[9.165][DUPE] WAF problems after upgrade to 9.165-15

After upgrade my HA System to 9.165 (running on Hyper-V V3) WAF works no longer. Here are the logs:

2013:11:06-09:26:29 asg-2 reverseproxy: [Wed Nov 06 09:26:29.551823 2013] [ssl:warn] [pid 29494:tid 4152145600] AH02292: Init: Name-based SSL virtual hosts only work for clients with TLS server name indication support (RFC 4366)
2013:11:06-09:26:30 asg-2 reverseproxy: [Wed Nov 06 09:26:30.007901 2013] [security2:notice] [pid 29494:tid 4152145600] ModSecurity for Apache/2.7.3 (ModSecurity: Open Source Web Application Firewall) configured.
2013:11:06-09:26:30 asg-2 reverseproxy: [Wed Nov 06 09:26:30.008386 2013] [security2:notice] [pid 29494:tid 4152145600] ModSecurity: APR compiled version="1.4.6"; loaded version="1.4.6"
2013:11:06-09:26:30 asg-2 reverseproxy: [Wed Nov 06 09:26:30.008441 2013] [security2:notice] [pid 29494:tid 4152145600] ModSecurity: PCRE compiled version="7.8 "; loaded version="7.8 2008-09-05"
2013:11:06-09:26:30 asg-2 reverseproxy: [Wed Nov 06 09:26:30.008456 2013] [security2:notice] [pid 29494:tid 4152145600] ModSecurity: LIBXML compiled version="2.7.6"
2013:11:06-09:26:30 asg-2 reverseproxy: [Wed Nov 06 09:26:30.043349 2013] [core:warn] [pid 29494:tid 4152145600] AH00111: Config variable ${URLHardening_HTTP_Hostname} is not defined
2013:11:06-09:26:30 asg-2 reverseproxy: [Wed Nov 06 09:26:30.043862 2013] [core:warn] [pid 29494:tid 4152145600] AH00111: Config variable ${URLHardening_HTTP_Hostname} is not defined
2013:11:06-09:26:30 asg-2 reverseproxy: [Wed Nov 06 09:26:30.044417 2013] [core:warn] [pid 29494:tid 4152145600] AH00111: Config variable ${URLHardening_HTTP_Hostname} is not defined
2013:11:06-09:26:30 asg-2 reverseproxy: [Wed Nov 06 09:26:30.049216 2013] [core:warn] [pid 29494:tid 4152145600] AH00111: Config variable ${URLHardening_HTTP_Hostname} is not defined
2013:11:06-09:26:30 asg-2 reverseproxy: [Wed Nov 06 09:26:30.053484 2013] [core:warn] [pid 29494:tid 4152145600] AH00111: Config variable ${URLHardening_HTTP_Hostname} is not defined
2013:11:06-09:26:30 asg-2 reverseproxy: [Wed Nov 06 09:26:30.054052 2013] [core:warn] [pid 29494:tid 4152145600] AH00111: Config variable ${URLHardening_HTTP_Hostname} is not defined
2013:11:06-09:26:30 asg-2 reverseproxy: [Wed Nov 06 09:26:30.054693 2013] [core:warn] [pid 29494:tid 4152145600] AH00111: Config variable ${URLHardening_HTTP_Hostname} is not defined
2013:11:06-09:26:30 asg-2 reverseproxy: [Wed Nov 06 09:26:30.055379 2013] [core:warn] [pid 29494:tid 4152145600] AH00111: Config variable ${URLHardening_HTTP_Hostname} is not defined
2013:11:06-09:26:30 asg-2 reverseproxy: [Wed Nov 06 09:26:30.177519 2013] [proxy_balancer:emerg] [pid 29498:tid 4152145600] (22)Invalid argument: AH01179: balancer slotmem_create failed
2013:11:06-09:26:30 asg-2 reverseproxy: [Wed Nov 06 09:26:30.177562 2013] [:emerg] [pid 29498:tid 4152145600] AH00020: Configuration Failed, exiting

I've published ActiveSync, Outlook Anywhere, Outlook Web App and a Sophos SMC Server.

€dit
The WAF restarts one time per hour. No log entry. Just admin warning mail.

0 snowcrash_01 over 11 years ago

Hi,
thanks for the report. According to our developers this is the same issue as:
https://community.sophos.com/products/unified-threat-management/astaroorg/f/81/t/65237
Cancel
Vote Up 0 Vote Down

Sign in to reply

Verify Answer

Cancel
0 Astaro Beta Bot over 11 years ago

Thanks for reporting. We are now tracking this as Mantis ID #26640
Cancel
Vote Up 0 Vote Down

Sign in to reply

Verify Answer

Cancel
0 Astaro Beta Bot over 11 years ago

The Mantis ID #26640 is now fixed. We are planning to release a fix for this issue in Version 9.170.
Cancel
Vote Up 0 Vote Down

Sign in to reply

Verify Answer

Cancel
0 Astaro Beta Bot over 11 years ago

The Mantis ID #26640 is now being worked on.
Cancel
Vote Up 0 Vote Down

Sign in to reply

Verify Answer

Cancel
0 Astaro Beta Bot over 11 years ago

The Mantis ID #26640 is now fixed.
Cancel
Vote Up 0 Vote Down

Sign in to reply

Verify Answer

Cancel
0 mod2402 over 11 years ago

Same Problem in 9.170-21

2013:11:21-20:16:13 asg-2 reverseproxy: [Thu Nov 21 20:16:13.431750 2013] [ssl:warn] [pid 16079:tid 4151207616] AH02292: Init: Name-based SSL virtual hosts only work for clients with TLS server name indication support (RFC 4366)

2013:11:21-20:16:14 asg-2 reverseproxy: [Thu Nov 21 20:16:14.006679 2013] [security2:notice] [pid 16079:tid 4151207616] ModSecurity for Apache/2.7.3 (ModSecurity: Open Source Web Application Firewall) configured.

