This discussion has been locked.

You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Windows 7 - No internet access icon if HTTP proxy enabled in transparent mode

Hello,
does anyone experiences my issue? In all my windows 7 client (I have 4 client), when HTTP proxy is enabled (it is set as Transparent Proxy) the lan icon alerts "No Internet Access". If I stop HTTP Proxy the issue disappear.

In log files of http proxy I don't see anything strange, the same for IPS.

Any ideas?

This thread was automatically locked due to age.

0 William Warren over 14 years ago

that's odd. I run with transparent proxy. what is your nat, packetfilter, etc etc configuration.

Owner: Emmanuel Technology Consulting

http://etc-md.com

Former Sophos SG(Astaro) advocate/researcher/Silver Partner

PfSense w/Suricata, ntopng,

Other addons to follow
Cancel
Vote Up 0 Vote Down

Cancel
0 eclipse79oldacct over 14 years ago

This is a very strange issue. In this moment the laptop works perfectly even if the proxy is on. It seems a random bug. Googleing I have read that it could be related to bonjour service.

Anyway this is my configuration:
NAT: Masquerading from Internal to External
Packet Filter: Web services from Internal to Internet, ping from Internal to Any.

thank you
eclipse79
Cancel
Vote Up 0 Vote Down

Cancel
0 BAlfson over 14 years ago

ping from Internal to Any

I don't think this rule has any effect - the settings on the ICMP tab take precedence.

If you figure out what caused your unit to report no-conection, please post back here.

Cheers - Bob

Sophos UTM Community Moderator
Sophos Certified Architect - UTM
Sophos Certified Engineer - XG
Gold Solution Partner since 2005

MediaSoft, Inc. USA
Cancel
Vote Up 0 Vote Down

Cancel
0 eclipse79oldacct over 14 years ago in reply to BAlfson

I don't think this rule has any effect - the settings on the ICMP tab take precedence.

This rule has effects. Without it I can't ping from LAN addresses to Internal interface. I don't want to enable "Firewall is ping visible" because I don't want that the firewall is ping visible from internet.

If you figure out what caused your unit to report no-conection, please post back here.

I forget to say that the client can surf without any problem. The only issue is that the lan connection status reports the absence of internet connection.
Cancel
Vote Up 0 Vote Down

Cancel
0 dust_ag over 9 years ago in reply to eclipse79oldacct

Hi eclipse79,

I experience the exact same issue. Did you find any solution ?

Thanks by advance.
Cancel
Vote Up 0 Vote Down

Cancel
0 scorpionking over 9 years ago
Windows is trying to connect to http://www.msftncsi.com/ncsi.txt, so your Webfilter profile has to allow that.
Also check if a nslookup to dns.msftncsi.com returns the IP 131.107.255.255.
----------
Sophos user, admin and reseller.
Private Setup:

XG: HPE DL20 Gen9 (Core i3-7300, 8GB RAM, 120GB SSD) | XG 18.0 (Home License) with: Web Protection, Site-to-Site-VPN (IPSec, RED-Tunnel), Remote Access (SSL, HTML5)

UTM: 2 vCPUs, 2GB RAM, 50GB vHDD, 2 vNICs on vServer (KVM) | UTM 9.7 (Home License) with: Email Protection, Webserver Protection, RED-Tunnel (server)
Cancel
Vote Up 0 Vote Down

Cancel
0 dust_ag over 9 years ago

Thanks for your help scorpionking. I added this site to web filtering whitelist. DNS lookup is OK.
Hope it will correct the issue (which is not permanent).
Cancel
Vote Up 0 Vote Down

Cancel
0 Scott_Klassen over 9 years ago

Please let us know how it turns out.

__________________
ACE v8/SCA v9.3

...still have a v5 install disk in a box somewhere.

http://xkcd.com
http://www.tedgoff.com/mb
http://www.projectcartoon.com/cartoon/1
Cancel
Vote Up 0 Vote Down

Cancel
0 eclipse79oldacct over 9 years ago

Well, this morning one of my boss reported this issue again. The strangeness is that in the previous days he didn't see the alert icon.

The client successfully connect to http://www.msftncsi.com/ncsi.txt and nslookup reports the ip 131.107.255.255.

:-/
Cancel
Vote Up 0 Vote Down

Cancel
0 Michael Dunn over 9 years ago

Try looking here:
Windows 7 Network Awareness: How Windows knows it has an internet connection « Super User Blog
The Network Connection Status Icon - Microsoft Enterprise Networking Team - Site Home - TechNet Blogs

Maybe wireshark the computer and see what it is actually trying to do.

However if it is a single computer maybe the issue is like this one, which was resolved by changing the NIC driver on the Windows box.
networking - Dell M6600: "No internet access", can browse internet, can remote into it, cannot activate office 2013, cannot join domain - Server Fault
Cancel
Vote Up 0 Vote Down

Cancel