[8.910][CLOSED] proxy, no route to host

twit.tv any of the pre-recorded shows stop after about 30 seconds under IE(yes decided to test it..
  • i don't understand exactly what "No host to route" has to do with DNS?
  • usually when i report problems the first reply i get is check dns..[[:)]]  Wanted to head that off at the pass..[[:)]]

    Owner:  Emmanuel Technology Consulting

    http://etc-md.com

    Former Sophos SG(Astaro) advocate/researcher/Silver Partner

    PfSense w/Suricata, ntopng, 

    Other addons to follow

  • Well, have you checked your DNS? (just kidding ;-))

    What i'd like to know is whether your cable modem is configured as a NAT device, a router or a plain modem. Do i see it in the traceroute above?

    Cheers,
    Kai
  • cmodem is modem not router
    1 3 ms 3 ms 3 ms firewall.ecc.local [192.168.255.1] astaro
    2 31 ms 31 ms 29 ms 98.233.178.1 comcast cmts(not the modem)

    Owner:  Emmanuel Technology Consulting

    http://etc-md.com

    Former Sophos SG(Astaro) advocate/researcher/Silver Partner

    PfSense w/Suricata, ntopng, 

    Other addons to follow

  • Well, have you checked your DNS? (just kidding ;-))

    What i'd like to know is whether your cable modem is configured as a NAT device, a router or a plain modem. Do i see it in the traceroute above?

    Cheers,
    Kai


    rofl..[:)]

    dns for astaro is 75.75.75.75 and 75.75.76.76

    Owner:  Emmanuel Technology Consulting

    http://etc-md.com

    Former Sophos SG(Astaro) advocate/researcher/Silver Partner

    PfSense w/Suricata, ntopng, 

    Other addons to follow

  • "
    2012:03:21-12:20:12 firewall httpproxy[16661]: id="0003" severity="info" sys="SecureWeb" sub="http" request="0x985cba0" function="send_request_headers" file="request.c" line="179" message="write: No route to host"
    2012:03:21-12:20:12 firewall httpproxy[16661]: id="0002" severity="info" sys="SecureWeb" sub="http" name="web request blocked" action="block" method="GET" srcip="192.168.255.50" dstip="2a02:788:12:38::5" user="" statuscode="502" cached="0" profile="REF_DefaultHTTPProfile (Default Proxy)" filteraction="REF_DefaultHTTPCFFAction (Default content filter action)" size="2520" request="0x985cba0" url="www.astaro.com/.../Hardware"

    Owner:  Emmanuel Technology Consulting

    http://etc-md.com

    Former Sophos SG(Astaro) advocate/researcher/Silver Partner

    PfSense w/Suricata, ntopng, 

    Other addons to follow

  • ok the list of sites with issues i expanding:
    An error occurred while handling your request

    While tyring to retrieve the URL:pfSense Open Source Firewall Distribution - Home
    The content is blocked due to the following condition: The URL you have requested is blocked by Surf Protection. If you think this is wrong, please contact your administrator.
    Report: No route to host
    Your cache administrator is:


    full log entries:
    /var/log/http.log:2012:03:21-21:12:49 firewall httpproxy[26964]: id="0001" severity="info" sys="SecureWeb" sub="http" name="http access" action="pass" method="GET" srcip="192.168.255.50" dstip="173.194.73.105" user="" statuscode="200" cached="0" profile="REF_DefaultHTTPProfile (Default Proxy)" filteraction="REF_DefaultHTTPCFFAction (Default content filter action)" size="282" request="0x8bde1b8" url="www.google.com/url
    /var/log/http.log:2012:03:21-21:12:56 firewall httpproxy[26964]: id="0002" severity="info" sys="SecureWeb" sub="http" name="web request blocked" action="block" method="GET" srcip="192.168.255.50" dstip="2605:8000[:D]:1::151" user="" statuscode="502" cached="0" profile="REF_DefaultHTTPProfile (Default Proxy)" filteraction="REF_DefaultHTTPCFFAction (Default content filter action)" size="2542" request="0xb7f799e8" url="forum.pfsense.org/index.php
    /var/log/http.log:2012:03:21-21:13:02 firewall httpproxy[26964]: id="0002" severity="info" sys="SecureWeb" sub="http" name="web request blocked" action="block" method="GET" srcip="192.168.255.50" dstip="2605:8000[:D]:1::151" user="" statuscode="502" cached="0" profile="REF_DefaultHTTPProfile (Default Proxy)" filteraction="REF_DefaultHTTPCFFAction (Default content filter action)" size="2518" request="0xb7f799e8" url="forum.pfsense.org/.../Hardware"
    /var/log/http.log:2012:03:21-21:13:26 firewall httpproxy[26964]: id="0002" severity="info" sys="SecureWeb" sub="http" name="web request blocked" action="block" method="GET" srcip="192.168.255.50" dstip="2605:8000[:D]:1::167" user="" statuscode="502" cached="0" profile="REF_DefaultHTTPProfile (Default Proxy)" filteraction="REF_DefaultHTTPCFFAction (Default content filter action)" size="2484" request="0x8b24b98" url="pfsense.org/.../Hardware"
    /var/log/http.log:2012:03:21-21:13:32 firewall httpproxy[26964]: id="0002" severity="info" sys="SecureWeb" sub="http" name="web request blocked" action="block" method="GET" srcip="192.168.255.50" dstip="2605:8000[:D]:1::167" user="" statuscode="502" cached="0" profile="REF_DefaultHTTPProfile (Default Proxy)" filteraction="REF_DefaultHTTPCFFAction (Default content filter action)" size="2506" request="0x8b24b98" url="pfsense.org/.../Hardware"

