NETGEAR is aware of a growing number of phone and online scams. To learn how to stay safe click here.
Forum Discussion
Solved
[site blocked: ocsp2.globalsign.com] on SRR60
Hi! I get [site blocked: ocsp2.globalsign.com] in my logfiles, preventing me to get access to services when using e.g. appltv and different apps. Also blocking other services like scrive. I've read...
After I sent my log files I got the suggestion to remove the word "sex" from the "blocked keywords" list. After doing that I now don't experience any blocked sites.
Thank you BruceGuo for quick feedback and solution.
//Johan
Thank you BruceGuo, I have sent a PM.
I'm new to Orbi Pro, so it may be a newbie behind the steering wheel cousing this.
But as far as I can tell it's not.
The latest two:
[site blocked: ocsp2.globalsign.com] from source 10.0.1.23, Sunday, October 11, 2020 12:40:12
[site blocked: ocsp2.globalsign.com] from source 10.0.1.6, Saturday, October 10, 2020 09:11:00
Both Apple TV's, and may be related to using Cmore app.
[site blocked: sims4cdn.ea.com] from source 10.0.1.31, Sunday, October 11, 2020 14:59:38
This one is PS4
After I sent my log files I got the suggestion to remove the word "sex" from the "blocked keywords" list. After doing that I now don't experience any blocked sites.
Thank you BruceGuo for quick feedback and solution.
//Johan
BruceGuo can you please spread some light why the keyword blocking with the text sex should have blocked e.g. ocsp2.globalsign.com please? I could understand e.g. on how the University https://www.essex.ac.uk/ or the trucking business http://www.transextransport.ch/ would be blocked. It's of course also possible technical web services could have any combination of chars in the technical URLs - and this can't be the idea that these are blocked... Thank you!
schumaku this feature checks full "URL" with keywords. It is a simple string matching. So your examples would be matched.
BruceGuo wrote:schumaku this feature checks full "URL" with keywords. It is a simple string matching. So your examples would be matched.
Hm, not the University one - because it's https. 8-)
This keyword blocking method implemented is mostly obsolete in times of https. As this "feature" does bring more isues on radnom technical URLs than it can ever resolve, it should be removed.
The reason for the question: On other business products we see a "new" idea for URL blocking - based on catching the DNS queries. Secured/encrypted DNS does also bring this to an end.
Conclusion: This feature is a dead horse overall - unless one does it on the end point.
NETGEAR Academy
Boost your skills with the Netgear Academy - Get trained, certified and stay ahead with the latest Netgear technology!
Join Us!
