This discussion has been locked.

You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Host not found

Hi,

I'm new to the firewall we used in our company today we are using SG 310 and right now i have problem on DNS and errors logs "Host not found"

lately i have been receiving logs:

2016:06:10-10:54:01 sg httpproxy[15120]: id="0002" severity="info" sys="SecureWeb" sub="http" name="web request blocked" action="block" method="GET" srcip="192.168.10.7" dstip="" user="" group="" ad_domain="" statuscode="502" cached="0" profile="REF_HttProContaInterNetwo (Office)" filteraction="REF_HttCffAllowExe (Office)" size="2560" request="0xdf2c2600" url="images.radiopaedia.org/.../5433dcc43c2534d7edbb62f75d73ef_big_gallery.jpeg" referer="" error="Host not found" authtime="0" dnstime="1" cattime="0" avscantime="0" fullreqtime="119" device="0" auth="0" ua="Mozilla/4.0 (compatible; MSIE 999.1; Unknown) " exceptions="" overridecategory="1" overridereputation="1" category="119" reputation="trusted" categoryname="Health"

have been searching for a while now but i still can't resolve and mostly of the websites access no pictures have been displayed

right now my config on WEB FILTERING -> HTTPS -> Do not proxy HTTPS traffic in transparent mode  

but when i use URL FILTERING the whole page goes host not found

i would like to ask some suggestions or ways on how to resolve this matter.

This thread was automatically locked due to age.

Parents

sachingurung over 8 years ago

Hi Mark,

What is the DNS Server IP configured on the end system and DNS Forwarders in the UTM? Also, if you have selected do not proxy HTTPS option do you have a Firewall rule to forward HTTPS traffic through UTM?

Thanks

Sachin Gurung
Team Lead | Sophos Technical Support
Knowledge Base | @SophosSupport | Video tutorials
Remember to like a post. If a post (on a question thread) solves your question use the 'This helped me' link.
Cancel
Vote Up 0 Vote Down

Cancel
mark andrewsagalongos over 8 years ago in reply to sachingurung

Hi Sachin,

Right now i configure all dhcp with the DNS of google cause if i use DNS forwarders websites wont load css, imags and js.

Yes i allow all from any -> any -> internal and internal -> any -> any

thanks
Cancel
Vote Up 0 Vote Down

Cancel
sachingurung over 8 years ago in reply to mark andrewsagalongos

Hi,

Please post screenshot of the DNS configuration on UTM.

Thanks

Sachin Gurung
Team Lead | Sophos Technical Support
Knowledge Base | @SophosSupport | Video tutorials
Remember to like a post. If a post (on a question thread) solves your question use the 'This helped me' link.
Cancel
Vote Up 0 Vote Down

Cancel
mark andrewsagalongos over 8 years ago in reply to sachingurung

Hi,

I'm on the office network on global tab, and currently now im not using the DNS what i did for now is manually put DNS on DHCP setting

Also when we use web filtering and use live log websites are not categorized instead when you use policy helpdesk the category name goes to "Uncategorized"
Cancel
Vote Up 0 Vote Down

Cancel
sachingurung over 8 years ago in reply to mark andrewsagalongos

Hi,

In the DNS Global tab, flush the resolver cache. What is the DNS IP you are leasing through DHCP and did that worked?

Thanks

Sachin Gurung
Team Lead | Sophos Technical Support
Knowledge Base | @SophosSupport | Video tutorials
Remember to like a post. If a post (on a question thread) solves your question use the 'This helped me' link.
Cancel
Vote Up 0 Vote Down

Cancel
mark andrewsagalongos over 8 years ago in reply to sachingurung

Hi,

yes its working when i did not use the DNS , i used the google DNS

I've tried using flush the resolver cache still not working.

thanks for the reply
Cancel
Vote Up 0 Vote Down

Cancel
BAlfson over 8 years ago in reply to mark andrewsagalongos

Hi, Mark, and welcome to the UTM Community!

"any -> any -> internal" - You can delete that as it likely has no effect. The UTM is a stateful firewall.

You might want to check out DNS best practice. The KnowledgeBase article that plagiarized it probably isn't updated as often. Do things work after you change your configuration to match that?

Cheers - Bob

Sophos UTM Community Moderator
Sophos Certified Architect - UTM
Sophos Certified Engineer - XG
Gold Solution Partner since 2005

MediaSoft, Inc. USA
Cancel
Vote Up 0 Vote Down

Cancel

Reply

BAlfson over 8 years ago in reply to mark andrewsagalongos

Hi, Mark, and welcome to the UTM Community!

"any -> any -> internal" - You can delete that as it likely has no effect. The UTM is a stateful firewall.

You might want to check out DNS best practice. The KnowledgeBase article that plagiarized it probably isn't updated as often. Do things work after you change your configuration to match that?

Cheers - Bob

Sophos UTM Community Moderator
Sophos Certified Architect - UTM
Sophos Certified Engineer - XG
Gold Solution Partner since 2005

MediaSoft, Inc. USA
Cancel
Vote Up 0 Vote Down

Cancel

Children

No Data