Site is blocked - security Error #2048 on iMac

It looks like you need to register on the site so I can't test this for you.  I'd recommend following the thread linked below to enabling trace logging, recreate the issue, and email it to sophossupport@icloud.com (post back if you do).

http://openforum.sophos.com/t5/Mac-tools-help/How-to-output-Web-Intelligence-trace-logging-for-Sophos-Anti/td-p/16461 

Hi, Ruckus,

I am registered on the site and have been since 2012, but I'll follow that link, unless I hear from you again before i finish following its instructions.

Thanks!

Here's the problem - I'm watching the video but cannot hear it. I use closed captions which I read. I'm hearing impaired.

I ran the script but do not know how to use terminal as a super user. I logged into Terminal successfully and looked at Terminal prefs and didn't find it. The script ran and completed but didn't put a Sophos_Trace. tgz file on my desktop which wouldn't have helped because I didn't get the chance to recreate the problem and copy and paste it. (lol)

So:

1.  How do I run terminal as a super user?

2. Is there a written transcript of that video? I understood most all of the visual but am missing something or would have been able to complete the output trace.

3.  What do you mean I have to be registered? I am registered in case you can help remotely.

Thanks!

---

Quandary wrote:

Here's the problem - I'm watching the video but cannot hear it. I use closed captions which I read. I'm hearing impaired.

---

I understand - the audio does explain what needs to be done when the mouse cursor stops moving and I can appreciate that is a problem.

---

Quandary wrote:

1.  How do I run terminal as a super user?

---

To run any command as superuser enter 'sudo' before the main command (short for 'SUperuser DO')

---

Quandary wrote:

3.  What do you mean I have to be registered? I am registered in case you can help remotely.

---

I'd normally try and re-create an issue with a website myself to fully understand it.  However in this case the site says you have to be registered and I don't think I can.  From the site:

Some people, who are not qualified users, try to use IP text relay for scams and fraudulent activity. In order to prevent them from using our service, we are now requiring customers to provide us with a date of birth and the last four digits of their Social Security Number. 

Hence you will have to produce the trace logging and forward it to sophossupport@icloud.com when done.

---

Quandary wrote:

2. Is there a written transcript of that video? I understood most all of the visual but am missing something or would have been able to complete the output trace.

---

There isn't a transcript of the video - I would have one created but after the video was uploaded to the forum it was deleted (doh).  Does the video below help?  The sildes appear for 10 seconds each so you may want to pause the video for the ones with more content.

Let me know if anything is unclear.

Hi, Ruckus,

The slideshow was amazing and very easy to follow and thanks for letting me know to use the sudo prefix before the command.

I emailed the compressed file to sophossupport@icloud.com along with the link to the forum post and my original explanation.

(I'm sorry for the delay. Coudn't do this yesterday.)

I'll post what Sophos finds, when I receive it.

Do you want me to post any of the contents of the terminal? Or anything else?

BTW, my computer has two listings witih ISP's, so I selected the ethernet one, which is directly connected between my iMac and the router.

Thank you for the extra miles you went to!

Ruckus, how long is the typical wait to hear back from Sophos? I didn't even get an auto reply that they received it.

Also, I again want to compliment you on how you created that slide show, which truly helped me.

Can you suggest somewhere, that after people upload videos, they should also post the transcript, since they have it anyway?

Thanks!

---

Quandary wrote:

Ruckus, how long is the typical wait to hear back from Sophos? I didn't even get an auto reply that they received it.

---

In all honest it won't be quick - there are a few problems raised for Web Protection blocking sites.  I'll forward the trace logging to our developers directly.  They will investigate and provide an update to me or directly to this thread.  I'd set your expectations though.  Best case scenario is that the logging provides a clear reason and then they can look to fit in an update to the product in a future release.  Obviously the timeframe depends on the nature and complexity of the problem.  Worst case is that you'll heard back sooner that the logging has not revealed the problem and something else needs testing.

Therefore I suggest you disable the Web Protection options in Preferences for the time being and run with just on-access scanning and an on-demand scan whenever you choose to.

---

Quandary wrote:

Can you suggest somewhere, that after people upload videos, they should also post the transcript, since they have it anyway?

---

I will.  There are currently only a handful of videos on our YouTube channel with Closed Captions (the more popular Mac ones and CryptoLocker) and we'll endeavor to do more.  The videos hosted directly on this forum don't have the ability for CC so we'll have consider in-video callouts and slides to explain the process.  If you need any other videos explaining start a new thread (let's keep this about the site blocking issue) and list them - that will at least guarantee those are done first.

Quandary wrote:

Ruckus, how long is the typical wait to hear back from Sophos? I didn't even get an auto reply that they received it.

ruckus wrote:

In all honest it won't be quick - there are a few problems raised for Web Protection blocking sites.  I'll forward the trace logging to our developers directly.  They will investigate and provide an update to me or directly to this thread.  I'd set your expectations though.  Best case scenario is that the logging provides a clear reason and then they can look to fit in an update to the product in a future release.  Obviously the timeframe depends on the nature and complexity of the problem.  Worst case is that you'll heard back sooner that the logging has not revealed the problem and something else needs testing.

Therefore I suggest you disable the Web Protection options in Preferences for the time being and run with just on-access scanning and an on-demand scan whenever you choose to.

Quandary wrote:   I disabled both Web Protection options and rebooted and the site works. I'll keep watching for an update here. Thanks for forwarding the trace logging, directly.

Quandary wrote:

Can you suggest somewhere, that after people upload videos, they should also post the transcript, since they have it anyway?

I will.  There are currently only a handful of videos on our YouTube channel with Closed Captions (the more popular Mac ones and CryptoLocker) and we'll endeavor to do more.  The videos hosted directly on this forum don't have the ability for CC so we'll have consider in-video callouts and slides to explain the process.  If you need any other videos explaining start a new thread (let's keep this about the site blocking issue) and list them - that will at least guarantee those are done first.

Quandary wrote:   I appreciate this. I had searched YouTube before asking you for a transcript because some vids are auto captioned if the creator selects that option. The captions are wild, sometimes, though, like English as a 4th language. :)

Since no one else has ever brought up the need for captions or transcripts, I'll just ask for one if I find a post where I can't use it as is.

Thanks!

How unprotected am I by leaving Web Protection OFF? 

I don't visit any "nefarious" sites and I rarely download anything but Apple updates and app updates that I'm sure of.

Sandy,

That is not an answer to the current situation. It was just a side question. The other posting has nothing to do with this, either.

I have already emailed the compressed trace results to Sophos. If the feature is there, it should work properly.

I have them off until I hear back from Sophos.

Tnx.