Guest User!

You are not Sophos Staff.

Thread Info
  • State Not Answered
  • Replies 4 replies
  • Subscribers 0 subscribers
  • Views 715 views
  • Users 0 members are here
Options
Suggested

[8.965][FEATURE] Add the country name in the firewall log

traxxus_01
Hi

I have enabled country block on my Sophos Firewall.
If i go to a website which is in an blocked country, i get hits in the firewall log; "country blocked". Good, but i miss which country it is. This would be very helpful.

Proxy is disabled.
Parents
  • 0
    Hi traxxus,

    my log displays the country of origin: 
    2012:06:11-16:11:00 skywalker httpproxy[4842]: id="0067" severity="info" sys="SecureWeb" sub="http" name="web request blocked, connection to forbidden country" action="block" method

    ="GET" srcip="***.***.***.***" dstip="" user="" statuscode="403" cached="0" profile="REF_DefaultHTTPProfile (Default Proxy)" filteraction="REF_DefaultHTTPCFFAction (Default content fil

    ter action)" size="2957" request="0xf9738f8" url="www.heise.de/" exceptions="" error="" country="Germany"


    can you please provide the /var/log/http.log?

    Cheers,
    Cristof
Reply
  • 0
    Hi traxxus,

    my log displays the country of origin: 
    2012:06:11-16:11:00 skywalker httpproxy[4842]: id="0067" severity="info" sys="SecureWeb" sub="http" name="web request blocked, connection to forbidden country" action="block" method

    ="GET" srcip="***.***.***.***" dstip="" user="" statuscode="403" cached="0" profile="REF_DefaultHTTPProfile (Default Proxy)" filteraction="REF_DefaultHTTPCFFAction (Default content fil

    ter action)" size="2957" request="0xf9738f8" url="www.heise.de/" exceptions="" error="" country="Germany"


    can you please provide the /var/log/http.log?

    Cheers,
    Cristof
Children
Share Feedback
×

Submitted a Tech Support Case lately from the Support Portal?