HTTP traffic seems to bypass Web Filter

jerms · 01-17-2012, 10:34 AM

I have been searching and racking my brains out for a couple days now and haven't been able to figure out why I am having this problem.

I can browse out to the internet, however, web filter is not even scanning any pages. I installed the bandwidth control to hopefully see something. I see that the traffic is going through but the column "bypassed" is all "true". I'm guessing that means it's bypassing the rack?

I have no idea what the problem might be as I had the same exact setup on another machine and it worked fine, the only thing different was the IP's.

raditude · 01-17-2012, 10:38 AM

Have you looked at your bypass rules?

dmorris · 01-17-2012, 10:43 AM

Also, is untangle installed in-line with network traffic? How is it configured?

welcome to the forums.

jerms · 01-17-2012, 10:51 AM

Yes. Only default system bypass rules are set.

raditude · 01-17-2012, 10:54 AM

Then you have something wrong, because by default port 80 and 53 are NOT bypassed.

jerms · 01-17-2012, 11:05 AM

The configuration is basically:

PC
IP 10.64.252.65/24
GW 10.64.252.34
|
UT
Internal IP 10.64.252.34/24
External IP 10.64.252.32/24
GW 10.64.252.1
|
Firewall
|
Router
|
Internet

jerms · 01-17-2012, 11:12 AM

Yes, I definitely have something wrong. I appreciate any help.

jerms · 01-17-2012, 11:18 AM

Quote:

Originally Posted by dmorris

Also, is untangle installed in-line with network traffic? How is it configured?

welcome to the forums.

It's PC--UT--Firewall--Router--Internet
PC is IP 10.64.252.65/24 GW 10.64.252.34
UT is Internal IP 10.64.252.34/24, External IP 10.64.252.32/24 GW 10.64.252.1

Thank you

raditude · 01-17-2012, 11:22 AM

You should be using UT in bridge mode if it is not your edge device. I dont think it will work in this configuration because your internal and external NIC's are on the SAME IP range.

sky-knight · 01-17-2012, 11:32 AM

Yeah that router isn't routing anything, get on the physical console of the Untangle server, select the recovery tools option, pick reset to factory defaults and reboot.

When the server comes back up, configure the device with the wizard in bridge mode.

Once that is complete, make sure the "external" interface is attached to your firewall, and the "internal" interface is attached to either the switch you want Untangle to protect, or directly attached to the PC you've indicated.

01-17-2012, 10:43 AM	#3 (permalink)
dmorris Untangle Junkie Join Date: Nov 2006 Location: San Mateo, CA URLs submitted: 10 Posts: 10,614	Also, is untangle installed in-line with network traffic? How is it configured? welcome to the forums. __________________ Attention: Support and help on the Untangle Forums is provided by volunteers and community members like yourself. If you need Untangle support please call or email support@untangle.com

01-17-2012, 11:32 AM	#10 (permalink)
sky-knight Join Date: Apr 2008 Location: Phoenix, AZ URLs submitted: 8 Posts: 15,465	Yeah that router isn't routing anything, get on the physical console of the Untangle server, select the recovery tools option, pick reset to factory defaults and reboot. When the server comes back up, configure the device with the wizard in bridge mode. Once that is complete, make sure the "external" interface is attached to your firewall, and the "internal" interface is attached to either the switch you want Untangle to protect, or directly attached to the PC you've indicated. __________________ Rob Sandling, BS:SWE, MCP Intouch Technology Phone: 480-272-9889 rob@intouchtechllc.com UntangleAppliances.com Phone: 866-794-8879

Protect

Filter

Perform

Connect

Manage

Add-Ons

01-17-2012, 10:38 AM	#2 (permalink)
raditude Join Date: Jan 2009 Location: Eugene, OR Posts: 1,112	Have you looked at your bypass rules?

01-17-2012, 10:51 AM	#4 (permalink)
jerms Newbie Join Date: Jan 2012 Posts: 8	Yes. Only default system bypass rules are set.

01-17-2012, 10:54 AM	#5 (permalink)
raditude Join Date: Jan 2009 Location: Eugene, OR Posts: 1,112	Then you have something wrong, because by default port 80 and 53 are NOT bypassed.

01-17-2012, 11:05 AM	#6 (permalink)
jerms Newbie Join Date: Jan 2012 Posts: 8	The configuration is basically: PC IP 10.64.252.65/24 GW 10.64.252.34 \| UT Internal IP 10.64.252.34/24 External IP 10.64.252.32/24 GW 10.64.252.1 \| Firewall \| Router \| Internet

01-17-2012, 11:12 AM	#7 (permalink)
jerms Newbie Join Date: Jan 2012 Posts: 8	Yes, I definitely have something wrong. I appreciate any help.

01-17-2012, 11:22 AM	#9 (permalink)
raditude Join Date: Jan 2009 Location: Eugene, OR Posts: 1,112	You should be using UT in bridge mode if it is not your edge device. I dont think it will work in this configuration because your internal and external NIC's are on the SAME IP range.