Thread Info
  • State Not Answered
  • Locked Locked
  • Replies 5 replies
  • Subscribers 1 subscriber
  • Views 1640 views
  • Users 0 members are here
Options
Suggested
This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

[v7.402] http proxy captures socks proxy requests

RFCat_vk_01
Hi,
I am trying to allow socks proxy request to go through. I have tried without an allow in the http profile, didn't work. I have tried with an allow of the site to go through, didn't work.

the site is wowproxy-nsw.3fl.net.au, basically to allow free access to wow sites for iinet users.

For the managed user, he has proxy access blocked with specific sites allowed, for the rest of the family the proxies are not blocked except in the default profile.

At one stage during the v7.4b this didn't happen.

Any ideas on how to overcome this.

Ian

Forgot to add that the error message that is displayed indicates the target service is not allowed.


This thread was automatically locked due to age.
Parents
  • 0
    Ian, what do you see in the Content Filter log?
     
    Sophos UTM Community Moderator
    Sophos Certified Architect - UTM
    Sophos Certified Engineer - XG
    Gold Solution Partner since 2005
    MediaSoft, Inc. USA
  • 0 in reply to BAlfson
    Hi Bob,
    in my humble opinion the socks proxy shouldn't go any where near the http proxy. The following is part of th eline from the http log.

    sys="SecureWeb" sub="http" name="web request blocked" action="block" method="GET" srcip="192.168.x.x" user="" statuscode="403" cached="0" profile="REF_GrlnmHmMll (24hr)" filteraction="REF_ufaPwcyijx (24hr)" size="2263" time="3203 ms" request="0xb292b9d0" url="wowproxy-new.3fl.net.au:1080/favicon.ico" exceptions="" error="Target service not allowed"

    Ian M
  • 0 in reply to RFCat_vk_01
    Are you running the HTTP Proxy in transparent mode?

    Have you tried adding the service port to 'Allowed target services'?

    Cheers - Bob
     
    Sophos UTM Community Moderator
    Sophos Certified Architect - UTM
    Sophos Certified Engineer - XG
    Gold Solution Partner since 2005
    MediaSoft, Inc. USA
  • 0 in reply to BAlfson
    Hi Bob,
    I am running the http proxy in standard mode with all PCs setup to use socks on port 1080.
    Other applications use socks without a problem, so why is the classification scheme seeing this particular 1080? In the http profiles the managed user has proxies blocked, but the general users proxies are allowed.

    Ian M
  • 0 in reply to RFCat_vk_01
    Ian, I'm not familiar with the use of the Socks proxy, so I didn't understand your last post.  In your second post, I noticed 
    error="Target service not allowed"

    That was the reason I suggested adding 1080 to the list of allowed services in the HTTP.

    Cheers - Bob
     
    Sophos UTM Community Moderator
    Sophos Certified Architect - UTM
    Sophos Certified Engineer - XG
    Gold Solution Partner since 2005
    MediaSoft, Inc. USA
Reply
  • 0 in reply to RFCat_vk_01
    Ian, I'm not familiar with the use of the Socks proxy, so I didn't understand your last post.  In your second post, I noticed 
    error="Target service not allowed"

    That was the reason I suggested adding 1080 to the list of allowed services in the HTTP.

    Cheers - Bob
     
    Sophos UTM Community Moderator
    Sophos Certified Architect - UTM
    Sophos Certified Engineer - XG
    Gold Solution Partner since 2005
    MediaSoft, Inc. USA
Children
No Data