[7.460][BUG][NOTABUG] Unable to Resolve Domain

JJJTech1912 over 16 years ago

Hello I have strange one. I am unable to resolve a domain that was working fine before the uprade to 7.460. I did a scratch install to 7.460.

domain: mx.cfinc.biz (just http)

works fine on connections from outside of my ASG network. Give a time out in IE, Chrome, FireFox. I can not find an error in any of the logs.

Also can not connect to the site using Terminal Servces. I can TS to other sites.

Thoughts?

It would not be a big deal but I manage the 2003 SBS server and I need get to it.

Best Regards,

Jason

Parents

0 flichtenheld over 16 years ago

Hello I have strange one. I am unable to resolve a domain that was working fine before the uprade to 7.460. I did a scratch install to 7.460.

domain: mx.cfinc.biz (just http)

works fine on connections from outside of my ASG network. Give a time out in IE, Chrome, FireFox. I can not find an error in any of the logs.

You can try to see whether this is a DNS issue by going to Support->Tools->DNS Lookup and enter the domain name there. What does it say?
Cancel
Vote Up 0 Vote Down

Sign in to reply

Verify Answer

Cancel
0 JJJTech1912 over 16 years ago in reply to flichtenheld

Thanks for the info. It pulls up the IP from the DNS Lookup tool.
mx.cfinc.biz has address 75.49.151.150

It is a simple pages on port 80. Any other thoughts?
Cancel
Vote Up 0 Vote Down

Sign in to reply

Verify Answer

Cancel
0 JJJTech1912 over 16 years ago in reply to JJJTech1912

I was able to find this in the HTTP Log.
2009:06:20-00:42:27 Astaro httpproxy[3860]: id="0002" severity="info" sys="SecureWeb" sub="http" name="web request blocked" action="block" method="GET" srcip="192.168.1.102" user="" statuscode="502" cached="0" profile="REF_DefaultHTTPProfile (Default Proxy)" filteraction="REF_DefaultHTTPCFFAction (Default content filter action)" size="2162" time="62174 ms" request="0x819a528" url="mx1.cfinc.biz/" exceptions="" error="" category="9998" reputation="neutral" categoryname="Uncategorized"

Can't figure out why it might be blocking this site. Any help would be great!
Cancel
Vote Up 0 Vote Down

Sign in to reply

Verify Answer

Cancel
0 JJJTech1912 over 16 years ago in reply to JJJTech1912

Same for this domain: mx.cfinc.biz

2009:06:20-00:39:32 Astaro httpproxy[3860]: id="0002" severity="info" sys="SecureWeb" sub="http" name="web request blocked" action="block" method="GET" srcip="192.168.1.102" user="" statuscode="502" cached="0" profile="REF_DefaultHTTPProfile (Default Proxy)" filteraction="REF_DefaultHTTPCFFAction (Default content filter action)" size="2160" time="63482 ms" request="0x808e190" url="mx.cfinc.biz/" exceptions="av,auth,content,url,mime,cache" error=""
Cancel
Vote Up 0 Vote Down

Sign in to reply

Verify Answer

Cancel
0 Billybob over 16 years ago in reply to JJJTech1912

Did you try by IP Welcome to Windows Small Business Server 2003. I get to it with ip and name no problem. Also try disabling IPS if the problem continues. Its been a pain lately.
Cancel
Vote Up 0 Vote Down

Sign in to reply

Verify Answer

Cancel
0 BAlfson over 16 years ago in reply to Billybob

You have blocked "uncategorized." Note that this is also in the "Suspicious and Uncategorized" list.
Cancel
Vote Up 0 Vote Down

