This discussion has been locked.

You can no longer post new replies to this discussion. If you have a question you can start a new discussion

What am I doing wrong?

So my roommate would like to play his games on my network. I have tried unblocking all the ports required for the game (the ones listed on their website) and it is still not working. I have looked at all of the logs and cannot seem to find any thing being blocked but the connection still will not go through.

Firewall log during connection attempt:


15:24:07	Packet filter rule #5	TCP	 	10.1.1.3	:	55768 →	12.130.244.193	:	1119 [SYN]	len=52	ttl=127	tos=0x00	srcmac=c8:60:0:12:81:e1	dstmac=0:50:56:87:64:eb

15:24:22	Packet filter rule #5	TCP	 	10.1.1.3	:	55839 → 12.129.242.24	:	3724 [SYN]	len=52	ttl=127	tos=0x00	srcmac=c8:60:0:12:81:e1	dstmac=0:50:56:87:64:eb

15:24:43	Packet filter rule #5	TCP	 	10.1.1.3	:	55942 → 12.129.242.24	:	3724 [SYN]	len=52	ttl=127	tos=0x00	srcmac=c8:60:0:12:81:e1	dstmac=0:50:56:87:64:eb

15:25:05	Packet filter rule #5	TCP	 	10.1.1.3	:	56041 →	12.129.242.24	:	3724 [SYN]	len=52	ttl=127	tos=0x00	srcmac=c8:60:0:12:81:e1	dstmac=0:50:56:87:64:eb

15:25:26	Packet filter rule #5	TCP	 	10.1.1.3	:	56147 → 12.129.242.24	:	3724 [SYN]	len=52	ttl=127	tos=0x00	srcmac=c8:60:0:12:81:e1	dstmac=0:50:56:87:64:eb

15:25:43	Packet filter rule #5	TCP     10.1.1.3	:	56230 →	12.130.244.193	:	1119 [SYN]	len=52	ttl=127	tos=0x00	srcmac=c8:60:0:12:81:e1	dstmac=0:50:56:87:64:eb

15:25:47	Packet filter rule #5	TCP     10.1.1.3	:	56248 →	12.129.242.24	:	3724 [SYN]	len=52	ttl=127	tos=0x00	srcmac=c8:60:0:12:81:e1	dstmac=0:50:56:87:64:eb

15:26:08	Packet filter rule #5	TCP	    10.1.1.3	:	56347 →	12.129.242.24	:	3724 [SYN]	len=52	ttl=127	tos=0x00	srcmac=c8:60:0:12:81:e1	dstmac=0:50:56:87:64:eb

15:26:30	Packet filter rule #5	TCP     10.1.1.3	:	56444 →	12.129.242.24	:	3724 [SYN]	len=52	ttl=127	tos=0x00	srcmac=c8:60:0:12:81:e1	dstmac=0:50:56:87:64:eb

15:26:36	Packet filter rule #5	TCP	 	10.1.1.3	:	56478 →	12.130.244.193	:	1119 [SYN]	len=52	ttl=127	tos=0x00	srcmac=c8:60:0:12:81:e1	dstmac=0:50:56:87:64:eb

15:26:51	Packet filter rule #5	TCP	 	10.1.1.3	:	56558 →	12.129.242.24	:	3724 [SYN]	len=52	ttl=127	tos=0x00	srcmac=c8:60:0:12:81:e1	dstmac=0:50:56:87:64:eb

Everything in the log is green during the connection attempt.
Everything in the Web Filtering log says "pass" during the connection attempt.
There is nothing in the application control log during the connection attempt.

Let me know what information you will need to look at to help me with this. Any help is appreciated.

Thanks,

Jared.

This thread was automatically locked due to age.

Parents

0 BAlfson over 10 years ago

Hi, Jared, and welcome to the User BB!

First, alone among the Live Logs, the Firewall Live Log presents abbreviated information in a format that's quicker to read. When posting lines from the Firewall log, always copy them out of the full Firewall log file. If there's nothing blocked, don't bother with that for this issue.

At first, I thought you might already have found #1 in the Rulz, but I saw no mention of the Intrusion Prevention System log - anything there?

Sometimes, a site won't like working with a proxy. Please post one or more "pass" lines related to this issue so that we can see whether there's any indication of that.

Cheers - Bob
Cancel
Vote Up 0 Vote Down

Cancel

Reply

0 BAlfson over 10 years ago

Hi, Jared, and welcome to the User BB!

First, alone among the Live Logs, the Firewall Live Log presents abbreviated information in a format that's quicker to read. When posting lines from the Firewall log, always copy them out of the full Firewall log file. If there's nothing blocked, don't bother with that for this issue.

At first, I thought you might already have found #1 in the Rulz, but I saw no mention of the Intrusion Prevention System log - anything there?

