Topic: Office Depot and Staples

[Stefano]

i read "denied" so it's not unreachable, just denied (proxyed)

[dwalton]

dwalton

Did you do a post upgrade & a reboot on the server to allow that setting change to take effect ?
ie refer to the Dansguardian wiki article re how to reset to default behaviour using port 3128

http://wiki.contribs.org/Dansguardian#Configuring_your_system_to_force_Dansguardian_usage_.26_prevent_bypassing

config setprop squid TransparentPort 3128
config setprop squid Transparent yes
config delprop dansguardian portblocking
signal-event post-upgrade; signal-event reboot

Ok I ran the commands in putty. I have set my proxy to 3128. Still same issue.

Notice Office Depot and Staples giving a 408 error

Tue Mar 31 13:14:01 2015  33837 10.0.1.10 TCP_MISS/200 690024 CONNECT 10.0.1.1:443 dwalton DIRECT/10.0.1.1 -
Tue Mar 31 13:14:14 2015  20120 10.0.1.10 TCP_MISS/408 482 GET http://www.staples.com/ dwalton DIRECT/172.226.50.223 text/html
Tue Mar 31 13:14:50 2015  23628 10.0.1.10 TCP_MISS/200 460715 CONNECT 10.0.1.1:443 dwalton DIRECT/10.0.1.1 -
Tue Mar 31 13:14:53 2015  60591 10.0.1.10 TCP_MISS/200 4755 CONNECT tiles.services.mozilla.com:443 dwalton DIRECT/54.69.103.231 -
Tue Mar 31 13:15:15 2015  20058 10.0.1.10 TCP_MISS/408 482 GET http://www.officedepot.com/ dwalton DIRECT/172.233.33.19 text/html

I have not upgraded to SME 8.0 because I am using dungog-tmda and there is no support after 7.5.1. On that note since I tried running Clear OS 6.0 . and having the exact same issue.

However I can ping both websites and I do get a reply from both

[dwalton]

dwalton

Yes I agree.
dwalton, what does avast mean to you, are you using that antivirus system or some external AV proxy ???

Yes I am suing AVG avast.I set the avast.com to the allowed list and this cleared up on the logs.

[dwalton]

Thank you for everyone who is trying to resolve my issue.

1. Let me re-iterate. I can set it to transparent proxy and still cannot access those 2 websites form wither SME or Clear OS
2. I can access anything else out there. HP, Canon, Dell, Google, Espn, CNN etc...
3. If I bypass the SME or the Clear OS servers and plug in directly to the router provided by my ISP I have no problem reaching the 2 sites (Thinking I was blacklisted, but I am not)

4. Does anyone else have a problem accessing those 2 sites behind the proxy?

[janet]

dwalton

I can access both those sites using Firefox OK, from behind a sme 8.1 server using ADSL2+ in Australia.
I can access them OK from another location via mobile.

Your tests are suggestive that sme server is not involved in this problem
ie another completely different OS has the same issue, so it is likely an external issue or a configuration issue.
You also said you made no changes to your sme server when the problem occurred, so something external happened.

Have you googled 408 errors, the answers are suggestive the problem is timimg issues with the website, but timing issues could happen anywhere in the route.

Also you did not answer one of my earlier questions
ie
"I would also ask, do you have a specific DNS server setup in your sme server, look in server manager panel to see, if you are unsure ?"
Look in server manager, configuration, Domains, Modify Corporate DNS settings.
There should be (in most situations) no DNS servers shown there, as sme server is capable of resolving requests itself.
If there are DNS server(s) shown, then maybe those are having problems with resolving staples & depot sites in question.

In either case, as you say you have success when connecting directly to your ISP via the router, then you could try setting the same ISP's DNS servers here, & see what happens then.
Check your router or ISP site for details of their DNS servers.

As I said earlier, & which has been reported many times here over the years, DNS servers can have problems even with just one specific website, for a variety of reasons ie stale info etc.

What is your location & who is your ISP, perhaps others who use the same ISP or are in your location can test those problematic sites.

You could also try setting up a sme8.1 server & leave all settings at defaults except the basic settings you need to make to attach to your network.

[Stefano]

you can re-iterate as many times you want, but:
- you are using an old and unsupported version
- you have the same issue using a brad new distro
- you just keep asking for how to solve the issue

anyway, HTTP Error 408 means Request timeout.. my guess is that if there's a proxy in the middle, something is wrong on remote side..
and that's is demostrated by the fact that changing squid version things don't change, but removing/bypassing proxy, everything works again.

[janet]

dwalton

Yes I am suing AVG avast.I set the avast.com to the allowed list and this cleared up on the logs.

