Thread Info
  • State Not Answered
  • Locked Locked
  • Replies 10 replies
  • Subscribers 2 subscribers
  • Views 3222 views
  • Users 0 members are here
Options
Suggested
This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

What am I doing wrong?

electrometro
So my roommate would like to play his games on my network. I have tried unblocking all the ports required for the game (the ones listed on their website) and it is still not working. I have looked at all of the logs and cannot seem to find any thing being blocked but the connection still will not go through. 

Firewall log during connection attempt: 

15:24:07	Packet filter rule #5	TCP	 	10.1.1.3	:	55768 →	12.130.244.193	:	1119 [SYN]	len=52	ttl=127	tos=0x00	srcmac=c8:60:0:12:81:e1	dstmac=0:50:56:87:64:eb

15:24:22	Packet filter rule #5	TCP	 	10.1.1.3	:	55839 → 12.129.242.24	:	3724 [SYN]	len=52	ttl=127	tos=0x00	srcmac=c8:60:0:12:81:e1	dstmac=0:50:56:87:64:eb

15:24:43	Packet filter rule #5	TCP	 	10.1.1.3	:	55942 → 12.129.242.24	:	3724 [SYN]	len=52	ttl=127	tos=0x00	srcmac=c8:60:0:12:81:e1	dstmac=0:50:56:87:64:eb

15:25:05	Packet filter rule #5	TCP	 	10.1.1.3	:	56041 →	12.129.242.24	:	3724 [SYN]	len=52	ttl=127	tos=0x00	srcmac=c8:60:0:12:81:e1	dstmac=0:50:56:87:64:eb

15:25:26	Packet filter rule #5	TCP	 	10.1.1.3	:	56147 → 12.129.242.24	:	3724 [SYN]	len=52	ttl=127	tos=0x00	srcmac=c8:60:0:12:81:e1	dstmac=0:50:56:87:64:eb

15:25:43	Packet filter rule #5	TCP     10.1.1.3	:	56230 →	12.130.244.193	:	1119 [SYN]	len=52	ttl=127	tos=0x00	srcmac=c8:60:0:12:81:e1	dstmac=0:50:56:87:64:eb

15:25:47	Packet filter rule #5	TCP     10.1.1.3	:	56248 →	12.129.242.24	:	3724 [SYN]	len=52	ttl=127	tos=0x00	srcmac=c8:60:0:12:81:e1	dstmac=0:50:56:87:64:eb

15:26:08	Packet filter rule #5	TCP	    10.1.1.3	:	56347 →	12.129.242.24	:	3724 [SYN]	len=52	ttl=127	tos=0x00	srcmac=c8:60:0:12:81:e1	dstmac=0:50:56:87:64:eb

15:26:30	Packet filter rule #5	TCP     10.1.1.3	:	56444 →	12.129.242.24	:	3724 [SYN]	len=52	ttl=127	tos=0x00	srcmac=c8:60:0:12:81:e1	dstmac=0:50:56:87:64:eb

15:26:36	Packet filter rule #5	TCP	 	10.1.1.3	:	56478 →	12.130.244.193	:	1119 [SYN]	len=52	ttl=127	tos=0x00	srcmac=c8:60:0:12:81:e1	dstmac=0:50:56:87:64:eb

15:26:51	Packet filter rule #5	TCP	 	10.1.1.3	:	56558 →	12.129.242.24	:	3724 [SYN]	len=52	ttl=127	tos=0x00	srcmac=c8:60:0:12:81:e1	dstmac=0:50:56:87:64:eb


Everything in the log is green during the connection attempt.
Everything in the Web Filtering log says "pass" during the connection attempt. 
There is nothing in the application control log during the connection attempt. 

Let me know what information you will need to look at to help me with this. Any help is appreciated. 

Thanks,

Jared.


This thread was automatically locked due to age.
Parents
  • 0 in reply to Amodin
    https://www.astaro.org/gateway-products/web-protection-web-filtering-application-visibility-control/37541-master-list-web-exceptions.html

    This link may or may not help you.
     

    Thanks.  I will try those out tonight when I get home.

    I still don't understand why when I turn off https scanning no Web traffic works.

    Edit:

    So I have tried applying regex rules that apply to battle.net. 