Sometimes, a site won't like working with a proxy. Please post one or more "pass" lines related to this issue so that we can see whether there's any indication of that.

Cheers - Bob
Cancel
Vote Up 0 Vote Down

Cancel

Children

0 electrometro over 10 years ago in reply to BAlfson

Hi, Jared, and welcome to the User BB!

First, alone among the Live Logs, the Firewall Live Log presents abbreviated information in a format that's quicker to read. When posting lines from the Firewall log, always copy them out of the full Firewall log file. If there's nothing blocked, don't bother with that for this issue.

At first, I thought you might already have found #1 in the Rulz, but I saw no mention of the Intrusion Prevention System log - anything there?

Sometimes, a site won't like working with a proxy. Please post one or more "pass" lines related to this issue so that we can see whether there's any indication of that.

Cheers - Bob

Hello Bob, thank you for the reply.

Sorry about not posting the full log, I didn't even think about it.

I did not get any logs during connection from the IPS.

Here is my web filter log:


2014:10:04-16:20:39 sophos httpproxy[25490]: id="0001" severity="info" sys="SecureWeb" sub="http" name="http access" action="pass" method="GET" srcip="10.1.1.3" dstip="12.129.242.21" user="" ad_domain="" statuscode="200" cached="4" profile="REF_DefaultHTTPProfile (Default Web Filter Profile)" filteraction="REF_DefaultHTTPCFFAction (Default content filter action)" size="1" request="0x11cc48a0" url="http://us.launcher.battle.net/service/app/alert/en-us" exceptions="content,url,application" error="" authtime="0" dnstime="117" cattime="0" avscantime="918" fullreqtime="75867" device="0" auth="0" content-type="text/plain" application="bnetapp" app-id="1289"

2014:10:04-16:20:39 sophos httpproxy[25490]: id="0001" severity="info" sys="SecureWeb" sub="http" name="http access" action="pass" method="GET" srcip="10.1.1.3" dstip="12.129.242.21" user="" ad_domain="" statuscode="200" cached="4" profile="REF_DefaultHTTPProfile (Default Web Filter Profile)" filteraction="REF_DefaultHTTPCFFAction (Default content filter action)" size="1" request="0x11cc4ac8" url="http://us.launcher.battle.net/service/app/maintenance/en-us" exceptions="content,url,application" error="" authtime="0" dnstime="66" cattime="0" avscantime="907" fullreqtime="76082" device="0" auth="0" content-type="text/plain" application="bnetapp" app-id="1289"

2014:10:04-16:21:32 sophos httpproxy[25490]: id="0001" severity="info" sys="SecureWeb" sub="http" name="http access" action="pass" method="CONNECT" srcip="10.1.1.3" dstip="12.129.242.40" user="" ad_domain="" statuscode="200" cached="0" profile="REF_DefaultHTTPProfile (Default Web Filter Profile)" filteraction="REF_DefaultHTTPCFFAction (Default content filter action)" size="7126" request="0x9848dd8" url="https://us.battle.net/" exceptions="application" error="" authtime="0" dnstime="239746" cattime="53511" avscantime="0" fullreqtime="10481158" device="0" auth="0" category="116" reputation="neutral" categoryname="Games"

2014:10:04-16:25:39 sophos httpproxy[25490]: id="0001" severity="info" sys="SecureWeb" sub="http" name="http access" action="pass" method="GET" srcip="10.1.1.3" dstip="12.129.242.21" user="" ad_domain="" statuscode="200" cached="4" profile="REF_DefaultHTTPProfile (Default Web Filter Profile)" filteraction="REF_DefaultHTTPCFFAction (Default content filter action)" size="1" request="0xa005910" url="http://us.launcher.battle.net/service/app/maintenance/en-us" exceptions="content,url,application" error="" authtime="0" dnstime="43" cattime="0" avscantime="1043" fullreqtime="73589" device="0" auth="0" content-type="text/plain" application="bnetapp" app-id="1289"

2014:10:04-16:25:39 sophos httpproxy[25490]: id="0001" severity="info" sys="SecureWeb" sub="http" name="http access" action="pass" method="GET" srcip="10.1.1.3" dstip="12.129.242.21" user="" ad_domain="" statuscode="200" cached="4" profile="REF_DefaultHTTPProfile (Default Web Filter Profile)" filteraction="REF_DefaultHTTPCFFAction (Default content filter action)" size="1" request="0xa005b38" url="http://us.launcher.battle.net/service/app/alert/en-us" exceptions="content,url,application" error="" authtime="0" dnstime="65" cattime="0" avscantime="606" fullreqtime="75999" device="0" auth="0" content-type="text/plain" application="bnetapp" app-id="1289"