Webfilter Websites are not opening

Hi Sally,

Please show one line each from the Web Filter log for blocks of xoco.no and www.viennatour.at.

Cheers - Bob

Hello Bob,

there are no blocks for xoco.no and www.viennatour.at in the Webfilter Log.

What else I can check?

Thx

Regards

Sally

Hello,

I updated the UTM to Firmware Version: 9.508-10. I still have the issue that some websites are not open, and nothing is in the logfile that the pages somehow get blocked.

When I go to Interfaces & Routing - Static Routing - Policy Routes and turn off the following Policy Routes the Websites are working:

Target: Linksys

Selector: Internal Network - Internal - Any - Internet IPV4

How can I get this fixed?

Thanks a Lot!

Best Regards

Sally

The topology of your network is missing.
Anyway UTM resolved this with Multipath Rules.
Static Routes it is used only to access one device or network, but only by firewall rules. You have to Skip the host from Transparent Services to get it done (Web Filter/ Email Protection)
Web Filter too has outgoing interface option (you have to enable it) 

Hello oldeda,

thanks for your reply. Under Web Protection - Filtering Options - Misc - Transparent Mode Skiplist - Skip Transparent Mode Source Hosts/Nets I have already the Host defined. What you mean with Web Filter too has outgoing interface option, where I can enable this?

Thx

Best Regards

Sally

Hello oldeda,

I activated yet the Optional: Interface for outgoing traffic and set it to the VPN DMZ Interface, but still the same result, some webpages failed to open...

Thx

Sally

Please show a simple diagram of your topology including IPs.

Cheers - Bob

absolutely with Bob

Hello,

please see attached the network diagram

what happens if you put eth2 as default gateway, in this case Uplink Balancing becomes Activated. And there you can manipulate with "Multipath Rules"
Anyway im testing these pages

Hello Oldeda,

thanks for the reply. Means to disable the Policy Routes under the Static Routing and mark under Interfaces - eth2 the IPv4 Default Gateway Option? Should I take then out under External WAN the mark IPv4 Default Gateway?

What kind of Multipath Rules I have to set then?

Thx

Sally

Hello Oldeda,

thanks for the reply. Means to disable the Policy Routes under the Static Routing and mark under Interfaces - eth2 the IPv4 Default Gateway Option? Should I take then out under External WAN the mark IPv4 Default Gateway?

What kind of Multipath Rules I have to set then?

Thx

Sally

1 Disable all the routes and policy routes

Dont touch External Wan, just enable Gateway in eth2, UTM will ask to enable Uplink Balancing. Just klick OK
After that you will configure only "Multipath Routes" in Interfaces section. 

Ok, I will try this on the weekend, and let you know.

Thx

Sally

Are you owner of this domain pages? have you configured DNS entries in UTM for these pages?  Otherwise must be just routes problem who can bring up Masquerade problems
  

No, im not owner of this domains. When I disable the Policy Routes, and the Internet Connection go directly over the External WAN, also this Pages working...

Ok. Make thinks work with multipath rules. It definetly masquerade problem. The request is going from one interface and asnwer came from the other

Hi Oldeda,

i tried yet the the following:

1. Disabled all Policy Routes

2. Enabled Gateway in eth2. I get asked for Gateway IP, this IP i set to the same IP like the DMZ VPN IP of eth2.

3. Uplink Monitoring was activated

4. Created the following Multipath Rule Internal Network -> ANY -> Internet IPv4 -> Bind Interface DMZ VPN Afterwards i checked no Connection to Internet..

In the Policy Route i had the following Rule:

Internal (Network) -> Internal -> Any - Internet IPv4 -> Target VPN Router in the DMZ.

The VPN Router has IP 10.0.0.5 / 24 and the Default GW is 10.0.0.1 the UTM.

Do i have something wrong in the Multipath Rule, that it not work?

Thx Sally

Here is missing the Attachment diagram. 
After ping Failure from DMZ interface, Check for the configurations of the IP Interfaces and proper netmask

what IP have eth2 and VPN Router?
eth2 must use the VPN Router IP as gateway, and the VPN Router makes the connection (If I understood the schema)

Hello Oldeda,

yes, the VPN Router makes the connection. 

eth2 IP

10.0.0.1 /24

VPN Router 

10.0.0.5 /24

GW: 10.0.0.1