-17 16:27:08 UTC

Post by Big Al

And to answer your last question about 64/32 bit.
Your OS is 32 bit so you can ONLY run 32 bit programs.

Thanks,

DC

J. P. Gilliver (John)

2018-06-17 04:01:16 UTC

Post by D***@MadCow.net
Here we go again.
I want to download the latest Marcrim Reflect Free (full installer and
PE, if possible) to install on a friends computer.

[]
I can't help with the downloading questions; if I was making a version
for a friend, I'd probably not bother with the downloads, but make it
from whatever I already had (either make the CD from the CD-making parts
of Macrium, or just copy the CD); however, obviously, this would _not_
be the latest.

Post by D***@MadCow.net
Also, The target computer is a Lenovo IdeaPad.
It says it has a x64 processor and a 32-bit OS (Win 10). Is 32-bit
software the right choice?

[]
AIUI: it depends how you intend (or intend to instruct your friend) to
_use_ Macrium. If the intention is to run Macrium from within Windows
when making images, then, given that the OS is 32-bit, the Macrium will
have to be 32-bit. If, as I do, you (or your friend) always intend to
run Macrium to make images by booting from the CD (you _are_ of course
going to make/instruct your friend to make a CD, of course!), then, on a
system with 64-bit hardware, I think you can use either the 32- or the
64-bit Macrium; presumably there are some slight - maybe speed -
advantages to using the latter (otherwise I can't see why both would
exist).

Personally, I always make my images by booting from the CD, for two
reasons: (a) I feel happier _not_ making an image of an OS from that OS
actually running; (b) it reassures me that my CD still works, so I do
not have to discover that it has failed when I actually need it.
However, plenty of people _do_ use the software from a running system,
apparently without problems, so my reason (a) is not strong.

--
J. P. Gilliver. UMRA: 1960/<1985 MB++G()AL-IS-Ch++(p)***@T+H+Sh0!:`)DNAf

And if you kill Judi Dench, you can't go back home. - Bill Nighy (on learning
to ride a motorbike [on which she would be side-saddle] for "The Best Exotic
Marigold Hotel"), quoted in Radio Times 18-24 February 2012.

D***@MadCow.net

2018-06-17 16:28:18 UTC

Post by J. P. Gilliver (John)

On Sun, 17 Jun 2018 05:01:16 +0100, "J. P. Gilliver (John)"

Post by D***@MadCow.net
Here we go again.
I want to download the latest Marcrim Reflect Free (full installer and
PE, if possible) to install on a friends computer.

Post by D***@MadCow.net
Also, The target computer is a Lenovo IdeaPad.
It says it has a x64 processor and a 32-bit OS (Win 10). Is 32-bit
software the right choice?

[]
AIUI: it depends how you intend (or intend to instruct your friend) to
_use_ Macrium. If the intention is to run Macrium from within Windows
when making images, then, given that the OS is 32-bit, the Macrium will
have to be 32-bit. If, as I do, you (or your friend) always intend to
run Macrium to make images by booting from the CD (you _are_ of course
going to make/instruct your friend to make a CD, of course!), then, on a
system with 64-bit hardware, I think you can use either the 32- or the
64-bit Macrium; presumably there are some slight - maybe speed -
advantages to using the latter (otherwise I can't see why both would
exist).
Personally, I always make my images by booting from the CD, for two
reasons: (a) I feel happier _not_ making an image of an OS from that OS
actually running; (b) it reassures me that my CD still works, so I do
not have to discover that it has failed when I actually need it.
However, plenty of people _do_ use the software from a running system,
apparently without problems, so my reason (a) is not strong.

Interesting. Thanks.

DC

D***@MadCow.net

2018-06-18 16:57:24 UTC

---------------------
Gonna have someone locally try the downloading for me. If that works
I will have what I need and may learn more about why my attempts
haven't worked.

Will let you know.

DC

D***@MadCow.net

2018-06-20 20:24:07 UTC

I was able to get the files I wanted using my #2 Win 7 PC connected
to the same Internet connection I use daily with my #1 PC.

Seems the problem is in my #1 PC. I don't know what the cause of the
error I got when running ReflectDLHF.exe. Hear's a capture of it.

https://imgur.com/a/OKFQS9c

Any help appreciated.

