[8.200][BUG][FIXED] Web Application: Real web servers status yellow

Hi All,
I just updated to version 8.2. For some reason in Web Application Firewall, the Virtual Web Server is green but the status of the Real Web server is yellow/orange and I can't access the site/server!
When I disable the Virtual Web Server the status of the Real Web Server changes to green ?!?!?!

I use a self made self signed certificate (wildcard) but in V8.103, I didn't have any issues...

Can someone clear this up for me? TIA

0 Astaro Beta Bot over 13 years ago

Astaro Beta Report

--------------------------------

Version: 8.200

Type: BUG

State: TESTED/FIXED

Reporter: fobe+

Contributor: 

MantisID: 18579

Target version: 8.200

Fixed in version: 8.200

--------------------------------

0 Scott_Klassen over 13 years ago

Please don't double post on the board. I've deleted the post that you made about this issue in the Web Security: Web Filtering & Application Visibility/Control forum yesterday.

__________________
ACE v8/SCA v9.3

...still have a v5 install disk in a box somewhere.

http://xkcd.com
http://www.tedgoff.com/mb
http://www.projectcartoon.com/cartoon/1
Cancel
Vote Up 0 Vote Down

Sign in to reply

Verify Answer

Cancel
0 Scott_Klassen over 13 years ago

I'm assuming that you're using country blocking. What happens if you turn country blocking off?

__________________
ACE v8/SCA v9.3

...still have a v5 install disk in a box somewhere.

http://xkcd.com
http://www.tedgoff.com/mb
http://www.projectcartoon.com/cartoon/1
Cancel
Vote Up 0 Vote Down

Sign in to reply

Verify Answer

Cancel
0 Alex76 over 13 years ago

i have the same problem after upgrading, and you can fix this by hand.

1.) you go to Management -> Up2Date -> Configuration and set the ,,Pattern Download/Installation interval" to manual.
2.) on the ,,Overview" Tabl you can click on ,,Update patterns now"
3.) wait 10-15minutes
4.) Now you go back to ,,Wab Application Security" and activate and deaktivate them.
5.) Be happy about the working WAF.

6.) you can set the old interval in the up2date configuration settings now again.

The Problem itself is, that the upgrade delete the geoip.dat files from the pattern directory. So you have to make a pattern upgrade for put it in again. After this Pattern update is done, you have to restart the WAF for checking again this files. After this, the WAF is working normaly. I think it will be better to don't delete this files with the up2date packad or deliver a pattern version with it.

If you have this errors, that this will be the solution:

2011:07:22-17:02:54 firewall reverseproxy: Configuration Failed
2011:07:22-17:04:37 firewall reverseproxy: Error Opening file /var/pattern/geoip/GeoIP.dat
2011:07:22-17:04:37 firewall reverseproxy: [Fri Jul 22 17:04:37 2011] [crit] Failed to load GeoIP database
2011:07:22-17:04:37 firewall reverseproxy: Configuration Failed
2011:07:22-17:04:40 firewall reverseproxy: Error Opening file /var/pattern/geoip/GeoIP.dat
2011:07:22-17:04:40 firewall reverseproxy: [Fri Jul 22 17:04:40 2011] [crit] Failed to load GeoIP database
2011:07:22-17:04:40 firewall reverseproxy: Configuration Failed
2011:07:22-17:06:33 firewall reverseproxy: Error Opening file /var/pattern/geoip/GeoIP.dat
2011:07:22-17:06:33 firewall reverseproxy: [Fri Jul 22 17:06:33 2011] [crit] Failed to load GeoIP database
2011:07:22-17:06:33 firewall reverseproxy: Configuration Failed
Cancel
Vote Up 0 Vote Down

Sign in to reply

Verify Answer

Cancel
0 Scott_Klassen over 13 years ago

https://community.sophos.com/products/unified-threat-management/astaroorg/f/110/t/71142

@fobe: See if Alex76's fix posted above gets your issue solved.

__________________
ACE v8/SCA v9.3

...still have a v5 install disk in a box somewhere.

http://xkcd.com
http://www.tedgoff.com/mb
http://www.projectcartoon.com/cartoon/1
Cancel
Vote Up 0 Vote Down

Sign in to reply

Verify Answer

Cancel
0 wlogic over 13 years ago

We have the same problem.

--snip--
2011:07:22-18:40:17 reverseproxy: Error Opening file /var/pattern/geoip/GeoIP.dat
2011:07:22-18:40:17 reverseproxy: [Fri Jul 22 18:40:17 2011] [crit] Failed to load GeoIP database
2011:07:22-18:40:17 reverseproxy: Configuration Failed
--snip--

But the steps from Alex76 by hand does not fix our problem.
Our current pattern version is 22533 and we never had activated country blocking.
Cancel
Vote Up 0 Vote Down

Sign in to reply

Verify Answer

Cancel
0 Alex76 over 13 years ago

i think you need a new pattern, but you have the lastone installed before you have make the upgrade to 8.200. So you have to make the other solution:

Workaround:
Please login to the command line and enter the following command to copy the file in the directory:
cp /var/storage/chroot-http/var/pattern/geoip/GeoIP.dat /var/storage/chroot-reverseproxy/var/pattern/geoip/GeoIP.dat /var/mdw/scripts/reverseproxy restart
We will reload the soft released 8.200 up2date package on our ftp servers early next week and fix already updated installations by releasing a geoip pattern update.
Cancel
Vote Up 0 Vote Down

Sign in to reply

Verify Answer

Cancel
0 wlogic over 13 years ago

Thanks, the workaround helped us to get WAF back to work.
Cancel
Vote Up 0 Vote Down

Sign in to reply

Verify Answer

Cancel
0 utm_kid over 13 years ago in reply to wlogic

https://community.sophos.com/products/unified-threat-management/astaroorg/f/110/t/70612
Cancel
Vote Up 0 Vote Down

Sign in to reply

Verify Answer

Cancel
0 PabloDiablo over 13 years ago in reply to Alex76

i think you need a new pattern, but you have the lastone installed before you have make the upgrade to 8.200. So you have to make the other solution:

THANKS! This did the trick [:)]
Cancel
Vote Up 0 Vote Down

Sign in to reply

Verify Answer

Cancel