Randomly no connection to internet websites but could ping urls works.

Question

Hi guys. I know there are some thread similar, but this one is different and very strange. Randomly, once or twice a day, for about one to 5 minutes, we are loosing connection to internet. Right after that time every thing go back to normal again. Few thing to noticed: 1. We still can ping Urls 
 2. DNS seems to work. 
 3. Accessing URL which are in the DMZ doesn't work as well. 
 4. I'm not sure if there are more fore shorter time, but this what i know of from my customers. 
 
 Any help will be appreciate. [:)] 
 Goldy

FrancWest · Accepted Answer

Hi, I'm not getting those root error message. DF on master: firewall:/home/login # df -h Filesystem Size Used Avail Use% Mounted on /dev/sda6 5.2G 3.0G 1.9G 62% / udev 5.9G 100K 5.9G 1% /dev tmpfs 5.9G 52K 5.9G 1% /dev/shm /dev/sda1 331M 16M 295M 5% /boot /dev/sda5 62G 20G 39G 34% /var/storage /dev/sda7 81G 54G 23G 71% /var/log /dev/sda8 3.5G 127M 3.2G 4% /tmp /dev 5.9G 100K 5.9G 1% /var/storage/chroot-clientlessvpn/dev tmpfs 5.9G 0 5.9G 0% /var/sec/chroot-httpd/dev/shm /dev 5.9G 100K 5.9G 1% /var/sec/chroot-openvpn/dev /dev 5.9G 100K 5.9G 1% /var/sec/chroot-ppp/dev /dev 5.9G 100K 5.9G 1% /var/sec/chroot-pppoe/dev /dev 5.9G 100K 5.9G 1% /var/sec/chroot-pptp/dev /dev 5.9G 100K 5.9G 1% /var/sec/chroot-pptpc/dev /dev 5.9G 100K 5.9G 1% /var/sec/chroot-restd/dev tmpfs 5.9G 0 5.9G 0% /var/storage/chroot-reverseproxy/dev/shm /opt/tmpfs 5.2G 3.0G 1.9G 62% /var/sec/chroot-httpd/opt/tmpfs /etc/nwd.d/route 5.2G 3.0G 1.9G 62% /var/sec/chroot-ipsec/etc/nwd.d/route /var/storage/chroot-smtp/spool 62G 20G 39G 34% /var/sec/chroot-httpd/var/spx/spool /var/storage/chroot-smtp/spx 62G 20G 39G 34% /var/sec/chroot-httpd/var/spx/public/images/spx tmpfs 5.9G 308K 5.9G 1% /var/storage/chroot-http/tmp /var/sec/chroot-afc/var/run/navl 5.2G 3.0G 1.9G 62% /var/storage/chroot-http/var/run/navl tmpfs 5.9G 188K 5.9G 1% /var/storage/chroot-smtp/tmp/ram On slave: firewall:/home/login # df -h Filesystem Size Used Avail Use% Mounted on /dev/sda6 5.2G 3.0G 1.9G 62% / udev 5.9G 100K 5.9G 1% /dev tmpfs 5.9G 52K 5.9G 1% /dev/shm /dev/sda1 331M 16M 295M 5% /boot /dev/sda5 62G 8.7G 50G 15% /var/storage /dev/sda7 81G 54G 23G 71% /var/log /dev/sda8 3.5G 96M 3.2G 3% /tmp /dev 5.9G 100K 5.9G 1% /var/storage/chroot-clientlessvpn/dev tmpfs 5.9G 0 5.9G 0% /var/sec/chroot-httpd/dev/shm /dev 5.9G 100K 5.9G 1% /var/sec/chroot-openvpn/dev /dev 5.9G 100K 5.9G 1% /var/sec/chroot-ppp/dev /dev 5.9G 100K 5.9G 1% /var/sec/chroot-pppoe/dev /dev 5.9G 100K 5.9G 1% /var/sec/chroot-pptp/dev /dev 5.9G 100K 5.9G 1% /var/sec/chroot-pptpc/dev /dev 5.9G 100K 5.9G 1% /var/sec/chroot-restd/dev tmpfs 5.9G 0 5.9G 0% /var/storage/chroot-reverseproxy/dev/shm /opt/tmpfs 5.2G 3.0G 1.9G 62% /var/sec/chroot-httpd/opt/tmpfs /etc/nwd.d/route 5.2G 3.0G 1.9G 62% /var/sec/chroot-ipsec/etc/nwd.d/route /var/storage/chroot-smtp/spool 62G 8.7G 50G 15% /var/sec/chroot-httpd/var/spx/spool /var/storage/chroot-smtp/spx 62G 8.7G 50G 15% /var/sec/chroot-httpd/var/spx/public/images/spx tmpfs 5.9G 116K 5.9G 1% /var/storage/chroot-smtp/tmp/ram tmpfs 5.9G 0 5.9G 0% /var/storage/chroot-http/tmp /var/sec/chroot-afc/var/run/navl 5.2G 3.0G 1.9G 62% /var/storage/chroot-http/var/run/navl ~~firewall:/home/login #~~

Goldy_01 · Answer

Hi Franc. 
 Something someone wrote long time ago [:)]: 
 Run HTTP proxy database localy 1. ssh to SOPHOS-UTM and login with loginuser 2. su &ndash; root 3. cc set http sc_local_db [disk][mem][ none ] (Choose what you prefer) None - default, don't use local categorization at all use online query as default. Disk - use local Database, but use it only on disk. Useful for boxes with little RAM. Mem - use local Database, and keep it in memory for faster access. 4. Reload the service: /var/mdw/scripts/httpproxy restart Verify first DB download (Web surfing will be stopped until done - about 370 MB): ls -lh /var/chroot-http/var/pattern/sfcontrol Web surfing will be extremely slow until the database has downloaded and been put into place. The time is link speed dependent. 
 You must Reload the service!!!. 
 As for the issue, it's a bug, and see Sophos answer: "In regards to your recent question about when and how this workaround will be fixed within the Web Proxy, I will have to escalate the case to GES ( Tier-3 ) Team " Goldy