DC

Paul

2018-06-20 21:15:54 UTC

I was able to get the files I wanted using my #2 Win 7 PC connected
to the same Internet connection I use daily with my #1 PC.
Seems the problem is in my #1 PC. I don't know what the cause of the
error I got when running ReflectDLHF.exe. Hear's a capture of it.
https://imgur.com/a/OKFQS9c
Any help appreciated.
DC

Firewall ?

AV with its own Firewall concept ?

A DNS problem ?

Does your web browser work with www.macrium.com ?

Does "nslookup updates.macrium.com" return a number
like 5.159.225.27 ? Use a Command Prompt window
by running "cmd.exe" etc.

How many pieces of "protective" software are
loaded on the computer ? Would one of them
be interfering ?

Paul

D***@MadCow.net

2018-06-20 21:38:11 UTC

Post by Paul

I was able to get the files I wanted using my #2 Win 7 PC connected
to the same Internet connection I use daily with my #1 PC.
Seems the problem is in my #1 PC. I don't know what the cause of the
error I got when running ReflectDLHF.exe. Hear's a capture of it.
https://imgur.com/a/OKFQS9c
Any help appreciated.
DC

Firewall ?

Only Windows 7 Firewall

Post by Paul
AV with its own Firewall concept ?

Post by Paul
A DNS problem ?

I'll have to learn about this.

Post by Paul
Does your web browser work with www.macrium.com ?

Yes ( Firefox )

Post by Paul
Does "nslookup updates.macrium.com" return a number
like 5.159.225.27 ? Use a Command Prompt window
by running "cmd.exe" etc.

Yes, get the same number

Post by Paul
How many pieces of "protective" software are
loaded on the computer ? Would one of them
be interfering ?

Only AVG Antivirus Free

Post by Paul
Paul

Disabling both Win 7 Firewall and AVG did not help.

Thanks,

DC

Char Jackson

2018-06-20 21:40:46 UTC

I was able to get the files I wanted using my #2 Win 7 PC connected
to the same Internet connection I use daily with my #1 PC.
Seems the problem is in my #1 PC. I don't know what the cause of the
error I got when running ReflectDLHF.exe. Hear's a capture of it.
https://imgur.com/a/OKFQS9c
Any help appreciated.
DC

According the Macrium knowledge base, (first article I found; there may
be others with different info), the program is trying to connect to
http://updates.macrium.com and http://secure.macrium.com, both on port
80, but using credentials and paths specified by the installer program.

In other words, you can't just surf to those sites and expect to see
content. You should, however, be able to successfully ping both of those
sites, and they should resolve as follows. If they aren't reachable or
the names don't resolve, that explains what you're seeing.

updates.macrium.com. A 5.159.225.27

secure.macrium.com. CNAME daks4cgsf00ej.cloudfront.net.
daks4cgsf00ej.cloudfront.net. A 52.84.11.244
daks4cgsf00ej.cloudfront.net. A 52.84.11.11
daks4cgsf00ej.cloudfront.net. A 52.84.11.183
daks4cgsf00ej.cloudfront.net. A 52.84.11.50

--
Char Jackson

D***@MadCow.net

2018-06-21 19:30:47 UTC

I was able to get the files I wanted using my #2 Win 7 PC connected
to the same Internet connection I use daily with my #1 PC.
Seems the problem is in my #1 PC. I don't know what the cause of the
error I got when running ReflectDLHF.exe. Hear's a capture of it.
https://imgur.com/a/OKFQS9c
Any help appreciated.
DC

According the Macrium knowledge base, (first article I found; there may
be others with different info), the program is trying to connect to
http://updates.macrium.com and http://secure.macrium.com, both on port
80, but using credentials and paths specified by the installer program.
In other words, you can't just surf to those sites and expect to see
content. You should, however, be able to successfully ping both of those
sites, and they should resolve as follows. If they aren't reachable or
the names don't resolve, that explains what you're seeing.
updates.macrium.com. A 5.159.225.27
secure.macrium.com. CNAME daks4cgsf00ej.cloudfront.net.
daks4cgsf00ej.cloudfront.net. A 52.84.11.244
daks4cgsf00ej.cloudfront.net. A 52.84.11.11
daks4cgsf00ej.cloudfront.net. A 52.84.11.183
daks4cgsf00ej.cloudfront.net. A 52.84.11.50

Here's what I tried and the result:

nslookup secure.macrium.com

Name: daks4cgsf00ej.cloudfront.net
Addresses: 52.84.64.243
52.84.64.167
52.84.64.150
52.84.64.86
Aliases: secure.macrium.com

Don't know what it means.

