Guest User!

You are not Sophos Staff.

Thread Info
  • State Suggested Answer
  • +1 person also asked this people also asked this
  • Locked Locked
  • Replies 19 replies
  • Answers 2 answers
  • Subscribers 7 subscribers
  • Views 134675 views
  • Users 0 members are here
Options
Suggested
This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Strange skype and socks5 behavior

ErikFranzén

Have configured Skype to use Socks5 with "Automatic detect settings".On the client Win 10 machine I have a proxy agent which sets system proxy address depending on network.

When starting Skype, I get this in the UTM socks log

2016:07:07-15:39:34 fw sockd[29168]: info: pass(1): tcp/accept [: 192.168.1.10.65433 192.168.1.1.1080
2016:07:07-15:39:34 fw sockd[29168]: info: block(1): tcp/accept ]: 192.168.1.10.65433 192.168.1.1.1080: error after having read 24 bytes: access denied by AUA

What have I done wrong?



This thread was automatically locked due to age.
Parents
  • 0

    Hello Erik, hello BAlfson,

    today i got the similar error:

    SOCKS-Log:

    2016:09:12-13:12:35 astaro8 sockd[18420]: info: dante/server[1] v1.3.2 running
    2016:09:12-13:13:37 astaro8 sockd[18422]: info: pass(1): tcp/accept [: 192.168.55.77.64303 192.168.55.248.1080
    2016:09:12-13:13:37 astaro8 sockd[18422]: info: block(1): tcp/accept ]: 192.168.55.77.64303 192.168.55.248.1080: error after having read 25 bytes: access denied by AUA
    USERAUTH-Log:
    2016:09:12-13:13:37 astaro8 aua[18529]: id="3005" severity="warn" sys="System" sub="auth" name="Authentication failed" srcip="192.168.55.77" host="" user="cioware" caller="socks" reason="DENIED"
    2016:09:12-13:13:42 astaro8 aua[18536]: id="3005" severity="warn" sys="System" sub="auth" name="Authentication failed" srcip="192.168.55.77" host="" user="cioware" caller="socks" reason="DENIED"
    2016:09:12-13:13:42 astaro8 aua[18538]: id="3005" severity="warn" sys="System" sub="auth" name="Authentication failed" srcip="192.168.55.77" host="" user="cioware" caller="socks" reason="DENIED"
    In Skype the SOCKS5-Proxy is done with individual configuration.
    Is there any conclusion or solution ?
    Thanks
    Martin
  • 0 in reply to MartinRaspel

    Hi, Martin, and welcome to the UTM Community!

    How is the authentication being done?  Is this on a Windows server for a user in Active Directory or is this a Local user on the UTM?

    Cheers - Bob

     
    Sophos UTM Community Moderator
    Sophos Certified Architect - UTM
    Sophos Certified Engineer - XG
    Gold Solution Partner since 2005
    MediaSoft, Inc. USA
  • 0 in reply to BAlfson

    Hi Bob,

    thank you for responsding. That must be told first :-)

    the user i´m using for authentication is a local UTM User.

    Regards Martin

  • 0 in reply to MartinRaspel

    Please show a picture of the SOCKS configuration in WebAdmin.

    Cheers - Bob

     
    Sophos UTM Community Moderator
    Sophos Certified Architect - UTM
    Sophos Certified Engineer - XG
    Gold Solution Partner since 2005
    MediaSoft, Inc. USA
  • 0 in reply to BAlfson

    Hi Bob, here it is:

    and the User-Config:

    Cheers Martin

Reply Children
  • 0 in reply to MartinRaspel

    That all looks good, Martin.  WHat happens if you now configure Skype like this?

    Cheers - Bob

     
    Sophos UTM Community Moderator
    Sophos Certified Architect - UTM
    Sophos Certified Engineer - XG
    Gold Solution Partner since 2005
    MediaSoft, Inc. USA
  • 0 in reply to BAlfson

    I can join this discussion too, I am experiencing the same problem since several months ago.

    If I turn off passwords in the UTM socks proxy config, forcing it to SOCKS4, the socks proxy is working without the "error after having read 24 bytes: access denied by AUA" error. The socks proxy log is now showing successful connections.

    Using SOCKS 4 instead of socks 5 could be a solution? However, I am not certain of which functionality I loose besides not have to set username and password?

    Then I am running into the next problem :(

    Since I am also using https-proxy, Skype cannot log in my Skype user. The blue connect icon in Skype turns in eternity. If I turn off the https proxy and opens https for outgoing traffic Skype successfully logs in and all is working. But deactivation of the https-proxy is not the final solution for me so I am stranded here.

    This is my exception for skype for web filtering:

    There should possibly be more people with the same problems? How have you configured UTM and Skype using https proxy?

    UTM v9.407-3

    Skype v7.28.0.101

  • 0 in reply to ErikFranzén

    I've seen the same behaviour here.

    In my case the Problem was the "uncategorized Websites" Setting under filter actions which was "warning".

    I changed it to "allow" and Skype could sucessfully connect.

    So I switched it back to "warning" established a new Connection and filtered the webfilter log for "Uncategorized".

    Found some URLs and added them with some RegEx to my exeptions.

    Now everything works fine for me.

     

    UTM v9.407-3

    Skype 7.28.32.101

Unfiltered HTML