Quantcast
Channel: Sophos User Bulletin Board
Viewing all articles
Browse latest Browse all 14361

[8.940][MYTH] HTTPS Traffic Proxy

$
0
0
Hi

I currently have a problem with HTTPS when I use the proxy.

Setup:
- 1 Astaro
- 5 Interface, 3 Dynamic uplinks, 2 local adapters, 1 HA link (offline atm)

Problem:
When I use Astaro as a proxy, normal operation mode. (Not transparant). I have a problem when I'm surfing to a https website.

Log:
Quote:

2012:05:08-12:14:09 snake-jailbird httpproxy[32175]: id="0002" severity="info" sys="SecureWeb" sub="http" name="web request blocked" action="block" method="CONNECT" srcip="10.13.37.240" dstip="109.131.67.12" user="" statuscode="502" cached="0" profile="REF_DefaultHTTPProfile (Default Proxy)" filteraction="REF_DefaultHTTPCFFAction (Default content filter action)" size="2582" request="0x9593a18" url="https://www.example.com:8080/" exceptions="" error="Invalid argument"
2012:05:08-12:14:09 snake-jailbird httpproxy[32175]: id="0002" severity="info" sys="SecureWeb" sub="http" name="web request blocked" action="block" method="CONNECT" srcip="10.13.37.240" dstip="109.131.67.12" user="" statuscode="502" cached="0" profile="REF_DefaultHTTPProfile (Default Proxy)" filteraction="REF_DefaultHTTPCFFAction (Default content filter action)" size="2582" request="0x948de30" url="https://www.example.com:8080/" exceptions="" error="Invalid argument"
2012:05:08-12:14:10 snake-jailbird httpproxy[32175]: id="0002" severity="info" sys="SecureWeb" sub="http" name="web request blocked" action="block" method="CONNECT" srcip="10.13.37.240" dstip="109.131.67.12" user="" statuscode="502" cached="0" profile="REF_DefaultHTTPProfile (Default Proxy)" filteraction="REF_DefaultHTTPCFFAction (Default content filter action)" size="2582" request="0x965f060" url="https://www.example.com:8080/" exceptions="" error="Invalid argument"

I disabled all surf protection. However, I noticed the error = "Invalid argument"

I know that the https site is on a strange port, then again this used to work with Astaro V8.

I tried the same with an other port that isn't allowed by default, 2222, when adding the port to the allowed services everything worked perfectly.

Viewing all articles
Browse latest Browse all 14361

Trending Articles