DC

Char Jackson

2018-06-21 20:50:15 UTC

I was able to get the files I wanted using my #2 Win 7 PC connected
to the same Internet connection I use daily with my #1 PC.
Seems the problem is in my #1 PC. I don't know what the cause of the
error I got when running ReflectDLHF.exe. Hear's a capture of it.
https://imgur.com/a/OKFQS9c
Any help appreciated.
DC

According the Macrium knowledge base, (first article I found; there may
be others with different info), the program is trying to connect to
http://updates.macrium.com and http://secure.macrium.com, both on port
80, but using credentials and paths specified by the installer program.
In other words, you can't just surf to those sites and expect to see
content. You should, however, be able to successfully ping both of those
sites, and they should resolve as follows. If they aren't reachable or
the names don't resolve, that explains what you're seeing.
updates.macrium.com. A 5.159.225.27
secure.macrium.com. CNAME daks4cgsf00ej.cloudfront.net.
daks4cgsf00ej.cloudfront.net. A 52.84.11.244
daks4cgsf00ej.cloudfront.net. A 52.84.11.11
daks4cgsf00ej.cloudfront.net. A 52.84.11.183
daks4cgsf00ej.cloudfront.net. A 52.84.11.50

nslookup secure.macrium.com
Name: daks4cgsf00ej.cloudfront.net
Addresses: 52.84.64.243
52.84.64.167
52.84.64.150
52.84.64.86
Aliases: secure.macrium.com
Don't know what it means.

I'm not concerned that you got a different set of IP addresses than I
got. They could be doing geo diversity. What's more important is that
you successfully resolved the address. Did you try nslookup on the first
address, updates.macrium.com? For me, that resolved to 5.159.225.27, but
again, what's apparently important is that it resolves.

If that also resolves to an IP address, then I don't know what the issue
is. I can only echo what someone else said regarding checking for net
nanny software and firewall(s), but I think you said you already checked
those things. Your hosts file is another possible culprit, but it's not
likely to be the cause unless that's an area where you like to play.
Lastly, there could be an issue specific to that particular PC's
installation of Macrium, to where a reinstall would clean it up, but
that's kind of a last resort.

BTW, you ran your nslookups on the PC that's having the issue, right?
That's important.

--
Char Jackson

D***@MadCow.net

2018-06-21 21:25:27 UTC

I was able to get the files I wanted using my #2 Win 7 PC connected
to the same Internet connection I use daily with my #1 PC.
Seems the problem is in my #1 PC. I don't know what the cause of the
error I got when running ReflectDLHF.exe. Hear's a capture of it.
https://imgur.com/a/OKFQS9c
Any help appreciated.
DC

According the Macrium knowledge base, (first article I found; there may
be others with different info), the program is trying to connect to
http://updates.macrium.com and http://secure.macrium.com, both on port
80, but using credentials and paths specified by the installer program.
In other words, you can't just surf to those sites and expect to see
content. You should, however, be able to successfully ping both of those
sites, and they should resolve as follows. If they aren't reachable or
the names don't resolve, that explains what you're seeing.
updates.macrium.com. A 5.159.225.27
secure.macrium.com. CNAME daks4cgsf00ej.cloudfront.net.
daks4cgsf00ej.cloudfront.net. A 52.84.11.244
daks4cgsf00ej.cloudfront.net. A 52.84.11.11
daks4cgsf00ej.cloudfront.net. A 52.84.11.183
daks4cgsf00ej.cloudfront.net. A 52.84.11.50

nslookup secure.macrium.com
Name: daks4cgsf00ej.cloudfront.net
Addresses: 52.84.64.243
52.84.64.167
52.84.64.150
52.84.64.86
Aliases: secure.macrium.com
Don't know what it means.

I'm not concerned that you got a different set of IP addresses than I
got. They could be doing geo diversity. What's more important is that
you successfully resolved the address. Did you try nslookup on the first
address, updates.macrium.com? For me, that resolved to 5.159.225.27, but
again, what's apparently important is that it resolves.
If that also resolves to an IP address, then I don't know what the issue
is. I can only echo what someone else said regarding checking for net
nanny software and firewall(s), but I think you said you already checked
those things. Your hosts file is another possible culprit, but it's not
likely to be the cause unless that's an area where you like to play.
Lastly, there could be an issue specific to that particular PC's
installation of Macrium, to where a reinstall would clean it up, but
that's kind of a last resort.
BTW, you ran your nslookups on the PC that's having the issue, right?
That's important.

