Thread Info
  • State Not Answered
  • Locked Locked
  • Replies 9 replies
  • Subscribers 3 subscribers
  • Views 2575 views
  • Users 0 members are here
Options
Suggested
This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Help with Android Phone

Zombie8u
I just set up ASG then connected a wireless router all PC's work fine but my Android phones no longer get the colored WIFI icon all I get is a grey icon. My phone is still able to get internet connection and everything seems to work but my understanding is it only shows blue when connected to google servers. I can bypass ASG and it will go blue but not with ASG. If anybody knows any information about this it would be greatly appreciated.


Thanks in Advanced
David

ASG 8.301 
android 4.0.3


This thread was automatically locked due to age.
  • 0
    Hi, David, and welcome to the User BB!

    It depends on what you have configured in the UTM.  Start the Live Logs for Firewall, Intrusion Prevention and Web Filtering, and then activate WiFi on your phone.  If you need help with one of the log lines, please post it here.  If posting a Firewall line, always copy the line from the full log file as that live log contains only limited debugging info.

    Cheers - Bob
  • 0 in reply to BAlfson
    Thanks for the response BAlfson.
    All I can find is this

    Firewall:
    2012:03:11-18:30:37 asghome httpproxy[9598]: id="0001" severity="info" sys="SecureWeb" sub="http" name="http access" action="pass" method="GET" srcip="192.168.2.2" dstip="74.125.227.41" user="" statuscode="204" cached="0" profile="REF_DefaultHTTPProfile (Default Proxy)" filteraction="REF_DefaultHTTPCFFAction (Default content filter action)" size="0" request="0xc735d9d8" url="clients3.google.com/generate_204" exceptions="" error="" category="178" reputation="neutral" categoryname="Internet Services"


    Web Filtering:
    2012:03:11-18:30:39 asghome ulogd[5358]: id="2001" severity="info" sys="SecureNet" sub="packetfilter" name="Packet dropped" action="drop" fwrule="60002" initf="eth3" outitf="eth2" srcmac="b4:7:f7:47:e1:ca" dstmac="0:e0:92[:D]0:b1:4a" srcip="192.168.2.2" dstip="74.125.65.188" proto="6" length="60" tos="0x00" prec="0x00" ttl="63" srcport="60673" dstport="5228" tcpflags="SYN" 
    2012:03:11-18:30:41 asghome ulogd[5358]: id="2001" severity="info" sys="SecureNet" sub="packetfilter" name="Packet dropped" action="drop" fwrule="60002" initf="eth3" outitf="eth2" srcmac="b4:7:f7:47:e1:ca" dstmac="0:e0:92[:D]0:b1:4a" srcip="192.168.2.2" dstip="74.125.65.188" proto="6" length="60" tos="0x00" prec="0x00" ttl="63" srcport="60673" dstport="5228" tcpflags="SYN" 
    2012:03:11-18:30:48 asghome ulogd[5358]: id="2001" severity="info" sys="SecureNet" sub="packetfilter" name="Packet dropped" action="drop" fwrule="60002" initf="eth3" outitf="eth2" srcmac="b4:7:f7:47:e1:ca" dstmac="0:e0:92[:D]0:b1:4a" srcip="192.168.2.2" dstip="74.125.65.188" proto="6" length="60" tos="0x00" prec="0x00" ttl="63" srcport="60673" dstport="5228" tcpflags="SYN" 
    2012:03:11-18:31:00 asghome ulogd[5358]: id="2001" severity="info" sys="SecureNet" sub="packetfilter" name="Packet dropped" action="drop" fwrule="60002" initf="eth3" outitf="eth2" srcmac="b4:7:f7:47:e1:ca" dstmac="0:e0:92[:D]0:b1:4a" srcip="192.168.2.2" dstip="74.125.65.188" proto="6" length="60" tos="0x00" prec="0x00" ttl="63" srcport="60673" dstport="5228" tcpflags="SYN" 
    2012:03:11-18:31:24 asghome ulogd[5358]: id="2001" severity="info" sys="SecureNet" sub="packetfilter" name="Packet dropped" action="drop" fwrule="60002" initf="eth3" outitf="eth2" srcmac="b4:7:f7:47:e1:ca" dstmac="0:e0:92[:D]0:b1:4a" srcip="192.168.2.2" dstip="74.125.65.188" proto="6" length="60" tos="0x00" prec="0x00" ttl="63" srcport="60673" dstport="5228" tcpflags="SYN"
  • 0 in reply to Zombie8u
    Did you ever get this resolved?  I am currently experiencing the same problem with an android device.  Thanks.
  • 0
    So all of the other android devices in my house connect just fine.  But my Motorola Droid Bionic has issues connecting.  If I toggle the wifi on and off it will eventually connect.  I have searched and searched for a solution to this to no avail.  I can connect to any other wifi point just fine but here at home with my UTM 9 it just has issues.  Here is an exercept from my firewall log


