Untangle Networks [home]


Go Back   Untangle Forums > Application Forums > eSoft Web Filter

Reply
 
LinkBack Thread Tools
Old 06-24-2009, 03:06 PM   #1 (permalink)
Master Untangler
 
lschafroth's Avatar
 
Join Date: Jul 2008
Posts: 796
Default eSoft blocks site with scan https enabled

If I have scan https enabled I cannot get to our student information database which is hosted at:

https://epm92.infinitecampus.org

If I turn off scan https it works fine. If I turn it on, it blocks it with no block page, it just says the connection has been interrupted. The log shows the IP of the site listed in the Block Category but does not tell you which one or why.

Do I need the scan https enabled since it breaks my setup?

Lannie
__________________
Please VOTE for the AD/LDAP Connector upgrade.
Please VOTE for the ByPass feature.
Please VOTE for the Top Talkers feature.
lschafroth is offline   Reply With Quote
Old 06-24-2009, 06:11 PM   #2 (permalink)
Administrator
 
gotkimchi's Avatar
 
Join Date: Jan 2007
Location: Bay Area
Posts: 1,462
Send a message via AIM to gotkimchi Send a message via MSN to gotkimchi Send a message via Yahoo to gotkimchi
Default

You can use the bypass rule, config, networking, upper right hand corner, bypass rule. Destination address x.x.x.x
__________________
to be understood, you must first understand.
gotkimchi is offline   Reply With Quote
Old 06-24-2009, 06:14 PM   #3 (permalink)
Untangle Junkie
 
dmorris's Avatar
 
Join Date: Nov 2006
Location: San Mateo, CA
URLs submitted: 10
Posts: 5,166
Default

esoft says

https://207.225.137.62

is an anonymizer (proxy) and "Computers and Technology" - is that true?

http://www.esoft.com/new_products/sflookupoem.cfm

if not I (or you) can submit the correct categorization
__________________

dmorris is offline   Reply With Quote
Old 06-24-2009, 06:21 PM   #4 (permalink)
Master Untangler
 
lschafroth's Avatar
 
Join Date: Jul 2008
Posts: 796
Default

Quote:
Originally Posted by dmorris View Post
esoft says

https://207.225.137.62

is an anonymizer (proxy) and "Computers and Technology" - is that true?

http://www.esoft.com/new_products/sflookupoem.cfm

if not I (or you) can submit the correct categorization
It is a nationwide Student Information system. That is definetly an incorrect categorization.
I know that ip can be redirected to other IP's on the fly. Not sure if that effects it.

Lannie
__________________
Please VOTE for the AD/LDAP Connector upgrade.
Please VOTE for the ByPass feature.
Please VOTE for the Top Talkers feature.
lschafroth is offline   Reply With Quote
Old 06-24-2009, 06:25 PM   #5 (permalink)
Master Untangler
 
lschafroth's Avatar
 
Join Date: Jul 2008
Posts: 796
Default

Quote:
Originally Posted by gotkimchi View Post
You can use the bypass rule, config, networking, upper right hand corner, bypass rule. Destination address x.x.x.x
their ip address changes dynamically depending on server load. Can I specifiy a range in the bypass rule or do I need a rule for every IP?

Lannie
__________________
Please VOTE for the AD/LDAP Connector upgrade.
Please VOTE for the ByPass feature.
Please VOTE for the Top Talkers feature.
lschafroth is offline   Reply With Quote
Old 06-24-2009, 06:47 PM   #6 (permalink)
Untangle Ninja
 
sky-knight's Avatar
 
Join Date: Apr 2008
Location: Phoenix, AZ
URLs submitted: 7
Posts: 7,722
Default

I just got the super bundle installed...

And I can see that link just fine?
__________________
Intouch Technology
Rob Sandling, BS:SWE, MCP
Office: 480-272-9889
rob@intouchtechllc.com
sky-knight is offline   Reply With Quote
Old 06-24-2009, 07:09 PM   #7 (permalink)
Master Untangler
 
lschafroth's Avatar
 
Join Date: Jul 2008
Posts: 796
Default

This is the 3rd install on this system in the last 2 months while testing. It does this EVERY time.
__________________
Please VOTE for the AD/LDAP Connector upgrade.
Please VOTE for the ByPass feature.
Please VOTE for the Top Talkers feature.
lschafroth is offline   Reply With Quote
Old 06-24-2009, 07:14 PM   #8 (permalink)
Untangle Ninja
 
sky-knight's Avatar
 
Join Date: Apr 2008
Location: Phoenix, AZ
URLs submitted: 7
Posts: 7,722
Default

That is incredibly odd... because I just put the super bundle in today. I have turned off the normal web filter, I have mad zero configuration changes to the eSoft filter. And it works fine, scan https is on by default.
__________________
Intouch Technology
Rob Sandling, BS:SWE, MCP
Office: 480-272-9889
rob@intouchtechllc.com
sky-knight is offline   Reply With Quote
Old 06-25-2009, 07:52 AM   #9 (permalink)
Master Untangler
 
lschafroth's Avatar
 
Join Date: Jul 2008
Posts: 796
Default

Are you getting the same IP or does it change? We get a different one on occasion due to their load balancer.

Lannie
__________________
Please VOTE for the AD/LDAP Connector upgrade.
Please VOTE for the ByPass feature.
Please VOTE for the Top Talkers feature.
lschafroth is offline   Reply With Quote
Old 06-25-2009, 09:37 AM   #10 (permalink)
Untangle Ninja
 
sky-knight's Avatar
 
Join Date: Apr 2008
Location: Phoenix, AZ
URLs submitted: 7
Posts: 7,722
Default

I'm getting 207.255.137.62

And the only thing I get out of that server is a "You've just installed Apache Tomcat!" page.
__________________
Intouch Technology
Rob Sandling, BS:SWE, MCP
Office: 480-272-9889
rob@intouchtechllc.com
sky-knight is offline   Reply With Quote
Reply

Thread Tools

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is On
HTML code is Off
Trackbacks are On
Pingbacks are On
Refbacks are On



All times are GMT -7. The time now is 07:23 AM.


© 2009 Untangle, Inc. All Rights Reserved.   SEO by vBSEO 3.3.2