This discussion has been locked.

You can no longer post new replies to this discussion. If you have a question you can start a new discussion

404 not found

Has anyone ever encountered an issue like this?

Unable to access a website if Web Filtering is ON. If its disabled, it works fine.

Adding that site's IP in skip dest list is still the same. 404 not found

Web filtering logs looks like this:

2015:11:05-15:37:17 myfw httpproxy[29275]: id="0001" severity="info" sys="SecureWeb" sub="http" name="http access" action="pass" method="GET" srcip="y.y.y.y" dstip="x.x.x.x" user="" ad_domain="" statuscode="404" cached="0" profile="REF_DefaultHTTPProfile (Default Web Filter Profile)" filteraction="REF_DefaultHTTPCFFAction (Default content filter action)" size="382" request="0x11e88000" url="thewebsite.com" referer="" error="" authtime="0" dnstime="32" cattime="0" avscantime="0" fullreqtime="150602" device="0" auth="0" ua="Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/46.0.2490.80 Safari/537.36" exceptions="av,auth,content,url,ssl,certcheck,certdate,mime,cache,fileextension,size"

Adding an exception didnt help.

Tried wgetting the site.

myfw:/root # wget -O /dev/null http:// thewebsite.com
http://: Invalid host name.
--2015-11-05 15:45:36-- http:// thewebsite.com
Resolving thewebsite.com... x.x.x.x
Connecting to thewebsite.com|x.x.x.x|:80... connected.
HTTP request sent, awaiting response... 404 Not Found
2015-11-05 15:45:37 ERROR 404: Not Found.

Any ideas? Thanks!
(i miss the old forum :( )

(note: i edited some entries such as the site and its ip)

This thread was automatically locked due to age.

0 Scott_Klassen over 9 years ago

Are you using the proxy in transparent mode or standard mode? The skiplist only works if using transparent mode and if you have firewall rules to then allow the traffic. BTW, you need to re-edit the post, you left the URL in the wget snippet.

__________________
ACE v8/SCA v9.3

...still have a v5 install disk in a box somewhere.

http://xkcd.com
http://www.tedgoff.com/mb
http://www.projectcartoon.com/cartoon/1
Cancel
Vote Up 0 Vote Down

Cancel
0 Scott_Klassen over 9 years ago

OK, I just loaded the site up, through the UTM web filtering proxy and it loaded fine. What version of UTM are you running currently? I'm on 9.351-3.

__________________
ACE v8/SCA v9.3

...still have a v5 install disk in a box somewhere.

http://xkcd.com
http://www.tedgoff.com/mb
http://www.projectcartoon.com/cartoon/1
Cancel
Vote Up 0 Vote Down

Cancel
0 LGSommers over 9 years ago in reply to Scott_Klassen

hi scott, thanks for the response. yes its on transparent mode (no authentication) and theres a firewall rule that allows web surfing ports. version 9.315
Cancel
Vote Up 0 Vote Down

Cancel
0 Scott_Klassen over 9 years ago

Well, there were some proxy issues in 9.315, that have been fixed in both 9.317 and 9.351, but both of these are soft-release. The confusing thing is that you are seeing the same thing using wget from shell, which definitely bypasses the proxy (as does curl). At this point, with limited log information and inability to replicate the issue, if it were me, I'd get onto 9.317-005 or 9.351-003. I can't link you to the release notes, because they were on the old forum.

For 9.317, you will need the following files:
ftp.astaro.de/.../u2d-sys-9.315002-316004.tgz.gpg
ftp.astaro.de/.../u2d-sys-9.316004-317005.tgz.gpg

For 9.351, use these instead:
ftp.astaro.de/.../u2d-sys-9.315002-350012.tgz.gpg
ftp.astaro.de/.../u2d-sys-9.350012-351003.tgz.gpg

Whichever you choose, upload both files to Management > Up2Date > Advanced. After a couple of minutes to unpack and verify, they will both be available at Management > Up2Date > Overview for installation. Once both are there, you can click update to latest version and they will be ganged together and installed with only one reboot necessary. I'd say that the 9.351 would be the better bet, as it works for me on that version.

Other than that, your best bet is to open a case with support, if you have a paid license. They'd be able to get onto your system and do deeper diagnosis in a timely manner, than is possible via forum posts back and forth.

__________________
ACE v8/SCA v9.3

...still have a v5 install disk in a box somewhere.

http://xkcd.com
http://www.tedgoff.com/mb
http://www.projectcartoon.com/cartoon/1
Cancel
Vote Up 0 Vote Down

Cancel
0 LGSommers over 9 years ago in reply to Scott_Klassen

thanks scott i will try that!
Cancel
Vote Up 0 Vote Down

Cancel
0 Scott_Klassen over 9 years ago

Sounds good. Please post back the results.

__________________
ACE v8/SCA v9.3

...still have a v5 install disk in a box somewhere.

http://xkcd.com
http://www.tedgoff.com/mb
http://www.projectcartoon.com/cartoon/1
Cancel
Vote Up 0 Vote Down

Cancel
0 AzRoN over 9 years ago

DNS.
What DNS forwarders is your UTM using within the Network Services > DNS section? This is typical behaviour when a client system has DNS servers that are available and Web protection is disabled, the MASQ rules allow the traffic out direct. However, with Web Protection on, the proxy then uses the UTM declared resolvers to look up the destination; if these are undefined or unavailable then stuff like this happens. Out of interest, is the UP2Date functions working correctly, patterns mainly?

==

When in doubt, Script it out.
Cancel
Vote Up 0 Vote Down

Cancel