Fedora Linux Support Community & Resources Center
  #1  
Old 21st April 2010, 03:26 PM
mpolo Offline
Registered User
 
Join Date: Jun 2005
Posts: 184
linuxfedorafirefox
Access to certain websites

I have a really strange problem. My local network accesses the Internet through a firewall which consults a websense server before permitting access to the Internet.

From Windows, I can access basically anything I want to, with the occasional Websense page if I accidentally click on a forbidden link.

From Linux, there are some sites that are giving me an error, presumably directly from the firewall -- no Websense logo/message -- saying:

Code:
Error
FW-1 at AL-NHU-ALEMANIA: Access denied.
As I can access the sites from Windows, even using Firefox, it seems to me that I should be able to access the same sites from Linux.

I've been trying to experiment with telnetting to port 80, but I'm not good enough at manually accessing.

Code:
$ telnet easyjet.com 80
Trying 213.174.196.170...
Connected to easyjet.com.
Escape character is '^]'.
get / http/1.1

HTTP/1.0 301 Moved Permanently
Location: http://www.easyjet.com/
Connection: Keep-Alive
Content-Length: 0
I don't know how to follow that 301, and so I don't know if I am actually "out there". But I think that I am, because the result is different on youtube:

Code:
$ telnet www.youtube.com 80
Trying 216.239.59.139...
Connected to www.youtube.com.
Escape character is '^]'.
get / http/1.1
Host: www.youtube.com:80

HTTP/1.0 400 Bad Request
Content-Type: text/html; charset=UTF-8
Content-Length: 1350
Date: Wed, 21 Apr 2010 14:22:12 GMT
Server: GFE/2.0



<html><head>
<meta http-equiv="content-type" content="text/html;charset=utf-8">
<title>400 Bad Request</title>
<style><!--
body {font-family: arial,sans-serif}
div.nav {margin-top: 1ex}
div.nav A {font-size: 10pt; font-family: arial,sans-serif}
span.nav {font-size: 10pt; font-family: arial,sans-serif; font-weight: bold}
div.nav A,span.big {font-size: 12pt; color: #0000cc}
div.nav A {font-size: 10pt; color: black}
A.l:link {color: #6f6f6f}
A.u:link {color: green}
//--></style>
<script><!--
var rc=400;
//-->
</script>
</head>
<body text=#000000 bgcolor=#ffffff>
<table border=0 cellpadding=2 cellspacing=0 width=100%><tr><td rowspan=3 width=1% nowrap>
<b><font face=times color=#0039b6 size=10>G</font><font face=times color=#c41200 size=10>o</font><font face=times color=#f3c518 size=10>o</font><font face=times color=#0039b6 size=10>g</font><font face=times color=#30a72f size=10>l</font><font face=times color=#c41200 size=10>e</font>&nbsp;&nbsp;</b>
<td>&nbsp;</td></tr>
<tr><td bgcolor="#3366cc"><font face=arial,sans-serif color="#ffffff"><b>Error</b></td></tr>
<tr><td>&nbsp;</td></tr></table>
<blockquote>
<H1>Bad Request</H1>
Your client has issued a malformed or illegal request.

<p>
</blockquote>
<table width=100% cellpadding=0 cellspacing=0><tr><td bgcolor="#3366cc"><img alt="" width=1 height=4></td></tr></table>
</body></html>
Connection closed by foreign host.
Any ideas of why I can seeming communicate with these sites with Telnet, but not with Firefox? Or ideas as to how I can further debug this?

Thanks for any suggestions.
Reply With Quote
  #2  
Old 22nd April 2010, 07:42 PM
David Becker Offline
Registered User
 
Join Date: Feb 2006
Posts: 780
linuxfedorafirefox
Re: Access to certain websites

Quote:
Originally Posted by mpolo View Post
I have a really strange problem. My local network accesses the Internet through a firewall which consults a websense server before permitting access to the Internet.

From Windows, I can access basically anything I want to, with the occasional Websense page if I accidentally click on a forbidden link.
This might help:

https://addons.mozilla.org/en-US/firefox/addon/59
Quote:
Originally Posted by mpolo View Post
...
get / http/1.1
Host: www.youtube.com:80
IIRC, "http" and "get" should be capitalised. It would seem that the previous server should have generated a bad request as well.

Quote:
Originally Posted by mpolo View Post
...
Any ideas of why I can seeming communicate with these sites with Telnet, but not with Firefox? Or ideas as to how I can further debug this?
Ask the websense administrator to explain.

David
Reply With Quote
  #3  
Old 23rd April 2010, 11:43 AM
mpolo Offline
Registered User
 
Join Date: Jun 2005
Posts: 184
windows_7ie
Re: Access to certain websites

I already talked to the Websense administrator, and got a "Working on Windows, ticket closed" message...

The User Agent Switcher makes no difference. Accessing as IE8, I still get an "Access Denied" message (not a Websense message).

Capitalizing GET does get me successfully into the website via Telnet. (GET / gives me a 302 moved, but gives the new location, then GET /LanguageSelector.mvc gives me a huge page of HTML that is obviously really from easyjet.com.)

