+ Post New Thread
Results 1 to 14 of 14
Internet Related/Filtering/Firewall Thread, Smoothwall Ucas site problems in Technical; We are having problems when students try to use they Ucas site, We have recently stopped using the pac script ...
  1. #1

    Join Date
    Oct 2005
    Location
    Bangkok
    Posts
    235
    Thank Post
    15
    Thanked 32 Times in 23 Posts
    Rep Power
    23

    Smoothwall Ucas site problems

    We are having problems when students try to use they Ucas site,

    We have recently stopped using the pac script method due to IE7 not enforcing them properly ( not smoothwalls fault)

    our proxy settings are these

    http 172.16.0.36 800
    secure 172.16.0.36 442
    socks 172.16.0.36 800
    https traffic works to other sites
    I have added all ucas domains to the not cached bit of smoothwall and also added them to the trusted sites list but students always comeup with a "pages cannot be displayed" when trying to access this url

    https://apply2.ucas.com/appreg2010/SecurityServlet
    UCAS - Apply

    I have a feeling its to do with the secure port number but just need some help

    ta

  2. #2

    Join Date
    Oct 2007
    Location
    scotland
    Posts
    45
    Thank Post
    15
    Thanked 1 Time in 1 Post
    Rep Power
    0
    Hello Jose

    We had this previously, once it was because we had added the ucas sites to the proxy bypass list but then i upgraded to school guardian and the old route was not available, so removed the bypass entry in gpo. Second time more recent was an internal dns issue. Smoothie box could see the site but clients could not. Added smoothie ip address as dns forwarder and could connect.

    If you get access to the smoothie command line or the ip tools can you ping apply2.ucas.com?

    Smoothie support are v good, contact them.
    miller

  3. #3

    rob_f's Avatar
    Join Date
    May 2008
    Location
    Leeds
    Posts
    225
    Thank Post
    16
    Thanked 73 Times in 56 Posts
    Rep Power
    25
    Hey Jose - all ports should be the same, so 800 by default - so it looks like using 442 there is the problem. Strange that it would work for some sites though...

    I'd give that a try first, and if still fails let me or support know.

    Thanks!


    Rob.

  4. Thanks to rob_f from:

    Jose (24th September 2009)

  5. #4


    tom_newton's Avatar
    Join Date
    Sep 2006
    Location
    Leeds
    Posts
    4,473
    Thank Post
    866
    Thanked 848 Times in 670 Posts
    Rep Power
    196
    You need to tell squid which ports it is allowed to "connect" on - see web proxy page (allow proxy ports or some such) - am on hols ATM or i would be more thorough. Now... further drinking (sigh).

  6. #5


    Join Date
    Mar 2009
    Posts
    155
    Thank Post
    0
    Thanked 52 Times in 43 Posts
    Rep Power
    20
    Hi

    The proxy setting for the secure https should not be set to 442 - that is not a port the SmoothWall Filter is running on - that should be 800 like the rest.

    That it could work for https sites is likely that IE has decided that there is no proxy on that port and is going out directly.

    Also as Tom says, if this https site run on another port than the standard (does not look like it though) then that port needs to be added as an allowed port on the Guardian - proxy - web proxy page. You will need to expand the advanced section to see this setting.

  7. #6
    cookie_monster's Avatar
    Join Date
    May 2007
    Location
    Derbyshire
    Posts
    4,197
    Thank Post
    392
    Thanked 278 Times in 239 Posts
    Rep Power
    74
    @ tom_newton,
    am on hols ATM or i would be more thorough
    put the work down and enjoy yourself

  8. #7


    Join Date
    Mar 2009
    Posts
    155
    Thank Post
    0
    Thanked 52 Times in 43 Posts
    Rep Power
    20
    Quote Originally Posted by Jose View Post
    We have recently stopped using the pac script method due to IE7 not enforcing them properly ( not smoothwalls fault)
    You should have a look at this KB article. IE has a proxy caching mechanism that can be a bit annoying to troubleshoot at times:

    https://support.smoothwall.net/index...barticleid=263
    and
    https://support.smoothwall.net/index...temid=16&nav=0

  9. #8

    Join Date
    Jan 2008
    Posts
    2
    Thank Post
    0
    Thanked 0 Times in 0 Posts
    Rep Power
    0
    Quote Originally Posted by Jose View Post
    We have recently stopped using the pac script method due to IE7 not enforcing them properly ( not smoothwalls fault)
    Hi,

    Do you have any further details on this? I think we are experiencing the same issue...

  10. #9


    Join Date
    Mar 2009
    Posts
    155
    Thank Post
    0
    Thanked 52 Times in 43 Posts
    Rep Power
    20
    May be an idea to try to serve the proxy.pac file from another location than the SmoothWall - at least we can see if the problem persists which could point to the SmoothWall and make us look twice.

    We have not had any massive amount of reports of this from other customers though but we wont rule anything out.

  11. #10


    Join Date
    Dec 2005
    Location
    In the server room, with the lead pipe.
    Posts
    4,638
    Thank Post
    275
    Thanked 778 Times in 605 Posts
    Rep Power
    223
    We're having an issue where kids can log on fine, but some staff are having problems. (Just had it reported today).

    Bear in mind that historically, the ucas sites haven't always been glitch-free, though there's been less "site did stupid thing" reports this year.

  12. #11
    bjohnny42's Avatar
    Join Date
    Dec 2007
    Posts
    88
    Thank Post
    6
    Thanked 5 Times in 5 Posts
    Rep Power
    14
    Just have a problem today with ucas and the certificate they use being an untrusted one. Unknown issuer. How could a big gov dept use one of these. Could untick "Block invalid ssl certificates" but hoping to add this as an exception.

  13. #12


    tom_newton's Avatar
    Join Date
    Sep 2006
    Location
    Leeds
    Posts
    4,473
    Thank Post
    866
    Thanked 848 Times in 670 Posts
    Rep Power
    196
    Add it as whitelisted (in custom allow is easiest) and it won't get cert checked.

    HTH.

    Tom

  14. Thanks to tom_newton from:

    bjohnny42 (17th August 2010)

  15. #13
    bjohnny42's Avatar
    Join Date
    Dec 2007
    Posts
    88
    Thank Post
    6
    Thanked 5 Times in 5 Posts
    Rep Power
    14
    Smoothwall support chap did a super job and added a couple of certificates so that it now works.

  16. #14


    tom_newton's Avatar
    Join Date
    Sep 2006
    Location
    Leeds
    Posts
    4,473
    Thank Post
    866
    Thanked 848 Times in 670 Posts
    Rep Power
    196
    Ah, great to hear that. Sounds like it was a subtly different problem to the one I was solving

SHARE:
+ Post New Thread

Similar Threads

  1. smoothwall filtering problems
    By linkazoid in forum Internet Related/Filtering/Firewall
    Replies: 14
    Last Post: 17th January 2011, 10:51 AM
  2. Smoothwall VPN Problems TLS/Auth error after authentication changes
    By Tom in forum Internet Related/Filtering/Firewall
    Replies: 3
    Last Post: 4th August 2009, 11:20 AM
  3. Smoothwall test - can you access this site
    By steve in forum Internet Related/Filtering/Firewall
    Replies: 5
    Last Post: 27th January 2009, 06:19 PM

Thread Information

Users Browsing this Thread

There are currently 1 users browsing this thread. (0 members and 1 guests)

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •