Smoothwall blocking links in emails

[fiza]

We are finding that a lot of emails now have links in them that smoothwall is blocking.

For example Pearson have sent an email with a big purple button on it "Upload your spreadsheet and complete you confirmation form". Hovering over this button you see that it goes to "url4463.customerservices.pearson.com" but clicking the link and Smoothwall kicks in with "The server's certificate did not match the domain name".

 

It doesnt seem to be just Pearson as we have had these kinds of links in lots of emails.

 

Is there any way around this?

[sigma]

Have you tried it from a different browser, offsite/home - anywhere else to prove that Smoothwall is the problem and not actually identifying a security fault or other clickthrough issue?

[bknaggs]

We’ve seen the same. Smoothwall box not happy but cloud filter allows.

[ibpalle]

There's a discussion on this here:

 

https://www.edugeek.net/forums/internet-related-filtering-firewall/236494-smoothwall-help.html

[fiza]

@ibpalle - been so busy lately that I had forgotten I started that thread too!!

I couldnt get the URL pattern suggested by @Steve21 to work. @ibpalle - any ideas how I would enter that pattern into our smoothwall box?

[ibpalle]

The regex listed is specifically for one domain

 

^[A-Za-z0-9.-]*\.medigold-health\.com - medigold-health.com. I'm not a regex shark myself but adding this and change the domains for the links you are seeing blocked could work. Not certain if there are too many domains you are encountering this error on to add all of them to the url patterns field.

 

Add them to a do not inspect policy or a do not filter policy - that will bypass certificate validation for those addresses.

[rossibIT]

Hi,

 

Is this an actually with Smoothwall? When I log into a website I.E Pearson using my phone it says that the site is not secure?

[ibpalle]

Pearson.com seems OK certificate wise.

[rossibIT]

Yes that is fine, but it is when they send out there newsletters with information that is blocked and 'Not Secure'

[ibpalle]

Yes that is fine, but it is when they send out there newsletters with information that is blocked and 'Not Secure'

 

Yes - due the the link going to a redirect URL, where the address does not match the certificate ID.

 

Take a look at this thread:

https://www.edugeek.net/forums/internet-related-filtering-firewall/236494-smoothwall-help.html

[sigma]

If it's still an issue with things from Sendgrid as the other thread implies, they have HUGE problems with fake accounts sending out malware links in emails, so I would be really cautions about nodding them through unfiltered...