[9.091][BUG] Reverse Proxy Zlib Error

After the update I am getting numerous zlib errors in my reverse proxy logs

2013:04:12-11:51:25 gatekeeper reverseproxy: [Fri Apr 12 11:51:25.874398 2013] [authz_blacklist:warn] [pid 6166:tid 2905783152] [client 100.43.83.135:31871] DNS lookup for 135.83.43.100.black.rbl.ctipd.astaro.local. failed: Temporary failure in name resolution
2013:04:12-11:51:26 gatekeeper reverseproxy: [Fri Apr 12 11:51:26.088308 2013] [deflate:error] [pid 6166:tid 2905783152] [client 100.43.83.135:31871] AH01385: Zlib error -2 flushing zlib output buffer ((null))
2013:04:12-11:51:26 gatekeeper reverseproxy: [Fri Apr 12 11:51:26.091236 2013] [deflate:error] [pid 6166:tid 2897390448] [client 100.43.83.135:31966] AH01385: Zlib error -2 flushing zlib output buffer ((null))

2013:04:12-14:06:46 gatekeeper reverseproxy: [Fri Apr 12 14:06:46.728412 2013] [authz_blacklist:warn] [pid 6166:tid 3031673712] [client 157.55.33.50:62668] DNS lookup for 50.33.55.157.black.rbl.ctipd.astaro.local. failed: Temporary failure in name resolution
2013:04:12-14:06:47 gatekeeper reverseproxy: [Fri Apr 12 14:06:47.155191 2013] [deflate:error] [pid 6166:tid 3031673712] [client 157.55.33.50:62668] AH01385: Zlib error -2 flushing zlib output buffer ((null))

Regards
Bill

0 Tinkerbell over 12 years ago

Hi Bill,

Would like a little bit of more information from you:
1. What is your configuration of the WAF ?
2. What kind of backend server are you using ?

Best regards,
Bianca
Cancel
Vote Up 0 Vote Down

Sign in to reply

Verify Answer

Cancel
0 Billybob over 12 years ago in reply to Tinkerbell

I am using it for OWA (win2003) but the errors began after the latest UTM (9.091) update with the gzip patch. Both SSL and http requests are allowed externally but I think I am getting the error on requests where the signature is not found for URL hardening. I am allowing access to the root ( / ) of my domain
2013:04:15-09:07:43 gatekeeper reverseproxy: [Mon Apr 15 09:07:43.592168 2013] [url_hardening:error] [pid 6506:tid 3007363952] [client 123.125.71.50:47417] No signature found, URI: http://mydomain .com/robots.txt
2013:04:15-09:07:43 gatekeeper reverseproxy: [Mon Apr 15 09:07:43.709046 2013] [deflate:error] [pid 6506:tid 3007363952] [client 123.125.71.50:47417] AH01385: Zlib error -2 flushing zlib output buffer ((null))
2013:04:15-09:07:43 gatekeeper reverseproxy: srcip="123.125.71.50" localip="10.0.0.1" size="201" user="-" host="123.125.71.50" method="GET" statuscode="403" reason="url hardening" extra="No signature found" time="1347327" url="/robots.txt" server="www.mydomain .com" referer="-" cookie="-" set-cookie="-"

Screenshot of the URL Filter setup
Regards
Bill
- url.jpg
- View
- Hide
Cancel
Vote Up 0 Vote Down

Sign in to reply

Verify Answer

Cancel
0 Astaro Beta Bot over 12 years ago

Thanks for reporting. We are now tracking this as Mantis ID #25235
Cancel
Vote Up 0 Vote Down

Sign in to reply

Verify Answer

Cancel
0 Astaro Beta Bot over 12 years ago

The Mantis ID #25235 is now under investigation.
Cancel
Vote Up 0 Vote Down

Sign in to reply

Verify Answer

Cancel
0 Astaro Beta Bot over 12 years ago

The Mantis ID #25235 is now being worked on. We are planning to release a fix for this issue in Version 9.109.
Cancel
Vote Up 0 Vote Down

Sign in to reply

Verify Answer

Cancel

[9.091][BUG] Reverse Proxy Zlib Error

Submitted a Tech Support Case lately from the Support Portal?