Добрый день!
Имею: Домен на windows server 2008 R2. В составе домена так же имеется сервер windows Server 2008 R2 std с установленным на нем TMG 2010 std без Service Pack 1. TMG 2010 настроен по шаблону как прокси с одной сетевой картой.
после базовой настройки нарвался на то, что прокси не выпускает в интернет вебпрокси-клиентов (то бишь любой браузер с настроенной прокси в интернет не выходит), в логах сервера TMG сообщается, что соединение идет от anonymous. Следовательно, после открывания
любой странички из интернета, имею отчет в браузере:
Error Code: 502 Proxy Error. Forefront TMG denied the specified Uniform Resource Locator (URL). (12202)
В свойствах networksinternal я выставил внутренний диапазон сети 192.168.0.0/23 (как и следовало для моей топологии сети)
Правила применяются только для authentificated users.
Авторизация на вебпрокси — integrated. (NetworkingInternalPropertiesWeb proxyAuthentification)
Из правил включены только правила web access policy которое разрешает all users ходить с internal на internal (согласно документации в technet).
вопрос: как исправить сие безобразие? что это баг или мои ошибки?
Cпасибо.
Содержание
- 502 proxy error forefront tmg denied the specified uniform resource locator url 12202
- Asked by:
- Question
- All replies
- 502 proxy error forefront tmg denied the specified uniform resource locator url 12202
- Вопрос
- 502 proxy error forefront tmg denied the specified uniform resource locator url 12202
- Asked by:
- Question
- All replies
- 502 proxy error forefront tmg denied the specified uniform resource locator url 12202
- Asked by:
- Question
- All replies
- 502 proxy error forefront tmg denied the specified uniform resource locator url 12202
- Вопрос
- Все ответы
502 proxy error forefront tmg denied the specified uniform resource locator url 12202
This forum is closed. Thank you for your contributions.
Asked by:
Question
I m trying to allow access to a ftp website for my users.
but this is the error message i get from my TMG 2010.
- Error Code: 502 Proxy Error. Forefront TMG denied the specified Uniform Resource Locator (URL). (12202)
- IP Address: 172.28.5.67
- Date: 9/6/2011 6:05:18 AM [GMT]
- Server: tmg2010.domain.corp
- Source: proxy
the access is created under allow web access for all users —
Conditions — all users.
is my access rule correct ?
Try enable logging. Do the packets match the rule?
Try FTP over HTTP to add in same condition from INTERNAL -> to EXTERNAL -> ALL USERS.
Also check yours FTP SERVER and services. I try to access to ftp://ftp.impactbbdo.ae/ but nothing.
Later i try to access to the impactbbdo.ae and i see authentication for this (Username and Password).
Best regards Abdagic Ahmet Disclaimer: This posting is provided AS-IS with no warranties or guarantees and confers no rights.
the ftp server do not belong to my organization.
when i tried ftp over http
this is the error i get.
Technical Information (for support personnel)
- Error Code 10061: Connection refused
- Background: The server you are attempting to access has refused the connection with the gateway. This usually results from trying to connect to a service that is inactive on the server.
- Date: 9/6/2011 9:55:55 AM [GMT]
- Server: tmg2010.domain.corp
- Source: Remote server
no issue with the ftp site if i do not use my company proxy. eg mobile boardband.
Источник
502 proxy error forefront tmg denied the specified uniform resource locator url 12202
Вопрос
i’ve read through this:
but i am still confused as to which custom error page to edit in Program FilesMicrosoft Forefront Threat Management GatewayTemplatesWebObjectsTemplatesISA.
below is the default text i’m seeing when i try to get to the blocked yahoo.com. first it says «error code 502,» and then at the end it has «12202.» but when i edit the «502.htm» file, it doesn’t look like this. it only says » HTTP 502: Bad gateway. There was an invalid response.»
in the tmg logs, the failure details say «Status: 12202 Forefront TMG denied the specified Uniform
Resource Locator (URL). «
but i don’t see a «12202.htm» file in the templates folder, so which template is this error page coming from? in the technet link above, the only codes with «denied the specified uniform» in their description are 12231, 12232, and 12233.
this is cut and pasted from the error page i see:
Technical Information (for support personnel)
- Error Code: 502 Proxy Error. Forefront TMG denied the specified Uniform Resource Locator (URL). (12202).