Sign in to reply

Verify Answer

Cancel
0 JJJTech1912 over 16 years ago in reply to BAlfson

2009:06:20-13:53:39 Astaro httpproxy[3860]: id="0002" severity="info" sys="SecureWeb" sub="http" name="web request blocked" action="block" method="GET" srcip="192.168.1.106" user="" statuscode="502" cached="0" profile="REF_DefaultHTTPProfile (Default Proxy)" filteraction="REF_DefaultHTTPCFFAction (Default content filter action)" size="2162" time="61439 ms" request="0xb13266e0" url="75.49.151.150/" exceptions="" error="" category="9998" reputation="neutral" categoryname="Uncategorized"
2009:06:20-13:53:59 Astaro httpproxy[3860]: id="0002" severity="info" sys="SecureWeb" sub="http" name="web request blocked" action="block" method="GET" srcip="192.168.1.106" user="" statuscode="502" cached="0" profile="REF_DefaultHTTPProfile (Default Proxy)" filteraction="REF_DefaultHTTPCFFAction (Default content filter action)" size="2162" time="61609 ms" request="0xb1f9d980" url="75.49.151.150/" exceptions="" error="" category="9998" reputation="neutral" categoryname="Uncategorized

I have added the URL and IP to the allow list in web filtering, still no luck. Any other thoughts. ?
Cancel
Vote Up 0 Vote Down

Sign in to reply

Verify Answer

Cancel
0 BAlfson over 16 years ago in reply to JJJTech1912

2009:06:20-13:53:39 Astaro httpproxy[3860]: id="0002" severity="info" sys="SecureWeb" sub="http" name="web request blocked" action="block" method="GET" srcip="192.168.1.106" user="" statuscode="502" cached="0" profile="REF_DefaultHTTPProfile (Default Proxy)" filteraction="REF_DefaultHTTPCFFAction (Default content filter action)" size="2162" time="61439 ms" request="0xb13266e0" url="http://75.49.151.150/" exceptions="" error="" category="9998" reputation="neutral" categoryname="Uncategorized"

The log says that this URL is uncategorized (it is), and that no exceptions are in place. Can you show a pic of your 'URL Filter' tab?

Cheers - Bob
PS Neither mx.cfinc.biz nor 75.49.151.150 responds to a ping.
Cancel
Vote Up 0 Vote Down

Sign in to reply

Verify Answer

Cancel
0 JJJTech1912 over 16 years ago in reply to BAlfson

Here is the attched picture of my URL filter.

The Router at MX.cfinc.biz (75.49.151.150) is setup not to respond to ping requests. But on a non AGS netwrok you can reach the page just fine. I did disable the HTTP Proxy, and still the same issue. Really at a loss on this one. Any help is greatly apperciated.
- URL.jpg
- View
- Hide
Cancel
Vote Up 0 Vote Down

Sign in to reply

Verify Answer

Cancel
0 JJJTech1912 over 16 years ago in reply to JJJTech1912

Any help with this would be great.
Cancel
Vote Up 0 Vote Down

Sign in to reply

Verify Answer

Cancel
0 svens over 16 years ago in reply to JJJTech1912

Any help with this would be great.

According to the log line, it took 60s until the error, so the problem is most likely a TCP Problem (Connection timeout). Can you capture the connection with tcpdump and send it to me? To do this, do the following:

- logon as root to your ASG
- Enter 'tcpdump -ni any port 80 -s0 -w http.pcap

Copy the http.pcap file off your ASG and send it to sschnelle@astaro.com. Thanks!
Cancel
Vote Up 0 Vote Down

Sign in to reply

Verify Answer

Cancel

Reply

0 svens over 16 years ago in reply to JJJTech1912

Any help with this would be great.

According to the log line, it took 60s until the error, so the problem is most likely a TCP Problem (Connection timeout). Can you capture the connection with tcpdump and send it to me? To do this, do the following:

- logon as root to your ASG
- Enter 'tcpdump -ni any port 80 -s0 -w http.pcap

Copy the http.pcap file off your ASG and send it to sschnelle@astaro.com. Thanks!
Cancel
Vote Up 0 Vote Down

Sign in to reply

Verify Answer

Cancel

Children

0 Astaro Beta Bot over 16 years ago in reply to svens

Astaro Beta Report
--------------------------------
Version: 7.460
Type: BUG
State: NOTABUG
Reporter: JJJTech1912
Contributor: 
MantisID: 
--------------------------------

0 JJJTech1912 over 16 years ago in reply to svens

I hate to say it, I do not know enough about using the console the export the file. Any suggestions?
Cancel
Vote Up 0 Vote Down

Sign in to reply

Verify Answer

Cancel