    Here is the rule I applied:

    ^https?://([A-Za-z0-9.-]*\.)?blizzard\.com/
    ^https?://([A-Za-z0-9.-]*\.)?battle\.net/


    And here is the webfilter log afterwards when trying to connect:

    2014:10:07-18:23:56 sophos httpproxy[5368]: id="0001" severity="info" sys="SecureWeb" sub="http" name="http access" action="pass" method="GET" srcip="10.1.1.245" dstip="12.129.242.21" user="" ad_domain="" statuscode="200" cached="4" profile="REF_HttProContaInterNetwo (Jareds Web Filter Profile)" filteraction="REF_DefaultHTTPCFFAction (Default content filter action)" size="1" request="0xa91b6f0" url="http://us.launcher.battle.net/service/app/alert/en-us" exceptions="av,content,url,ssl,certcheck,certdate,mime,fileextension" error="" authtime="0" dnstime="103766" cattime="0" avscantime="0" fullreqtime="175520" device="0" auth="0"

    2014:10:07-18:23:56 sophos httpproxy[5368]: id="0001" severity="info" sys="SecureWeb" sub="http" name="http access" action="pass" method="GET" srcip="10.1.1.245" dstip="12.129.242.21" user="" ad_domain="" statuscode="200" cached="4" profile="REF_HttProContaInterNetwo (Jareds Web Filter Profile)" filteraction="REF_DefaultHTTPCFFAction (Default content filter action)" size="1" request="0xa91b918" url="http://us.launcher.battle.net/service/wow/alert/en-us" exceptions="av,content,url,ssl,certcheck,certdate,mime,fileextension" error="" authtime="0" dnstime="103752" cattime="0" avscantime="0" fullreqtime="175839" device="0" auth="0"

    2014:10:07-18:23:56 sophos httpproxy[5368]: id="0001" severity="info" sys="SecureWeb" sub="http" name="http access" action="pass" method="GET" srcip="10.1.1.245" dstip="12.129.242.21" user="" ad_domain="" statuscode="200" cached="4" profile="REF_HttProContaInterNetwo (Jareds Web Filter Profile)" filteraction="REF_DefaultHTTPCFFAction (Default content filter action)" size="1" request="0xa956788" url="http://us.launcher.battle.net/service/app/maintenance/en-us" exceptions="av,content,url,ssl,certcheck,certdate,mime,fileextension" error="" authtime="0" dnstime="103746" cattime="0" avscantime="0" fullreqtime="176423" device="0" auth="0"

Reply
  • 0 in reply to Amodin
    https://www.astaro.org/gateway-products/web-protection-web-filtering-application-visibility-control/37541-master-list-web-exceptions.html

    This link may or may not help you.
     

    Thanks.  I will try those out tonight when I get home.

    I still don't understand why when I turn off https scanning no Web traffic works.

    Edit:

    So I have tried applying regex rules that apply to battle.net. 

    Here is the rule I applied:

    ^https?://([A-Za-z0-9.-]*\.)?blizzard\.com/
    ^https?://([A-Za-z0-9.-]*\.)?battle\.net/


    And here is the webfilter log afterwards when trying to connect:

    2014:10:07-18:23:56 sophos httpproxy[5368]: id="0001" severity="info" sys="SecureWeb" sub="http" name="http access" action="pass" method="GET" srcip="10.1.1.245" dstip="12.129.242.21" user="" ad_domain="" statuscode="200" cached="4" profile="REF_HttProContaInterNetwo (Jareds Web Filter Profile)" filteraction="REF_DefaultHTTPCFFAction (Default content filter action)" size="1" request="0xa91b6f0" url="http://us.launcher.battle.net/service/app/alert/en-us" exceptions="av,content,url,ssl,certcheck,certdate,mime,fileextension" error="" authtime="0" dnstime="103766" cattime="0" avscantime="0" fullreqtime="175520" device="0" auth="0"

    2014:10:07-18:23:56 sophos httpproxy[5368]: id="0001" severity="info" sys="SecureWeb" sub="http" name="http access" action="pass" method="GET" srcip="10.1.1.245" dstip="12.129.242.21" user="" ad_domain="" statuscode="200" cached="4" profile="REF_HttProContaInterNetwo (Jareds Web Filter Profile)" filteraction="REF_DefaultHTTPCFFAction (Default content filter action)" size="1" request="0xa91b918" url="http://us.launcher.battle.net/service/wow/alert/en-us" exceptions="av,content,url,ssl,certcheck,certdate,mime,fileextension" error="" authtime="0" dnstime="103752" cattime="0" avscantime="0" fullreqtime="175839" device="0" auth="0"

    2014:10:07-18:23:56 sophos httpproxy[5368]: id="0001" severity="info" sys="SecureWeb" sub="http" name="http access" action="pass" method="GET" srcip="10.1.1.245" dstip="12.129.242.21" user="" ad_domain="" statuscode="200" cached="4" profile="REF_HttProContaInterNetwo (Jareds Web Filter Profile)" filteraction="REF_DefaultHTTPCFFAction (Default content filter action)" size="1" request="0xa956788" url="http://us.launcher.battle.net/service/app/maintenance/en-us" exceptions="av,content,url,ssl,certcheck,certdate,mime,fileextension" error="" authtime="0" dnstime="103746" cattime="0" avscantime="0" fullreqtime="176423" device="0" auth="0"

Children
No Data