    /var/log/packetfilter.log:2012:11:13-18:00:19 phoenix-1 ulogd[7736]: id="2002" severity="info" sys="SecureNet" sub="packetfilter" name="Packet accepted" action="accept" fwrule="14" initf="eth3" outitf="eth1" srcmac="c8:aa:21[:D]b:56:a1" dstmac="0:c:29:30:ab:e9" srcip="192.168.1.230" dstip="74.125.142.188" proto="6" length="60" tos="0x00" prec="0x00" ttl="63" srcport="47819" dstport="5228" tcpflags="SYN"
    /var/log/packetfilter.log:2012:11:13-18:00:22 phoenix-1 ulogd[7736]: id="2002" severity="info" sys="SecureNet" sub="packetfilter" name="Packet accepted" action="accept" fwrule="14" initf="eth3" outitf="eth1" srcmac="c8:aa:21[:D]b:56:a1" dstmac="0:c:29:30:ab:e9" srcip="192.168.1.230" dstip="74.125.142.188" proto="6" length="60" tos="0x00" prec="0x00" ttl="63" srcport="47819" dstport="5228" tcpflags="SYN"
    /var/log/packetfilter.log:2012:11:13-18:00:28 phoenix-1 ulogd[7736]: id="2002" severity="info" sys="SecureNet" sub="packetfilter" name="Packet accepted" action="accept" fwrule="14" initf="eth3" outitf="eth1" srcmac="c8:aa:21[:D]b:56:a1" dstmac="0:c:29:30:ab:e9" srcip="192.168.1.230" dstip="74.125.142.188" proto="6" length="60" tos="0x00" prec="0x00" ttl="63" srcport="47819" dstport="5228" tcpflags="SYN"
    /var/log/packetfilter.log:2012:11:13-18:00:48 phoenix-1 ulogd[7736]: id="2002" severity="info" sys="SecureNet" sub="packetfilter" name="Packet accepted" action="accept" fwrule="14" initf="eth3" outitf="eth1" srcmac="c8:aa:21[:D]b:56:a1" dstmac="0:c:29:30:ab:e9" srcip="192.168.1.230" dstip="74.125.142.188" proto="6" length="60" tos="0x00" prec="0x00" ttl="63" srcport="40979" dstport="5228" tcpflags="SYN"
    /var/log/packetfilter.log:2012:11:13-18:00:50 phoenix-1 ulogd[7736]: id="2002" severity="info" sys="SecureNet" sub="packetfilter" name="Packet accepted" action="accept" fwrule="14" initf="eth3" outitf="eth1" srcmac="c8:aa:21[:D]b:56:a1" dstmac="0:c:29:30:ab:e9" srcip="192.168.1.230" dstip="74.125.142.188" proto="6" length="60" tos="0x00" prec="0x00" ttl="63" srcport="40979" dstport="5228" tcpflags="SYN"
    /var/log/packetfilter.log:2012:11:13-18:01:00 phoenix-1 ulogd[7736]: id="2002" severity="info" sys="SecureNet" sub="packetfilter" name="Packet accepted" action="accept" fwrule="14" initf="eth3" outitf="eth1" srcmac="c8:aa:21[:D]b:56:a1" dstmac="0:c:29:30:ab:e9" srcip="192.168.1.230" dstip="74.125.142.188" proto="6" length="60" tos="0x00" prec="0x00" ttl="63" srcport="41221" dstport="5228" tcpflags="SYN"
    /var/log/packetfilter.log:2012:11:13-18:01:03 phoenix-1 ulogd[7736]: id="2002" severity="info" sys="SecureNet" sub="packetfilter" name="Packet accepted" action="accept" fwrule="14" initf="eth3" outitf="eth1" srcmac="c8:aa:21[:D]b:56:a1" dstmac="0:c:29:30:ab:e9" srcip="192.168.1.230" dstip="74.125.142.188" proto="6" length="60" tos="0x00" prec="0x00" ttl="63" srcport="41221" dstport="5228" tcpflags="SYN"
    /var/log/packetfilter.log:2012:11:13-18:01:09 phoenix-1 ulogd[7736]: id="2002" severity="info" sys="SecureNet" sub="packetfilter" name="Packet accepted" action="accept" fwrule="14" initf="eth3" outitf="eth1" srcmac="c8:aa:21[:D]b:56:a1" dstmac="0:c:29:30:ab:e9" srcip="192.168.1.230" dstip="74.125.142.188" proto="6" length="60" tos="0x00" prec="0x00" ttl="63" srcport="41221" dstport="5228" tcpflags="SYN"
    /var/log/packetfilter.log:2012:11:13-18:01:20 phoenix-1 ulogd[7736]: id="2002" severity="info" sys="SecureNet" sub="packetfilter" name="Packet accepted" action="accept" fwrule="14" initf="eth3" outitf="eth1" srcmac="c8:aa:21[:D]b:56:a1" dstmac="0:c:29:30:ab:e9" srcip="192.168.1.230" dstip="74.125.142.188" proto="6" length="60" tos="0x00" prec="0x00" ttl="63" srcport="41221" dstport="5228" tcpflags="SYN"
    /var/log/packetfilter.log:2012:11:13-18:01:33 phoenix-1 ulogd[7736]: id="2002" severity="info" sys="SecureNet" sub="packetfilter" name="Packet accepted" action="accept" fwrule="14" initf="eth3" outitf="eth1" srcmac="c8:aa:21[:D]b:56:a1" dstmac="0:c:29:30:ab:e9" srcip="192.168.1.230" dstip="74.125.142.188" proto="6" length="60" tos="0x00" prec="0x00" ttl="63" srcport="38633" dstport="5228" tcpflags="SYN"
