[5.000 -> 5.001]Proxy Content Manager Always Empty

I recently installed ASL 5.0 on a machine here. With the POP3 proxy enabled, it would place infected e-mails into the Proxy Content Manager list. Now that I have upgraded to 5.1, no e-mails are placed into the content manager. I can see the items being dropped in the Content Filter log and I receive the messages stating that the e-mail was infected or matched a regex. I have tried "Refresh proxy content table" under global settings, but it still lists nothing. If I go into the report section, I can see the number of infected pop3 e-mails increasing, but still nothing in the manager.

How is the Proxy Content Manager list built?
Where are the quarentined items kept?

Parents

0 Marcel_01 over 21 years ago

check /var/chroot-pop3/var/mrpopper/

cheers
~marcel
Cancel
Vote Up 0 Vote Down

Sign in to reply

Verify Answer

Cancel
0 tbraun over 21 years ago in reply to Marcel_01

The directory is empty. When looking at /var/chroot-pop3/etc/mrpopper.xml, it lists a directory (/var/pop3/mrpopper) for quarentine which doesn't exist. Tried creating the directory and restarting mrpopper, but it still didn't work. Any other suggestions, because I'm starting to think it would be easier to rebuild the machine for the ground floor.
Cancel
Vote Up 0 Vote Down

Sign in to reply

Verify Answer

Cancel
0 tbraun over 21 years ago in reply to tbraun

Reinstalled Astaro with SMP using the new 5.001 iso image and restored configuration from backup. Still having the same issue. To test the content manager, I first created an extension filter for .test and sent myself an e-mail with a file name fail.test attached. The proxy blocked the message successfully and I received the "Scanning Subsystem" message, but nothing was in the Content Manager. I then enabled "Spam Protection" and lowered the quarentine score to 1. Same thing happened, it stopped the message and sent me a "Scanning Subsystem" message, but nothing in the content manager.

Any thoughts or suggestions would be appreciated.
Cancel
Vote Up 0 Vote Down

Sign in to reply

Verify Answer

Cancel
0 tbraun over 21 years ago in reply to tbraun

Fixed it...

Just in case anyone runs into the same problem.

Problem:

There is something wrong with the mrpopper rpm package in version 5.001.

Resolution:

Reinstall the rpm package from the 5.000 cd using "rpm -Uvh --force ep-mrpopper-1.1-68.i586.rpm" and restart mrpopper using "/var/mdw/scripts/mrpopper.sh"
Cancel
Vote Up 0 Vote Down

Sign in to reply

Verify Answer

Cancel
0 derhansen over 21 years ago in reply to tbraun

Same problem here. This must be a bug in V5.001. There are several mails being catched by the spam protection, but the Proxy Content Manager is always empty.

Hope Astaro will fix this in future releases.
Cancel
Vote Up 0 Vote Down

Sign in to reply

Verify Answer

Cancel
0 William Warren over 21 years ago in reply to derhansen

[ QUOTE ]
Same problem here. This must be a bug in V5.001. There are several mails being catched by the spam protection, but the Proxy Content Manager is always empty.

Hope Astaro will fix this in future releases.

[/ QUOTE ]
heck no leave them blackholed! NO need to bother with them anymore!

Owner: Emmanuel Technology Consulting

http://etc-md.com

Former Sophos SG(Astaro) advocate/researcher/Silver Partner

PfSense w/Suricata, ntopng,

Other addons to follow
Cancel
Vote Up 0 Vote Down

Sign in to reply

Verify Answer

Cancel
0 William Warren over 21 years ago in reply to tbraun

[ QUOTE ]
Fixed it...

Just in case anyone runs into the same problem.

Problem:

There is something wrong with the mrpopper rpm package in version 5.001.

