This discussion has been locked.

You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Error "No route to host" when I access to website

Hello everyone, for 3 weeks I have not been able to access the site https://m2mportal.vodafone.com from the internal network (before it worked without problems), on the log I see:

2021:01:20-15:31:14 utm-1 httpproxy[13748]: id="0002" severity="info" sys="SecureWeb" sub="http" name="web request blocked" action="block" method="CONNECT" srcip="192.168.116.20" dstip="195.232.251.109" user="username" group="" ad_domain="domain1" statuscode="500" cached="0" profile="REF_HttProContaManag112 (Test Group)" filteraction="REF_HttCffFilteActio11411 (Filter Action for Test)" size="517" request="0xca8b5800" url="https://m2mportal.id.vodafone.com/" referer="" error="No route to host" authtime="373" dnstime="17588" aptptime="0" cattime="0" avscantime="0" fullreqtime="3019835" device="0" auth="2" ua="Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/87.0.4280.141 Safari/537.36" exceptions="url"

How can i solve?

Thanks!

This thread was automatically locked due to age.

Top Replies

BAlfson over 3 years ago +1

Ciao papali, When do you see this message? Immediately after hitting enter? After something else appears? Does anything else appear after the error message? The statuscode="407" in the log indicates…

0 FormerMember over 3 years ago

Hi papali,

Thank you for reaching out to the Community!

Do you use internal or external DNS servers? The status code 500 indicates this issue is serverside and it could be the DNS.

Could you share the result of nslookup against that domain from your UTM?

Thanks,
Cancel
Vote Up 0 Vote Down

Cancel
0 papali over 3 years ago in reply to FormerMember

Hi H_Patel, thanks for your support!

From UTM:

nslookup m2mportal.vodafone.com
Server: 127.0.0.1
Address: 127.0.0.1#53

Non-authoritative answer:
Name: m2mportal.vodafone.com
Address: 47.73.9.183

I use the DNS of my ISP, a few days ago I was using OpenDNS, I changed them with those of my ISP to do a test, but the result has not changed.
Cancel
Vote Up 0 Vote Down

Cancel
0 PhilippRusch over 3 years ago in reply to papali

Hello Papali,

it seems, that there is another server involved, maybe for authentication services: url="https://m2mportal.id.vodafone.com/"

I get this answer from there:

Mit freundlichem Gruß, best regards from Germany,

Philipp Rusch

New Vision GmbH, Germany
Sophos Silver-Partner

If a post solves your question please use the 'Verify Answer' button.
Cancel
Vote Up 0 Vote Down

Cancel
0 papali over 3 years ago in reply to PhilippRusch

Hi jprusch, thanks for your support!

From the site https://m2mportal.vodafone.com after login is redirected to https://m2mportal.id.vodafone.com (with the id).

If you try to go directly to https://m2mportal.id.vodafone.com it gives you the error you see:

Forbidden
You don't have permission to access this resource.
Cancel
Vote Up 0 Vote Down

Cancel
0 PhilippRusch over 3 years ago in reply to papali

Hello Papali,

I noticed that. But: you sent a snippet from your log stating you were going to "m2mportal.vodafone.com" while the logfile entry was about "m2mportal.id.vodafone.com", which is a different URL. So for troubleshooting reasons, I wanted to clarify that.

Mit freundlichem Gruß, best regards from Germany,

Philipp Rusch

New Vision GmbH, Germany
Sophos Silver-Partner

If a post solves your question please use the 'Verify Answer' button.
Cancel
Vote Up 0 Vote Down

Cancel
0 papali over 3 years ago in reply to PhilippRusch

Hi jprusch, I correct myself, the link https://m2mportal.vodafone.com automatically redirects to https://m2mportal.id.vodafone.com/authenticationendpoint/login.do?commonAuthCallerPath=%2Fsamlsso&forceAuth=false&passiveAuth=false&tenantDomain=carbon.super&sessionDataKey=77dc420f-ff9e-494b-9691-1ecef6031215&relyingParty=vodafone.com&type=samlsso&sp=vodafone&isSaaSApp=false&authenticators=BasicAuthenticator:LOCAL

If you go directly to https://m2mportal.id.vodafone.com (shortened link con id) you will see the error you posted earlier:

Forbidden
You don't have permission to access this resource.

