First off...

I allow all port 80 to external sites
I allow all port 443 to external sites

Then I have Linkwall lock it all down from there.

I've allowed some specific users to get to 'Welcome to Facebook! |
Facebook' (http://www.facebook.com) and they can get there okay. The
rule I'm allowing this to happen with is *facebook.com/* but when they
try to login, they're blocked because of:

https://login.facebook.com

Port 443 I presume? I'm at a loss. I've put in every combination I
can think of. Any ideas?

Other port 443 authenications (eBay for example) work fine.

Thanks!


--
januismer
------------------------------------------------------------------------
januismer's Profile: http://forums.novell.com/member.php?userid=2986
View this thread: http://forums.novell.com/showthread.php?t=350351

In article <januismer.3io41b@no-mx.forums.novell.com>, Januismer wrote:
> Port 443 I presume? I'm at a loss. I've put in every combination I
> can think of. Any ideas?
>
You will need to add a rule to allow port 443 for sure. (Can't make an
HTTPS rule). The question is really what to allow - it may be as
simple as a TCP port 443 rule for DNS domain facebook.com. (Try that
first). It may be that other url's are involved here, due to redirects
of the traffic once you start connecting to facebook. If you have
common logging enabled, the logs will tell you what is being tried
there. (I recommend RTMonitor to look quickly at the log when
debugging things like this).

Craig Johnson
Novell Support Connection SysOp
*** For a current patch list, tips, handy files and books on
BorderManager, go to http://www.craigjconsulting.com ***

Interesting...

RTMonitor shows me connecting to the our proxy (10.100.4.1) on port
1959. What the heck is that?


--
januismer
------------------------------------------------------------------------
januismer's Profile: http://forums.novell.com/member.php?userid=2986
View this thread: http://forums.novell.com/showthread.php?t=350351