- IP Address: [removed]
- Date: 3/13/2012 7:18:30 PM [GMT]
- Server: [removed]
- Source: proxy
Источник
502 proxy error forefront tmg denied the specified uniform resource locator url 12202
This forum is closed. Thank you for your contributions.
Asked by:
Question
I m trying to allow access to a ftp website for my users.
but this is the error message i get from my TMG 2010.
- Error Code: 502 Proxy Error. Forefront TMG denied the specified Uniform Resource Locator (URL). (12202)
- IP Address: 172.28.5.67
- Date: 9/6/2011 6:05:18 AM [GMT]
- Server: tmg2010.domain.corp
- Source: proxy
the access is created under allow web access for all users —
Conditions — all users.
is my access rule correct ?
Try enable logging. Do the packets match the rule?
Try FTP over HTTP to add in same condition from INTERNAL -> to EXTERNAL -> ALL USERS.
Also check yours FTP SERVER and services. I try to access to ftp://ftp.impactbbdo.ae/ but nothing.
Later i try to access to the impactbbdo.ae and i see authentication for this (Username and Password).
Best regards Abdagic Ahmet Disclaimer: This posting is provided AS-IS with no warranties or guarantees and confers no rights.
the ftp server do not belong to my organization.
when i tried ftp over http
this is the error i get.
Technical Information (for support personnel)
- Error Code 10061: Connection refused
- Background: The server you are attempting to access has refused the connection with the gateway. This usually results from trying to connect to a service that is inactive on the server.
- Date: 9/6/2011 9:55:55 AM [GMT]
- Server: tmg2010.domain.corp
- Source: Remote server
no issue with the ftp site if i do not use my company proxy. eg mobile boardband.
Источник
502 proxy error forefront tmg denied the specified uniform resource locator url 12202
This forum is closed. Thank you for your contributions.
Asked by:
Question
I m trying to allow access to a ftp website for my users.
but this is the error message i get from my TMG 2010.
- Error Code: 502 Proxy Error. Forefront TMG denied the specified Uniform Resource Locator (URL). (12202)
- IP Address: 172.28.5.67
- Date: 9/6/2011 6:05:18 AM [GMT]
- Server: tmg2010.domain.corp
- Source: proxy
the access is created under allow web access for all users —
Conditions — all users.
is my access rule correct ?
Try enable logging. Do the packets match the rule?
Try FTP over HTTP to add in same condition from INTERNAL -> to EXTERNAL -> ALL USERS.
Also check yours FTP SERVER and services. I try to access to ftp://ftp.impactbbdo.ae/ but nothing.
Later i try to access to the impactbbdo.ae and i see authentication for this (Username and Password).
Best regards Abdagic Ahmet Disclaimer: This posting is provided AS-IS with no warranties or guarantees and confers no rights.
the ftp server do not belong to my organization.
when i tried ftp over http
this is the error i get.
Technical Information (for support personnel)
- Error Code 10061: Connection refused
- Background: The server you are attempting to access has refused the connection with the gateway. This usually results from trying to connect to a service that is inactive on the server.
- Date: 9/6/2011 9:55:55 AM [GMT]
- Server: tmg2010.domain.corp
- Source: Remote server
no issue with the ftp site if i do not use my company proxy. eg mobile boardband.
Источник
502 proxy error forefront tmg denied the specified uniform resource locator url 12202
Вопрос
I m trying to allow access to a ftp website for my users.
but this is the error message i get from my TMG 2010.
- Error Code: 502 Proxy Error. Forefront TMG denied the specified Uniform Resource Locator (URL). (12202)
- IP Address: 172.28.5.67
- Date: 9/6/2011 6:05:18 AM [GMT]
- Server: tmg2010.domain.corp
- Source: proxy
the access is created under allow web access for all users —
Conditions — all users.
is my access rule correct ?
Все ответы
Try enable logging. Do the packets match the rule?
Try FTP over HTTP to add in same condition from INTERNAL -> to EXTERNAL -> ALL USERS.
Also check yours FTP SERVER and services. I try to access to ftp://ftp.impactbbdo.ae/ but nothing.
Later i try to access to the impactbbdo.ae and i see authentication for this (Username and Password).
