This discussion has been locked.

You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Bad Request of port 80

Dear Friends,

I enable the content filter with "Block suspicious and unknown sites" only, the internet pages comes faster than before.

While telneting my linkstar satellite modem, I notice that there are bad requests with port 80, (http://216.35.187.249/) it passes through the ASL normally but they are either bad or not found or even fake sites (http://208.45.133.132).

How can I disable accessing to these sites ? Since it is making my bandwidth choking ?

Regards,

ASL 6.001, 2.2GHz Celeron D, 512MB, 80GB

This thread was automatically locked due to age.

Parents

0 AliIsmail over 20 years ago

Hello guys,

http://65.254.40.242, http://70.84.218.146, www.imgfarm.com.

These sites are nothing, it makes only traffic.

When I opened the site www.cools4u.com, it request several sites within. How can I block this issue ????

Kindly Help !!!!
Cancel
Vote Up 0 Vote Down

Cancel
0 RFCat_vk_01 over 20 years ago in reply to AliIsmail

AliIsmail,
use the HTTP proxy and put them in the blacklist and don't forget to take HTTP out of the filter rule.

Ian M [:)]
Cancel
Vote Up 0 Vote Down

Cancel
0 AliIsmail over 20 years ago in reply to RFCat_vk_01

I did what you mention, but no way. The same
I opened port 6000, no way.

I am using now a trial version for 30 days. Do you think that it is the problem ?

Regards
Cancel
Vote Up 0 Vote Down

Cancel
0 RFCat_vk_01 over 20 years ago in reply to AliIsmail

AliIsmail,
is this one of your users sites?
http://www.dubaieyes.net/gallery/index.php

It is breaking just about every copyright rule in the book. I can't translate it.

Ian M [:)]
Cancel
Vote Up 0 Vote Down

Cancel
0 AliIsmail over 20 years ago in reply to RFCat_vk_01

Well, no most of his sites are "paid to surf" " paid to read" "we pay you for surfing the internet"

Till now I cannot run the cobion surf protection well.

Regards
Cancel
Vote Up 0 Vote Down

Cancel
0 RFCat_vk_01 over 20 years ago in reply to AliIsmail

According to my licence you don't get Cobion unless you pay for a licence.

Ian M [:)]
Cancel
Vote Up 0 Vote Down

Cancel
0 AliIsmail over 20 years ago in reply to RFCat_vk_01

216.35.187.249   : 80
208.45.133.132   : 80
207.25.253.24     : 80
213.254.17.31     : 80

Dear Friends,

Can anyone tell me what are these sites ?

When I telnet my Satellite modem , I can see these sites requested 10 times, which makes traffic in my BandWidth

How can I block these sites ? and How can I know WHO IS REQUESTING IT ?

Regards
My clients are
Cancel
Vote Up 0 Vote Down

Cancel
0 Vukasin over 20 years ago in reply to AliIsmail

did you try adding these sites to the blacklist?
Cancel
Vote Up 0 Vote Down

Cancel
0 AliIsmail over 20 years ago in reply to Vukasin

They are more than 4, they are too many.

I will try to put them in my blacklist

BUT I NEED TO KNOW WHICH PC IS REQUESTING THEM ?
I GUESS ASTARO CANNOT FIND WHO ?

Regards
Cancel
Vote Up 0 Vote Down

Cancel
0 RFCat_vk_01 over 20 years ago in reply to AliIsmail

If you were using the HTTP proxy, you would get a report every day with who accessed what.

Ian M [:)]
Cancel
Vote Up 0 Vote Down

Cancel
0 AliIsmail over 20 years ago in reply to RFCat_vk_01

I need an online log of who access who.

I also when telnet my satelite modem, I can see that when I request yahoo site, it shows about 5 IPs of yahoo. Is this spoofing ?

Regards
Cancel
Vote Up 0 Vote Down

Cancel
0 RFCat_vk_01 over 20 years ago in reply to AliIsmail

No, you will get heaps, they have advertising, spyware, a number of other pages all linked into their main page. I found it a pain while trying to work out what servers to allow.
Also I hope they don't change any of their servers because all my white and black rules will need to be re-worked.

From what you have just said and reminded me of, is that list of sites you want to block, might be a number of linked sites from a home page. Block the homepage and the rest won't happen.

At least it is something to try rather than blanket blocking.

Ian M [:)]
Cancel
Vote Up 0 Vote Down

Cancel

Reply

0 RFCat_vk_01 over 20 years ago in reply to AliIsmail

No, you will get heaps, they have advertising, spyware, a number of other pages all linked into their main page. I found it a pain while trying to work out what servers to allow.
Also I hope they don't change any of their servers because all my white and black rules will need to be re-worked.

From what you have just said and reminded me of, is that list of sites you want to block, might be a number of linked sites from a home page. Block the homepage and the rest won't happen.

At least it is something to try rather than blanket blocking.

Ian M [:)]
Cancel
Vote Up 0 Vote Down

Cancel

Children

0 AliIsmail over 20 years ago in reply to RFCat_vk_01

Thanks for your reply. but can you help in finding the url of the above IP addresses.

Is there any tool or site, that I can put the IP and it show its URL ?

Regards,
Cancel
Vote Up 0 Vote Down

Cancel
0 doug_p over 20 years ago in reply to AliIsmail

It won't quite give an IP to URL lookup, but http://www.dnsstuff.com/ does have whois, reverse DNS and other lookups that may be helpfull.
Cancel
Vote Up 0 Vote Down

Cancel
0 AliIsmail over 20 years ago in reply to doug_p

Hello, Still these IPs are strange BUT when I blocked them, I noticed that these IPs are helpful for the yahoo mail specially
213.254.17.X

I did not find any site that shows the real use of these IPs.

Regards,
Cancel
Vote Up 0 Vote Down

Cancel
0 Simon Shaw over 20 years ago in reply to AliIsmail

You are using an Eval version of Astaro?
I assume the eval version has Cobion surf protection enabled.
Otherwise, you need to purchase a "Surf Protection" license.

To check proxy logs of who is accessing what:
Goto Reporting
Goto HTTP Proxy Usage
Select the day you wish to look at.
Cancel
Vote Up 0 Vote Down

Cancel