[7.075] time events without function in HTTP Profiles [NOTABUG]

Hi,

time events in HTTP Proxy Profiles are without any function in my case.

I want to use time events in a HTTP profile (like the usage in 7.011). My configuration was the same as in 7.001 because of an update installation - but without function.

Here my configuration:

Time Event definitions:

Time-EveryDay-0-00-7-00 [Recurring event]
From 00:00 until 07:00 on Mon, Tue, Wed, Thu, Fri, Sat, Sun
Täglich 0:00 - 7:00

Time-Fr-Sa-Evening [Recurring event]
From 23:00 until 23:59 on Fri, Sat
Freitag, Samstag Spaetabend

Time-So-Do-Evening [Recurring event]
From 22:00 until 23:59 on Mon, Tue, Wed, Thu, Sun
Sonntag-Donnerstag Spaetabend

HTTP Profile filter action:

Filter-Protect
Mode: Whitelist
Anti-Virus scanning Dual Scan, Single Scan

(No HTTP access allowed - so it is simple to check)

Filter assignments:

HTTP-Protect-Time1
User/Groups admin
Time-EveryDay-0-00-7-00
Filter Action: Filter-Protect

HTTP-Protect-Time2
User/Groups admin
Time-So-Do-Evening
Filter Action: Filter-Protect

HTTP-Protect-Time3
User/Groups admin
Time-Fr-Sa-Evening
Filter Action: Filter-Protect

Proxy Profile:

HTTP-Surf-Protect []
Transparent mode enabled
Source networks: HL_Surf_Protect  (a Group of IP-Numbers)
Filter Assigments:
    HTTP-Protect-Time1
    HTTP-Protect-Time2
    HTTP-Protect-Time3
Fallback action: Default content filter action

The filter action "filter-protect" is never used !
In all cases only the default filter action ist used.

If i change the time event in "HTTP-Protect-Time1" to "Allways" the filter "filter-protect" is used correct.

No time filter is used correct.

Regards Juergen

PS: Astaro if you need more informations (hardcopies or something else) please let me know.

0 tom_01 over 17 years ago

You can't use users/groups in transparent mode. Please remove the "User/Groups admin" from the assignments (do not put in any user/group). Then it should work.
Cancel
Vote Up 0 Vote Down

Sign in to reply

Verify Answer

Cancel
0 Gert over 17 years ago in reply to tom_01

However, you can use user/groups in transparent mode, as long as these user/groups are defined as IP addresses or networks.
Cancel
Vote Up 0 Vote Down

Sign in to reply

Verify Answer

Cancel
0 tom_01 over 17 years ago in reply to Gert

Right, but then it's more a users computer than a user [:)]
Cancel
Vote Up 0 Vote Down

Sign in to reply

Verify Answer

Cancel
0 Gert over 17 years ago in reply to tom_01

I agree, but with a fairly static distribution of users over computers and a smart use of DHCP, it will solve the issue.

At least it does at my home network with a wife and kids all having their own computers.
Cancel
Vote Up 0 Vote Down

Sign in to reply

Verify Answer

Cancel
0 JuergenH over 17 years ago in reply to Gert

The construction i described above works fine in 7.011 - why should it be a configuration error now? I see a bug or a difference between the versions.

(Even in 7.011 is a bug - the whitelist filter only works fine if there is at the minimum one site allowed.)

@Gert:
I use DHCP in the network! Can you give me some more information how you configured your Astaro to work, please.

Thanks
Juergen
Cancel
Vote Up 0 Vote Down

Sign in to reply

Verify Answer

Cancel
0 tom_01 over 17 years ago in reply to JuergenH

Hi Juergen,

in 7.011, the proxy would ignore the users/groups. In 7.100, it ignores the assignment. We're looking at adding code that prevents linking user/group assignments to transparent proxy profiles.
Cancel
Vote Up 0 Vote Down

Sign in to reply

Verify Answer

Cancel
0 stuartbe over 17 years ago in reply to tom_01

Just a thought but you could block all trafic for these apps and make your users use the socks proxy. You could then either set a cron job to stop the socks proxy or a packet filter rule thats time controled to block access to the proxy.

The way the Astaro gateway works is the same as any other firewall and realtime inspection of the packet's in this way would be a huge load on the gateway.
Cancel
Vote Up 0 Vote Down

Sign in to reply

Verify Answer

Cancel
0 Gert over 17 years ago in reply to JuergenH

Juergen,

First of all I use version 7.011.
DHCP is running on a separate server.

All systems on my network are known by their MAC addresses and DHCP is configured for static addresses. That is all systems are receiving the same IP address always.
You can virtually get the same results by chosing the lease time quite high (14 days).

Detailed information about the set up of the HTTP proxy can be found in the "HTTP Profile guide" in the Astaro knowledgebase: http://www.astaro.com/kb/

If you need some more detailed setup information, drop me a pm.
Cancel
Vote Up 0 Vote Down

Sign in to reply

Verify Answer

Cancel
0 JuergenH over 17 years ago in reply to Gert

Tom,

please excuse: why should be this situation or change between the versions not a serious problem for us users (or a bug)?

regards Juergen
Cancel
Vote Up 0 Vote Down

Sign in to reply

Verify Answer

Cancel

[7.075] time events without function in HTTP Profiles [NOTABUG]

Submitted a Tech Support Case lately from the Support Portal?