Thread Info
  • State Not Answered
  • Locked Locked
  • Replies 12 replies
  • Subscribers 1 subscriber
  • Views 10047 views
  • Users 0 members are here
Options
Suggested
This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Connection refused on streaming video

Brian@VCC
Hi All,

Astaro Web Gateway V7

Users are trying to access a .EDU site and can successfully, they get a connection refused error when trying to play a streaming video from the site.

I have the site whitelisted in WebSecurity>HTTP/S/URL filtering but obviously something's not correct.

2010:11:11-14:08:50 vcc-prdv-awg01 httpproxy[27652]: id="0002" severity="info" sys="SecureWeb" sub="http" name="web request blocked" action="block" method="GET" srcip="10.10.15.58" user="" statuscode="502" cached="0" profile="REF_DefaultHTTPProfile (Default Proxy)" filteraction="REF_DefaultHTTPCFFAction (Default content filter action)" size="2286" time="1 ms" request="0xa5d5fd50" url="mms.fvtc.edu:8081/.../24YearsOfProgress.wmv
2010:11:11-14:08:50 vcc-prdv-awg01 httpproxy[27652]: [0xa5d5fd50] send_request_headers (request.c:172) write: Connection refused 

Is what I get in the log file.

Please help, thank you.


This thread was automatically locked due to age.
Parents
  • 0
    It looks like the FQDN in that URL is 198.19.182.85 instead of .0.  Usually though, where you have an FQDN, it's preferable to define it as a DNS Host or DNS Group.  In this case, I probably would create a DNS Host definition "FVTC Media Services" with mms.fvtc.edu.  Always, Always, Always, leave 'Interface' set to >.

    Cheers - Bob
     
    Sophos UTM Community Moderator
    Sophos Certified Architect - UTM
    Sophos Certified Engineer - XG
    Gold Solution Partner since 2005
    MediaSoft, Inc. USA
Reply
  • 0
    It looks like the FQDN in that URL is 198.19.182.85 instead of .0.  Usually though, where you have an FQDN, it's preferable to define it as a DNS Host or DNS Group.  In this case, I probably would create a DNS Host definition "FVTC Media Services" with mms.fvtc.edu.  Always, Always, Always, leave 'Interface' set to >.

    Cheers - Bob
     
    Sophos UTM Community Moderator
    Sophos Certified Architect - UTM
    Sophos Certified Engineer - XG
    Gold Solution Partner since 2005
    MediaSoft, Inc. USA
Children
  • 0 in reply to BAlfson
    Ah that makes sense with the DNS groups.  I have it in now, saved and applied, but I'm still getting connection refused from the Astaro.  

    This is confusing to me, from what I can tell, it should be technically skipping the Astaro all together now right?