On the UTM, however both https://m2mportal.vodafone.com (without id) and https://m2mportal.id.vodafone.com (with id) the DNS resolves them correctly

__________________________________________________

<M> utm:/root # nslookup m2mportal.id.vodafone.com
Server: 127.0.0.1
Address: 127.0.0.1#53

Non-authoritative answer:
Name: m2mportal.id.vodafone.com
Address: 195.232.251.109

<M> utm:/root # nslookup m2mportal.vodafone.com
Server: 127.0.0.1
Address: 127.0.0.1#53

Non-authoritative answer:
Name: m2mportal.vodafone.com
Address: 47.73.9.183

__________________________________________________

I also tried to clear the Web Caching

The filtering log complete is:

2021:02:05-15:23:57 utm-1 httpproxy[13748]: id="0003" severity="info" sys="SecureWeb" sub="http" name="http access" action="pass" method="CONNECT" srcip="192.168.116.20" dstip="" user="" group="" ad_domain="" statuscode="407" cached="0" profile="REF_HttProContaManag112 (Test Group)" filteraction=" ()" size="2515" request="0xa29e300" url="">m2mportal.vodafone.com/" referer="" error="" authtime="3" dnstime="0" aptptime="0" cattime="0" avscantime="0" fullreqtime="353" device="0" auth="2" ua="Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:83.0) Gecko/20100101 Firefox/83.0" exceptions="url"
2021:02:05-15:23:57 utm-1 httpproxy[13748]: id="0003" severity="info" sys="SecureWeb" sub="http" name="http access" action="pass" method="CONNECT" srcip="192.168.116.20" dstip="" user="" group="" ad_domain="" statuscode="407" cached="0" profile="REF_HttProContaManag112 (Test Group)" filteraction=" ()" size="2515" request="0xa29e300" url="">m2mportal.vodafone.com/" referer="" error="" authtime="20" dnstime="0" aptptime="0" cattime="0" avscantime="0" fullreqtime="371" device="0" auth="2" ua="Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:83.0) Gecko/20100101 Firefox/83.0" exceptions="url"
2021:02:05-15:23:58 utm-1 httpproxy[13748]: id="0001" severity="info" sys="SecureWeb" sub="http" name="http access" action="pass" method="CONNECT" srcip="192.168.116.20" dstip="47.73.9.183" user="username1" group="" ad_domain="domain1" statuscode="200" cached="0" profile="REF_HttProContaManag112 (Test Group)" filteraction="REF_HttCffFilteActio11411 (Filter Action for Test)" size="7565" request="0xa29e300" url="">m2mportal.vodafone.com/" referer="" error="" authtime="202" dnstime="23157" aptptime="0" cattime="0" avscantime="0" fullreqtime="297013" device="0" auth="2" ua="Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:83.0) Gecko/20100101 Firefox/83.0" exceptions="url"
2021:02:05-15:23:58 utm-1 httpproxy[13748]: id="0003" severity="info" sys="SecureWeb" sub="http" name="http access" action="pass" method="CONNECT" srcip="192.168.116.20" dstip="" user="" group="" ad_domain="" statuscode="407" cached="0" profile="REF_HttProContaManag112 (Test Group)" filteraction=" ()" size="2515" request="0x9e96700" url="">m2mportal.vodafone.com/" referer="" error="" authtime="3" dnstime="0" aptptime="0" cattime="0" avscantime="0" fullreqtime="289" device="0" auth="2" ua="Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:83.0) Gecko/20100101 Firefox/83.0" exceptions="url"
2021:02:05-15:23:58 utm-1 httpproxy[13748]: id="0003" severity="info" sys="SecureWeb" sub="http" name="http access" action="pass" method="CONNECT" srcip="192.168.116.20" dstip="" user="" group="" ad_domain="" statuscode="407" cached="0" profile="REF_HttProContaManag112 (Test Group)" filteraction=" ()" size="2515" request="0x9e96700" url="">m2mportal.vodafone.com/" referer="" error="" authtime="12" dnstime="0" aptptime="0" cattime="0" avscantime="0" fullreqtime="286" device="0" auth="2" ua="Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:83.0) Gecko/20100101 Firefox/83.0" exceptions="url"
