Can't access one website

[blin]

Situation: The client can't to access one website using domain name or IP address. Traecrt gets timeout.

Troubleshooting: We took captures on the ASA (default gwateway and saw that ASA is allowing the traffic but it’s not getting a reply back from the website. Possibility that the website is not responding to the Public IP of the outside interface of the ASA or you have to check on the upstream device if they are getting a reply from the website. As discussed you will test it and will update me regarding it.

Did a nslookup for http://intrinsicperennialgardens.com/ and got the IP address 209.50.248.66

3 packets captured

1: 12:53:43.971858 10.0.0.10.57311 > 209.50.248.66.80: S 3450226068:3450226068(0) win 8192 <mss 1260,nop,wscale 2,nop,nop,sackOK>

2: 12:53:46.923093 10.0.0.10.57311 > 209.50.248.66.80: S 3450226068:3450226068(0) win 8192 <mss 1260,nop,wscale 2,nop,nop,sackOK>

3: 12:53:52.921949 10.0.0.10.57311 > 209.50.248.66.80: S 3450226068:3450226068(0) win 8192 <mss 1260,nop,nop,sackOK>

3 packets shown

ASA5510(config)# sh cap capo

3 packets captured

1: 12:53:43.972132 173.161.55.241.38137 > 209.50.248.66.80: S 217425923:217425923(0) win 8192 <mss 1260,nop,wscale 2,nop,nop,sackOK>

2: 12:53:46.923124 173.161.55.241.38137 > 209.50.248.66.80: S 217425923:217425923(0) win 8192 <mss 1260,nop,wscale 2,nop,nop,sackOK>

3: 12:53:52.921979 173.161.55.241.38137 > 209.50.248.66.80: S 217425923:217425923(0) win 8192 <mss 1260,nop,nop,sackOK>

Conclusion: The website clock the client's public IP addresses. They need to contact the web master to fix it.