Best regards Abdagic Ahmet Disclaimer: This posting is provided AS-IS with no warranties or guarantees and confers no rights.
the ftp server do not belong to my organization.
when i tried ftp over http
this is the error i get.
Technical Information (for support personnel)
- Error Code 10061: Connection refused
- Background: The server you are attempting to access has refused the connection with the gateway. This usually results from trying to connect to a service that is inactive on the server.
- Date: 9/6/2011 9:55:55 AM [GMT]
- Server: tmg2010.domain.corp
- Source: Remote server
no issue with the ftp site if i do not use my company proxy. eg mobile boardband.
Источник
«502 Proxy Error» error code when you try to access a website from a computer that has Forefront TMG 2010 SP1 installed
Consider the following scenario:
You click to select Enable HTTPS inspection check box on the General tab of the HTTPS Outbound Inspection dialog box on a computer that has Microsoft Forefront Threat Management Gateway (TMG) 2010 Service Pack 1 (SP1) installed.
You add a domain name set, and then you add a Fully Qualified Domain Name (FQDN) of a website to the set. You set the Certificates field to No Validation in the Destination Exceptions tab.
Note When the No Validation option is set, Forefront TMG 2010 SP1 cannot retrieve and validate the server certificate of Forefront TMG 2010 SP1.
In this scenario, you receive an error message that resembles the following when you try to access the website from the computer:
Error Code: 502 Proxy Error. The network logon failed. (1790)
Symptoms
This issue occurs because Forefront TMG 2010 SP1 sends an empty client certificate to the web server during the initial Secure Sockets Layer (SSL) handshake.
When certain web servers receive an empty client certificate, these servers accept and renegotiate the client certificate. For example, IIS web servers accept and renegotiate the client certificate. However, other web servers may return an SSL error when these web servers receive an empty client certificate. Therefore, Forefront TMG displays the error message.
Cause
Update information
To resolve this issue, install the software update that is described in the following Microsoft Knowledge Base (KB) article:
2288910 Software Update 1 for Microsoft Forefront Threat Management Gateway (TMG) 2010 Service Pack 1
Resolution
Microsoft has confirmed that this is a problem in the Microsoft products that are listed in the «Applies to» section.
Status
For more information about software update terminology, click the following article number to view the article in the Microsoft Knowledge Base:
824684 Description of the standard terminology that is used to describe Microsoft software updates
Источник
502 proxy error forefront tmg denied the specified uniform resource locator url 12202
This forum is closed. Thank you for your contributions.
Asked by:
Question
I m trying to allow access to a ftp website for my users.
but this is the error message i get from my TMG 2010.
- Error Code: 502 Proxy Error. Forefront TMG denied the specified Uniform Resource Locator (URL). (12202)
- IP Address: 172.28.5.67
- Date: 9/6/2011 6:05:18 AM [GMT]
- Server: tmg2010.domain.corp
- Source: proxy
the access is created under allow web access for all users —
Conditions — all users.
is my access rule correct ?
All replies
Try enable logging. Do the packets match the rule?
Try FTP over HTTP to add in same condition from INTERNAL -> to EXTERNAL -> ALL USERS.
Also check yours FTP SERVER and services. I try to access to ftp://ftp.impactbbdo.ae/ but nothing.
Later i try to access to the impactbbdo.ae and i see authentication for this (Username and Password).
Best regards Abdagic Ahmet Disclaimer: This posting is provided AS-IS with no warranties or guarantees and confers no rights.
the ftp server do not belong to my organization.
when i tried ftp over http
this is the error i get.
Technical Information (for support personnel)
- Error Code 10061: Connection refused
- Background: The server you are attempting to access has refused the connection with the gateway. This usually results from trying to connect to a service that is inactive on the server.
- Date: 9/6/2011 9:55:55 AM [GMT]
- Server: tmg2010.domain.corp
- Source: Remote server
no issue with the ftp site if i do not use my company proxy. eg mobile boardband.
Источник
502 proxy error forefront tmg denied the specified uniform resource locator url 12202
This forum is closed. Thank you for your contributions.
Asked by:
Question
I m trying to allow access to a ftp website for my users.
but this is the error message i get from my TMG 2010.
- Error Code: 502 Proxy Error. Forefront TMG denied the specified Uniform Resource Locator (URL). (12202)
- IP Address: 172.28.5.67
- Date: 9/6/2011 6:05:18 AM [GMT]
- Server: tmg2010.domain.corp
- Source: proxy
the access is created under allow web access for all users —
Conditions — all users.
is my access rule correct ?
