[5.841] Up2date IPS -> error can't connect to..

I get every hour de following messages mailed to me:
[CRIT-354] Intrusion Protection Pattern Up2Date failed: No Up2Date Server available

Has anyone else the same problem....?

Parents

0 Alfred_H over 20 years ago

Up2Date Service
Wed Jun 22 20:44:25 CEST 2005

000 Pattern Up2Date: Started Pattern Up2Date
001 :: Reloading Virus Pattern..done
002 Checking following Pattern Types:
003 Intrusion Protection Pattern
005 212.126.210.201
006 Checking Authentication Servers ...
007 1 Authentication Server: 80.237.220.201
008 2 Authentication Server: 216.167.31.83
009 3 Authentication Server: 212.126.210.201
010 Authenticating for Intrusion Protection Pattern ... 0k
011 Checking Up2Date Servers ...
012 1 Up2Date Server: 216.167.31.83
013 2 Up2Date Server: 80.237.220.201
014 3 Up2Date Server: 212.126.210.201
015 Checking new Pattern for Intrusion Protection Pattern
016 The main base for ips is empty
017 Getting complete new set of ips pattern
018 /bin/cp: cannot stat `/etc/up2date/pattern/ips/latest': No such file or directory
019 Downloaded: snortrules.tar.gpg
020 ruleset_changes.txt
021 gpg: Signature made Thu Jun 16 11:31:02 2005 CEST using DSA key ID 1E14F571
022 gpg: Good signature from "Astaro Up2Date Sign "
025 Primary key fingerprint: 564D E5C3 7701 70F2 3133 9D28 03AA 698C 1E14 F571
026 Could not unpack snortrules.tar.gpg for ips pattern Up2Date
027 The main base for ips is empty
028 Getting complete new set of ips pattern
029 /bin/cp: cannot stat `/etc/up2date/pattern/ips/latest': No such file or directory
030 Downloaded: snortrules.tar.gpg
031 gpg: Signature made Thu Jun 16 11:31:02 2005 CEST using DSA key ID 1E14F571
032 gpg: Good signature from "Astaro Up2Date Sign "
035 Primary key fingerprint: 564D E5C3 7701 70F2 3133 9D28 03AA 698C 1E14 F571
036 ruleset_changes.txt
037 Could not unpack snortrules.tar.gpg for ips pattern Up2Date
038 The main base for ips is empty
039 Getting complete new set of ips pattern
040 /bin/cp: cannot stat `/etc/up2date/pattern/ips/latest': No such file or directory
041 Downloaded: snortrules.tar.gpg
042 gpg: Signature made Thu Jun 16 11:31:02 2005 CEST using DSA key ID 1E14F571
043 gpg: Good signature from "Astaro Up2Date Sign "
046 Primary key fingerprint: 564D E5C3 7701 70F2 3133 9D28 03AA 698C 1E14 F571
047 ruleset_changes.txt
048 Could not unpack snortrules.tar.gpg for ips pattern Up2Date
049 Intrusion Protection Pattern Up2Date failed: No Up2Date Server available
Done
Cancel
Vote Up 0 Vote Down

Sign in to reply

Verify Answer

Cancel
0 jjones11 over 20 years ago in reply to Alfred_H

Yep, I get the same thing on my 5.841. I believe it has been ever since I went to 5.841. I assumed Astaro already knew about it (how could they not, what with their own logs and all?), but that might be a leap of faith on my part.
Cancel
Vote Up 0 Vote Down

Sign in to reply

Verify Answer

Cancel
0 MediocreFred over 20 years ago in reply to jjones11

Me too. ALthough, I've only been getting these emails since yesterday (June 20th).

I updated to v5.841 the previous weekend (June 12th) and didn't have these emails/notifications until yesterday.
Cancel
Vote Up 0 Vote Down

Sign in to reply

Verify Answer

Cancel

0 MediocreFred over 20 years ago in reply to MediocreFred

Just wanted to add that I get a different log:

Code:


Up2Date Service
Thu Jun 23 03:09:11 PDT 2005 
 
000 Pattern Up2Date: Started Pattern Up2Date
001 Checking following Pattern Types:
002 Intrusion Protection Pattern
004 212.126.210.201
005 Checking Authentication Servers ...
006 1 Authentication Server: 216.167.31.83
007 2 Authentication Server: 212.126.210.201
008 Authenticating for Intrusion Protection Pattern ... 0k
009 Checking Up2Date Servers ...
010 1 Up2Date Server: 80.237.220.201
011 2 Up2Date Server: 216.167.31.83
012 3 Up2Date Server: 212.126.210.201
013 Checking new Pattern for Intrusion Protection Pattern
014 Downloaded: snortrules.tar.gpg
015 gpg: Signature made Thu Jun 16 02:31:02 2005 PDT using DSA key ID 1E14F571
016 gpg: Good signature from "Astaro Up2Date Sign "
019 Primary key fingerprint: 564D E5C3 7701 70F2 3133 9D28 03AA 698C 1E14 F571
020 ruleset_changes.txt
021 Could not unpack snortrules.tar.gpg for ips pattern Up2Date
022 Downloaded: snortrules.tar.gpg
023 gpg: Signature made Thu Jun 16 02:31:02 2005 PDT using DSA key ID 1E14F571
024 gpg: Good signature from "Astaro Up2Date Sign "
027 Primary key fingerprint: 564D E5C3 7701 70F2 3133 9D28 03AA 698C 1E14 F571
028 ruleset_changes.txt
029 Could not unpack snortrules.tar.gpg for ips pattern Up2Date
030 Downloaded: snortrules.tar.gpg
031 gpg: Signature made Thu Jun 16 02:31:02 2005 PDT using DSA key ID 1E14F571
032 gpg: Good signature from "Astaro Up2Date Sign "
035 Primary key fingerprint: 564D E5C3 7701 70F2 3133 9D28 03AA 698C 1E14 F571
036 ruleset_changes.txt
037 Could not unpack snortrules.tar.gpg for ips pattern Up2Date
038 Intrusion Protection Pattern Up2Date failed: No Up2Date Server available
 
