Slow work after block port 80

Discuss your pilot or production implementation with other Zimbra admins or our engineers.
GlooM
Advanced member
Advanced member
Posts: 93
Joined: Sat Sep 13, 2014 12:50 am

Slow work after block port 80

Postby GlooM » Tue Mar 05, 2013 6:00 am

Hello.
I am use Zimbra OSE 8.0.2.

On this server I've set up "https only" access mode. In our company we have 2 groups of users: first group with internet access; second - without internet, but with access to internal corporate resourses. Firewall rules for second group of users include block any activity to port 80 (http protocol). As I say, zimbra server works on https (443 port), but we have problem with users from second group (80 block, but 443 on zimbra server accept). This problem is slow work (zimbra authorization page and sending emails from web-interface) in comparison with users at which the port 80 is open. Why blocking of port 80 creates problems if the server works at port 443?


kruon
Advanced member
Advanced member
Posts: 83
Joined: Sat Sep 13, 2014 12:36 am

Slow work after block port 80

Postby kruon » Tue Mar 05, 2013 6:46 am

Create another firewall rule and explicitly allow traffic from office network to zimbra host on port 80, place it on higher priority than the block 80 rule in firewall.

See if that speeds up the login.
GlooM
Advanced member
Advanced member
Posts: 93
Joined: Sat Sep 13, 2014 12:50 am

Slow work after block port 80

Postby GlooM » Tue Mar 05, 2013 7:32 am

Yes, with additional firewall rule with opening port 80 to zimbra, login and emails send functioning with normal speed.

But why zimbra use port 80 (unsecure) if it work on port 443 ?
kruon
Advanced member
Advanced member
Posts: 83
Joined: Sat Sep 13, 2014 12:36 am

Slow work after block port 80

Postby kruon » Wed Mar 06, 2013 1:27 am

Maybe some zimlets are trying to call port 80?

You could install Fiddler and trace the connection.

The trace should show all connections using HTTP rather than
I">HTTPS
I
tested this against 7.x and didn't see any calls using HTTP in the connection with default enabled zimlets.

Return to “Administrators”

Who is online

Users browsing this forum: No registered users and 9 guests