[7.910][BUG][CLOSED] Repeated errors in system log

Just an FYI, got a few of these in the system log after update

2010:05:06-12:00:01 gatekeeper /usr/sbin/cron[7219]: (root) CMD (   /usr/local/bin/reportcontrol.sh)

2010:05:06-12:00:01 gatekeeper postgres[7232]: [2-1] ERROR:  invalid input syntax for type inet: ""

2010:05:06-12:00:01 gatekeeper postgres[7232]: [2-2] STATEMENT:  select ins_waf($1, $2, $3, $4, $5, $6, $7, $8)

2010:05:06-12:00:01 gatekeeper postgres[7232]: [3-1] ERROR:  current transaction is aborted, commands ignored until end of transaction block

2010:05:06-12:00:01 gatekeeper postgres[7232]: [3-2] STATEMENT:  select ins_waf_event($1, $2, $3, $4, $5, $6, $7, $8, $9, $10, $11, $12)

2010:05:06-12:00:01 gatekeeper postgres[7232]: [4-1] ERROR:  current transaction is aborted, commands ignored until end of transaction block

2010:05:06-12:00:01 gatekeeper postgres[7232]: [4-2] STATEMENT:  select ins_waf_event($1, $2, $3, $4, $5, $6, $7, $8, $9, $10, $11, $12)

Now only getting these in the system log.

2010:05:06-19:40:01 gatekeeper /usr/sbin/cron[24351]: (root) CMD (   /usr/local/bin/reportcontrol.sh)

2010:05:06-19:40:02 gatekeeper postgres[24361]: [2-1] ERROR:  invalid input syntax for type inet: ""

2010:05:06-19:40:02 gatekeeper postgres[24361]: [2-2] STATEMENT:  select ins_waf($1, $2, $3, $4, $5, $6, $7, $8)

0 Astaro Beta Bot over 15 years ago

Astaro Beta Report
--------------------------------
Version: 7.910
Type: BUG
State: CLOSED
Reporter: Billybob++
Contributor: 
MantisID: 
Target version: 
Fixed in version: 
--------------------------------

0 kbr over 15 years ago

These are related to the reverse-proxy. Can you tell me a little bit more about your setup?
Cancel
Vote Up 0 Vote Down

Sign in to reply

Verify Answer

Cancel
0 Billybob over 15 years ago in reply to kbr

I have nothing special running on reverse proxy. The internal server is non ssl and external publishing is ssl enabled. I have everything enabled besides av scanning on attack patterns for testing. Screen shots attached
- owa1.JPG
- View
- Hide
Cancel
Vote Up 0 Vote Down

Sign in to reply

Verify Answer

Cancel
0 kbr over 15 years ago

can you please try to disable 'strict scanning' and change to 'Log Only' mode, then try again.
Cancel
Vote Up 0 Vote Down

Sign in to reply

Verify Answer

Cancel

0 Monarch over 15 years ago in reply to kbr

Hi, I have the same errors in the logs, but not very often.

I can add the following, which even includes a hint (perhaps useful for the developer [;)]):

2010:05:07-14:35:02 astaro1 postgres[31651]: [2-1] ERROR:  function ins_waf(unknown, unknown, unknown, unknown, unknown, unknown, unknown, unknown) does not exist at character 8

2010:05:07-14:35:02 astaro1 postgres[31651]: [2-2] HINT:  No function matches the given name and argument types. You might need to add explicit type casts.

2010:05:07-14:35:02 astaro1 postgres[31651]: [2-3] STATEMENT:  select ins_waf($1, $2, $3, $4, $5, $6, $7, $8)

0 kbr over 15 years ago in reply to Monarch

I can add the following, which even includes a hint (perhaps useful for the developer [;)]):

I hope so. But as longs as i cannot reproduce this here, it'll be hard to find the root cause. I'm looking for a hint that maps to a certain profile setting, where we probably just missed something while rewriting the mod_security log files to database entries.
Cancel
Vote Up 0 Vote Down

Sign in to reply

Verify Answer

Cancel
0 Billybob over 15 years ago in reply to kbr
Sorry for the late response but I was trying different things hoping this would go away. I disabled strict scanning and initially the problem almost went away to about twice a day and then I rebooted astaro and now sometimes its every few hours and sometimes its every 5 minutes. I am not really sure what is causing that but the 5 minutes frequency suggests some kind of cron job (reporting??) that is failing.

2010:05:10-13:35:01 gatekeeper postgres[3384]: [4-1] ERROR: current transaction is aborted, commands ignored until end of transaction block

I tried a quick google search and the aborted transaction with queries ignored is a common postgres problem. Hope our ninja programmers can figure it out.[;)]
Cancel
Vote Up 0 Vote Down

Sign in to reply

Verify Answer

Cancel
0 kbr over 15 years ago in reply to Billybob

Hope our ninja programmers can figure it out.[;)]

Well, the guy you are talking about isn't actually doing any martial arts. He's running the marathon, he's cycling and (well, may this counts as "martial" art) playing Guitar ;-)
Cancel
Vote Up 0 Vote Down

Sign in to reply

Verify Answer

Cancel
0 kbr over 15 years ago

@Billybob: we need to enable some debugging on your machine. Can you give us some credentials (ssh login would be great) for your machine? I sent my Email via PM.
Cancel
Vote Up 0 Vote Down

Sign in to reply

Verify Answer

Cancel