Yes, I did.

I'm not inclined to try a bunch of things because other than this one
issue, I haven't noticed any other connection problems.

When I get time, I thought I could compare all the relevant settings
of both PC #1 (where the error happens) and PC #2 (where it worked
fine). Maybe I'll see something useful.

Troubleshooting is a pita because it takes time away from actually
accomplishing things.

Thanks,

DC

VanguardLH

2018-06-22 09:38:29 UTC

Post by D***@MadCow.net
nslookup secure.macrium.com
Name: daks4cgsf00ej.cloudfront.net
Addresses: 52.84.64.243
52.84.64.167
52.84.64.150
52.84.64.86
Aliases: secure.macrium.com
Don't know what it means.

nslookup does NOT tell you that you have a route to the actual server
host. All that does is query the nameserver host to equate the hostname
with an IP address. In fact, nslookup never connects to the server
host, only to the nameserver host (yours, or if that fails then the DNS
request gets passed upward in the DNS server chain until it may finally
get to the domain's own nameserver). nslookup will never tell you if a
host if reachable and, if so, if it is responsive.

ping will tell if you can reach the server host and if it is responsive
(if IMCP has not been disabled on the host - not all hosts have ICMP
ping enabled since they don't want to waste the resources on it).

As I mentioned, do a traceroute. What I get is (didn't show the
response times, just the hosts in *my* route to the server host):

1 <myModemLANsideIPakaGateway>
2 --.
3 |
4 |
5 |__ hosts to get through my ISP's network
6 |
7 |
8 --'
9 Request timed out.
10 Request timed out.
11 Request timed out.
12 Request timed out.
13 Request timed out.
14 Request timed out.
15 server-13-33-165-48.ord50.r.cloudfront.net [13.33.165.48]

The timeouts are from hosts beyond node 8 that don't respond to pinging.
As a result, my tracert isn't helpful to show what hosts I went through
in my route to the endpoint host (macrium server). It does show that I
could reach THAT host, not some DNS server doling out the IP address for
that hostname.

D***@MadCow.net

2018-06-22 20:19:18 UTC

nslookup does NOT tell you that you have a route to the actual server
host. All that does is query the nameserver host to equate the hostname
with an IP address. In fact, nslookup never connects to the server
host, only to the nameserver host (yours, or if that fails then the DNS
request gets passed upward in the DNS server chain until it may finally
get to the domain's own nameserver). nslookup will never tell you if a
host if reachable and, if so, if it is responsive.
ping will tell if you can reach the server host and if it is responsive
(if IMCP has not been disabled on the host - not all hosts have ICMP
ping enabled since they don't want to waste the resources on it).
As I mentioned, do a traceroute. What I get is (didn't show the
1 <myModemLANsideIPakaGateway>
2 --.
3 |
4 |
5 |__ hosts to get through my ISP's network
6 |
7 |
8 --'
9 Request timed out.
10 Request timed out.
11 Request timed out.
12 Request timed out.
13 Request timed out.
14 Request timed out.
15 server-13-33-165-48.ord50.r.cloudfront.net [13.33.165.48]
The timeouts are from hosts beyond node 8 that don't respond to pinging.
As a result, my tracert isn't helpful to show what hosts I went through
in my route to the endpoint host (macrium server). It does show that I
could reach THAT host, not some DNS server doling out the IP address for
that hostname.

Don't know if I did it right, but here are the results (on PC #1)

Ping secure.macrium.com

Pinging daks4cgsf00ej.cloudfront.net [13.33.165.48] with 32 bytes of
data:
Reply from 13.33.165.48: bytes=32 time=14ms TTL=246
Reply from 13.33.165.48: bytes=32 time=12ms TTL=246
Reply from 13.33.165.48: bytes=32 time=14ms TTL=246
Reply from 13.33.165.48: bytes=32 time=12ms TTL=246

Ping statistics for 13.33.165.48:
Packets: Sent = 4, Received = 4, Lost = 0 (0% loss),
Approximate round trip times in milli-seconds:
Minimum = 12ms, Maximum = 14ms, Average = 13ms

