[7.902][BUG][NOT A BUG] HTTP proxy rejects connections during up2date

Hi,
I just the latest pattern installed on my ASG and the http proxy refused connections during the installation - 7.1865

Ian M
Parents
  • Probably the proxy got restarted somewhere during the up2date. Depending on the 'size' of your hardware this might take a while. Can you please take a look at the http.log? I guess there will be signs of a restart in the log.
  • HI,
    LOOKS LIKE THE CACHE DECIDED IT WAS TIME FOR A CLEAN OUT.

    2010:04:16-18:41:36 fw1-on-house httpproxy[8678]: id="0003" severity="info" sys="SecureWeb" sub="http" request="(nil)" function="epoll_loop" file="epoll.c" line="767" message="starting exit cleanup"
    2010:04:16-18:41:36 fw1-on-house httpproxy[8678]: id="0003" severity="info" sys="SecureWeb" sub="http" request="(nil)" function="scan_exit" file="scanner.c" line="376" message="scanner subsystem shutting down"
    2010:04:16-18:41:36 fw1-on-house httpproxy[8678]: id="0003" severity="info" sys="SecureWeb" sub="http" request="(nil)" function="scan_exit" file="scanner.c" line="382" message="scanner subsystem shut down"
    2010:04:16-18:41:36 fw1-on-house httpproxy[8678]: id="0003" severity="info" sys="SecureWeb" sub="http" request="(nil)" function="epoll_exit" file="epoll.c" line="127" message="epoll subsystem shutting down"
    2010:04:16-18:41:36 fw1-on-house httpproxy[8678]: id="0003" severity="info" sys="SecureWeb" sub="http" request="(nil)" function="epoll_exit" file="epoll.c" line="140" message="epoll subsystem shut down"
    2010:04:16-18:41:36 fw1-on-house httpproxy[8678]: id="0003" severity="info" sys="SecureWeb" sub="http" request="(nil)" function="disk_cache_exit" file="diskcache.c" line="42" message="writing cache index"
    2010:04:16-18:41:36 fw1-on-house httpproxy[8678]: id="0003" severity="info" sys="SecureWeb" sub="http" request="(nil)" function="disk_cache_exit" file="diskcache.c" line="44" message="writing cache index done"
    2010:04:16-18:41:36 fw1-on-house httpproxy[8678]: id="0003" severity="info" sys="SecureWeb" sub="http" request="(nil)" function="main" file="httpproxy.c" line="243" message="shutdown finished, exiting"
    2010:04:16-18:41:37 fw1-on-house httpproxy[16266]: Integrated HTTP-Proxy (c) 2007-2010 Astaro AG, Release 14.g635a676
    2010:04:16-18:41:37 fw1-on-house httpproxy[16266]: id="0003" severity="info" sys="SecureWeb" sub="http" request="(nil)" function="main" file="httpproxy.c" line="174" message="reading configuration"
    2010:04:16-18:41:39 fw1-on-house httpproxy[16266]: id="0003" severity="info" sys="SecureWeb" sub="http" request="(nil)" function="main" file="httpproxy.c" line="189" message="reading profiles"

    2010:04:16-18:41:50 fw1-on-house httpproxy[16266]: id="0003" severity="info" sys="SecureWeb" sub="http" request="(nil)" function="main" file="httpproxy.c" line="217" message="finished startup"

