This discussion has been locked.

You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Unable to browse website through UTM

After the company that hosts our website changes the IP address our UTM started throwing a 502 connection refused error going to said website.

Everything not going through the utm can get to the website without issue. We have restarted httpproxy, flushed the dns cache, increased the response timeout, increased tunnel timeout, and increased auth timeout. It appears that this website is the only one effected. Everything else works fine.

I need advice on where to look next please.

This thread was automatically locked due to age.

0 Scott_Klassen over 9 years ago

Urbana, IL? If so, I'm right by you. [:)] What's your DNS infrastructure look like? Do lookups return the correct (new) IP? Anything interesting other than 502 show in the proxy log? Are you using the proxy in transparent mode or standard? If transparent, is there any change by adding the site to the transparent destination skiplist? Is the hoster using any form or filtering or blacklisting?

__________________
ACE v8/SCA v9.3

...still have a v5 install disk in a box somewhere.

http://xkcd.com
http://www.tedgoff.com/mb
http://www.projectcartoon.com/cartoon/1
Cancel
Vote Up 0 Vote Down

Cancel
0 Smeg over 9 years ago

Hi neighbor...

Running split DNS, internally set correctly. Yes lookup returned correctly after flushing DNS cache under network services. The web filter log yielded only the 502 error "connection refused", wish I had more to go on...

We are in standard mode and I did put the site in an exception list with no luck at all. In fact if I go out the firewall wide open with my proxy turned off it still fails.
Cancel
Vote Up 0 Vote Down

Cancel
0 Scott_Klassen over 9 years ago

If you use curl to the site from the UTM shell, do you get an error? 502 is a bad gateway. I'm wondering with the IP address change of the site if they also moved the site to a new host that may have some sort of filtering that is blocking your IP. Are they seeing the request from your IP in their logs and is anything odd happening to them at their end?

__________________
ACE v8/SCA v9.3

...still have a v5 install disk in a box somewhere.

http://xkcd.com
http://www.tedgoff.com/mb
http://www.projectcartoon.com/cartoon/1
Cancel
Vote Up 0 Vote Down

Cancel
0 Smeg over 9 years ago

As it turns out, the outside address of my UTM was blacklisted by the hosting company due to fail login attempts to their FTP server. Thanks for all your help Scott_Klassen.
Cancel
Vote Up 0 Vote Down

Cancel
0 Scott_Klassen over 9 years ago

No problem. Seen it happen quite a few times. Maybe I'll run into you sometime in Champaign/Urbana. Feel free to PM me for other contact info, if you so choose.

__________________
ACE v8/SCA v9.3

...still have a v5 install disk in a box somewhere.

http://xkcd.com
http://www.tedgoff.com/mb
http://www.projectcartoon.com/cartoon/1
Cancel
Vote Up 0 Vote Down

Cancel