----------------------------------------------

tracert secure.macrium.com

Tracing route to daks4cgsf00ej.cloudfront.net [54.230.51.83]
over a maximum of 30 hops:

1 10 ms 9 ms 9 ms 142.254.152.165
2 9 ms 12 ms 13 ms ae63.nwblwi1802h.midwest.rr.com
[24.164.241.141]
3 14 ms 15 ms 15 ms be63.gnfdwibb01r.midwest.rr.com
[65.31.112.160]
4 14 ms 16 ms 14 ms
bu-ether16.chcgildt87w-bcr00.tbone.rr.com [66.109.6.204]
5 41 ms 40 ms 46 ms
bu-ether11.nycmny837aw-bcr00.tbone.rr.com [66.109.6.24]
6 39 ms 38 ms 38 ms ge-1-3-0.a1.buf00.tbone.rr.com
[66.109.1.57]
7 38 ms 37 ms 39 ms 24.27.236.51
8 * * * Request timed out.
9 * * * Request timed out.
10 * * * Request timed out.
11 * * * Request timed out.
12 * * * Request timed out.
13 * * * Request timed out.
14 48 ms 40 ms 37 ms
server-54-230-51-83.jfk5.r.cloudfront.net [54.230.51.83]

Trace complete.

I'm guessing this is ok, but not pointing to a problem?

DC

VanguardLH

2018-06-22 23:41:41 UTC

nslookup does NOT tell you that you have a route to the actual server
host. All that does is query the nameserver host to equate the hostname
with an IP address. In fact, nslookup never connects to the server
host, only to the nameserver host (yours, or if that fails then the DNS
request gets passed upward in the DNS server chain until it may finally
get to the domain's own nameserver). nslookup will never tell you if a
host if reachable and, if so, if it is responsive.
ping will tell if you can reach the server host and if it is responsive
(if IMCP has not been disabled on the host - not all hosts have ICMP
ping enabled since they don't want to waste the resources on it).
As I mentioned, do a traceroute. What I get is (didn't show the
1 <myModemLANsideIPakaGateway>
2 --.
3 |
4 |
5 |__ hosts to get through my ISP's network
6 |
7 |
8 --'
9 Request timed out.
10 Request timed out.
11 Request timed out.
12 Request timed out.
13 Request timed out.
14 Request timed out.
15 server-13-33-165-48.ord50.r.cloudfront.net [13.33.165.48]
The timeouts are from hosts beyond node 8 that don't respond to pinging.
As a result, my tracert isn't helpful to show what hosts I went through
in my route to the endpoint host (macrium server). It does show that I
could reach THAT host, not some DNS server doling out the IP address for
that hostname.

Don't know if I did it right, but here are the results (on PC #1)
Ping secure.macrium.com
Pinging daks4cgsf00ej.cloudfront.net [13.33.165.48] with 32 bytes of
Reply from 13.33.165.48: bytes=32 time=14ms TTL=246
Reply from 13.33.165.48: bytes=32 time=12ms TTL=246
Reply from 13.33.165.48: bytes=32 time=14ms TTL=246
Reply from 13.33.165.48: bytes=32 time=12ms TTL=246
Packets: Sent = 4, Received = 4, Lost = 0 (0% loss),
Minimum = 12ms, Maximum = 14ms, Average = 13ms
----------------------------------------------
tracert secure.macrium.com
Tracing route to daks4cgsf00ej.cloudfront.net [54.230.51.83]
1 10 ms 9 ms 9 ms 142.254.152.165
2 9 ms 12 ms 13 ms ae63.nwblwi1802h.midwest.rr.com
[24.164.241.141]
3 14 ms 15 ms 15 ms be63.gnfdwibb01r.midwest.rr.com
[65.31.112.160]
4 14 ms 16 ms 14 ms
bu-ether16.chcgildt87w-bcr00.tbone.rr.com [66.109.6.204]
5 41 ms 40 ms 46 ms
bu-ether11.nycmny837aw-bcr00.tbone.rr.com [66.109.6.24]
6 39 ms 38 ms 38 ms ge-1-3-0.a1.buf00.tbone.rr.com
[66.109.1.57]
7 38 ms 37 ms 39 ms 24.27.236.51
8 * * * Request timed out.
9 * * * Request timed out.
10 * * * Request timed out.
11 * * * Request timed out.
12 * * * Request timed out.
13 * * * Request timed out.
14 48 ms 40 ms 37 ms
server-54-230-51-83.jfk5.r.cloudfront.net [54.230.51.83]
Trace complete.
I'm guessing this is ok, but not pointing to a problem?
DC

Yep, you're reaching the Macrium server. Can't say why their installer
(a stub client since it then has to download the entire installer)
cannot communicate with their server. That's why I suggested disabling
any security software (e.g., anti-virus, 3rd party firewall) and
rebooting Windows into its safe mode with networking to check if some
background process is interferring with the network traffic. I also
suggested reviewing the redirection list in the 'hosts' file.

