This discussion has been locked.

You can no longer post new replies to this discussion. If you have a question you can start a new discussion

skype connection to server timed out

Hi

Astaro 220 v7.305 http proxy AD SSO when using Skype it takes a long time to sign in then it fails, in the http log
2008:12:16-09:40:41 (none) httpproxy[3734]: id="0002" severity="info" sys="SecureWeb" sub="http" name="web request blocked" action="block" method="CONNECT" srcip="****" user="****" statuscode="502" cached="0" profile="profile_0" filteraction="action_REF_EeMPDOveaf" size="2177" time="60693 ms" request="0x81f3e20" url="67.160.31.157:443" error="Connection to server timed out" category="9998" categoryname="Uncategorized"

any idea?

This thread was automatically locked due to age.

Parents

0 William Warren over 17 years ago

Hi

Astaro 220 v7.305 http proxy AD SSO when using Skype it takes a long time to sign in then it fails, in the http log
2008:12:16-09:40:41 (none) httpproxy[3734]: id="0002" severity="info" sys="SecureWeb" sub="http" name="web request blocked" action="block" method="CONNECT" srcip="****" user="****" statuscode="502" cached="0" profile="profile_0" filteraction="action_REF_EeMPDOveaf" size="2177" time="60693 ms" request="0x81f3e20" url="67.160.31.157:443" error="Connection to server timed out" category="9998" categoryname="Uncategorized"

any idea?

do you have block uncategorized sites turned on?

Owner: Emmanuel Technology Consulting

http://etc-md.com

Former Sophos SG(Astaro) advocate/researcher/Silver Partner

PfSense w/Suricata, ntopng,

Other addons to follow
Cancel
Vote Up 0 Vote Down

Cancel

Reply

0 William Warren over 17 years ago

Hi

Astaro 220 v7.305 http proxy AD SSO when using Skype it takes a long time to sign in then it fails, in the http log
2008:12:16-09:40:41 (none) httpproxy[3734]: id="0002" severity="info" sys="SecureWeb" sub="http" name="web request blocked" action="block" method="CONNECT" srcip="****" user="****" statuscode="502" cached="0" profile="profile_0" filteraction="action_REF_EeMPDOveaf" size="2177" time="60693 ms" request="0x81f3e20" url="67.160.31.157:443" error="Connection to server timed out" category="9998" categoryname="Uncategorized"

any idea?

do you have block uncategorized sites turned on?

Owner: Emmanuel Technology Consulting

http://etc-md.com

Former Sophos SG(Astaro) advocate/researcher/Silver Partner

PfSense w/Suricata, ntopng,

Other addons to follow
Cancel
Vote Up 0 Vote Down

Cancel

Children

0 techuser over 17 years ago in reply to William Warren

No it is turned off
Cancel
Vote Up 0 Vote Down

Cancel
0 William Warren over 17 years ago in reply to techuser

the connection is being blocked by the proxy. try setting a pf rule allowing skype to go out.

Owner: Emmanuel Technology Consulting

http://etc-md.com

Former Sophos SG(Astaro) advocate/researcher/Silver Partner

PfSense w/Suricata, ntopng,

Other addons to follow
Cancel
Vote Up 0 Vote Down

Cancel
0 techuser over 17 years ago in reply to William Warren

I did that, I put pf rule allowing IP--any--> any, I put the IP address in the exception list of both IM/P2P, I can see in the PF log that nothing is blocked, I allowed the Instant Messaging and chat..etc categories. Still not working,
the only way it worked when I created a NAT rule, and I don't want that because it will bypass the http proxy.
Cancel
Vote Up 0 Vote Down

Cancel
0 BAlfson over 17 years ago in reply to techuser

tech, if I understand your last post correctly, you allowed inbound traffic from the IP, but I beleive that William's suggestion has to do with outbound traffic from your Astaro.

Sophos UTM Community Moderator
Sophos Certified Architect - UTM
Sophos Certified Engineer - XG
Gold Solution Partner since 2005

MediaSoft, Inc. USA
Cancel
Vote Up 0 Vote Down

Cancel
0 techuser over 17 years ago in reply to BAlfson

outbound is from the lan to internet right? if so that is what I did, I mean by the ip is the address of the user's computer who wants to use skype
Cancel
Vote Up 0 Vote Down

Cancel
0 techuser over 17 years ago in reply to techuser

as a quick fix to the problem I created SNAT rule
"user's ip address" --> https-->any
Source translation-> internet interface
and now it is working
Cancel
Vote Up 0 Vote Down

Cancel