Since CU 169, blocking of some sites in the URL filter

Hello everyone,

Since CU 169 (and 170), http sites are randomly blocked in the URL filter, the following message appears: “The XXX site has refused the connection.”

Note: These are official sites, not blocked by URL filtering categories (for eg. ip-api.com, sytadin.fr, etc.)

This message does not appear to be from IPFire, however:

  • By going to the URL filter and adding the site concerned to the custom white list, access to the site is again possible.

  • Then if the same site is deleted from the custom whitelist, access to the site is still possible (even by emptying the browser cache)

If it helps, excerpt from /var/log/squid/access.log (ip-api.com is the site that was blocked) :

1663506067.040 33 192.168.1.22 TCP_MISS/200 430 GET http://ip-api.com/csv - HIER_DIRECT/208.95.112.1 text/plain
1663506088.880 0 192.168.1.22 NONE_NONE/000 0 - error:transaction-end-before-headers - HIER_NONE/- -