EDIT: Interesting. I can access the sites in Opera. I must have an extension in Firefox that is causing the problems.

Last edited by mpolo; 23rd April 2010 at 02:13 PM. Reason: More info.
Reply With Quote
  #4  
Old 23rd April 2010, 02:29 PM
BugRocks1's Avatar
BugRocks1 Offline
Registered User
 
Join Date: Jan 2010
Posts: 897
linuxfedorafirefox
Re: Access to certain websites

If it is an firefox extension you could try using firefox in safemode:

Quote:
firefox -safe-mode
For tracing the path you can use:

Quote:
tracepath http://www.easyjet.com/
For seeing if you can access the thing use ping and nslookup
If those work it is not the network probably.
Reply With Quote
  #5  
Old 23rd April 2010, 04:24 PM
mpolo Offline
Registered User
 
Join Date: Jun 2005
Posts: 184
linuxfedorafirefox
Re: Access to certain websites

Firefox in Safe mode can't access the site. Opera (out of the box) can. So maybe I need to file some sort of a bug report with Mozilla, but I have no idea how to pin down the problem in a synthetic bug report.

tracepath/tracert don't work from behind our firewall, but nslookup works, as does ping (easyjet doesn't answer the ping, but youtube does, and both sites are problematic in Firefox).
Reply With Quote
  #6  
Old 24th April 2010, 01:32 AM
BugRocks1's Avatar
BugRocks1 Offline
Registered User
 
Join Date: Jan 2010
Posts: 897
linuxfedorafirefox
Re: Access to certain websites

Just a suggestion you could attach a wireshark trace showing the connection failure. I don't know how to debug firefox other then using strace. There is a way but you need to download all debug packages (1 GB + of data) and run gdb.

---------- Post added at 02:43 PM CDT ---------- Previous post was at 02:41 PM CDT ----------

By the way, by any chance have you disable IPv6 on firefox in the about:config?

That is apparently the source of a lot of pain these days.

---------- Post added at 04:32 PM CDT ---------- Previous post was at 02:43 PM CDT ----------

Reading what I wrote it kind of make one believe they need to enable IPv6 on firefox when what I really meant was to say that IPv6 should be disabled
Reply With Quote
  #7  
Old 24th April 2010, 11:57 AM
PompeyBlue's Avatar
PompeyBlue Offline
Registered User
 
Join Date: Jun 2004
Location: Portsmouth, UK
Posts: 444
linuxfedorafirefox
Re: Access to certain websites

Definately this is a matter for wireshark to see what's happening. If you are connecting on port 80 then you are coinnecting, simple as that. The 302, site moved, is just redirecting you to another locaiton which your browser will automatically navigate to. As you found, telneting to the new connection works for you too.

You need to see what requests and responses you are getting back to move this forward, and for that you need wireshark.
Reply With Quote
  #8  
Old 24th April 2010, 10:27 PM
mpolo Offline
Registered User
 
Join Date: Jun 2005
Posts: 184
linuxfedorafirefox
Re: Access to certain websites

Quote:
Originally Posted by BugRocks1 View Post
By the way, by any chance have you disable IPv6 on firefox in the about:config?

That is apparently the source of a lot of pain these days.
IPv6 was disabled, by enabling it, I can now access those sites. Interesting indeed. Thanks for the tip.

(I had already downloaded Wireshark, but was loath to sort through the results. You just saved me the trouble.)

---------- Post added at 09:27 PM CDT ---------- Previous post was at 07:47 PM CDT ----------

Well, that's just strange. After activating IPv6, I could access the front page of youtube once, but the next time I tried to get to either youtube or easyjet, I got the now-familiar "Access denied" page. I will have to play with wireshark, it appears.
Reply With Quote
Reply

Tags
access, websites

Thread Tools Search this Thread
Search this Thread:

Advanced Search
Display Modes

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is On
HTML code is Off

Forum Jump

Similar Threads
Thread Thread Starter Forum Replies Last Post
Cannot access some websites in FC6? riverotter Guides & Solutions (No Questions) 0 8th March 2007 01:43 PM
Help I can only access Fedora/Redhat websites. I can't access other sites knadoor Using Fedora 0 8th March 2007 04:47 AM
fc2 unable to access some websites erikgig EOL (End Of Life) Versions 14 28th September 2004 01:49 PM
why mozilla does not access some websites? henryu Using Fedora 20 3rd September 2004 01:13 AM


Current GMT-time: 02:39 (Friday, 24-05-2013)

TopSubscribe to XML RSS for all Threads in all ForumsFedoraForumDotOrg Archive
logo

All trademarks, and forum posts in this site are property of their respective owner(s).
FedoraForum.org is privately owned and is not directly sponsored by the Fedora Project or Red Hat, Inc.

Privacy Policy | Term of Use | Posting Guidelines | Archive | Contact Us | Founding Members

Powered by vBulletin® Copyright ©2000 - 2012, vBulletin Solutions, Inc.

FedoraForum is Powered by RedHat