Thread Info
  • State Not Answered
  • Locked Locked
  • Replies 12 replies
  • Subscribers 1 subscriber
  • Views 18731 views
  • Users 0 members are here
Options
Suggested
This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

error="Connection to server timed out"

onats
hi everyone,

Just creating a new thread for "Connection to server timed out" error in webfiltering. We have an intensive browsing requirement in our team. And users noticed that Sophos was blocking many sites which are supposedly allowed. Further investigation, we concluded that these sites weren't responding from our request. Furthermore, we disabled the web filtering module in the Sophos - Astaro UTM9 220. We noticed that some site are in fact responding if the webfilter module was disable. sample websites are 

http://www.autonation.com

http://www.howbill.com


Need your help.

Best regards,

Onats.


This thread was automatically locked due to age.
Parents
  • 0
    Hi Bob,

    2nd line refers to the blocked website "www.howbill.com". Actually, we noticed that we have several site with such incident. If we didn't pass thru the webfilter, we could access the site.

    2013:01:29-20:13:14 phFW01-1 httpproxy[14829]: id="0001" severity="info" sys="SecureWeb" sub="http" name="http access" action="pass" method="GET" srcip="192.168.1.46" dstip="206.190.36.45" user="" statuscode="200" cached="0" profile="REF_DefaultHTTPProfile (Default Proxy)" filteraction="REF_DefaultHTTPCFFAction (Default content filter action)" size="465201" request="0xbad81aa8" url="ph.yahoo.com/
    2013:01:29-20:13:20 phFW01-1 httpproxy[14829]: id="0002" severity="info" sys="SecureWeb" sub="http" name="web request blocked" action="block" method="GET" srcip="192.168.1.46" dstip="98.118.152.99" user="" statuscode="504" cached="0" profile="REF_DefaultHTTPProfile (Default Proxy)" filteraction="REF_DefaultHTTPCFFAction (Default content filter action)" size="2536" request="0xb92a3598" url="www.howbill.com/" exceptions="application" error="Connection to server timed out" category="9998" reputation="neutral" categoryname="Uncategorized"
    2013:01:29-20:13:31 phFW01-1 httpproxy[14829]: id="0001" severity="info" sys="SecureWeb" sub="http" name="http access" action="pass" method="GET" srcip="192.168.1.46" dstip="74.125.128.100" user="" statuscode="200" cached="0" profile="REF_DefaultHTTPProfile (Default Proxy)" filteraction="REF_DefaultHTTPCFFAction (Default content filter action)" size="1170" request="0xf5e137b0" url="clients2.google.com/.../crx
    2013:01:29-20:13:36 phFW01-1 httpproxy[14829]: id="0001" severity="info" sys="SecureWeb" sub="http" name="http access" action="pass" method="GET" srcip="192.168.1.46" dstip="74.125.128.120" user="" statuscode="200" cached="0" profile="REF_DefaultHTTPProfile (Default Proxy)" filteraction="REF_DefaultHTTPCFFAction (Default content filter action)" size="1542" request="0xbb165e18" url="www.gstatic.com/.../html" application="google"
    2013:01:29-20:13:46 phFW01-1 httpproxy[14829]: id="0001" severity="info" sys="SecureWeb" sub="http" name="http access" action="pass" method="GET" srcip="192.168.1.46" dstip="157.166.241.10" user="" statuscode="200" cached="0" profile="REF_DefaultHTTPProfile (Default Proxy)" filteraction="REF_DefaultHTTPCFFAction (Default content filter action)" size="227078" request="0xf5ed66f0" url="www.cnn.com/.../html" application="cnn"
    2013:01:29-20:13:52 phFW01-1 httpproxy[14829]: id="0001" severity="info" sys="SecureWeb" sub="http" name="http access" action="pass" method="GET" srcip="192.168.1.46" dstip="74.208.3.226" user="" statuscode="301" cached="0" profile="REF_DefaultHTTPProfile (Default Proxy)" filteraction="REF_DefaultHTTPCFFAction (Default content filter action)" size="232" request="0xbacd54b0" url="email.1and1.com/.../html"
Reply
  • 0
    Hi Bob,

    2nd line refers to the blocked website "www.howbill.com". Actually, we noticed that we have several site with such incident. If we didn't pass thru the webfilter, we could access the site.

    2013:01:29-20:13:14 phFW01-1 httpproxy[14829]: id="0001" severity="info" sys="SecureWeb" sub="http" name="http access" action="pass" method="GET" srcip="192.168.1.46" dstip="206.190.36.45" user="" statuscode="200" cached="0" profile="REF_DefaultHTTPProfile (Default Proxy)" filteraction="REF_DefaultHTTPCFFAction (Default content filter action)" size="465201" request="0xbad81aa8" url="ph.yahoo.com/
    2013:01:29-20:13:20 phFW01-1 httpproxy[14829]: id="0002" severity="info" sys="SecureWeb" sub="http" name="web request blocked" action="block" method="GET" srcip="192.168.1.46" dstip="98.118.152.99" user="" statuscode="504" cached="0" profile="REF_DefaultHTTPProfile (Default Proxy)" filteraction="REF_DefaultHTTPCFFAction (Default content filter action)" size="2536" request="0xb92a3598" url="www.howbill.com/" exceptions="application" error="Connection to server timed out" category="9998" reputation="neutral" categoryname="Uncategorized"
    2013:01:29-20:13:31 phFW01-1 httpproxy[14829]: id="0001" severity="info" sys="SecureWeb" sub="http" name="http access" action="pass" method="GET" srcip="192.168.1.46" dstip="74.125.128.100" user="" statuscode="200" cached="0" profile="REF_DefaultHTTPProfile (Default Proxy)" filteraction="REF_DefaultHTTPCFFAction (Default content filter action)" size="1170" request="0xf5e137b0" url="clients2.google.com/.../crx
    2013:01:29-20:13:36 phFW01-1 httpproxy[14829]: id="0001" severity="info" sys="SecureWeb" sub="http" name="http access" action="pass" method="GET" srcip="192.168.1.46" dstip="74.125.128.120" user="" statuscode="200" cached="0" profile="REF_DefaultHTTPProfile (Default Proxy)" filteraction="REF_DefaultHTTPCFFAction (Default content filter action)" size="1542" request="0xbb165e18" url="www.gstatic.com/.../html" application="google"
    2013:01:29-20:13:46 phFW01-1 httpproxy[14829]: id="0001" severity="info" sys="SecureWeb" sub="http" name="http access" action="pass" method="GET" srcip="192.168.1.46" dstip="157.166.241.10" user="" statuscode="200" cached="0" profile="REF_DefaultHTTPProfile (Default Proxy)" filteraction="REF_DefaultHTTPCFFAction (Default content filter action)" size="227078" request="0xf5ed66f0" url="www.cnn.com/.../html" application="cnn"
    2013:01:29-20:13:52 phFW01-1 httpproxy[14829]: id="0001" severity="info" sys="SecureWeb" sub="http" name="http access" action="pass" method="GET" srcip="192.168.1.46" dstip="74.208.3.226" user="" statuscode="301" cached="0" profile="REF_DefaultHTTPProfile (Default Proxy)" filteraction="REF_DefaultHTTPCFFAction (Default content filter action)" size="232" request="0xbacd54b0" url="email.1and1.com/.../html"
Children
No Data
Unfiltered HTML