[7.920][BUG][FIXED] HTTP/S Proxy blocks everything

Lionking over 15 years ago

After upgrade to 7.920, HTTP/S-proxy in transparent mode blocks everything

Parents

0 darrenl over 15 years ago

Not sure if this is relevant:
2010:06:02-22:32:39 mercury-2 cssd[6429]: [     (nil)] main (cssd.c:235) starting up...
2010:06:02-22:32:39 mercury-2 cssd[6429]: [     (nil)] read_config (cssd.c:113) reading config
2010:06:02-22:32:39 mercury-2 cssd[6429]: [     (nil)] main (cssd.c:244) init css
2010:06:02-22:32:39 mercury-2 clamd[6390]: clamd daemon 0.96.1 (OS: linux-gnu, ARCH: i386, CPU: i686)
2010:06:02-22:32:39 mercury-2 clamd[6390]: Running as user chroot (UID 666, GID 666)
2010:06:02-22:32:39 mercury-2 clamd[6390]: Log file size limited to 1048576 bytes.
2010:06:02-22:32:39 mercury-2 clamd[6390]: Reading databases from /var/pattern/clam
2010:06:02-22:32:39 mercury-2 clamd[6390]: Not loading PUA signatures.
2010:06:02-22:32:39 mercury-2 clamd[6390]: Not loading phishing signatures.
2010:06:02-22:32:39 mercury-2 clamd[6390]: Disabling URL based phishing detection.
2010:06:02-22:32:40 mercury-2 ctasd[6562]: Loading configuration file /etc/ctasd/ctasd.conf
2010:06:02-22:32:44 mercury-2 ctasd[6714]: Synchronize proactive patterns...
2010:06:02-22:32:45 mercury-2 CEnginesContainer::UpdateSettings() - Updating
2010:06:02-22:32:45 mercury-2 CEnginesContainer::UpdateSettings() - Updating
2010:06:02-22:32:45 mercury-2 CIpRepCache::Load() - Can't open file /tmp/ctipd.cache...
2010:06:02-22:32:45 mercury-2 Counters - can't open cache file /tmp/ctipd.DM_counters
2010:06:02-22:32:45 mercury-2 Stats server listening on port /tmp/ctipd.stats
2010:06:02-22:32:45 mercury-2 RBL server listening on port 54
2010:06:02-22:32:45 mercury-2 Ready
2010:06:02-22:32:50 mercury-2 clamd[6390]: Loaded 786600 signatures.
2010:06:02-22:32:50 mercury-2 clamd[6390]: TCP: Bound to address 127.0.0.1 on port 3310
2010:06:02-22:32:50 mercury-2 clamd[6390]: TCP: Setting connection queue length to 15
2010:06:02-22:32:50 mercury-2 clamd[6972]: Limits: Global size limit set to 104857600 bytes.
2010:06:02-22:32:50 mercury-2 clamd[6972]: Limits: File size limit set to 26214400 bytes.
2010:06:02-22:32:50 mercury-2 clamd[6972]: Limits: Recursion level limit set to 16.
2010:06:02-22:32:50 mercury-2 clamd[6972]: Limits: Files limit set to 10000.
2010:06:02-22:32:50 mercury-2 clamd[6972]: Archive support enabled.
2010:06:02-22:32:50 mercury-2 clamd[6972]: Algorithmic detection enabled.
2010:06:02-22:32:50 mercury-2 clamd[6972]: Portable Executable support enabled.
2010:06:02-22:32:50 mercury-2 clamd[6972]: ELF support enabled.
2010:06:02-22:32:50 mercury-2 clamd[6972]: Mail files support enabled.
2010:06:02-22:32:50 mercury-2 clamd[6972]: OLE2 support enabled.
2010:06:02-22:32:50 mercury-2 clamd[6972]: PDF support enabled.
2010:06:02-22:32:50 mercury-2 clamd[6972]: HTML support enabled.
2010:06:02-22:32:50 mercury-2 clamd[6972]: Self checking every 3600 seconds.
2010:06:02-22:32:55 mercury-2 ctasd[6714]: Caught SIGTERM
2010:06:02-22:32:55 mercury-2 ctasd[6713]: Caught SIGTERM
2010:06:02-22:32:55 mercury-2 ctasd[6713]: Kill child 6714
2010:06:02-22:32:55 mercury-2 ctasd[6714]: Caught SIGTERM
2010:06:02-22:32:56 mercury-2 ctasd[7163]: Loading configuration file /etc/ctasd/ctasd.conf
2010:06:02-22:32:57 mercury-2 cssd[6429]: [     (nil)] main (cssd.c:249) virus scanner initialization finished
2010:06:02-22:32:57 mercury-2 CCtipdUdpServer::Init() - Failed to create udp socket: 54. Error 98 - Error (98)
2010:06:02-22:32:57 mercury-2 Failed to init ctipd's Rbl server
2010:06:02-22:32:58 mercury-2 ctasd[7224]: Synchronize proactive patterns...
2010:06:02-22:33:05 mercury-2 ctasd[6714]: Synchronize patterns finished
2010:06:02-22:33:05 mercury-2 ctasd[6714]: Load cache...
2010:06:02-22:33:05 mercury-2 ctasd[6714]: CEnginesContainer::LoadCache() - [0001W000S0051K019G03] Can't access file /tmp/ctasd.cache - fopen failed (2)
2010:06:02-22:33:05 mercury-2 ctasd[6714]: Load cache finished
2010:06:02-22:33:05 mercury-2 ctasd[6714]: Http server listening on port 783
2010:06:02-22:33:05 mercury-2 ctasd[6714]: Stat server listening on port /var/run/ctasd.stats
2010:06:02-22:33:05 mercury-2 ctasd[6714]: Ready
2010:06:02-22:33:05 mercury-2 ctasd[6714]: Child exit
2010:06:02-22:33:05 mercury-2 ctasd[7224]: Synchronize patterns finished
2010:06:02-22:33:05 mercury-2 ctasd[7224]: Load cache...
2010:06:02-22:33:05 mercury-2 ctasd[7224]: CEnginesContainer::LoadCache() - [0001W000S0051K019G03] Can't access file /tmp/ctasd.cache - fopen failed (2)
2010:06:02-22:33:05 mercury-2 ctasd[7224]: Load cache finished
2010:06:02-22:33:05 mercury-2 ctasd[7224]: CFCTcpServer Thread Exception on Listen: Error (98)
2010:06:02-22:33:05 mercury-2 ctasd[7224]: Http server listening on port 783
2010:06:02-22:33:05 mercury-2 ctasd[7224]: Stat server listening on port /var/run/ctasd.stats
2010:06:02-22:33:05 mercury-2 ctasd[7224]: Ready
2010:06:02-22:33:07 mercury-2 ctasd[6713]: Done
Cancel
Vote Up 0 Vote Down

