[7.912][BUG][FIXED] HTTP proxy can't find way

Hi,
I know this url works because it downloaded correctly the first time on number at PCs at work, not using an ASG UTM.

Ian M

http://releases.mozilla.org/pub/mozilla.org/addons/684/fireftp-1.0.8-fx.xpi

No route to host

I can tracert from the ASG to the site. I can tracert from PC to the site.
  • Astaro Beta Report
    
    --------------------------------
    Version: 7.912
    Type: BUG
    State: MERGED/FIXED
    Reporter: RFCat_vk++
    Contributor: 
    MantisID: 13929
    Target version: 7.921
    Fixed in version: 7.921
    --------------------------------
  • Hi,
    it came from the firefox download, both the automatic and manual downloads. I have been receiving this error over a number of days.

    This morning the error has changed to download interrupted.

    Ian M
  • I can't reproduce this here in any way. I guess the host that you tried to reach was really down, given the fact that there are so many of them.

    [FONT="Courier New"][SIZE="1"]kbr-03:/root # host releases.mozilla.org
    releases.mozilla.org is an alias for releases.geo.mozilla.com.
    releases.geo.mozilla.com has address 128.61.111.9
    releases.geo.mozilla.com has address 129.101.198.59
    releases.geo.mozilla.com has address 131.188.12.212
    releases.geo.mozilla.com has address 155.98.64.83
    releases.geo.mozilla.com has address 156.56.247.196
    releases.geo.mozilla.com has address 202.177.202.154
    releases.geo.mozilla.com has address 204.152.184.113
    releases.geo.mozilla.com has address 204.152.184.196
    releases.geo.mozilla.com has address 204.246.0.136
    releases.geo.mozilla.com has address 216.165.129.141
    releases.geo.mozilla.com has address 63.245.208.152
    releases.geo.mozilla.com has address 64.50.236.52
    releases.geo.mozilla.com has address 64.50.236.214
    releases.geo.mozilla.com has IPv6 address 2001:6b0:e:2018::1337[/SIZE][/FONT]



    Do you have anything in the log that would give us a hint on which of those many hosts wasn't reachable from you site?
  • Hi kbr,

    extract from tonight's attempt.

    Ian M

    [FONT=monospace]2010:05:31-21:12:19  fw1-on-house httpproxy[5058]: id="0003" severity="info" sys="SecureWeb"  sub="http" request="0xefe4d500" function="send_request_headers"  file="request.c" line="171" message="write: No route to host" [/FONT]
    [FONT=monospace]2010:05:31-21:12:19  fw1-on-house httpproxy[5058]: id="0002" severity="info" sys="SecureWeb"  sub="http" name="web request blocked" action="block" method="GET"  srcip="192.168.10.252" dstip="2001:6b0:e:2018::1337" user=""  statuscode="502" cached="0" profile="REF_GrlnmHmMll (24hr)"  filteraction="REF_ufaPwcyijx (24hr)" size="4725" time="24246 ms"  request="0xefe4d500"  url="releases.mozilla.org/.../FONT]
    [FONT=monospace]2010:05:31-21:12:19  fw1-on-house httpproxy[5058]: id="0003" severity="info" sys="SecureWeb"  sub="http" request="0xeba540a8" function="send_request_headers"  file="request.c" line="171" message="write: No route to host" [/FONT]
    [FONT=monospace]2010:05:31-21:12:19  fw1-on-house httpproxy[5058]: id="0002" severity="info" sys="SecureWeb"  sub="http" name="web request blocked" action="block" method="GET"  srcip="192.168.10.252" dstip="2001:6b0:e:2018::1337" user=""  statuscode="502" cached="0" profile="REF_GrlnmHmMll (24hr)"  filteraction="REF_ufaPwcyijx (24hr)" size="4653" time="2 ms"  request="0xeba540a8" url="releases.mozilla.org/.../FONT]
    [FONT=monospace]2010:05:31-21:12:19  fw1-on-house httpproxy[5058]: id="0003" severity="info" sys="SecureWeb"  sub="http" request="0x9b46200" function="send_request_headers"  file="request.c" line="171" message="write: No route to host" [/FONT]
    [FONT=monospace]2010:05:31-21:12:19  fw1-on-house httpproxy[5058]: id="0002" severity="info" sys="SecureWeb"  sub="http" name="web request blocked" action="block" method="GET"  srcip="192.168.10.252" dstip="2001:6b0:e:2018::1337" user=""  statuscode="502" cached="0" profile="REF_GrlnmHmMll (24hr)"  filteraction="REF_ufaPwcyijx (24hr)" size="4653" time="1 ms"  request="0x9b46200" url="releases.mozilla.org/.../FONT]
    [FONT=monospace]2010:05:31-21:12:22  fw1-on-house httpproxy[5058]: id="0003" severity="info" sys="SecureWeb"  sub="http" request="0xefe4d500" function="send_request_headers"  file="request.c" line="171" message="write: No route to host" [/FONT]
    [FONT=monospace]2010:05:31-21:12:22  fw1-on-house httpproxy[5058]: id="0002" severity="info" sys="SecureWeb"  sub="http" name="web request blocked" action="block" method="GET"  srcip="192.168.10.252" dstip="2001:6b0:e:2018::1337" user=""  statuscode="502" cached="0" profile="REF_GrlnmHmMll (24hr)"  filteraction="REF_ufaPwcyijx (24hr)" size="4653" time="1 ms"  request="0xefe4d500" url="releases.mozilla.org/.../FONT]
  • Can you please try to ping releases.mozilla.org ?

    by the way, do you have IPv6 enabled?
  • Hi kbr,
    yes, I have IPv6 enabled. Have yet to complete sixxs config.

    Ian M

    Pinging releases.geo.mozilla.com [129.101.198.59] with
    Reply from 129.101.198.59: bytes=32 time=219ms TTL=46
    Reply from 129.101.198.59: bytes=32 time=219ms TTL=46
    Reply from 129.101.198.59: bytes=32 time=219ms TTL=46
    Reply from 129.101.198.59: bytes=32 time=219ms TTL=46

    Ping statistics for 129.101.198.59:
        Packets: Sent = 4, Received = 4, Lost = 0 (0% loss
    Approximate round trip times in milli-seconds:
        Minimum = 219ms, Maximum = 219ms, Average = 219ms
  • Eh, not from the Windows behind the ASG, please ping from the ASG console itself. Sorry, i should have been more precise with that.
  • According to the http log file the http proxy tried to connect via ipv6,
    please attach the output of the following commands:

    "ip -6 route show table main"
    "ip -6 route show table default"
    "ping6 releases.geo.mozilla.com"
  • Hi folks,
    quick reply while at work.

    I have checked from webadmin tools,
    IPv4 fails
    IPv6 works, but not 100%, times are approaching 0.5sec and greater

    Ian M