Help our site is inaccessible from the outside

I dunno, maybe? I'm pretty much grasping at straws here.. I'm not familiar enough with your firewall to exactly know what those messages mean. You should try to find out.

2 Likes

Yes i will do that, thank you very much for your help.
We never feel alone with the support of let'sencrypt
very helpful team

2 Likes

Which version of FortiOS is that?
Is any device doing HTTPS inspection?
[If so, check which certificate is being used for HTTPS inspection]

1 Like

It also mentions a "Policy ID". Probably worth trying to find out what that policy entails.

2 Likes

It looks normal right now (8:55 US Eastern):

PORT    STATE    SERVICE
22/tcp  filtered ssh
80/tcp  open     http
443/tcp open     https

I also get a normal 200 OK response with HTTPS (it sends the short chain).

Hopefully not just another temporary fix this time.

5 Likes

Screenshot_2022-02-09_08-10-37
8:12 AM UTC-8 and the cert looks good! Nice to see the site is up and accessible again.

6 Likes

@rg305:
In the firewall policy of our site It is mentioned:
Inspection method: SSL Certificate Inspection
CA certificate Fortinet_CA_SSL

@Osiris:
Policy ID Pedagogie vers WAN
Pedagogie is the name of the wifi access point that we use in our office to connect to the internet

Can you please tell me what command did you run to get the results below?
http et https

It is nmap

5 Likes

Thank you very much

3 Likes

For the purpose of testing the availability of "useful ports" :

sudo  nmap -sV -Pnu -p 22,80,443 elearning.univ-bejaia.dz

Port 22 can be omitted from the scan as it is not really a requirement.

Many times an ONLINE SCANNER is a better option to test ports from outside your environment.

Makes it easy so see what ports are open or not (from another perspective).

6 Likes

Thank you very much for this information

2 Likes

This topic was automatically closed 30 days after the last reply. New replies are no longer allowed.