    /var/log/packetfilter.log:2012:11:13-18:01:37 phoenix-1 ulogd[7736]: id="2002" severity="info" sys="SecureNet" sub="packetfilter" name="Packet accepted" action="accept" fwrule="14" initf="eth3" outitf="eth1" srcmac="c8:aa:21[:D]b:56:a1" dstmac="0:c:29:30:ab:e9" srcip="192.168.1.230" dstip="74.125.142.188" proto="6" length="60" tos="0x00" prec="0x00" ttl="63" srcport="38633" dstport="5228" tcpflags="SYN"
    /var/log/packetfilter.log:2012:11:13-18:01:42 phoenix-1 ulogd[7736]: id="2002" severity="info" sys="SecureNet" sub="packetfilter" name="Packet accepted" action="accept" fwrule="14" initf="eth3" outitf="eth1" srcmac="c8:aa:21[:D]b:56:a1" dstmac="0:c:29:30:ab:e9" srcip="192.168.1.230" dstip="74.125.142.188" proto="6" length="60" tos="0x00" prec="0x00" ttl="63" srcport="38633" dstport="5228" tcpflags="SYN"
    /var/log/packetfilter.log:2012:11:13-18:01:55 phoenix-1 ulogd[7736]: id="2002" severity="info" sys="SecureNet" sub="packetfilter" name="Packet accepted" action="accept" fwrule="14" initf="eth3" outitf="eth1" srcmac="c8:aa:21[:D]b:56:a1" dstmac="0:c:29:30:ab:e9" srcip="192.168.1.230" dstip="74.125.142.188" proto="6" length="60" tos="0x00" prec="0x00" ttl="63" srcport="38633" dstport="5228" tcpflags="SYN"
    /var/log/packetfilter.log:2012:11:13-18:02:19 phoenix-1 ulogd[7736]: id="2002" severity="info" sys="SecureNet" sub="packetfilter" name="Packet accepted" action="accept" fwrule="14" initf="eth3" outitf="eth1" srcmac="c8:aa:21[:D]b:56:a1" dstmac="0:c:29:30:ab:e9" srcip="192.168.1.230" dstip="74.125.142.188" proto="6" length="60" tos="0x00" prec="0x00" ttl="63" srcport="54763" dstport="5228" tcpflags="SYN"
    /var/log/packetfilter.log:2012:11:13-18:02:22 phoenix-1 ulogd[7736]: id="2002" severity="info" sys="SecureNet" sub="packetfilter" name="Packet accepted" action="accept" fwrule="14" initf="eth3" outitf="eth1" srcmac="c8:aa:21[:D]b:56:a1" dstmac="0:c:29:30:ab:e9" srcip="192.168.1.230" dstip="74.125.142.188" proto="6" length="60" tos="0x00" prec="0x00" ttl="63" srcport="54763" dstport="5228" tcpflags="SYN"
    /var/log/packetfilter.log:2012:11:13-18:02:26 phoenix-1 ulogd[7736]: id="2002" severity="info" sys="SecureNet" sub="packetfilter" name="Packet accepted" action="accept" fwrule="22" initf="eth3" outitf="eth1" srcmac="c8:aa:21[:D]b:56:a1" dstmac="0:c:29:30:ab:e9" srcip="192.168.1.230" dstip="192.168.122.1" proto="6" length="60" tos="0x00" prec="0x00" ttl="63" srcport="55938" dstport="49152" tcpflags="SYN"
    /var/log/packetfilter.log:2012:11:13-18:02:29 phoenix-1 ulogd[7736]: id="2002" severity="info" sys="SecureNet" sub="packetfilter" name="Packet accepted" action="accept" fwrule="14" initf="eth3" outitf="eth1" srcmac="c8:aa:21[:D]b:56:a1" dstmac="0:c:29:30:ab:e9" srcip="192.168.1.230" dstip="74.125.142.188" proto="6" length="60" tos="0x00" prec="0x00" ttl="63" srcport="54763" dstport="5228" tcpflags="SYN"
    /var/log/packetfilter.log:2012:11:13-18:02:29 phoenix-1 ulogd[7736]: id="2002" severity="info" sys="SecureNet" sub="packetfilter" name="Packet accepted" action="accept" fwrule="22" initf="eth3" outitf="eth1" srcmac="c8:aa:21[:D]b:56:a1" dstmac="0:c:29:30:ab:e9" srcip="192.168.1.230" dstip="192.168.122.1" proto="6" length="60" tos="0x00" prec="0x00" ttl="63" srcport="55938" dstport="49152" tcpflags="SYN"
    /var/log/packetfilter.log:2012:11:13-18:02:36 phoenix-1 ulogd[7736]: id="2002" severity="info" sys="SecureNet" sub="packetfilter" name="Packet accepted" action="accept" fwrule="22" initf="eth3" outitf="eth1" srcmac="c8:aa:21[:D]b:56:a1" dstmac="0:c:29:30:ab:e9" srcip="192.168.1.230" dstip="192.168.122.1" proto="6" length="60" tos="0x00" prec="0x00" ttl="63" srcport="55938" dstport="49152" tcpflags="SYN"
    /var/log/packetfilter.log:2012:11:13-18:02:41 phoenix-1 ulogd[7736]: id="2002" severity="info" sys="SecureNet" sub="packetfilter" name="Packet accepted" action="accept" fwrule="14" initf="eth3" outitf="eth1" srcmac="c8:aa:21[:D]b:56:a1" dstmac="0:c:29:30:ab:e9" srcip="192.168.1.230" dstip="74.125.142.188" proto="6" length="60" tos="0x00" prec="0x00" ttl="63" srcport="54763" dstport="5228" tcpflags="SYN"


