Guest User!

You are not Sophos Staff.

Thread Info
  • State Not Answered
  • Replies 21 replies
  • Subscribers 0 subscribers
  • Views 5735 views
  • Users 0 members are here
Options
Suggested

[7.500][BUG][NOTABUG] HTTP - can't access own server

Microsaft
Hello,

following issue:

When I try to access my OWA from external everything is working as expected, but when I try this from internal over the proxy using the external address the connection fails (timeout).

The log says 
2009:09:28-10:22:52 gateway httpproxy[11328]: id="0002" severity="info" sys="SecureWeb" sub="http" name="web request blocked" action="block" method="GET" srcip="192.168.x.xx" user="" statuscode="502" cached="0" profile="REF_EsGuIhjYWX ()" filteraction="REF_DMOklZtcpJ ()" size="2264" time="60380 ms" request="0x84d44a0" url="https:///exchange/" exceptions="" error="" category="119" reputation="neutral" categoryname="Health"


This was working on 7.405...

My fault?
Parents
  • 0
    Update: When I disable IPS it's working!

    IPS-Log:
    2009:09:28-10:49:54 gateway snort[4351]: id="2101" severity="warn" sys="SecureNet" sub="ips" name="Intrusion protection alert" action="drop" reason="LAND Attack, sameip detected" group="242" srcip="91.112.219.xx" dstip="91.112.219.xx" proto="6" srcport="443" dstport="35208" sid="200012" class="" priority="0" generator="1" msgid="0" 
    2009:09:28-10:50:01 gateway snort[4351]: id="2101" severity="warn" sys="SecureNet" sub="ips" name="Intrusion protection alert" action="drop" reason="LAND Attack, sameip detected" group="242" srcip="91.112.219.xx" dstip="91.112.219.xx" proto="6" srcport="443" dstport="35208" sid="200012" class="" priority="0" generator="1" msgid="0"
Reply
  • 0
    Update: When I disable IPS it's working!

    IPS-Log:
    2009:09:28-10:49:54 gateway snort[4351]: id="2101" severity="warn" sys="SecureNet" sub="ips" name="Intrusion protection alert" action="drop" reason="LAND Attack, sameip detected" group="242" srcip="91.112.219.xx" dstip="91.112.219.xx" proto="6" srcport="443" dstport="35208" sid="200012" class="" priority="0" generator="1" msgid="0" 
    2009:09:28-10:50:01 gateway snort[4351]: id="2101" severity="warn" sys="SecureNet" sub="ips" name="Intrusion protection alert" action="drop" reason="LAND Attack, sameip detected" group="242" srcip="91.112.219.xx" dstip="91.112.219.xx" proto="6" srcport="443" dstport="35208" sid="200012" class="" priority="0" generator="1" msgid="0"
Children
No Data
Unfiltered HTML