This discussion has been locked.

You can no longer post new replies to this discussion. If you have a question you can start a new discussion

webmail not working error="Connection timed out"

hai ,

i got UTM 320 , version 9.204-20.
i had done
firewall rule internal network any dnsgroup "mail.abc.com" resolved to 1 public IP.
exception rule all options are check mark for this network mail.abc.com.
allowed URL webfiltering mail.abc.com & grp.abc.com allowed.
here mail.abc.com and grp.abc.com has same public IP

but still its not working

2014:08:19-17:10:00 asg320 httpproxy[5327]: id="0002" severity="info" sys="SecureWeb" sub="http" name="web request blocked" action="block" method="CONNECT" srcip="LAN PC IP" dstip="mail.abc.com IP" user="" statuscode="500" cached="0" profile="REF_DefaultHTTPProfile (Default Web Filter Profile)" filteraction="REF_DefaultHTTPCFFAction (Default content filter action)" size="174" request="0x1d683ba0" url="grp.abc.com:2096/" exceptions="av,auth,content,url,certcheck,certdate,mime,cache,fileextension" error="Connection timed out" authtime="0" dnstime="7" cattime="0" avscantime="0" fullreqtime="127172663" device="0" auth="0" application="http"

2014:08:19-17:12:08 asg320 httpproxy[5327]: id="0002" severity="info" sys="SecureWeb" sub="http" name="web request blocked" action="block" method="CONNECT" srcip="x.x.x.x" dstip="y.y.y.y" user="" statuscode="500" cached="0" profile="REF_DefaultHTTPProfile (Default Web Filter Profile)" filteraction="REF_DefaultHTTPCFFAction (Default content filter action)" size="132" request="0x2ca7c000" url="grp.abc.com:2096/" exceptions="av,auth,content,url,certcheck,certdate,mime,cache,fileextension" error="Connection timed out" authtime="0" dnstime="7" cattime="0" avscantime="0" fullreqtime="127228794" device="0" auth="0" application="http"
2014:08:19-17:14:15 asg320 httpproxy[5327]: id="0002" severity="info" sys="SecureWeb" sub="http" name="web request blocked" action="block" method="CONNECT" srcip="x.x.x.x" dstip="y.y.y.y" user="" statuscode="500" cached="0" profile="REF_DefaultHTTPProfile (Default Web Filter Profile)" filteraction="REF_DefaultHTTPCFFAction (Default content filter action)" size="58" request="0xa004660" url="grp.abc.com:2096/" exceptions="av,auth,content,url,certcheck,certdate,mime,cache,fileextension" error="Connection timed out" authtime="0" dnstime="6" cattime="0" avscantime="0" fullreqtime="127228717" device="0" auth="0" application="http"

please advice what could be the problem...

This thread was automatically locked due to age.

0 mod2402 over 9 years ago

just add port 2096 to the web Protection -> filtering Options -> misc -> allowed targed Services

regards
mod
Cancel
Vote Up 0 Vote Down

Cancel
0 deltaline-IT over 9 years ago in reply to mod2402

thanks for the reply ...

already added for allowed target services... but still the same problem...
Cancel
Vote Up 0 Vote Down

Cancel
0 mod2402 over 9 years ago

sorry, I have not really looked.

There is an error="Connection timed out" and the statuscode="500".

Are you sure that the destination webservice is running without problems?

please post some screenshots from your configuration (web Proxy profiles, misc Settings ...)

You don't need a firewall rule, if you use webfiltering.

Which service is behind port 2096?

regards
mod
Cancel
Vote Up 0 Vote Down

Cancel
0 deltaline-IT over 9 years ago in reply to mod2402

thanks for your concern...

destination web server is working on the same ISP link while directly connected to laptop..

there is only one profile for all. customized category and thats only blocked if in case need to allow any web site done through exception.

Which service is behind port 2096 can you please explain what do you mean by this.

what i am expecting may be mismatch of speed and MTU at ISP router interface which connected to sophos UTM.
Cancel
Vote Up 0 Vote Down

Cancel
0 mod2402 over 9 years ago in reply to deltaline-IT

thanks for your concern... destination web server is working on the same ISP link while directly connected to laptop.. there is only one profile

I don't understand your config. Please post some Screenshots.

Regards
mod
Cancel
Vote Up 0 Vote Down

Cancel
0 deltaline-IT over 9 years ago in reply to mod2402

please check the attached snapshots of configuration and testing...

i had attached in two sessions...
Cancel
Vote Up 0 Vote Down

Cancel
0 deltaline-IT over 9 years ago in reply to deltaline-IT

session two ...
Cancel
Vote Up 0 Vote Down

Cancel
0 mod2402 over 9 years ago

I think there is somthing wrong in your Network configuration. The exception is working but the Connection times out.

Can you Ping the Server from the UTM and from your Client ?

Try also a traceroute.

I don't beliebe that this is a MTU problem.
Cancel
Vote Up 0 Vote Down

Cancel
0 mod2402 over 9 years ago

Can you access the Website if you deaktivate the URL blockig Filter?
Cancel
Vote Up 0 Vote Down

Cancel
0 deltaline-IT over 9 years ago in reply to mod2402

i can ping from UTM (attached)

unfortunately there is no client available right now.
Cancel
Vote Up 0 Vote Down

Cancel