Greetings!
Hans Scheffers schrieb:
> Is there a way to check if somewhere access to a host with http is blocked?
> On our server the normal http isn't reachable since last week, but https
> still works. There was a change in the firewall, but that is changed
> again to what is was.
> I don't get errors in my webserver logs or in the firewall logs
Go onto the firewall and check there for each interface on the packet's way
wether the HTTP packets are really traversing the firewall. Tools like TCPDUMP
(Linux) or SNOOP (Solaris) come in handy here.
If packets are leaving your site but you never receive an answer do the same
check on the webserver.
One problem may be missing or misconfigured NAT (or NAT-routing). Hosts from
your LAN (probably IP addresses corresponding to RFC1918) may not be routed
properly.
Bye
Volker
--
Volker Tanger <volker.tanger@detewe.de>
Wrangelstr. 100, 10997 Berlin, Germany
DiSCON GmbH - Internet Solutions
http://www.discon.de/
_______________________________________________
Firewalls mailing list
Firewalls@lists.gnac.net
http://lists.gnac.net/mailman/listinfo/firewalls