Important note about SSL VPN compatibility for 20.0 MR1 with EoL SFOS versions and UTM9 OS. Learn more in the release notes.

Problem with URL Filtering

Hello everyone!!

I have a problem accessing a certain GitHub URL. For example, when I try to update Pi-hole the address objects.githubusercontent.com cannot be resolved:
At first, I thought it was an issue with Pi-hole itself or with openDNS, its upstream DNS server. But I realized that this is not the case, it happens to me when I try to download something from GitHub.

Investigating, I have seen that, for example:
- If I temporarily disable the blocking, the Pi-hole blocking still does not resolve the URL.
- If I ping from outside my LAN, it does respond:
In Pi-hole I have put the URL on a whitelist. In Sophos, I have tried to do the same, I think I have done it right, but the address is still not resolved.

Any suggestions?
Kind regards,
Albert


Added TAGs
[edited by: Raphael Alganes at 3:26 PM (GMT -7) on 24 Oct 2024]
Parents
  • Hello!! Slight smile

    After going around in circles, doing many tests and trying various configurations both on the Pi-hole and on the Sophos, it is clear to me that there is something in the firewall that is blocking the domain (and the subdomains) *.githubusercontent.com.
    The last test that confirms this is the ping from Sophos itself to the domain, as you can see in the screenshot, this time I do get a response:

    As I said, I have done several tests, such as adding the domain as an exception, fine-tuning the web filtering policy, fine-tuning the internet browsing policy, adding the FQDN as an exception, changing the DNS offered by the DHCP... But nothing works, I am quite confused... 

    What else could I try?

    Kind regards!! Smile

    Albert.

Reply
  • Hello!! Slight smile

    After going around in circles, doing many tests and trying various configurations both on the Pi-hole and on the Sophos, it is clear to me that there is something in the firewall that is blocking the domain (and the subdomains) *.githubusercontent.com.
    The last test that confirms this is the ping from Sophos itself to the domain, as you can see in the screenshot, this time I do get a response:

    As I said, I have done several tests, such as adding the domain as an exception, fine-tuning the web filtering policy, fine-tuning the internet browsing policy, adding the FQDN as an exception, changing the DNS offered by the DHCP... But nothing works, I am quite confused... 

    What else could I try?

    Kind regards!! Smile

    Albert.

Children