This discussion has been locked.

You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Web Proxy Not working

I am trying to evaluate the Sophos device and I have an issue with the web proxy.

I repeatedly get these errors and nobody can reach the internet while the web filtering is enabled.

function="dns_init" file="dns.c" line="1320" message="failed to get dns ip"
2015:03:27-00:00:24 utm httpproxy[30131]: id="0003" severity="info" sys="SecureWeb" sub="http" request="(nil)" function="main" file="httpproxy.c" line="310" message="failed to initialize DNS"
2015:03:27-00:00:55 utm httpproxy[30224]: id="0003" severity="info" sys="SecureWeb" sub="http" request="(nil)" function="main" file="httpproxy.c" line="271" message="reading configuration"
2015:03:27-00:00:55 utm httpproxy[30224]: id="0003" severity="info" sys="SecureWeb" sub="http" request="(nil)" function="parse_address" file="util.c" line="583" message="getaddrinfo: passthrough6.fw-notify.net: Name or service not known"
2015:03:27-00:00:55 utm httpproxy[30224]: id="0003" severity="info" sys="SecureWeb" sub="http" request="(nil)" function="confd_config_filter" file="confd-client.c" line="3334" message="failed to resolve passthrough6.fw-notify.net, using 2a01:198:200:680::8080"

Any ideas?

Thanks

Wil

This thread was automatically locked due to age.

0 Ross86 over 9 years ago

What are your DNS settings on the UTM and what are clients using for DNS?
Cancel
Vote Up 0 Vote Down

Cancel
0 BAlfson over 9 years ago

Hi, Wil, and welcome to the User BB!

First, you should know that Sophos has excellent pre-sales engineers that can quickly answer this kind of question. More importantly, you should be working with a reseller that can get questions through to those engineers when the reseller's engineers can't answer them.

You might want to consider DNS Best Practice.

Cheers - Bob

Sophos UTM Community Moderator
Sophos Certified Architect - UTM
Sophos Certified Engineer - XG
Gold Solution Partner since 2005

MediaSoft, Inc. USA
Cancel
Vote Up 0 Vote Down

Cancel
0 RenéHäberli over 8 years ago

I have the same issue. My reseller does not even respond to emails, so not a good reputation for SOPHOS.

I followed the DNS best practice already but something with the DNS resolution was wrong from the very beginning. What ever I did, DNS host names were not resolved. I added then "nameserver 127.0.0.1" to resolve.conf, since then I can use DNS host names in the definitions group.

The webfiltering still does not work because of the errors above.

Where can I have a look into?

thanks for guiding me
Rene
Cancel
Vote Up 0 Vote Down

Cancel
0 BAlfson over 8 years ago in reply to RenéHäberli

Hi, René, and welcome to the UTM Community!

Please click on 'Use rich formatting' and insert a picture of your DNS configuration.

Cheers - Bob

Sophos UTM Community Moderator
Sophos Certified Architect - UTM
Sophos Certified Engineer - XG
Gold Solution Partner since 2005

MediaSoft, Inc. USA
Cancel
Vote Up 0 Vote Down

Cancel
0 RenéHäberli over 8 years ago in reply to BAlfson

Hi Bob

Thanks a lot for your help! - Please find below the ATTs.

Cheers, Rene
Cancel
Vote Up 0 Vote Down

Cancel
0 RenéHäberli over 8 years ago in reply to BAlfson

.... and two more.
Cancel
Vote Up 0 Vote Down

Cancel
0 BAlfson over 8 years ago in reply to RenéHäberli

I'm guessing that you already found DNS Best Practice -

If you add "Internal (Network)" to 'Allowed Networks', do things work as you'd hoped?

Cheers - Bob

Sophos UTM Community Moderator
Sophos Certified Architect - UTM
Sophos Certified Engineer - XG
Gold Solution Partner since 2005

MediaSoft, Inc. USA
Cancel
Vote Up 0 Vote Down

Cancel
0 RenéHäberli over 8 years ago in reply to BAlfson

Yes, I have worked through DNS best practice. Adding the "internal (Network)" does not change anything. Internal clients are resolving against srv01.oh.local which is the DC.

Cheers, Rene
Cancel
Vote Up 0 Vote Down

Cancel
0 BAlfson over 8 years ago in reply to RenéHäberli

Have you looked at the DC to confirm that it has a Reverse Lookup Zone including 10.10.8.0/24 and that there's an entry for 10.10.8.21?

Cheers - Bob

Sophos UTM Community Moderator
Sophos Certified Architect - UTM
Sophos Certified Engineer - XG
Gold Solution Partner since 2005

MediaSoft, Inc. USA
Cancel
Vote Up 0 Vote Down

Cancel
0 RenéHäberli over 8 years ago in reply to BAlfson

Good point . . . / Ok, reverse is a different story. My P1 is the webproxy which is not working. Any idea, where I can look into?

Cheers, Rene
Cancel
Vote Up 0 Vote Down

Cancel