    figured out the issue:
    6to4 over External (WAN): 2002:62e9:b209::1/48
    that's the ipv6 address of my external wan interface via 6to4.  I wonder why it's doing this? I've turned off ipv6 for now but my isp(comcast) does provide ipv6 connectivity9i can plug in my computer directly to the cable modem and get an ipv6 ip).

    Owner:  Emmanuel Technology Consulting

    http://etc-md.com

    Former Sophos SG(Astaro) advocate/researcher/Silver Partner

    PfSense w/Suricata, ntopng, 

    Other addons to follow

  • turning off ipv6 didn't help..neither did restarting hte proxy.  it seems the route is "Stuck" inside the astaro.

    Owner:  Emmanuel Technology Consulting

    http://etc-md.com

    Former Sophos SG(Astaro) advocate/researcher/Silver Partner

    PfSense w/Suricata, ntopng, 

    Other addons to follow

  • going to try a restart of my astaro vm.

    *update* nopers that didn't do it.  so on various sites9the list is growing) the proxy is trying to route an ipv4 return to an ipv6 host with no route.

    Owner:  Emmanuel Technology Consulting

    http://etc-md.com

    Former Sophos SG(Astaro) advocate/researcher/Silver Partner

    PfSense w/Suricata, ntopng, 

    Other addons to follow

  • 2012:03:21-21:52:49 firewall httpproxy[4435]: id="0003" severity="info" sys="SecureWeb" sub="http" request="0x1081d1a8" function="send_request_headers" file="request.c" line="179" message="write: No route to host"
    2012:03:21-21:52:49 firewall httpproxy[4435]: id="0002" severity="info" sys="SecureWeb" sub="http" name="web request blocked" action="block" method="GET" srcip="192.168.255.50" dstip="2605:8000[:D]:1::167" user="" statuscode="502" cached="0" profile="REF_DefaultHTTPProfile (Default Proxy)" filteraction="REF_DefaultHTTPCFFAction (Default content filter action)" size="2514" request="0x1081d1a8" url="www.pfsense.org/.../Hardware"
    2012:03:21-21:52:52 firewall httpproxy[4435]: id="0003" severity="info" sys="SecureWeb" sub="http" request="0x11aa9480" function="send_request_headers" file="request.c" line="179" message="write: No route to host"
    2012:03:21-21:52:52 firewall httpproxy[4435]: id="0002" severity="info" sys="SecureWeb" sub="http" name="web request blocked" action="block" method="GET" srcip="192.168.255.50" dstip="2605:8000[:D]:1::167" user="" statuscode="502" cached="0" profile="REF_DefaultHTTPProfile (Default Proxy)" filteraction="REF_DefaultHTTPCFFAction (Default content filter action)" size="2624" request="0x11aa9480" url="www.pfsense.org/index.php
    2012:03:21-21:52:57 firewall httpproxy[4435]: id="0003" severity="info" sys="SecureWeb" sub="http" request="0x9de7b48" function="send_request_headers" file="request.c" line="179" message="write: No route to host"
    2012:03:21-21:52:57 firewall httpproxy[4435]: id="0003" severity="info" sys="SecureWeb" sub="http" request="0x1081d1a8" function="send_request_headers" file="request.c" line="179" message="write: No route to host"
    2012:03:21-21:52:57 firewall httpproxy[4435]: id="0002" severity="info" sys="SecureWeb" sub="http" name="web request blocked" action="block" method="GET" srcip="192.168.255.50" dstip="2a02:788:12:38::5" user="" statuscode="502" cached="0" profile="REF_DefaultHTTPProfile (Default Proxy)" filteraction="REF_DefaultHTTPCFFAction (Default content filter action)" size="2490" request="0x9de7b48" url="www.astaro.com/.../Hardware"
    2012:03:21-21:52:57 firewall httpproxy[4435]: id="0002" severity="info" sys="SecureWeb" sub="http" name="web request blocked" action="block" method="GET" srcip="192.168.255.50" dstip="2605:8000[:D]:1::167" user="" statuscode="502" cached="0" profile="REF_DefaultHTTPProfile (Default Proxy)" filteraction="REF_DefaultHTTPCFFAction (Default content filter action)" size="2514" request="0x1081d1a8" url="www.pfsense.org/.../Hardware"
    2012:03:21-21:53:03 firewall httpproxy[4435]: id="0003" severity="info" sys="SecureWeb" sub="http" request="0x9de7b48" function="send_request_headers" file="request.c" line="179" message="write: No route to host"
    2012:03:21-21:53:03 firewall httpproxy[4435]: id="0002" severity="info" sys="SecureWeb" sub="http" name="web request blocked" action="block" method="GET" srcip="192.168.255.50" dstip="2a02:788:12:38::5" user="" statuscode="502" cached="0" profile="REF_DefaultHTTPProfile (Default Proxy)" filteraction="REF_DefaultHTTPCFFAction (Default content filter action)" size="2512" request="0x9de7b48" url="www.astaro.com/.../Hardware"