Exactly which "allowed list" are you referring to.

[janet]

dwalton

I have not upgraded to SME 8.0 because I am using dungog-tmda and there is no support after 7.5.1.

You have an insecue server with known vulnerabilities !
Why are you concerned about spam when your server is at risk of easily being hacked ?
You should upgrade immediately to at least sme8.1 or better still make the switch to sme9.
You do not need tmda & it is not supported anymore, better implementations of spam filtering techniques exist in sme8 & 9, so rely on those.
If you really want, enable greylisting & you probably will not receive a single piece of spam.

[Stefano]

if you upgrade to SME 8/9, you have the always_direct directive in squid and you'd solve your problem with a custom fragment

it's up to you..

moreover, since 7.5.1 is unsupported, your question is OT in this forum

[dwalton]

dwalton

I can access both those sites using Firefox OK, from behind a sme 8.1 server using ADSL2+ in Australia.
I can access them OK from another location via mobile.

Your tests are suggestive that sme server is not involved in this problem
ie another completely different OS has the same issue, so it is likely an external issue or a configuration issue.
You also said you made no changes to your sme server when the problem occurred, so something external happened.

Have you googled 408 errors, the answers are suggestive the problem is timimg issues with the website, but timing issues could happen anywhere in the route.

Also you did not answer one of my earlier questions
ie
"I would also ask, do you have a specific DNS server setup in your sme server, look in server manager panel to see, if you are unsure ?"
Look in server manager, configuration, Domains, Modify Corporate DNS settings.
There should be (in most situations) no DNS servers shown there, as sme server is capable of resolving requests itself.
If there are DNS server(s) shown, then maybe those are having problems with resolving staples & depot sites in question.

In either case, as you say you have success when connecting directly to your ISP via the router, then you could try setting the same ISP's DNS servers here, & see what happens then.
Check your router or ISP site for details of their DNS servers.

As I said earlier, & which has been reported many times here over the years, DNS servers can have problems even with just one specific website, for a variety of reasons ie stale info etc.

What is your location & who is your ISP, perhaps others who use the same ISP or are in your location can test those problematic sites.

You could also try setting up a sme8.1 server & leave all settings at defaults except the basic settings you need to make to attach to your network.

I have nothing in my DNS set up. It is blank
I am using Verizon Fios and I am located in Dallas TX.
I have no problem installing the newest freshest version but I am not sure that will solve this issue.

[Stefano]

not out of the box, but, I repeat, you can customize it "in the SME way" and solve it

[janet]

dwalton

I have nothing in my DNS set up. It is blank

OK fine, so that means you do not have a specific DNS server configured in sme server setups, that might have been causing a problem.

Then I suggest as an experiment, that you enter your ISPs DNS server address, the same one that is used by your router in standalone mode,
then check access to those sites.

Edit:
A quick Google search found numerous issues using Verizon FiOS DNS server eg causing slow response times.
Sounds similar to your issues, so maybe you need to specify Googles DNS servers or some other Public DNS service eg google is
8.8.8.8
see one search result example here, but please search for yourself as there are plenty of other problems users are reporting
eg search on Verizon FIOS DNS servers
https://www.getharvest.com/help/i-use-verizon-fios-and-am-having-trouble-connecting-to-harvest

[dwalton]

dwalton
OK fine, so that means you do not have a specific DNS server configured in sme server setups, that might have been causing a problem.

Then I suggest as an experiment, that you enter your ISPs DNS server address, the same one that is used by your router in standalone mode,
then check access to those sites.

Edit:
A quick Google search found numerous issues using Verizon FiOS DNS server eg causing slow response times.
Sounds similar to your issues, so maybe you need to specify Googles DNS servers or some other Public DNS service eg google is
8.8.8.8
see one search result example here, but please search for yourself as there are plenty of other problems users are reporting
eg search on Verizon FIOS DNS servers
https://www.getharvest.com/help/i-use-verizon-fios-and-am-having-trouble-connecting-to-harvest

Janet,

I want to thank you and everyone here. You have been very diligent in helping me with this issue. I followed your suggestions and behold you nailed it.

I changed the DNS as you suggested first trying googles public dns 8.8.8.8 and 8.8.4.4 and I was able to get to staples.com. Wow I was thrilled.  I then tried office depot but still had the dreaded "request timeout". SO i tried a different public primary and secondary DNS and so far so good.

Of course I will test across the network tomorrow during work hours... I am not sure how I will address this with my ISP provider. They will claim its not there issue,  because I can get to it just fine if i remove the sme server.

I can't thank you enough for your help and not giving up on my issue.

Respectfully
DLW