2021:02:05-15:23:58 utm-1 httpproxy[13748]: id="0001" severity="info" sys="SecureWeb" sub="http" name="http access" action="pass" method="CONNECT" srcip="192.168.116.20" dstip="47.73.9.183" user="username1" group="" ad_domain="domain1" statuscode="200" cached="0" profile="REF_HttProContaManag112 (Test Group)" filteraction="REF_HttCffFilteActio11411 (Filter Action for Test)" size="8157" request="0x9e96700" url="">m2mportal.vodafone.com/" referer="" error="" authtime="176" dnstime="5" aptptime="0" cattime="0" avscantime="0" fullreqtime="148270" device="0" auth="2" ua="Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:83.0) Gecko/20100101 Firefox/83.0" exceptions="url"
2021:02:05-15:23:58 utm-1 httpproxy[13748]: id="0003" severity="info" sys="SecureWeb" sub="http" name="http access" action="pass" method="CONNECT" srcip="192.168.116.20" dstip="" user="" group="" ad_domain="" statuscode="407" cached="0" profile="REF_HttProContaManag112 (Test Group)" filteraction=" ()" size="2515" request="0xceffea00" url="">m2mportal.vodafone.com/" referer="" error="" authtime="2" dnstime="0" aptptime="0" cattime="0" avscantime="0" fullreqtime="290" device="0" auth="2" ua="Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:83.0) Gecko/20100101 Firefox/83.0" exceptions="url"
2021:02:05-15:23:58 utm-1 httpproxy[13748]: id="0003" severity="info" sys="SecureWeb" sub="http" name="http access" action="pass" method="CONNECT" srcip="192.168.116.20" dstip="" user="" group="" ad_domain="" statuscode="407" cached="0" profile="REF_HttProContaManag112 (Test Group)" filteraction=" ()" size="2515" request="0xceffea00" url="">m2mportal.vodafone.com/" referer="" error="" authtime="13" dnstime="0" aptptime="0" cattime="0" avscantime="0" fullreqtime="290" device="0" auth="2" ua="Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:83.0) Gecko/20100101 Firefox/83.0" exceptions="url"
2021:02:05-15:23:58 utm-1 httpproxy[13748]: id="0001" severity="info" sys="SecureWeb" sub="http" name="http access" action="pass" method="CONNECT" srcip="192.168.116.20" dstip="47.73.9.183" user="username1" group="" ad_domain="domain1" statuscode="200" cached="0" profile="REF_HttProContaManag112 (Test Group)" filteraction="REF_HttCffFilteActio11411 (Filter Action for Test)" size="10760" request="0xceffea00" url="">m2mportal.vodafone.com/" referer="" error="" authtime="174" dnstime="6" aptptime="0" cattime="0" avscantime="0" fullreqtime="157914" device="0" auth="2" ua="Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:83.0) Gecko/20100101 Firefox/83.0" exceptions="url"
2021:02:05-15:23:58 utm-1 httpproxy[13748]: id="0003" severity="info" sys="SecureWeb" sub="http" name="http access" action="pass" method="CONNECT" srcip="192.168.116.20" dstip="" user="" group="" ad_domain="" statuscode="407" cached="0" profile="REF_HttProContaManag112 (Test Group)" filteraction=" ()" size="2515" request="0xcaed1500" url="">m2mportal.id.vodafone.com/" referer="" error="" authtime="3" dnstime="0" aptptime="0" cattime="0" avscantime="0" fullreqtime="411" device="0" auth="2" ua="Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:83.0) Gecko/20100101 Firefox/83.0" exceptions="url"