All replies
Try enable logging. Do the packets match the rule?
Try FTP over HTTP to add in same condition from INTERNAL -> to EXTERNAL -> ALL USERS.
Also check yours FTP SERVER and services. I try to access to ftp://ftp.impactbbdo.ae/ but nothing.
Later i try to access to the impactbbdo.ae and i see authentication for this (Username and Password).
Best regards Abdagic Ahmet Disclaimer: This posting is provided AS-IS with no warranties or guarantees and confers no rights.
the ftp server do not belong to my organization.
when i tried ftp over http
this is the error i get.
Technical Information (for support personnel)
- Error Code 10061: Connection refused
- Background: The server you are attempting to access has refused the connection with the gateway. This usually results from trying to connect to a service that is inactive on the server.
- Date: 9/6/2011 9:55:55 AM [GMT]
- Server: tmg2010.domain.corp
- Source: Remote server
no issue with the ftp site if i do not use my company proxy. eg mobile boardband.
Источник
502 proxy error forefront tmg denied the specified uniform resource locator url 12202
Вопрос
i’ve read through this:
but i am still confused as to which custom error page to edit in Program FilesMicrosoft Forefront Threat Management GatewayTemplatesWebObjectsTemplatesISA.
below is the default text i’m seeing when i try to get to the blocked yahoo.com. first it says «error code 502,» and then at the end it has «12202.» but when i edit the «502.htm» file, it doesn’t look like this. it only says » HTTP 502: Bad gateway. There was an invalid response.»
in the tmg logs, the failure details say «Status: 12202 Forefront TMG denied the specified Uniform
Resource Locator (URL). «
but i don’t see a «12202.htm» file in the templates folder, so which template is this error page coming from? in the technet link above, the only codes with «denied the specified uniform» in their description are 12231, 12232, and 12233.
this is cut and pasted from the error page i see:
Technical Information (for support personnel)
- Error Code: 502 Proxy Error. Forefront TMG denied the specified Uniform Resource Locator (URL). (12202).
- IP Address: [removed]
- Date: 3/13/2012 7:18:30 PM [GMT]
- Server: [removed]
- Source: proxy
Источник
502 proxy error forefront tmg denied the specified uniform resource locator url 12202
Вопрос
I m trying to allow access to a ftp website for my users.
but this is the error message i get from my TMG 2010.
- Error Code: 502 Proxy Error. Forefront TMG denied the specified Uniform Resource Locator (URL). (12202)
- IP Address: 172.28.5.67
- Date: 9/6/2011 6:05:18 AM [GMT]
- Server: tmg2010.domain.corp
- Source: proxy
the access is created under allow web access for all users —
Conditions — all users.
is my access rule correct ?
Все ответы
Try enable logging. Do the packets match the rule?
Try FTP over HTTP to add in same condition from INTERNAL -> to EXTERNAL -> ALL USERS.
Also check yours FTP SERVER and services. I try to access to ftp://ftp.impactbbdo.ae/ but nothing.
Later i try to access to the impactbbdo.ae and i see authentication for this (Username and Password).
Best regards Abdagic Ahmet Disclaimer: This posting is provided AS-IS with no warranties or guarantees and confers no rights.
the ftp server do not belong to my organization.
when i tried ftp over http
this is the error i get.
Technical Information (for support personnel)
- Error Code 10061: Connection refused
- Background: The server you are attempting to access has refused the connection with the gateway. This usually results from trying to connect to a service that is inactive on the server.
- Date: 9/6/2011 9:55:55 AM [GMT]
- Server: tmg2010.domain.corp
- Source: Remote server
no issue with the ftp site if i do not use my company proxy. eg mobile boardband.
Источник
Consider the following scenario:
-
You click to select Enable HTTPS inspection check box on the General tab of the HTTPS Outbound Inspection dialog box on a computer that has Microsoft Forefront Threat Management Gateway (TMG) 2010 Service Pack 1 (SP1) installed.
-
You add a domain name set, and then you add a Fully Qualified Domain Name (FQDN) of a website to the set. You set the Certificates field to No Validation in the Destination Exceptions tab.
