HTTP proxy 'Connection reset by peer' with content filter profile

[Guest]

[iandunn]

I was running 2.1.x with the content filter enabled with no problems. I just upgraded to 2.3 and now I'm having problems. It works fine if I have the HTTP proxy on but not running through a content filter profile. If I enable a content filter profile I get this error any time I try to load a page:

The requested URL could not be retrieved
While trying to retrieve the URL: http://postsecret.spot.com/

The following error was encountered:

Connection Failed

The system returned:
(111) Connection refused

The remote host or network may be down. Please try the request again.

If i uncheck 'Activate antivirus scan' it changes to this:

The requested URL could not be retrieved
While trying to retrieve the URL:
http://postsecret.spot.com/
The following error was encountered:
Read Error

The system returned:
(104) Connection reset by peer

An error condition occurred while reading data from the network. Please retry your request.

I've tried creating new access policies and content filter profiles with no luck. The access policy has authentication disabled and no time restriction. The content filter profile is just setup to block porn and gambling sites, with a few dozen sites whitelisted.

[bayross]

So you are running it in Transparent mode correct?
In the "Access Policy" section, choose the "Useragents" such as MSIE > if you will be using Internet Explorer. Save and Apply change and then, you HAVE to REBOOT the firewall.
Garrett

[iandunn]

Yeah, it's in transparent mode. I left the user agents unchecked because I wanted to allow any browser, but I'll test that out. Thanks

[bayross]

Just select all the agents if anything, let me know if that works out for you.

[iandunn]

Yeah, I'm just hoping that doesn't end up restricting any agents that aren't in the list. I'm not on that network right now, but I'll give it a shot later tonight.

[iandunn]

I tried enabling all of the user agents and rebooting, but it still gives the error.

[iandunn]

bump

[Sheldmandu]

Hi, just wanted to report that I've encountered the exact same issue with Endian 2.3 Community Edition.  I've tried all things suggested here like the OP and still getting the same issue.  Also it is rather odd to expect to select specific Browsers and have to Reboot the firewall for these rules to kick in, but either way that didn't help.

[jerrysimila]

hi guys, also facing the same problem with the Endian 2.3 community edition though my colleague has installed the same and it seems to be working perfectly fine for him.

[murtuza]

Even i am facing the same problem. I had also tried all possible solution but still the same.    

[hhf]

I had the same error on 2 different Firewalls with weak hardware (500 MHz AMD K6) on 2.3 community.
The GUI reacted very slow, sometimes pages were not refreshed. (restart squid, load diagrams, etc..)
Afterall I changed hardware to 2 GHz P4. I've never seen the error since this time.
(I made a backup and restored via GUI.) Handling is very fast now, alle errors are gone.

[whoiam55]

Well I too get those error but only when I done something which require reloading/restart of squid/dansguardian. It happen when squid/dansguardian doesn't initialize fully and client made a request.

[gyp_the_cat]

Just out of curiosity, when it does it try the following:

Terminal onto the endian with PuTTY or something similar.

Logon.

Run "Top", and just make sure it's not a resources issue.

Remember this a while ago and it was HAVP taking up all the processor cycles and stopping everything else from working.

[iandunn]

2.3.1 fixed a lot of HTTP proxy bugs, and 2.4 is out now, so I'm going to try upgrading to 2.4 when I get a chance and see if that fixes the issue.