Server Fault is a question and answer site for system and network administrators. Join them; it only takes a minute:

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

I have got a real strange behaviour with one of my XP-Sp3 machines.

Setup: A Server in the lan ( proviedes access to all roadwarriors in The DCHP has a static route for all clients pronouncing as gateway for

All Clients can ping & access the vpn-machines; everything works like a charm

But one Xp-Sp3 is not willing to connect to them. It gets all the same routes as any other sytem in the lan and I trippel-checked - there are no static routes on this machine

When I ping any device from this machine, the first two packaged work like a charm; but the next two (and any package after them) fail and get lost.

When I look back into the routing table: There is a new route; a special one just for the device I pinged, which points to the right gateway - but which wasn't there earlier...

As Long as this route exists the machine can't ping anything on But if I remove the route by hand: The next to ping packages work fine...

Has anybody got an idea about that? Anybody every seen such a behaviour? Any hint / help / tip is greatly appreachiated!

thx in advance


Ps: I attach an image of the cmd to clarify things - its in german, but reading a routing table shouldn't be that hard...


share|improve this question
Progressive JPG ftw! – Mark Henderson Jul 13 '10 at 0:13
More like Progressive JPG...... wtf! ;-) – ThatGraemeGuy Jul 13 '10 at 12:23

Is the netmask for the route correct? From what I see here, I think you would want instead of What type of VPN are you using?

EDIT: What do the routing tables on the working machines show when you perform the same procedure?

share|improve this answer
Hi Jed, thanks for your response! You were right, that seemd to be a mistake! Cleaning the routing-table fixed that entry and changed it to Mask as delivered by the dhcp. None the less i can't ping the anymore (not even twice) The VPN we are using is an OpenVPN, which has been working fine for years! Bringing new machines into the net never ever has been a problem. Btw. I just checked, there is no Firewall / Av or additional protocol installed on the server. It just doesn't work... – Corelgott Jul 13 '10 at 0:37

That seems to be the result of ICMP REDIRECT packets (essentially, a router can elect to say "this is a better route AND it is local to your network" when its next hop is on the same network as the source).

share|improve this answer

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.