--------------------------------------------------------------------------------
 
Done

And the email that I receive every hour reads:

Code:


From: Firewall Notification System [mailto[:D]o-not-reply@fw-notify.net] 
Sent: Thursday, June 23, 2005 3:09 AM
To:***
Subject: [server.domain][CRIT-354] Intrusion Protection Pattern Up2Date failed: No Up2Date Server available
 
Could not connect to Up2Date Server 80.237.220.201.
 
--
Last WebAdmin login: admin at Thu Jun 23 03:07:45 from 192.168.1.5
System Uptime : 10 days 22 hours 12 minutes
System Load : 0.06
System Version : Astaro Security Linux 5.841
License usage : 4 of 10 users active
Please refer to the manual for detailed instructions.

-MediocreFred.

Reply

0 MediocreFred over 20 years ago in reply to MediocreFred

Just wanted to add that I get a different log:

Code:


Up2Date Service
Thu Jun 23 03:09:11 PDT 2005 
 
000 Pattern Up2Date: Started Pattern Up2Date
001 Checking following Pattern Types:
002 Intrusion Protection Pattern
004 212.126.210.201
005 Checking Authentication Servers ...
006 1 Authentication Server: 216.167.31.83
007 2 Authentication Server: 212.126.210.201
008 Authenticating for Intrusion Protection Pattern ... 0k
009 Checking Up2Date Servers ...
010 1 Up2Date Server: 80.237.220.201
011 2 Up2Date Server: 216.167.31.83
012 3 Up2Date Server: 212.126.210.201
013 Checking new Pattern for Intrusion Protection Pattern
014 Downloaded: snortrules.tar.gpg
015 gpg: Signature made Thu Jun 16 02:31:02 2005 PDT using DSA key ID 1E14F571
016 gpg: Good signature from "Astaro Up2Date Sign "
019 Primary key fingerprint: 564D E5C3 7701 70F2 3133 9D28 03AA 698C 1E14 F571
020 ruleset_changes.txt
021 Could not unpack snortrules.tar.gpg for ips pattern Up2Date
022 Downloaded: snortrules.tar.gpg
023 gpg: Signature made Thu Jun 16 02:31:02 2005 PDT using DSA key ID 1E14F571
024 gpg: Good signature from "Astaro Up2Date Sign "
027 Primary key fingerprint: 564D E5C3 7701 70F2 3133 9D28 03AA 698C 1E14 F571
028 ruleset_changes.txt
029 Could not unpack snortrules.tar.gpg for ips pattern Up2Date
030 Downloaded: snortrules.tar.gpg
031 gpg: Signature made Thu Jun 16 02:31:02 2005 PDT using DSA key ID 1E14F571
032 gpg: Good signature from "Astaro Up2Date Sign "
035 Primary key fingerprint: 564D E5C3 7701 70F2 3133 9D28 03AA 698C 1E14 F571
036 ruleset_changes.txt
037 Could not unpack snortrules.tar.gpg for ips pattern Up2Date
038 Intrusion Protection Pattern Up2Date failed: No Up2Date Server available
 
--------------------------------------------------------------------------------
 
Done

And the email that I receive every hour reads:

Code:


From: Firewall Notification System [mailto[:D]o-not-reply@fw-notify.net] 
Sent: Thursday, June 23, 2005 3:09 AM
To:***
Subject: [server.domain][CRIT-354] Intrusion Protection Pattern Up2Date failed: No Up2Date Server available
 
Could not connect to Up2Date Server 80.237.220.201.
 
--
Last WebAdmin login: admin at Thu Jun 23 03:07:45 from 192.168.1.5
System Uptime : 10 days 22 hours 12 minutes
System Load : 0.06
System Version : Astaro Security Linux 5.841
License usage : 4 of 10 users active
Please refer to the manual for detailed instructions.

-MediocreFred.

Children

0 michael over 20 years ago in reply to MediocreFred

Hi
This is an known issue and is going to be fixed.

You can fix it manually by modifying /etc/up2date/pattern/ips/pattern_aus_config.ini .
Just set Snortrules = snortrules-2.3.ini.

regards
michael
Cancel
Vote Up 0 Vote Down

Sign in to reply

Verify Answer

Cancel
0 jjones11 over 20 years ago in reply to michael

Thank you Michael. That fixed it for me.
Cancel
Vote Up 0 Vote Down

Sign in to reply

Verify Answer

Cancel