Thread Info
  • State Not Answered
  • Locked Locked
  • Replies 7 replies
  • Subscribers 1 subscriber
  • Views 6212 views
  • Users 0 members are here
Options
Suggested
This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

skype connection to server timed out

techuser
Hi

Astaro 220 v7.305 http proxy AD SSO when using Skype it takes a long time to sign in then it fails, in the http log
2008:12:16-09:40:41 (none) httpproxy[3734]: id="0002" severity="info" sys="SecureWeb" sub="http" name="web request blocked" action="block" method="CONNECT" srcip="****" user="****" statuscode="502" cached="0" profile="profile_0" filteraction="action_REF_EeMPDOveaf" size="2177" time="60693 ms" request="0x81f3e20" url="67.160.31.157:443" error="Connection to server timed out" category="9998" categoryname="Uncategorized"

any idea?


This thread was automatically locked due to age.
  • 0
    Hi

    Astaro 220 v7.305 http proxy AD SSO when using Skype it takes a long time to sign in then it fails, in the http log
    2008:12:16-09:40:41 (none) httpproxy[3734]: id="0002" severity="info" sys="SecureWeb" sub="http" name="web request blocked" action="block" method="CONNECT" srcip="****" user="****" statuscode="502" cached="0" profile="profile_0" filteraction="action_REF_EeMPDOveaf" size="2177" time="60693 ms" request="0x81f3e20" url="67.160.31.157:443" error="Connection to server timed out" category="9998" categoryname="Uncategorized"

    any idea?


    do you have block uncategorized sites turned on?

    Owner:  Emmanuel Technology Consulting

    http://etc-md.com

    Former Sophos SG(Astaro) advocate/researcher/Silver Partner

    PfSense w/Suricata, ntopng, 

    Other addons to follow

  • 0 in reply to techuser
    the connection is being blocked by the proxy.  try setting a pf rule allowing skype to go out.

    Owner:  Emmanuel Technology Consulting

    http://etc-md.com

    Former Sophos SG(Astaro) advocate/researcher/Silver Partner

    PfSense w/Suricata, ntopng, 

    Other addons to follow

  • 0 in reply to William Warren
    I did that, I put pf rule allowing IP--any--> any, I put the IP address in the exception list of both IM/P2P, I can see in the PF log that nothing is blocked, I allowed the Instant Messaging and chat..etc categories.  Still not working, 
    the only way it worked when I created a NAT rule, and I don't want that because it will bypass the http proxy.
  • 0 in reply to techuser
    tech, if I understand your last post correctly, you allowed inbound traffic from the IP, but I beleive that William's suggestion has to do with outbound traffic from your Astaro.
     
    Sophos UTM Community Moderator
    Sophos Certified Architect - UTM
    Sophos Certified Engineer - XG
    Gold Solution Partner since 2005
    MediaSoft, Inc. USA
  • 0 in reply to BAlfson
    outbound is from the lan to internet right? if so that is what I did, I mean by the ip is the address of the user's computer who wants to use skype
  • 0 in reply to techuser
    as a quick fix to the problem I created SNAT rule 
    "user's ip address" --> https-->any 
    Source translation-> internet interface
    and now it is working