Thread Info
  • State Suggested Answer
  • Locked Locked
  • Replies 3 replies
  • Answers 1 answer
  • Subscribers 27 subscribers
  • Views 7585 views
  • Users 0 members are here
Options
Suggested
This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

website excluded from any check but javascript button not working, without any error

stefano colombo

we have excluded, in the exception, from everything, the whole domain "ordine-brevetti.it" (main italian patent office) everything work except a javascript button to confirm registrations to conventions, after the click a receipt must be shown (everything in the same domain) but return a blank page without any error.

In the logs nothing is blocked (log enabled for all rules).

if I test the rules policy/web show that everything is allowed.

if I make a rule that disable any check at the source IP everything work

If I make a rule that disable any check at the destination fqdn doesn't work

When we had cyberoam FW, that work fine



This thread was automatically locked due to age.
  • 0

    so after many hour sorted out.

    created FQDN entry for the domain in question, created bypass rule for FQDN

    DON'T WORK again

    opened a support ticket to cyberoam support (my appliance is cr25ing)

    after about 2 hour an half, with the technician, replaced fqdn, in the bypass rule, with the corresponding ip address

    et voila' IT work

    So my opinion is that something is wrong with the FQDN but the technician have answer that is the correct way...........

  • 0 in reply to stefano colombo

    may be found an explanation

    FQDN doesn't work in reverve lookup so if in the javascript there is an explicit link to the IP address it's blocked.

     

    Correct?

  • 0 in reply to stefano colombo

    Are you talking about using a FQDN Host object in a firewall rule?

    Or are you talking about using an FQDN inside a Web Exception or something similar?

     

    AFAIK the FQDN Host objects for firewall rules should work for both FQDN and IP directly.  However in the web proxy itself there is no reverse lookup of the hostname in the URL field.