Thread Info
  • State Not Answered
  • Locked Locked
  • Replies 6 replies
  • Subscribers 1 subscriber
  • Views 2331 views
  • Users 0 members are here
Options
Suggested
This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

[7.306] Some blocked google search results

trialrider
Hi,

Sometimes links from google search like that http://www.google.de/url?sa=t&source=web&ct=res&cd=12&ved=0CA0QFjABOAo&url=http%3A%2F%2Fwww.dslteam.de%2Fforum%2Fshowthread.php%3Fp%3D2206818&rct=j&q=statische+route+w503v&ei=cIUPS8KmIpiImgOSpsnUAg&usg=AFQjCNGQ5SGsX9sZiqphUckQTi6UuxJxmQ will be blocked by our ASG and sometimes they willn't: http://www.google.de/url?sa=t&source=web&ct=res&cd=3&ved=0CBQQFjAC&url=http%3A%2F%2Fwww.administrator.de%2Findex.php%3Fmod%3Dsearch%26query%3Dsubnetz%2B%257C%2Bverbindung%2B%257C%2Brouter%2B%257C%2Bspeedport%2B%257C%2B501%26what%3Dcontents&rct=j&q=statische+routen+speedport+w+501&ei=AXwPS_eTCc6A_QaUlcw1&usg=AFQjCNGlUeaZASv12CRokl6GkpsvK4-wpw

Our ASG says it's blocked by blacklist and logfile shows "forbidden url detetcted"... But our blacklist didn't contain something from the blocked link(s). Has anyone an explanation for that? The "encryption" of the search result couldn't be the problem?
-- 
Kind regards, Steffen


This thread was automatically locked due to age.
  • 0
    What do you have in your blacklist?

    Cheers - Bob
     
    Sophos UTM Community Moderator
    Sophos Certified Architect - UTM
    Sophos Certified Engineer - XG
    Gold Solution Partner since 2005
    MediaSoft, Inc. USA
  • 0 in reply to BAlfson
    Hi Bob,

    Our BL contains some different strings like "toolbar.", "desktop.", "google-analytics", "google-syndication", "adservice", "adtech", "icq", "jab", "/tor/", "boy", "girl", "q=cache" and so on. The whole list is grown in v6. There we used the web proxy in the other way. Blocking after checking the surfed URLs.

    At first I thought blocking is related to short strings like "icq" or so but searching the links ended in 0 matches.
    -- 
    MfG, Steffen
  • 0 in reply to trialrider
    Hi all,

    our ASG ist still blocking search results like in my first posting. Content filter log shows:[PHP]2009:12:09-07:08:24 (none) httpproxy[3968]: id="0062" severity="info" sys="SecureWeb" sub="http" name="web request blocked, forbidden url detected" action="block" method="GET" srcip="[IP]" user="" statuscode="403" cached="0" profile="profile_1" filteraction="action_REF_DefaultHTTPCFFAction" size="2797" time="2 ms" request="0xa22abea8" url="www.google.de/url
    Could it be realted to blocked category "Web Ads"? I put this to Group "Suspicious and Uncategorized" and have some blocked strings with google to like google-syndication, google-analytics, adservice...

    Hoping for help and Kind regards,

    Steffen
  • 0
    The log says "forbidden url detected" so I would check your url blacklist as it appears something in their is matching the url and blocking it.
  • 0 in reply to dilandau
    Sorry, but no entry in our BL will be found in the URL. It's like above. Some google results will be shown, some not.

    What happens, if one of you open the given links? Maybe someone from Astaro can check this to.

    It's very strange and slows down searching because a alternative URL will needed.
    -- 
    Kind regards

    Steffen
  • 0 in reply to trialrider
    Hi,

    I will setup my ASL web proxy with same categories as in our ASG 220 and will add blacklist string step by step.

    I didn't see any other solution. I'll let you know which entry is the one that blocks.
    -- 
    Kind regards

    Steffen