Netgate Discussion Forum
    • Categories
    • Recent
    • Tags
    • Popular
    • Users
    • Search
    • Register
    • Login

    Forbidden

    Scheduled Pinned Locked Moved Off-Topic & Non-Support Discussion
    16 Posts 5 Posters 5.2k Views
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • ?
      Guest
      last edited by

      :-) That is their server denying you access, not your firewall denying access.

      1 Reply Last reply Reply Quote 0
      • JackLJ
        JackL
        last edited by

        You are responsible for the site http://www.bahiatursa.ba.gov.br/?

        The above error has nothing to do with pfSense. Is your (any) under Apache Server denied access to directory pages.

        []`s
        Jack

        Treinamentos de Elite: http://sys-squad.com
        Soluções: https://conexti.com.br

        1 Reply Last reply Reply Quote 0
        • johnpozJ
          johnpoz LAYER 8 Global Moderator
          last edited by

          So when you say you access this site not using pfsense - are you on a different network than pfsense wan IP?

          As stated that error is from their server saying your denied, that has nothing to do with pfsense configuration.

          An intelligent man is sometimes forced to be drunk to spend time with his fools
          If you get confused: Listen to the Music Play
          Please don't Chat/PM me for help, unless mod related
          SG-4860 24.11 | Lab VMs 2.8, 24.11

          1 Reply Last reply Reply Quote 0
          • E
            expedito Banned
            last edited by

            @johnpoz:

            So when you say you access this site not using pfsense - are you on a different network than pfsense wan IP?

            As stated that error is from their server saying your denied, that has nothing to do with pfsense configuration.

            No, I in a same network Wan.

            1 Reply Last reply Reply Quote 0
            • johnpozJ
              johnpoz LAYER 8 Global Moderator
              last edited by

              Well at work here, and if I use our proxy.  I get the same error

              You don't have permission to access / on this server.
              Apache/2.2.16 (Debian) Server at www.bahiatursa.ba.gov.br Port 80

              If I route through my pfsense box at home using vpn connection and proxy through a ssh connection to linux box on my home network using firefox, then it works fine

              Are you clients behind pfsense using any sort of proxy?  Ie are you running squid on pfsense?  Maybe they are doing some sort of proxy detection?

              If I look at the headers using our proxy I see this

              HTTP/1.1 403 Forbidden
              Content-Encoding: gzip
              Content-Length: 241
              Content-Type: text/html; charset=iso-8859-1
              Date: Mon, 25 Feb 2013 16:51:36 GMT
              Keep-Alive: timeout=5
              Proxy-Connection: keep-alive
              Server: Apache/2.2.16 (Debian)
              Vary: Accept-Encoding
              Via: 1.1 webwasher (Webwasher 6.9.0.11735)

              I have to think they are doing some sort of proxy blocking..

              An intelligent man is sometimes forced to be drunk to spend time with his fools
              If you get confused: Listen to the Music Play
              Please don't Chat/PM me for help, unless mod related
              SG-4860 24.11 | Lab VMs 2.8, 24.11

              1 Reply Last reply Reply Quote 0
              • JackLJ
                JackL
                last edited by

                @expedito:

                No, I in a same network Wan.

                I think we're talking about a case of DNS Forwarder.

                Read more about this feature of pfSense: http://doc.pfsense.org/index.php/DNS_Forwarder

                []`s
                Jack

                Treinamentos de Elite: http://sys-squad.com
                Soluções: https://conexti.com.br

                1 Reply Last reply Reply Quote 0
                • E
                  expedito Banned
                  last edited by

                  Hi people!
                  I put de url in "no proxy" configuration of my browser. In Firefox it work but in IE don't work…

                  1 Reply Last reply Reply Quote 0
                  • johnpozJ
                    johnpoz LAYER 8 Global Moderator
                    last edited by

                    So you are using proxy?  How about some details of this proxy setup your using..  Sounds like you directing browsers to an explicit proxy vs transparent if you can over ride using the proxy for specific urls, etc.

                    How do you have proxy setup in firefox?  Can you post your firefox configuration.

                    An intelligent man is sometimes forced to be drunk to spend time with his fools
                    If you get confused: Listen to the Music Play
                    Please don't Chat/PM me for help, unless mod related
                    SG-4860 24.11 | Lab VMs 2.8, 24.11

                    1 Reply Last reply Reply Quote 0
                    • E
                      expedito Banned
                      last edited by

                      Firefox configuration

                      Firefox.png_thumb
                      Firefox.png
                      Firefox.png
                      Firefox.png_thumb

                      1 Reply Last reply Reply Quote 0
                      • johnpozJ
                        johnpoz LAYER 8 Global Moderator
                        last edited by

                        So why are you running the proxy like that?  If you can just bypass the proxy what security does it provide?  Normally if your going to run an explicit proxy, the only thing that is allowed out your network is the proxy.

                        If your allowing the client to bypass, then clearly your allowing direct access - so what is the point of the proxy?

                        What I notice in your bypass is you have bahiatursa.ba.gov.br – but are you trying to access www.bahiatursa ?  I would think you would need the . in front of bhaiatursa to include all subdomains, etc.

                        If I was going to use an explicit proxy like that, I would prob use a pac file to at least attempt to obfuscate the details from the users, and make changes easier for another.  You would only have to make the setting in one location to have all clients use the changes vs having to change every browser setup on the local machine.

                        An intelligent man is sometimes forced to be drunk to spend time with his fools
                        If you get confused: Listen to the Music Play
                        Please don't Chat/PM me for help, unless mod related
                        SG-4860 24.11 | Lab VMs 2.8, 24.11

                        1 Reply Last reply Reply Quote 0
                        • First post
                          Last post
                        Copyright 2025 Rubicon Communications LLC (Netgate). All rights reserved.