Note When the No Validation option is set, Forefront TMG 2010 SP1 cannot retrieve and validate the server certificate of Forefront TMG 2010 SP1.
In this scenario, you receive an error message that resembles the following when you try to access the website from the computer:
Error Code: 502 Proxy Error. The network logon failed. (1790)
Symptoms
This issue occurs because Forefront TMG 2010 SP1 sends an empty client certificate to the web server during the initial Secure Sockets Layer (SSL) handshake.
When certain web servers receive an empty client certificate, these servers accept and renegotiate the client certificate. For example, IIS web servers accept and renegotiate the client certificate. However, other web servers may return an SSL error when these web servers receive an empty client certificate. Therefore, Forefront TMG displays the error message.
Cause
Update information
To resolve this issue, install the software update that is described in the following Microsoft Knowledge Base (KB) article:
2288910 Software Update 1 for Microsoft Forefront Threat Management Gateway (TMG) 2010 Service Pack 1
Resolution
Microsoft has confirmed that this is a problem in the Microsoft products that are listed in the «Applies to» section.
Status
For more information about software update terminology, click the following article number to view the article in the Microsoft Knowledge Base:
824684 Description of the standard terminology that is used to describe Microsoft software updates
More Information
Need more help?
Полезная информация
Mozilla Россия — свежие версии программ Mozilla, а также масса полезной информации по каждому продукту.
№129-09-2011 17:05:39
- nikals
- Участник
- Группа: Members
- Зарегистрирован: 13-01-2009
- Сообщений: 3
- UA:
8.0
Как исправить ошибку Error Code: 502 Proxy Error.
Добрый день. После очередного закрытия Лисы, вдруг перестало всё открываться и появилось сообщение «Error Code: 502 Proxy Error. Forefront TMG denied the specified Uniform Resource Locator (URL). (12202)» Подскажите пожалйста как сиё исправить. С уважением nikals.
Отсутствует
№229-09-2011 18:26:16
- Lynn
- Кофеман
- Группа: Members
- Откуда: Россия
- Зарегистрирован: 16-02-2005
- Сообщений: 1721
- UA: 7.0
- Веб-сайт
Re: Как исправить ошибку Error Code: 502 Proxy Error.
Отключить прокси?
Isn’t it ironic… don’t you think? — Alanis Morissette
Отсутствует
№329-09-2011 18:43:41
- nikals
- Участник
- Группа: Members
- Зарегистрирован: 13-01-2009
- Сообщений: 3
- UA: 8.0
Re: Как исправить ошибку Error Code: 502 Proxy Error.
Lynn пишет
Отключить прокси?
А как, подскажите, я в этом не слишком разбираюсь.
Отсутствует
№430-09-2011 00:02:58
- MySh
- Кактусогрыз
- Группа: Extensions
- Зарегистрирован: 17-12-2006
- Сообщений: 4623
- UA: 7.0
Re: Как исправить ошибку Error Code: 502 Proxy Error.
nikals
Обратитесь к своему системному администратору.
Отсутствует
Я работал над делом, в котором мы получали периодически появляющуюся ошибку аутентификации при доступе к web-сайтам (SharePoint/Exchange), опубликованным на TMG.
Ошибка была следующей:
12202 The Forefront TMG denied the specified Uniform Resource Locator (URL)
Инфраструктура:
TMG 2010, член домена (контроллеры домена – Windows Server 2008 и Windows Server 2003)
Kerberos Constrained Delegation (KCD) сконфигурирован в качестве метода делегирования аутентификации в правилах публикации.
Опубликованные ресурсы: Exchange и SharePoint.
Сбор данных:
Мы провели трассировку в сети Internal на сервере TMG и обнаружили следующую ошибку, возвращаемую DC:
KerberosV5:KRB_ERROR — KDC_ERR_ETYPE_NOSUPP (14)
Эта ошибка означает несоответствие типов шифрования.
Проведя дальнейший анализ, мы обнаружили, что ошибка проявляется только тогда, когда защищенный канал (secure channel) установлен между TMG и контроллером домена с Windows Server 2003. Это можно определить с помощью следующей команды:
nltest /sc_verify:domainname
Дополнительная информация:
Когда сервер TMG (который работает на Windows Server 2008) пытается установить соединение по протоколу Kerberos, по умолчанию он использует тип шифрования AES, однако контроллеры домена на Windows Server 2003 поддерживают тип шифрования DES. Таким образом, если защищенный канал установлен между сервером TMG и контроллером домена на Windows Server 2003, соединение Kerberos не будет установлено из за различия в используемых методах шифрования. Если же сервер TMG установил защищенный канал с контроллером домена на Windows Server 2008, соединение пройдет успешно, поскольку оба они по умолчанию используют тип шифрования AES.
