*nix Thread, Smoothwall SG2008 not displaying sites properly in Technical; Just noticed a problem with our Smoothwall, BBC and some other sites aren't being displayed properly (see link below for ...
27th August 2008, 02:00 PM #1
Smoothwall SG2008 not displaying sites properly
Just noticed a problem with our Smoothwall, BBC and some other sites aren't being displayed properly (see link below for the BBC Sport page that looks messed up) - most seem fine though.
Herses what it should look like (going through ISA)
Any idea why this might be the case?
Last edited by ssiruuk2; 27th August 2008 at 02:04 PM.
IDG Tech News
27th August 2008, 02:10 PM #2
I'd say its blocking a secondary site that holds the css and images.
Look at the log of a user who's trying to view the page and see if anythings being blocked
27th August 2008, 02:26 PM #3
Try enabling persistent connections in the advanced proxy settings under guardian.
It's worse in safari, although that (won't even do SSL, but that seems to be a safari bug as it happens with ISA too).
27th August 2008, 02:26 PM #4
That's almost certainly what is happening - good spot guys.
LMK what the exact URL is (or if you can ping me a bit of exported log).. i'll see if I can reduce any overblocking on that css.
27th August 2008, 02:27 PM #5
OK... it seems edugeek is getting better at guardian tech support than me ;-P
I will have a browse around BBC see if I can make it happen, as we are NTLM here too.
27th August 2008, 02:42 PM #6
Without the persistent connections, with a forced upstream proxy safari is unusable with ntlm :/ Get lots of missing images and CSS, despite using unfiltered for the users.
Originally Posted by tom_newton
Without ntlm all is fine. I would use ident but I can't actually get any to work on XP SP3 atm they all return "system" as the current user
27th August 2008, 03:13 PM #7
I also have this problem. It is only with safari on os x mainly. I just never got around to querying it. Mine is on all sites that I visit.
27th August 2008, 03:16 PM #8
I'll ask the developers to have a look and see if they can work out why safari might be getting bent out of shape.
27th August 2008, 04:02 PM #9
Thanks for all the replies - Yes we use NTLM auth (terminal services compat) .
I tried enabling persistant connections but that hasn't made any difference unfortunately. Will have a look in the logs now and see what that turns up.
Thanks again - sorry forgot to mention we only use IE here.
28th August 2008, 10:33 AM #10
28th August 2008, 11:57 AM #11
Did you disable the "ignore filter"? I don't see a request for the CSS :-/
"modified" refers to the fact that this page changed since the last caching.
28th August 2008, 11:59 AM #12
Closest thing I have to safari is Konqueror, the KDE browser. They're built of the same stuff, but K works fine here will hunt a mac user!
28th August 2008, 03:52 PM #13
Heres some more of the log (that before was taken from the realtime one)
2008.8.28 14:42:56 testuser 172.16.0.80 BBC SPORT | Football *CONTENTMOD* *SCANNED* GET 66933 -280 News 2 200 text/html Default Users "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 1.1.4322)
2008.8.28 14:42:58 testuser 172.16.0.80 http://news.bbc.co.uk/css/screen/sol...euro08.css?v58 *SCANNED* GET 17887 -15 News 2 200 text/css Default Users "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 1.1.4322)
There are a few places such as above in the log where its scoring negative points is this whats being blocked? That last bit above was the only mention of CSS in the whole of the export (didn't want to post all that of it as it was massive!)
Just to update this - I added newsimg.bbc.co.uk and news.bbc.co.uk to the "custom allowed content list", did a soft restart on the proxy and bbc now looks fine - any ideas why smoothwall was blocking it? I know I have seen a few other sites failing to load the css / images but can't remember what they are now.
Last edited by ssiruuk2; 28th August 2008 at 04:24 PM.
28th August 2008, 04:47 PM #14
It looks like content modification... "Contentmod" as opposed to "modified". Wonder which rules you have on in terms of "content security" filters.
I'm running just "recommended security rules" here, and BBC isnt getting mod'd...
2nd January 2009, 03:05 PM #15
I'm playing with both methods, but it looks IDENT is going to be the one I go for. I'm runing SP3 and IDENT using smoothwalls version of the old Dans Guardian IDT
By localzuk in forum EduGeek.net Site Problems
Last Post: 6th May 2008, 12:07 PM
By secretlife in forum Virtual Learning Platforms
Last Post: 14th January 2008, 06:00 PM
Last Post: 14th January 2008, 12:00 PM
By simonti in forum Windows
Last Post: 30th November 2007, 09:29 AM
By Simcfc73 in forum Wireless Networks
Last Post: 30th June 2006, 07:55 AM
Users Browsing this Thread
There are currently 1 users browsing this thread. (0 members and 1 guests)