Resolution:

Reinstall the rpm package from the 5.000 cd using "rpm -Uvh --force ep-mrpopper-1.1-68.i586.rpm" and restart mrpopper using "/var/mdw/scripts/mrpopper.sh"

[/ QUOTE ]
looks like if they "fix" this in 5.002 i will reverse this process and reinstall 5.001..[:)]

Owner: Emmanuel Technology Consulting

http://etc-md.com

Former Sophos SG(Astaro) advocate/researcher/Silver Partner

PfSense w/Suricata, ntopng,

Other addons to follow
Cancel
Vote Up 0 Vote Down

Sign in to reply

Verify Answer

Cancel
0 William Warren over 21 years ago in reply to William Warren

nopers i just found a huge bug in terms of cpu in the 5.001 pop3..am going to try forcing v5.000 pop3 in there and see what happens.

Owner: Emmanuel Technology Consulting

http://etc-md.com

Former Sophos SG(Astaro) advocate/researcher/Silver Partner

PfSense w/Suricata, ntopng,

Other addons to follow
Cancel
Vote Up 0 Vote Down

Sign in to reply

Verify Answer

Cancel
0 William Warren over 21 years ago in reply to tbraun

[ QUOTE ]
Fixed it...

Just in case anyone runs into the same problem.

Problem:

There is something wrong with the mrpopper rpm package in version 5.001.

Resolution:

Reinstall the rpm package from the 5.000 cd using "rpm -Uvh --force ep-mrpopper-1.1-68.i586.rpm" and restart mrpopper using "/var/mdw/scripts/mrpopper.sh"

[/ QUOTE ]
newb question:
how do i get the rpm file from the cd to the asl box?

Owner: Emmanuel Technology Consulting

http://etc-md.com

Former Sophos SG(Astaro) advocate/researcher/Silver Partner

PfSense w/Suricata, ntopng,

Other addons to follow
Cancel
Vote Up 0 Vote Down

Sign in to reply

Verify Answer

Cancel
0 William Warren over 21 years ago in reply to William Warren

never mind i figured out i had to winscp to transfer it over..[:)]

Owner: Emmanuel Technology Consulting

http://etc-md.com

Former Sophos SG(Astaro) advocate/researcher/Silver Partner

PfSense w/Suricata, ntopng,

Other addons to follow
Cancel
Vote Up 0 Vote Down

Sign in to reply

Verify Answer

Cancel
0 William Warren over 21 years ago in reply to William Warren

I just installed the 5.000 mr popper and the problem persists. (edited pending vendor notification)

Owner: Emmanuel Technology Consulting

http://etc-md.com

Former Sophos SG(Astaro) advocate/researcher/Silver Partner

PfSense w/Suricata, ntopng,

Other addons to follow
Cancel
Vote Up 0 Vote Down

Sign in to reply

Verify Answer

Cancel
0 derhansen over 21 years ago in reply to William Warren

[ QUOTE ]
[ QUOTE ]
Same problem here. This must be a bug in V5.001. There are several mails being catched by the spam protection, but the Proxy Content Manager is always empty.

Hope Astaro will fix this in future releases.

[/ QUOTE ]
heck no leave them blackholed! NO need to bother with them anymore!

[/ QUOTE ]

Sure, but I´d like to see the mails that has been filtered by the extension filter. Those mails do also not appear in the Proxy Content Manager. Hope Astaro fixes it in V5.002
Cancel
Vote Up 0 Vote Down

Sign in to reply

Verify Answer

Cancel

Reply

0 derhansen over 21 years ago in reply to William Warren

[ QUOTE ]
[ QUOTE ]
Same problem here. This must be a bug in V5.001. There are several mails being catched by the spam protection, but the Proxy Content Manager is always empty.

Hope Astaro will fix this in future releases.

[/ QUOTE ]
heck no leave them blackholed! NO need to bother with them anymore!

[/ QUOTE ]

Sure, but I´d like to see the mails that has been filtered by the extension filter. Those mails do also not appear in the Proxy Content Manager. Hope Astaro fixes it in V5.002
Cancel
Vote Up 0 Vote Down

Sign in to reply

Verify Answer

Cancel

Children

No Data