Works okay on one PC but not on another points to something installed,
configured, or tweaked on the problematic PC.

https://macrium.freshdesk.com/support/tickets/new

I don't know if they provide any support for their free version.

D***@MadCow.net

2018-06-23 17:04:46 UTC

nslookup does NOT tell you that you have a route to the actual server
host. All that does is query the nameserver host to equate the hostname
with an IP address. In fact, nslookup never connects to the server
host, only to the nameserver host (yours, or if that fails then the DNS
request gets passed upward in the DNS server chain until it may finally
get to the domain's own nameserver). nslookup will never tell you if a
host if reachable and, if so, if it is responsive.
ping will tell if you can reach the server host and if it is responsive
(if IMCP has not been disabled on the host - not all hosts have ICMP
ping enabled since they don't want to waste the resources on it).
As I mentioned, do a traceroute. What I get is (didn't show the
1 <myModemLANsideIPakaGateway>
2 --.
3 |
4 |
5 |__ hosts to get through my ISP's network
6 |
7 |
8 --'
9 Request timed out.
10 Request timed out.
11 Request timed out.
12 Request timed out.
13 Request timed out.
14 Request timed out.
15 server-13-33-165-48.ord50.r.cloudfront.net [13.33.165.48]
The timeouts are from hosts beyond node 8 that don't respond to pinging.
As a result, my tracert isn't helpful to show what hosts I went through
in my route to the endpoint host (macrium server). It does show that I
could reach THAT host, not some DNS server doling out the IP address for
that hostname.

I've tried disabling AVG Antivirus but that doesn't help. It's on
both PCs too, so that should be ok. Also tried disabling windows
firewall and even creating an outbound rule to allow ReflectDLHF.exe
to get thru.

I don't have any other 3rd party firewall or security software.

Post by VanguardLH
rebooting Windows into its safe mode with networking to check if some
background process is interferring with the network traffic.

I can't get it to boot into safe mode. Rapidly pressing F8 or holding
it down even before the bios screen pops up doesn't start safe mode.
I've tested the F8 key in a program that uses it and it works fine.

I didn't read this yet. Is this of any value?
https://www.raymond.cc/blog/disable-f8-key-to-block-access-to-safe-mode-during-windows-startup/2/

Post by VanguardLH
suggested reviewing the redirection list in the 'hosts' file.

I only found a file named "hosts" and it said it was a sample file.
Every line started with #. Don't know more than that.

Post by VanguardLH
Works okay on one PC but not on another points to something installed,
configured, or tweaked on the problematic PC.

I agree.

Post by VanguardLH
https://macrium.freshdesk.com/support/tickets/new
I don't know if they provide any support for their free version.

They don't.

DC

Paul

2018-06-23 17:58:30 UTC

Post by D***@MadCow.net
I only found a file named "hosts" and it said it was a sample file.
Every line started with #. Don't know more than that.

One other possibility, is during handshake between the
Windows end and the Macrium server end, some "certificate"
used for https isn't right. Perhaps a secure connection
was attempted, and it failed because the two ends
couldn't agree on a certificate and crypto standard
to use or something.

To get a hint, you could look at the output of Wireshark.
This uses WinPCAP to record TX and RX packets on your
Ethernet NIC.

https://en.wikipedia.org/wiki/Wireshark

At one time, Wireshark had a "conversation mode" where
the trace could be summarized as a "transaction" rather
than as packets. But later versions didn't seem to be
as easy to use.

It's beyond my pay scale to debug https, and I'll have
to leave that to someone else.

While there are two SSLLabs web pages for testing
a web browser for "standards", and testing a given
web site for its "standards", we can't do that in this
case because we'd need to somehow test what the Macrium
blob supports.

*******

If your Windows Update still works, look in the "Optional"
section for an update involving certificates.

Paul

D***@MadCow.net

2018-06-23 19:59:58 UTC