<SOLVED> Endian 2.5.1 blocks microsoft websites since 10th december!

[Guest]

[sourcefinder]

I have EFW 2.5.1 running with IDS, proxy (transparant) and contentfilter. Red networking is static; the IP-adress of the red zone is added as DMZ in the modem.

Since december 10th EFW is blocking ALL microsoft websites (such as www dot microsoft dot com). I didn't change anything in the configuration. I updated snort, restarted the proxy, added .microsoft.com to the contentfiler whitelist, disabled the proxy, opened all ports for ougoing traffic, updated the internet connection (als the DNS server adresses), but nothing works. When I connect a PC directly to the modem, there are no problems. So it must be something in EFW. Has anyone got a clue, or has anyone got the same problem? Thanks in advance!

[fqureshi]

What error you get? May be DNS defined on your Endian is not resolving properly.

[sourcefinder]

I got the standard message: Page cannot be displayed (when trying to reach mspartner.microsoft.com) or The requested URL could not be retrieved, see attached picture.

I connected a second EFW. The configuration of this second EFW is just the same as the first one. Also static RED zone, the same gateway and DNS adresses. On that one I can reach the Microsoft websites without any problem.

[fqureshi]

Hmm weird..
You try to isolate issue by disabling proxy first. Then on a system which is connected to troublesome endian try to run nslookup command and see if it resolve the domain or not. This could be a configuration issue of proxy. Are you using dansguardian or virus filtering? Try to disable those rules and check again.

[sourcefinder]

Thanks for your reaction.

Disabled proxy, IDS and virus filtering. With nslookup (the first time I use that) I got the adress of my EFW. In dos prompt, when i tape the name of the website, such as microsft dot com, the adress of that website is given.

[sourcefinder]

Forgot to mention: microsoft sites stay unreachable. Another EFW on another location has the same problem, also from 10th of december!

[sourcefinder]

OK, today (december 14th) the microsoft sites are working again on both firewalls... Seems to be some kind of bug in some kind of update! Strange that I seem to be the only one having noticed... Seems that EFW is not used by a lot of people, or that all those EFW users don't use Microsoft websites?!

fqureshi, thanks for your reaction on this subject.