2021:02:05-15:23:58 utm-1 httpproxy[13748]: id="0003" severity="info" sys="SecureWeb" sub="http" name="http access" action="pass" method="CONNECT" srcip="192.168.116.20" dstip="" user="" group="" ad_domain="" statuscode="407" cached="0" profile="REF_HttProContaManag112 (Test Group)" filteraction=" ()" size="2515" request="0xcaed1500" url="">m2mportal.id.vodafone.com/" referer="" error="" authtime="13" dnstime="0" aptptime="0" cattime="0" avscantime="0" fullreqtime="293" device="0" auth="2" ua="Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:83.0) Gecko/20100101 Firefox/83.0" exceptions="url"
2021:02:05-15:24:02 utm-1 httpproxy[13748]: id="0002" severity="info" sys="SecureWeb" sub="http" name="web request blocked" action="block" method="CONNECT" srcip="192.168.116.20" dstip="195.232.251.109" user="username1" group="" ad_domain="domain1" statuscode="500" cached="0" profile="REF_HttProContaManag112 (Test Group)" filteraction="REF_HttCffFilteActio11411 (Filter Action for Test)" size="517" request="0xcaed1500" url="">m2mportal.id.vodafone.com/" referer="" error="No route to host" authtime="172" dnstime="1223165" aptptime="0" cattime="0" avscantime="0" fullreqtime="4227552" device="0" auth="2" ua="Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:83.0) Gecko/20100101 Firefox/83.0" exceptions="url"
2021:02:05-15:24:08 utm-1 httpproxy[13748]: id="0001" severity="info" sys="SecureWeb" sub="http" name="http access" action="pass" method="CONNECT" srcip="192.168.116.20" dstip="35.244.181.201" user="username1" group="" ad_domain="domain1" statuscode="200" cached="0" profile="REF_HttProContaManag112 (Test Group)" filteraction="REF_HttCffFilteActio11411 (Filter Action for Test)" size="5829" request="0xaf26e00" url="">https://aus5.mozilla.org/" referer="" error="" authtime="158" dnstime="3706" aptptime="0" cattime="133" avscantime="0" fullreqtime="170856647" device="0" auth="2" ua="Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:83.0) Gecko/20100101 Firefox/83.0" exceptions="" category="175" reputation="trusted" categoryname="Software/Hardware" application="mozilla" app-id="679"
2021:02:05-15:24:09 utm-1 httpproxy[13748]: id="0001" severity="info" sys="SecureWeb" sub="http" name="http access" action="pass" method="CONNECT" srcip="192.168.116.20" dstip="34.98.75.36" user="username1" group="" ad_domain="domain1" statuscode="200" cached="0" profile="REF_HttProContaManag112 (Test Group)" filteraction="REF_HttCffFilteActio11411 (Filter Action for Test)" size="5624" request="0xcaab9100" url="">classify-client.services.mozilla.com/" referer="" error="" authtime="180" dnstime="3325" aptptime="0" cattime="154" avscantime="0" fullreqtime="171035194" device="0" auth="2" ua="Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:83.0) Gecko/20100101 Firefox/83.0" exceptions="" category="175" reputation="trusted" categoryname="Software/Hardware" application="mozilla" app-id="679"
2021:02:05-15:24:09 utm-1 httpproxy[13748]: id="0001" severity="info" sys="SecureWeb" sub="http" name="http access" action="pass" method="CONNECT" srcip="192.168.116.20" dstip="142.250.184.42" user="username1" group="" ad_domain="domain1" statuscode="200" cached="0" profile="REF_HttProContaManag112 (Test Group)" filteraction="REF_HttCffFilteActio11411 (Filter Action for Test)" size="5610424" request="0xdad5500" url="">safebrowsing.googleapis.com/" referer="" error="" authtime="172" dnstime="4" aptptime="0" cattime="156" avscantime="0" fullreqtime="171670363" device="0" auth="2" ua="Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:83.0) Gecko/20100101 Firefox/83.0" exceptions="" category="178" reputation="neutral" categoryname="Internet Services" application="googapis" app-id="176"
