OPNsense
  • Home
  • Help
  • Search
  • Login
  • Register

  • OPNsense Forum »
  • English Forums »
  • Web Proxy Filtering and Caching (Moderator: fabian) »
  • TCP_DENIED
« previous next »
  • Print
Pages: [1]

Author Topic: TCP_DENIED  (Read 6727 times)

Johnson

  • Newbie
  • *
  • Posts: 4
  • Karma: 1
    • View Profile
TCP_DENIED
« on: February 27, 2018, 01:58:39 pm »
Hi,
I am using OPNsense 18.1.2_2-amd64, I enabled Transparent Proxy for http & https all the settings are attached,
my issue is, after enabling category filtering from remote access control list, if i try to access gmail.com or mail.google.com sites are not opening, meantime if i check access log, log details are follows.

=======================================================================
1519734398.044 421    192.168.0.100 TCP_MISS/200 614 GET http://detectportal.firefox.com/success.txt - ORIGINAL_DST/184.28.218.41 text/plain
1519734397.617 0    192.168.0.100 TAG_NONE/400 4487 NONE error:invalid-request - HIER_NONE/- text/html
1519734397.617 0    192.168.0.100 TCP_DENIED/403 3894 CONNECT mail.google.com:443 - HIER_NONE/- text/html
1519734397.617 9    192.168.0.100 TAG_NONE/200 0 CONNECT 216.58.196.165:443 - HIER_NONE/- -
1519734397.527 0    192.168.0.100 TAG_NONE/400 4487 NONE error:invalid-request - HIER_NONE/- text/html
1519734397.527 0    192.168.0.100 TCP_DENIED/403 3888 CONNECT www.gmail.com:443 - HIER_NONE/- text/html
1519734397.527 9    192.168.0.100 TAG_NONE/200 0 CONNECT 216.58.196.165:443 - HIER_NONE/- -
1519734397.285 0    192.168.0.100 TAG_NONE/400 4121  %60:%8C%99UY%F3X%17x%9C%C8%87Z%FF%DA%1F%E7y%5B%C7 - HIER_NONE/- text/html
1519734397.285 0    192.168.0.100 TCP_DENIED/403 3888 CONNECT www.gmail.com:443 - HIER_NONE/- text/html
1519734397.284 9    192.168.0.100 TAG_NONE/200 0 CONNECT 216.58.196.165:443 - HIER_NONE/- -
1519734397.080 0    192.168.0.100 TAG_NONE/400 4487 NONE error:invalid-request - HIER_NONE/- text/html
1519734397.080 0    192.168.0.100 TCP_DENIED/403 3888 CONNECT www.gmail.com:443 - HIER_NONE/- text/html
1519734397.080 9    192.168.0.100 TAG_NONE/200 0 CONNECT 216.58.196.165:443 - HIER_NONE/- -
1519734396.811 0    192.168.0.100 TAG_NONE/400 4487 NONE error:invalid-request - HIER_NONE/- text/html
1519734396.811 0    192.168.0.100 TCP_DENIED/403 3888 CONNECT www.gmail.com:443 - HIER_NONE/- text/html
1519734396.810 9    192.168.0.100 TAG_NONE/200 0 CONNECT 216.58.196.165:443 - HIER_NONE/- -
1519734396.508 0    192.168.0.100 TAG_NONE/400 4487 NONE error:invalid-request - HIER_NONE/- text/html
1519734396.508 0    192.168.0.100 TCP_DENIED/403 3888 CONNECT www.gmail.com:443 - HIER_NONE/- text/html
1519734396.508 9    192.168.0.100 TAG_NONE/200 0 CONNECT 216.58.196.165:443 - HIER_NONE/- -
1519734396.330 0    192.168.0.100 TAG_NONE/400 4487 NONE error:invalid-request - HIER_NONE/- text/html
1519734396.330 0    192.168.0.100 TCP_DENIED/403 3888 CONNECT www.gmail.com:443 - HIER_NONE/- text/html
1519734396.329 9    192.168.0.100 TAG_NONE/200 0 CONNECT 216.58.196.165:443 - HIER_NONE/- -
1519734396.075 0    192.168.0.100 TAG_NONE/400 4487 NONE error:invalid-request - HIER_NONE/- text/html
1519734396.075 0    192.168.0.100 TCP_DENIED/403 3888 CONNECT www.gmail.com:443 - HIER_NONE/- text/html
1519734396.075 10    192.168.0.100 TAG_NONE/200 0 CONNECT 216.58.196.165:443 - HIER_NONE/- -
1519734395.784 0    192.168.0.100 TAG_NONE/400 4487 NONE error:invalid-request - HIER_NONE/- text/html
1519734395.784 0    192.168.0.100 TCP_DENIED/403 3888 CONNECT www.gmail.com:443 - HIER_NONE/- text/html
1519734395.784 9    192.168.0.100 TAG_NONE/200 0 CONNECT 216.58.196.165:443 - HIER_NONE/- -
1519734395.375 0    192.168.0.100 TAG_NONE/400 4487 NONE error:invalid-request - HIER_NONE/- text/html
1519734395.375 0    192.168.0.100 TCP_DENIED/403 3888 CONNECT www.gmail.com:443 - HIER_NONE/- text/html
1519734395.374 9    192.168.0.100 TAG_NONE/200 0 CONNECT 216.58.196.165:443 - HIER_NONE/- -
1519734393.125 61327    192.168.0.100 TCP_TUNNEL/200 3306 CONNECT tiles.services.mozilla.com:443 - ORIGINAL_DST/34.216.156.21 -

=======================================================================

Same problem in YouTube also. If i disable category filtering from remote access control list, there is no issue.

Can you help me for this issues.
Logged

Johnson

  • Newbie
  • *
  • Posts: 4
  • Karma: 1
    • View Profile
Re: TCP_DENIED
« Reply #1 on: February 28, 2018, 06:24:09 am »
Issue rectified, after restating firewall once again click download acls & Apply, it's working now.
Logged

  • Print
Pages: [1]
« previous next »
  • OPNsense Forum »
  • English Forums »
  • Web Proxy Filtering and Caching (Moderator: fabian) »
  • TCP_DENIED
 

OPNsense is an OSS project © Deciso B.V. 2015 - 2024 All rights reserved
  • SMF 2.0.19 | SMF © 2021, Simple Machines
    Privacy Policy
    | XHTML | RSS | WAP2