    2010:04:16-18:41:01 fw1-on-house audld[15565]: Starting Up2Date Package Downloader
    2010:04:16-18:41:01 fw1-on-house audld[15565]: patch up2date possible
    2010:04:16-18:41:04 fw1-on-house audld[15565]: id="3701" severity="info" sys="system" sub="up2date" name="Authentication successful"
    2010:04:16-18:41:11 fw1-on-house audld[15565]: id="3707" severity="info" sys="system" sub="up2date" name="Successfully synchronized fileset" status="success" action="download" package="avira"
    2010:04:16-18:41:11 fw1-on-house auisys[15591]: Starting Up2Date Package Installer
    2010:04:16-18:41:12 fw1-on-house auisys[15591]: Searching for available up2date packages for type 'geoip'
    2010:04:16-18:41:12 fw1-on-house auisys[15591]: id="371D" severity="info" sys="system" sub="up2date" name="No up2date packages available for installation" status="failed" action="preinst_check" package="geoip"
    2010:04:16-18:41:17 fw1-on-house auisys[15591]: Searching for available up2date packages for type 'clam'
    2010:04:16-18:41:17 fw1-on-house auisys[15591]: id="371D" severity="info" sys="system" sub="up2date" name="No up2date packages available for installation" status="failed" action="preinst_check" package="clam"
    2010:04:16-18:41:22 fw1-on-house auisys[15591]: Searching for available up2date packages for type 'ips'
    2010:04:16-18:41:22 fw1-on-house auisys[15591]: id="371D" severity="info" sys="system" sub="up2date" name="No up2date packages available for installation" status="failed" action="preinst_check" package="ips"
    2010:04:16-18:41:27 fw1-on-house auisys[15591]: Searching for available up2date packages for type 'avira'
    2010:04:16-18:41:27 fw1-on-house auisys[15591]: Installing up2date package file '/var/up2date//avira/u2d-avira-7.1864-1865.patch.tgz.gpg'
    2010:04:16-18:41:27 fw1-on-house auisys[15591]: Verifying up2date package signature
    2010:04:16-18:41:27 fw1-on-house auisys[15591]: Unpacking installation instructions
    2010:04:16-18:41:28 fw1-on-house auisys[15591]: Unpacking up2date package container
    2010:04:16-18:41:28 fw1-on-house auisys[15591]: Running pre-installation checks
    2010:04:16-18:41:28 fw1-on-house auisys[15591]: Starting up2date package installation
    2010:04:16-18:41:43 fw1-on-house auisys[15591]: id="371Z" severity="info" sys="system" sub="up2date" name="Successfully installed Up2Date package" status="success" action="install" package_version="7.1865" package="avira"
    2010:04:16-18:41:43 fw1-on-house auisys[15591]: New Pattern Up2Dates installed

    I thought I had a reasonably powerful unit. CPU about 2%, memory about 23% of 4gb.

    Ian M

    2010:04:16-18:41:38 fw1-on-house [daemon:info] cssd[4981]:  [     (nil)] epoll_loop (epoll.c:344) starting exit cleanup
    2010:04:16-18:41:38 fw1-on-house [daemon:info] cssd[4981]:  [     (nil)] epoll_exit (epoll.c:125) epoll subsystem shutting down
    2010:04:16-18:41:38 fw1-on-house [daemon:info] cssd[4981]:  [     (nil)] epoll_exit (epoll.c:138) epoll subsystem shut down
    2010:04:16-18:41:38 fw1-on-house [daemon:info] cssd[16286]:  [     (nil)] main (cssd.c:235) starting up...
    2010:04:16-18:41:38 fw1-on-house [daemon:info] cssd[16286]:  [     (nil)] read_config (cssd.c:113) reading config
    2010:04:16-18:41:38 fw1-on-house [daemon:info] cssd[16286]:  [     (nil)] main (cssd.c:244) init css
    2010:04:16-18:41:41 fw1-on-house [daemon:info] cssd[16286]:  [     (nil)] main (cssd.c:249) virus scanner initialization finished
  • Isn't this the same issue that you and bastian had during 7.5 that was considered not a bug. I don't understand why the proxy is restarting for av?? pattern up2date. 

    I thought the proxy configuration was supposed to reload for minor things instead of a full restart. From the closed beta atleast that was the impression I got. I have been doing my updates every 6 hours for reasons like this.[:(]
  • Definitely not good... if the session is cut off due to an AV pattern update, it will not set well with customers of mine that run terminal (think Citrix, etc. SSL Sessions) sessions thru a proxy; getting disconnected regularly due to that will not be a good thing.  come to think of it, I've had some website sessions reset thru my test V8 box but wrote it off as web server issues... I guess I'll be testing this a bit more thoroughly.

    CTO, Convergent Information Security Solutions, LLC

    https://www.convergesecurity.com

    Advice given as posted on this forum does not construe a support relationship or other relationship with Convergent Information Security Solutions, LLC or its subsidiaries.  Use the advice given at your own risk.

Reply
  • Definitely not good... if the session is cut off due to an AV pattern update, it will not set well with customers of mine that run terminal (think Citrix, etc. SSL Sessions) sessions thru a proxy; getting disconnected regularly due to that will not be a good thing.  come to think of it, I've had some website sessions reset thru my test V8 box but wrote it off as web server issues... I guess I'll be testing this a bit more thoroughly.

    CTO, Convergent Information Security Solutions, LLC

    https://www.convergesecurity.com

    Advice given as posted on this forum does not construe a support relationship or other relationship with Convergent Information Security Solutions, LLC or its subsidiaries.  Use the advice given at your own risk.

Children
No Data