    Thanks
  • 0
    easy enough 
    the ip 74.125.142.188 is Google, and android wants to connect to google services
    a rule in Firewall: Internal > Any> Service tpc/5228>  Any, will solve this

    From today I own a Motorola and the rule above given my that blue you mentioned
  • 0
    Thanks I'll give that a go and let you know what it does.
  • 0
    I actually already have a rule in place that does this.  I added both of the google service ports 5222 and 5228 to my rules a while back.  As you can see from the logs the packets are being accepted.  Also if I toggle my wifi on and off enough it will randomly connect with no rhyme or reason to it.  Thanks.
  • 0
    So I thought that I would wait and see if the Verizon ICS update to the phone would fix the issue but still no love for me.  I'm continuing to conduct research on this and try and figure out what the heck is wrong.  Digging through the logs so far has warranted no results as the firewall shows that everything should be just fine.
  • 0
    Ok so I think that I figured this out.  I installed an app on the phone called Ping & DNS.  The app also lets you do traceroute.  So when I got home last night I did a traceroute to google.com.  This is when it got interesting.  Instead of seeing the gateway IP as the first hop instead I saw the HA IP address.  This is the damndest thing I've ever seen as I can't figure out how in the world that my phone would know about that address as even existing.  So this is what I did.  

    At my house I have my Astaro running on an ESXi box.  The HA link uses the same physical NIC as my internal network in order to talk to the standby node which is running on another server inside of KVM.  (I have reasons for not having ESXi on this box, I needed the use of a PCI card for my MythTV [[[:)]]] ).  So anyways after moving the suspending the secondary node and then fiddling with what vlan the primary HA link was plugged into my phone finally got a good solid connection consistently.  So then I powered back up the secondary node and let it resync with the primary.  Once everything was up and running I did a few cycles of disconnect and reconnect to my wifi and got blue bars every time.  So I'm not sure what exactly happened here but its working now [[[:)]]].  I know that I really should have a dedicated link between the two boxes for the HA stuff but since my HP DL385 G2 only have 2 onboard NICs this is the best I can do for now.  Perhaps in the future I'll look into getting a 4 port NIC running inside of VMWare.  But for now this works [[[:)]]]