Sign in to reply

Verify Answer

Cancel

Reply

0 darrenl over 15 years ago

Not sure if this is relevant:
2010:06:02-22:32:39 mercury-2 cssd[6429]: [     (nil)] main (cssd.c:235) starting up...
2010:06:02-22:32:39 mercury-2 cssd[6429]: [     (nil)] read_config (cssd.c:113) reading config
2010:06:02-22:32:39 mercury-2 cssd[6429]: [     (nil)] main (cssd.c:244) init css
2010:06:02-22:32:39 mercury-2 clamd[6390]: clamd daemon 0.96.1 (OS: linux-gnu, ARCH: i386, CPU: i686)
2010:06:02-22:32:39 mercury-2 clamd[6390]: Running as user chroot (UID 666, GID 666)
2010:06:02-22:32:39 mercury-2 clamd[6390]: Log file size limited to 1048576 bytes.
2010:06:02-22:32:39 mercury-2 clamd[6390]: Reading databases from /var/pattern/clam
2010:06:02-22:32:39 mercury-2 clamd[6390]: Not loading PUA signatures.
2010:06:02-22:32:39 mercury-2 clamd[6390]: Not loading phishing signatures.
2010:06:02-22:32:39 mercury-2 clamd[6390]: Disabling URL based phishing detection.
2010:06:02-22:32:40 mercury-2 ctasd[6562]: Loading configuration file /etc/ctasd/ctasd.conf
2010:06:02-22:32:44 mercury-2 ctasd[6714]: Synchronize proactive patterns...
2010:06:02-22:32:45 mercury-2 CEnginesContainer::UpdateSettings() - Updating
2010:06:02-22:32:45 mercury-2 CEnginesContainer::UpdateSettings() - Updating
2010:06:02-22:32:45 mercury-2 CIpRepCache::Load() - Can't open file /tmp/ctipd.cache...
2010:06:02-22:32:45 mercury-2 Counters - can't open cache file /tmp/ctipd.DM_counters
2010:06:02-22:32:45 mercury-2 Stats server listening on port /tmp/ctipd.stats
2010:06:02-22:32:45 mercury-2 RBL server listening on port 54
2010:06:02-22:32:45 mercury-2 Ready
2010:06:02-22:32:50 mercury-2 clamd[6390]: Loaded 786600 signatures.
2010:06:02-22:32:50 mercury-2 clamd[6390]: TCP: Bound to address 127.0.0.1 on port 3310
2010:06:02-22:32:50 mercury-2 clamd[6390]: TCP: Setting connection queue length to 15
2010:06:02-22:32:50 mercury-2 clamd[6972]: Limits: Global size limit set to 104857600 bytes.
2010:06:02-22:32:50 mercury-2 clamd[6972]: Limits: File size limit set to 26214400 bytes.
2010:06:02-22:32:50 mercury-2 clamd[6972]: Limits: Recursion level limit set to 16.
2010:06:02-22:32:50 mercury-2 clamd[6972]: Limits: Files limit set to 10000.
2010:06:02-22:32:50 mercury-2 clamd[6972]: Archive support enabled.
2010:06:02-22:32:50 mercury-2 clamd[6972]: Algorithmic detection enabled.
2010:06:02-22:32:50 mercury-2 clamd[6972]: Portable Executable support enabled.
2010:06:02-22:32:50 mercury-2 clamd[6972]: ELF support enabled.
2010:06:02-22:32:50 mercury-2 clamd[6972]: Mail files support enabled.
2010:06:02-22:32:50 mercury-2 clamd[6972]: OLE2 support enabled.
2010:06:02-22:32:50 mercury-2 clamd[6972]: PDF support enabled.
2010:06:02-22:32:50 mercury-2 clamd[6972]: HTML support enabled.
2010:06:02-22:32:50 mercury-2 clamd[6972]: Self checking every 3600 seconds.
2010:06:02-22:32:55 mercury-2 ctasd[6714]: Caught SIGTERM
2010:06:02-22:32:55 mercury-2 ctasd[6713]: Caught SIGTERM
2010:06:02-22:32:55 mercury-2 ctasd[6713]: Kill child 6714
2010:06:02-22:32:55 mercury-2 ctasd[6714]: Caught SIGTERM
2010:06:02-22:32:56 mercury-2 ctasd[7163]: Loading configuration file /etc/ctasd/ctasd.conf
