This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Connection to server timed out

Hello, 

I saw several posts but I can't find the solution.

On my company's LAN, I cannot join the gestion.ekipea.fr,

and I can intermittently join the cahpp.eu.

On another LAN you can join without any problem the sites.

 

I used "Technical assistance for the strategy" and the site is authorized

The log :

2020:05:13-17:46:03 sophos-1 httpproxy[6922]: id="0002" severity="info" sys="SecureWeb" sub="http" name="web request blocked" action="block"
method="GET" srcip="192.168.17.26" dstip="37.58.199.78" user="" group="" ad_domain="" statuscode="504" cached="0" profile="REF_DefaultHTTPProfile
(Default Web Filter Profile)" filteraction="REF_DefaultHTTPCFFAction (Default content filter action)" size="2516" request="0x1b09dc00"
url="gestion.ekipea.fr/favicon.ico" referer="http://gestion.ekipea.fr/" error="Connection to server timed out" authtime="0"
dnstime="129" aptptime="66" cattime="91" avscantime="0" fullreqtime="60902172" device="1" auth="0" ua="Mozilla/5.0 (Windows NT 6.3; Win64; x64)
AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.138 Safari/537.36" exceptions="" category="105" reputation="neutral" categoryname="Business"

The filtering profile is transparent
I cleared the DNS cache.
I disabled the firewall on the computer.
I can't ping.
The traceroute leaves the LAN but does not succeed.
the DNS resolution is ok.
I don't know where it is blocked.

That depresses me.
Thank you

Sophie


This thread was automatically locked due to age.
Parents Reply Children
  • Hello TEAM Reseaux,

    By the output, it seems like it might be the website that is not allowing connections to the IP of the UTM.

    This is the output you should see, which means the UTM can connect to the website.

    utm1:/var/log # wget https://gestion.ekipea.fr/
    --2020-05-14 16:09:00-- https://gestion.ekipea.fr/
    Resolving gestion.ekipea.fr... 37.58.199.78
    Connecting to gestion.ekipea.fr|37.58.199.78|:443... connected.
    HTTP request sent, awaiting response... 200 OK
    Length: 1944 (1.9K) [text/html]
    Saving to: `index.html'

    100%[===================================================================================================================================================================================================>] 1,944 --.-K/s in 0s

    2020-05-14 16:09:01 (205 MB/s) - `index.html' saved [1944/1944]

    So since the UTM can't connect to the site the users behind the LAN won't be able to connect either. Do you have more than one ISP provider in your UTM?

    If you have another ISP please try the following command:


    utm1:/var/log # wget https://gestion.ekipea.fr/ --bind-address X.X.X.X (Where X.X.X.X is your Public IP address of the other ISP) 

    Please note that running only wget https://gestion.ekipea.fr/ will run it from the ISP which Port is lower so if you have two ISPs one in Port3 and another in Port4 it would do it from Port3 that is why in the command you would need to specify the IP of the Second ISP on Port 4.

    Regards,


     
    Emmanuel (EmmoSophos)
    Technical Team Lead, Global Community Support
    Sophos Support VideosProduct Documentation  |  @SophosSupport  | Sign up for SMS Alerts
    If a post solves your question use the 'Verify Answer' link.
  • Hello, 

     

    I only have one access provider.

    I had already contacted the company that has the site.

    they do not do IP filtering.

    I have a Friend who has the same access provider and can access the site.

     

    Regards,

  • Hello Team Reseaux,

    Usually, ISP providers might allow one IP to connect but block another for some reason. 

    However, we could try to do the following to analyze a packet capture and see if the website is replying to us.

    In the UTM from the Shell please run the following command as root

    # tcpdump -eni any host 37.58.199.78 and port 443 -w /var/website.pcap -b

    In a second Putty connection try the same command as before 

    # wget https://gestion.ekipea.fr/

    Once it fails, stop the pcap on the First putty session by pressing Ctrl + C (Note: You won't see any output during the capture)

    Once you have done this, please enable Support Access in your UTM and send me the Access ID by PM so I can get the packet capture and analyze it

    To enable remote assistance please go to Support >> Support Access >> On >> Access Status >> and copy & paste the Access ID and send it to me, please. Thanks!

     


     
    Emmanuel (EmmoSophos)
    Technical Team Lead, Global Community Support
    Sophos Support VideosProduct Documentation  |  @SophosSupport  | Sign up for SMS Alerts
    If a post solves your question use the 'Verify Answer' link.