Occasionally blocked images.

mariusgggg · ‎05-30-2012

Hi,

I have a problem with my WSA. Occasionally I get blocked images from different websites. For example www.onet.pl, I can see from accesslogs that url's for particular images are blocked because they are uncategorized, here is the log:

1338371176.706 14 172.17.1.100 TCP_DENIED/403 0 GET http://m.ocdn.eu/_m/099ba62d22f9e0d4b773476131d32c8a,33,29,0-39-510-185-0.jpg - NONE/- - BLOCK_WEBCAT_11-q4TestPolicy-q4net-DefaultGroup-NONE-NONE-NONE <nc,-5.8,-,"-",-,-,-,-,"-",-,-,-,"-",-,-,"-","-",-,-,nc,-,"-","spam","Unknown","Unknown","-","-",0.00,0,-,"-","-"> - nc -

71176.705 22 172.17.1.100 TCP_DENIED/403 0 GET http://m.ocdn.eu/_m/cdca3ac43d141df7651494d1309e7843,45,29,0-0-752-441-0.jpg - NONE/- - BLOCK_WEBCAT_11-q4TestPolicy-q4net-DefaultGroup-NONE-NONE-NONE <nc,-5.8,-,"-",-,-,-,-,"-",-,-,-,"-",-,-,"-","-",-,-,nc,-,"-","spam","Unknown","Unknown","-","-",0.00,0,-,"-","-"> - nc -

1338371176.706 15 172.17.1.100 TCP_DENIED/403 0 GET http://m.ocdn.eu/_m/8deb5caed155599ba4f0d9cd346d6b46,33,29,0-98-398-224-0.jpg - NONE/- - BLOCK_WEBCAT_11-q4TestPolicy-q4net-DefaultGroup-NONE-NONE-NONE <nc,-5.8,-,"-",-,-,-,-,"-",-,-,-,"-",-,-,"-","-",-,-,nc,-,"-","spam","Unknown","Unknown","-","-",0.00,0,-,"-","-"> - nc -

I created custom url: m.ocdn.eu and "allow" it but that is not permanent solution.

Any help would be much appreciated.

sfiebran · ‎06-01-2012

From the logs, these request got blocked due Web Categorization. E.g. do you block non-categorized request or request with a score of -5.8?

-Stephan

mariusgggg · ‎06-01-2012

Thanks for replay,

We block non-categorized request.

Mariusz.

sfiebran · ‎06-01-2012

Then this is the reason why. As of the accesslog entry, you can see the URl is not categorzied ("nc"), hence the request will be blocked if set to block. An custom category will always overwrite, so this is working as workaround. You may want to consider then to not block non-categorized URL's.

In case it is just about this specifiy URL, you can always as customer open a support case to let the page get categorized if feasable.

-Stephan