    Now utm9 because of it's oddity with astaro.com makes the astaro.org forums useless because the embedded astaro.com maenus now overlay the astaro.org page.  there's something not right with the http proxy:
    2012:03:21-21:52:49 firewall httpproxy[4435]: id="0003" severity="info" sys="SecureWeb" sub="http" request="0x1081d1a8" function="send_request_headers" file="request.c" line="179" message="write: No route to host"
    2012:03:21-21:52:49 firewall httpproxy[4435]: id="0002" severity="info" sys="SecureWeb" sub="http" name="web request blocked" action="block" method="GET" srcip="192.168.255.50" dstip="2605:8000[:D]:1::167" user="" statuscode="502" cached="0" profile="REF_DefaultHTTPProfile (Default Proxy)" filteraction="REF_DefaultHTTPCFFAction (Default content filter action)" size="2514" request="0x1081d1a8" url="www.pfsense.org/.../Hardware"
    2012:03:21-21:52:52 firewall httpproxy[4435]: id="0003" severity="info" sys="SecureWeb" sub="http" request="0x11aa9480" function="send_request_headers" file="request.c" line="179" message="write: No route to host"
    2012:03:21-21:52:52 firewall httpproxy[4435]: id="0002" severity="info" sys="SecureWeb" sub="http" name="web request blocked" action="block" method="GET" srcip="192.168.255.50" dstip="2605:8000[:D]:1::167" user="" statuscode="502" cached="0" profile="REF_DefaultHTTPProfile (Default Proxy)" filteraction="REF_DefaultHTTPCFFAction (Default content filter action)" size="2624" request="0x11aa9480" url="www.pfsense.org/index.php
    2012:03:21-21:52:57 firewall httpproxy[4435]: id="0003" severity="info" sys="SecureWeb" sub="http" request="0x9de7b48" function="send_request_headers" file="request.c" line="179" message="write: No route to host"
    2012:03:21-21:52:57 firewall httpproxy[4435]: id="0003" severity="info" sys="SecureWeb" sub="http" request="0x1081d1a8" function="send_request_headers" file="request.c" line="179" message="write: No route to host"
    2012:03:21-21:52:57 firewall httpproxy[4435]: id="0002" severity="info" sys="SecureWeb" sub="http" name="web request blocked" action="block" method="GET" srcip="192.168.255.50" dstip="2a02:788:12:38::5" user="" statuscode="502" cached="0" profile="REF_DefaultHTTPProfile (Default Proxy)" filteraction="REF_DefaultHTTPCFFAction (Default content filter action)" size="2490" request="0x9de7b48" url="www.astaro.com/.../Hardware"
    2012:03:21-21:52:57 firewall httpproxy[4435]: id="0002" severity="info" sys="SecureWeb" sub="http" name="web request blocked" action="block" method="GET" srcip="192.168.255.50" dstip="2605:8000[:D]:1::167" user="" statuscode="502" cached="0" profile="REF_DefaultHTTPProfile (Default Proxy)" filteraction="REF_DefaultHTTPCFFAction (Default content filter action)" size="2514" request="0x1081d1a8" url="www.pfsense.org/.../Hardware"
    2012:03:21-21:53:03 firewall httpproxy[4435]: id="0003" severity="info" sys="SecureWeb" sub="http" request="0x9de7b48" function="send_request_headers" file="request.c" line="179" message="write: No route to host"
    2012:03:21-21:53:03 firewall httpproxy[4435]: id="0002" severity="info" sys="SecureWeb" sub="http" name="web request blocked" action="block" method="GET" srcip="192.168.255.50" dstip="2a02:788:12:38::5" user="" statuscode="502" cached="0" profile="REF_DefaultHTTPProfile (Default Proxy)" filteraction="REF_DefaultHTTPCFFAction (Default content filter action)" size="2512" request="0x9de7b48" url="www.astaro.com/.../Hardware"

    Owner:  Emmanuel Technology Consulting

    http://etc-md.com

    Former Sophos SG(Astaro) advocate/researcher/Silver Partner

    PfSense w/Suricata, ntopng, 

    Other addons to follow