Решение:
Для решения этой проблемы мы можем использовать два подхода:
- Произвести апгрейд всех контроллеров домена до Windows Server 2008.
-
Разрешить использование всех методов шифрования на сервере TMG, который работает на Windows Server 2008 R2.
Процедура включения метода шифрования на Windows Server 2008 R2:
- Start > Gpedit.msc – откроется редактор локальной политики. Перейдем к следующему ключу: Computer Configuration Windows Settings Security Settings Local Policies Security Options
-
Щелкнем на параметре Network security: Configure encryption types allowed for Kerberos option.
-
Поставим галочки напротив всех видов шифрования.
-
Нажмем OK и закроем Gpedit.
-
Перезагрузим сервер.
Политика устанавливает запись реестра SupportedEncryptionTypes в значение 0x7FFFFFFF. Запись реестра SupportedEncryptionTypes находится по следующему пути:
HKLMSoftwareMicrosoftWindowsCurrentVersionPoliciesSystemKerberosparameters
См.: http://support.microsoft.com/kb/977321.
Автор:
Junaid Ahmad Jan — Security Support Escalation Engineer, Microsoft CSS Forefront Security Edge Team
Рецензент:
Richard Barker — Sr Security Support Escalation Engineer, Microsoft CSS Forefront Security Edge Team
Оригинал:
http://blogs.technet.com/b/isablog/archive/2012/08/15/getting-error-12202-intermittently-authentication-failure-while-accessing-published-resources-sharepoint-exchange-through-tmg-2010.aspx
Страницы в социальных сетях:
Twitter: https://twitter.com/vsseth
Facebook: https://fb.com/inpowershell
VKontakte: https://vk.com/inpowershell
How to resolve
Err:1 http://archive.ubuntu.com/ubuntu bionic InRelease
502 Proxy Error ( Forefront TMG denied the specified Uniform Resource Locator (URL). ) [IP: 10.10.8.118 8080]
Err:2 http://archive.ubuntu.com/ubuntu bionic-security InRelease
502 Proxy Error ( Forefront TMG denied the specified Uniform Resource Locator (URL). ) [IP: 10.10.8.118 8080]
Err:3 http://archive.ubuntu.com/ubuntu bionic-updates InRelease
502 Proxy Error ( Forefront TMG denied the specified Uniform Resource Locator (URL). ) [IP: 10.10.8.118 8080]
Reading package lists... Done
W: Failed to fetch http://archive.ubuntu.com/ubuntu/dists/bionic/InRelease 502 Proxy Error ( Forefront TMG denied the specified Uniform Resource Locator (URL). ) [IP: 10.10.8.118 8080]
W: Failed to fetch http://archive.ubuntu.com/ubuntu/dists/bionic-security/InRelease 502 Proxy Error ( Forefront TMG denied the specified Uniform Resource Locator (URL). ) [IP: 10.10.8.118 8080]
W: Failed to fetch http://archive.ubuntu.com/ubuntu/dists/bionic-updates/InRelease 502 Proxy Error ( Forefront TMG denied the specified Uniform Resource Locator (URL). ) [IP: 10.10.8.118 8080]
W: Some index files failed to download. They have been ignored, or old ones used instead.
karel
107k93 gold badges263 silver badges290 bronze badges
asked Dec 11, 2018 at 3:08
1
W: Failed to fetch http://archive.ubuntu.com/ubuntu/dists/bionic-security/InRelease 502 Proxy Error ( Forefront TMG denied the specified Uniform Resource Locator (URL). ) [IP: 10.10.8.118 8080]
This indicates that your proxy server denied you access to this URL. This is not a problem with Ubuntu. It’s a problem with your proxy server, probably run by your company or school.
You need to contact the administrator for the proxy server, and ask if they can open for Ubuntu mirrors for you.
answered Dec 11, 2018 at 5:46
vidarlovidarlo
20.4k8 gold badges55 silver badges78 bronze badges