2021:02:05-15:24:10 utm-1 httpproxy[13748]: id="0001" severity="info" sys="SecureWeb" sub="http" name="http access" action="pass" method="CONNECT" srcip="192.168.116.20" dstip="143.204.2.100" user="username1" group="" ad_domain="domain1" statuscode="200" cached="0" profile="REF_HttProContaManag112 (Test Group)" filteraction="REF_HttCffFilteActio11411 (Filter Action for Test)" size="35465" request="0xcd51d800" url="">content-signature-2.cdn.mozilla.net/" referer="" error="" authtime="283" dnstime="4193" aptptime="0" cattime="196" avscantime="0" fullreqtime="172847746" device="0" auth="2" ua="Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:83.0) Gecko/20100101 Firefox/83.0" exceptions="" category="175" reputation="trusted" categoryname="Software/Hardware" application="mozilla" app-id="679"
2021:02:05-15:24:12 utm-1 httpproxy[13748]: id="0001" severity="info" sys="SecureWeb" sub="http" name="http access" action="pass" method="CONNECT" srcip="192.168.116.20" dstip="99.86.166.56" user="username1" group="" ad_domain="domain1" statuscode="200" cached="0" profile="REF_HttProContaManag112 (Test Group)" filteraction="REF_HttCffFilteActio11411 (Filter Action for Test)" size="25053792" request="0xad39800" url="">download-installer.cdn.mozilla.net/" referer="" error="" authtime="431" dnstime="4028" aptptime="0" cattime="0" avscantime="0" fullreqtime="173376835" device="0" auth="2" ua="Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:83.0) Gecko/20100101 Firefox/83.0" exceptions="av,sandbox,url,mime,fileextension,size" application="mozilla" app-id="679"
2021:02:05-15:24:40 utm-1 httpproxy[13748]: id="0001" severity="info" sys="SecureWeb" sub="http" name="http access" action="pass" method="CONNECT" srcip="192.168.116.20" dstip="35.244.181.201" user="username1" group="" ad_domain="domain1" statuscode="200" cached="0" profile="REF_HttProContaManag112 (Test Group)" filteraction="REF_HttCffFilteActio11411 (Filter Action for Test)" size="5733" request="0xcf69f800" url="">https://aus5.mozilla.org/" referer="" error="" authtime="193" dnstime="6" aptptime="0" cattime="202" avscantime="0" fullreqtime="170345634" device="0" auth="2" ua="Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:83.0) Gecko/20100101 Firefox/83.0" exceptions="" category="175" reputation="trusted" categoryname="Software/Hardware" application="mozilla" app-id="679"

Thanks for any help, i am going crazy with this problem.
Cancel
Vote Up 0 Vote Down

Cancel
0 BAlfson over 3 years ago

Ciao papali,

When do you see this message? Immediately after hitting enter? After something else appears? Does anything else appear after the error message?

The statuscode="407" in the log indicates an authentication problem.

Cheers - Bob

Sophos UTM Community Moderator
Sophos Certified Architect - UTM
Sophos Certified Engineer - XG
Gold Solution Partner since 2005

MediaSoft, Inc. USA
Cancel
Vote Up +1 Vote Down

Cancel
0 papali over 3 years ago in reply to BAlfson

Hi BAlfson, I'm sorry I hadn't seen this answer, I thought no one had answered me again. Yes, what I have attached is logged immediately after pressing the ENTER key. I've done more tests these weeks, like bypassing the HTTP proxy, IPS, Web Filtering and going out with a different public IP but it doesn't work anyway.

The authentication problem you indicate would assume a previous login attempt, but I cleared the cache and still tried from several computers that had never logged into that site.

I don't know what else to do ...
Cancel
Vote Up 0 Vote Down

Cancel