[7.920][BUG][FIXED] IPS kills Site-to-site SSL and HTTP/S proxy

Reinstalled 7.920 from ISO and still have problems. If I reboot with IPS enabled, HTTP/S proxy blocks everything and SSL-tunnel is down. Disable/enable of IPS solves the problem.

0 Astaro Beta Bot over 15 years ago

Astaro Beta Report
--------------------------------
Version: 7.920
Type: BUG
State: MERGED/FIXED
Reporter: Lionking++
Contributor: RFCat_vk, ma10wong
MantisID: 14026
Target version: 7.950
Fixed in version: 7.950
--------------------------------

0 snowcrash_01 over 15 years ago

call 'patterndist ips' once should solve your problem as it will do on updated machines
Cancel
Vote Up 0 Vote Down

Sign in to reply

Verify Answer

Cancel
0 Lionking over 15 years ago in reply to snowcrash_01

No, makes no difference.
Cancel
Vote Up 0 Vote Down

Sign in to reply

Verify Answer

Cancel
0 kbr over 15 years ago

Does it also happen if you disable IPS, reboot, and then enable it again?

Which patters do you have selected?
Cancel
Vote Up 0 Vote Down

Sign in to reply

Verify Answer

Cancel
0 Lionking over 15 years ago in reply to kbr

Yes. I have all patterns enabled.
Cancel
Vote Up 0 Vote Down

Sign in to reply

Verify Answer

Cancel
0 kbr over 15 years ago

Does it also happen if you disable IPS, reboot, and then enable it again?

Have you tried to use a smaller set of rules?
Cancel
Vote Up 0 Vote Down

Sign in to reply

Verify Answer

Cancel
0 Lionking over 15 years ago in reply to kbr

Updated to 7.921, and now it doesn't help to disable/enable IPS, I have to disable IPS to get HTTP/S proxy and Site-to-site SSL working.
Sorry, spoke to soon, it does help to disable/enable IPS, so no improvment from 7.920.
It does help to disable IPS, reboot and then enable IPS again.
Cancel
Vote Up 0 Vote Down

Sign in to reply

Verify Answer

Cancel
0 kbr over 15 years ago

Have you tried to use a smaller set of rules?

What's in the logfiles? Packetfilter.log and ips.log should give us a little hint.
Cancel
Vote Up 0 Vote Down

Sign in to reply

Verify Answer

Cancel
0 Lionking over 15 years ago in reply to kbr

Intrusion Prevention is active with 5959 of 8343 patterns
Nothing except incoming blocks in packet filter log

ips.log.zip
Cancel
Vote Up 0 Vote Down

Sign in to reply

Verify Answer

Cancel
0 RFCat_vk_01 over 15 years ago in reply to Lionking

Hi,
have you tried clearing the http proxy cache. In my case that solved the problem after running the patterndist ips.

Regards

Ian M
Cancel
Vote Up 0 Vote Down

Sign in to reply

Verify Answer

Cancel

[7.920][BUG][FIXED] IPS kills Site-to-site SSL and HTTP/S proxy

Submitted a Tech Support Case lately from the Support Portal?