2010:06:02-22:32:57 mercury-2 cssd[6429]: [     (nil)] main (cssd.c:249) virus scanner initialization finished
2010:06:02-22:32:57 mercury-2 CCtipdUdpServer::Init() - Failed to create udp socket: 54. Error 98 - Error (98)
2010:06:02-22:32:57 mercury-2 Failed to init ctipd's Rbl server
2010:06:02-22:32:58 mercury-2 ctasd[7224]: Synchronize proactive patterns...
2010:06:02-22:33:05 mercury-2 ctasd[6714]: Synchronize patterns finished
2010:06:02-22:33:05 mercury-2 ctasd[6714]: Load cache...
2010:06:02-22:33:05 mercury-2 ctasd[6714]: CEnginesContainer::LoadCache() - [0001W000S0051K019G03] Can't access file /tmp/ctasd.cache - fopen failed (2)
2010:06:02-22:33:05 mercury-2 ctasd[6714]: Load cache finished
2010:06:02-22:33:05 mercury-2 ctasd[6714]: Http server listening on port 783
2010:06:02-22:33:05 mercury-2 ctasd[6714]: Stat server listening on port /var/run/ctasd.stats
2010:06:02-22:33:05 mercury-2 ctasd[6714]: Ready
2010:06:02-22:33:05 mercury-2 ctasd[6714]: Child exit
2010:06:02-22:33:05 mercury-2 ctasd[7224]: Synchronize patterns finished
2010:06:02-22:33:05 mercury-2 ctasd[7224]: Load cache...
2010:06:02-22:33:05 mercury-2 ctasd[7224]: CEnginesContainer::LoadCache() - [0001W000S0051K019G03] Can't access file /tmp/ctasd.cache - fopen failed (2)
2010:06:02-22:33:05 mercury-2 ctasd[7224]: Load cache finished
2010:06:02-22:33:05 mercury-2 ctasd[7224]: CFCTcpServer Thread Exception on Listen: Error (98)
2010:06:02-22:33:05 mercury-2 ctasd[7224]: Http server listening on port 783
2010:06:02-22:33:05 mercury-2 ctasd[7224]: Stat server listening on port /var/run/ctasd.stats
2010:06:02-22:33:05 mercury-2 ctasd[7224]: Ready
2010:06:02-22:33:07 mercury-2 ctasd[6713]: Done
Cancel
Vote Up 0 Vote Down

Sign in to reply

Verify Answer

Cancel

Children

0 kbr over 15 years ago in reply to darrenl

Not sure if this is relevant:
...

It surely is, but i currently cannot see the cause of that misbehavior...
Cancel
Vote Up 0 Vote Down

Sign in to reply

Verify Answer

Cancel
0 BrucekConvergent over 15 years ago in reply to kbr

Same problem here; worked fine under 7.912, after 7.920 ... I get "failed to get scanner instance"... Proxy in transparent mode. If I disable AV scanning in the proxy, I can access sites again. Only logfile entries I found in the proxy log:

2010:06:02-18:53:21 asgmgmt2 httpproxy[4731]: id="0002" severity="info" sys="SecureWeb" sub="http" name="web request blocked" action="block" method="GET" srcip="192.168.10.150" dstip="85.115.22.9" user="" statuscode="500" cached="0" profile="REF_DefaultHTTPProfile (Default Proxy)" filteraction="REF_DefaultHTTPCFFAction (Default content filter action)" size="4585" time="2275 ms" request="0x8a73718" url="www.astaro.org/.../html"
2010:06:02-18:53:27 asgmgmt2 httpproxy[4731]: id="0002" severity="info" sys="SecureWeb" sub="http" name="web request blocked" action="block" method="GET" srcip="192.168.10.150" dstip="85.115.22.9" user="" statuscode="500" cached="0" profile="REF_DefaultHTTPProfile (Default Proxy)" filteraction="REF_DefaultHTTPCFFAction (Default content filter action)" size="4585" time="1856 ms" request="0x8a73718" url="www.astaro.org/.../html"
Cancel
Vote Up 0 Vote Down

Sign in to reply

Verify Answer

Cancel