Topic: Office Depot and Staples

[dwalton]

I was hoping I could get some help.

Our business relies on checking prices against Office Depot. Staples and Quill. Since about 2 weeks ago we are not able to access any of those websites from inside our SME Server. If I by pass the sme and connect directly to my verizon modem I am able to access those sites. We have not made any changes to our server and I have tried the following.

1. Existing SME Server 7.5.1 (yes I know its now the most current)
2. A back up of the existing server
3. Clear OS 6.0

All of these giving the same results.

Any help or suggestiions are appreciated.

[dwalton]

Sorry I meant to post the error

Request Timeout
The server timed out while waiting for the browser's request.

Reference #2.aea40517.1427724393.0

[Stefano]

you should:

- give us much more details (server only? server and gateway? http proxy server enabled?)
- upgrade asap to SME 8 or, better, SME 9
- remember that you are our eyes, so please take some time to describe how should your system work and to check log files (server-manager, you have a panel to do so)

[dwalton]

Server Mode   servergateway

Proxy Settings

Status    Enabled
Port to filter    8080
Proxy access method    pam
Block Port 3128    

[Stefano]

take a look at squid's log

[janet]

dwalton

What are the specific URLs that you say you cannot access anymore ?
If you tell us what they are, then we can try accessing them from behind sme server.

Although you say you made no changes, are you downloading squid rules from time to time, maybe an update there is now causing the sites to be listed & blocked.

Please show us the exact error in squid log when (time) you try to access one of those blocked sites.

Have you tried disabling the proxy filtering on port 8080 & allow proxy access via standard port 3128 ?
Doing this will prove whether the basic sme server setup is the problem, or not !

[dwalton]

The sites are officedepot.com, and staples.com

If I bypass the SME server and connect directly to the providers router I am able to access both sites without issues.

I have not updated anything on this server for at last a year.

Mon Mar 30 15:36:09 2015  15665 127.0.0.1 TCP_MISS/200 3828 CONNECT 10.0.1.1:443 dwalton DIRECT/10.0.1.1 -
Mon Mar 30 15:36:18 2015  29217 127.0.0.1 TCP_MISS/200 75097 CONNECT 10.0.1.1:443 dwalton DIRECT/10.0.1.1 -
Mon Mar 30 15:36:27 2015  21249 127.0.0.1 TCP_MISS/408 482 GET http://www.staples.com/ dwalton DIRECT/172.233.15.41 text/html
Mon Mar 30 15:36:45 2015    118 127.0.0.1 TCP_MISS/200 854 POST http://clients1.google.com/ocsp marketing DIRECT/63.96.4.58 application/ocsp-response
Mon Mar 30 15:36:46 2015     78 127.0.0.1 TCP_MISS/200 854 POST http://clients1.google.com/ocsp marketing DIRECT/63.96.4.55 application/ocsp-response
Mon Mar 30 15:36:46 2015   1007 127.0.0.1 TCP_DENIED/407 1742 POST http://t001.aa.avast.com/receive - NONE/- text/html
Mon Mar 30 15:36:46 2015  20015 127.0.0.1 TCP_MISS/408 482 GET http://www.staples.com/ dwalton DIRECT/172.233.15.41 text/html
Mon Mar 30 15:36:54 2015  18651 127.0.0.1 TCP_MISS/200 396 POST http://su.ff.avast.com/R/A1IKIGJmZGRlODYzOTRiNzQ5MmRiMDRmNjY1YjEzNmRiOGNiEgQAMQcUGKwBIgH-KgQIAxAAKgkIBBCQ_-6QxikyDAgEEJD_7pDGKRiACjjWj4BI dwalton DIRECT/77.234.42.62 application/octet-stream
Mon Mar 30 15:36:58 2015      0 127.0.0.1 TCP_DENIED/407 2093 POST http://su.ff.avast.com/R/A1oKIGFiMzEyNTdkZTczMDRkMjU4MjdlNGNmNDQ2ODA0YjJjEgQAJAMVGJABIgH_OKeRiFBCILXW8pur-CZkCXbkwSo17UD0fSA2OWlOuKqF6lllJ21OSICClAg= - NONE/- text/html

Have you tried disabling the proxy filtering on port 8080 & allow proxy access via standard port 3128 ?
Doing this will prove whether the basic sme server setup is the problem, or not !

Yes I tried that and same issue.

[janet]

dwalton

Have you tried disabling the proxy filtering on port 8080 & allow proxy access via standard port 3128 ?
Doing this will prove whether the basic sme server setup is the problem, or not !

Yes I tried that and same issue.

Did you do a post upgrade & a reboot on the server to allow that setting change to take effect ?
ie refer to the Dansguardian wiki article re how to reset to default behaviour using port 3128

http://wiki.contribs.org/Dansguardian#Configuring_your_system_to_force_Dansguardian_usage_.26_prevent_bypassing

config setprop squid TransparentPort 3128
config setprop squid Transparent yes
config delprop dansguardian portblocking
signal-event post-upgrade; signal-event reboot

[TerryF]

While this is no solution, It may be not unexpected that a system that is using a now dead release and "I have not updated anything on this server for at last a year." is having issues, the only realistic solution may end up being to upgrade and restore from backup.

[dwalton]

Terry
You are correct. This is why I ran Clear OS most current version to see if it was the SME or Clear or both.

Keep in mind I can access any other site!

[janet]

dwalton

You are correct. This is why I ran Clear OS most current version to see if it was the SME or Clear or both.
Keep in mind I can access any other site!

There have been many posts over the years re DNS not resolving correctly to certain specific websites, but are OK for all others.
There are many possible reasons including ISP's DNS servers not updating/resolving correctly etc or even the root servers that sme server accesses.
I would also ask, do you have a specific DNS server setup in your sme server, look in server manager panel to see, if you are unsure ?
We need to isolate whether it is an sme or an external issue.
To narrow down the suspects, please answer my earlier questions.
ie
Did you do a post upgrade & a reboot on the server to allow that setting change to take effect ?
ie refer to the Dansguardian wiki article re how to reset to default behaviour using port 3128

http://wiki.contribs.org/Dansguardian#Configuring_your_system_to_force_Dansguardian_usage_.26_prevent_bypassing

config setprop squid TransparentPort 3128
config setprop squid Transparent yes
config delprop dansguardian portblocking
signal-event post-upgrade; signal-event reboot

To say it again, you really should upgrade ASAP to sme8, as there may be issues using the old & insecure sme 7.5.1
You can upgrade using a CD/DVD, make sure to do a full backup first.

[TerryF]

dwalton
There have been many posts over the years re DNS not resolving correctly to certain specific websites, but are OK for all others.
There are many possible reasons including ISP's DNS servers not updating/resolving correctly etc or even the root servers that sme server accesses.
I would also ask, do you have a specific DNS server setup in your sme server, look in server manager panel to see, if you are unsure ?
We need to isolate whether it is an sme or an external issue.

+1 Janet

I am not smart enough to think of anything else, but the ref to avast in the logs elicits a bit of curiosity..

[janet]

dwalton

TerryF wrote:
.....the ref to avast in the logs elicits a bit of curiosity..

Yes I agree.
dwalton, what does avast mean to you, are you using that antivirus system or some external AV proxy ???

[Stefano]

My guess is that avast (installed on the lan side clients) is trying to update, so IMHO it's not involved in the issue

[TerryF]

My guess is that avast (installed on the lan side clients) is trying to update, so IMHO it's not involved in the issue

Then that would also indicate that avasts website is also not reachable, so far from just two sites, does the server have access at all to the internet, easy to check from the console.