2013:11:21-20:16:14 asg-2 reverseproxy: [Thu Nov 21 20:16:14.006703 2013] [security2:notice] [pid 16079:tid 4151207616] ModSecurity: APR compiled version="1.4.6"; loaded version="1.4.6"

2013:11:21-20:16:14 asg-2 reverseproxy: [Thu Nov 21 20:16:14.006709 2013] [security2:notice] [pid 16079:tid 4151207616] ModSecurity: PCRE compiled version="7.8 "; loaded version="7.8 2008-09-05"

2013:11:21-20:16:14 asg-2 reverseproxy: [Thu Nov 21 20:16:14.006713 2013] [security2:notice] [pid 16079:tid 4151207616] ModSecurity: LIBXML compiled version="2.7.6"

2013:11:21-20:16:14 asg-2 reverseproxy: [Thu Nov 21 20:16:14.023662 2013] [core:warn] [pid 16079:tid 4151207616] AH00111: Config variable ${URLHardening_HTTP_Hostname} is not defined

2013:11:21-20:16:14 asg-2 reverseproxy: [Thu Nov 21 20:16:14.023863 2013] [core:warn] [pid 16079:tid 4151207616] AH00111: Config variable ${URLHardening_HTTP_Hostname} is not defined

2013:11:21-20:16:14 asg-2 reverseproxy: [Thu Nov 21 20:16:14.024079 2013] [core:warn] [pid 16079:tid 4151207616] AH00111: Config variable ${URLHardening_HTTP_Hostname} is not defined

2013:11:21-20:16:14 asg-2 reverseproxy: [Thu Nov 21 20:16:14.025911 2013] [core:warn] [pid 16079:tid 4151207616] AH00111: Config variable ${URLHardening_HTTP_Hostname} is not defined

2013:11:21-20:16:14 asg-2 reverseproxy: [Thu Nov 21 20:16:14.027631 2013] [core:warn] [pid 16079:tid 4151207616] AH00111: Config variable ${URLHardening_HTTP_Hostname} is not defined

2013:11:21-20:16:14 asg-2 reverseproxy: [Thu Nov 21 20:16:14.027842 2013] [core:warn] [pid 16079:tid 4151207616] AH00111: Config variable ${URLHardening_HTTP_Hostname} is not defined

2013:11:21-20:16:14 asg-2 reverseproxy: [Thu Nov 21 20:16:14.028024 2013] [core:warn] [pid 16079:tid 4151207616] AH00111: Config variable ${URLHardening_HTTP_Hostname} is not defined

2013:11:21-20:16:14 asg-2 reverseproxy: [Thu Nov 21 20:16:14.028207 2013] [core:warn] [pid 16079:tid 4151207616] AH00111: Config variable ${URLHardening_HTTP_Hostname} is not defined

2013:11:21-20:16:14 asg-2 reverseproxy: [Thu Nov 21 20:16:14.087025 2013] [proxy_balancer:emerg] [pid 16085:tid 4151207616] (22)Invalid argument: AH01179: balancer slotmem_create failed

2013:11:21-20:16:14 asg-2 reverseproxy: [Thu Nov 21 20:16:14.087051 2013] [:emerg] [pid 16085:tid 4151207616] AH00020: Configuration Failed, exiting
Cancel
Vote Up 0 Vote Down

Sign in to reply

Verify Answer

Cancel
0 Evianne over 11 years ago in reply to mod2402

See https://community.sophos.com/products/unified-threat-management/astaroorg/f/81/t/65237 .
Cancel
Vote Up 0 Vote Down

Sign in to reply

Verify Answer

Cancel
0 Billybob over 11 years ago in reply to mod2402
Seems you have other configuration issues also.

2013:11:21-20:16:14 asg-2 reverseproxy: [Thu Nov 21 20:16:14.023662 2013] [core:warn] [pid 16079:tid 4151207616] AH00111: Config variable ${URLHardening_HTTP_Hostname} is not defined
Check your url hardening configuration or disable it temporarily to check the proxy.
As root, removing the files using
rm /var/chroot-reverseproxy/var/run/apache2/*.shm
and restarting the proxy works fine otherwise.
Cancel
Vote Up 0 Vote Down

Sign in to reply

Verify Answer

Cancel
0 mod2402 over 11 years ago

hi billybob,
i've no URL Hardening rules defined.

Removing the files works for me. Now I can test WAF [:)]

many Thanks!

regards
mod
Cancel
Vote Up 0 Vote Down

Sign in to reply

Verify Answer

Cancel
0 mod2402 over 11 years ago

now I'm a little bit confused. after some time, the log shows the same issue but Microsoft ActiveSync and Outlook Anywhere works without problems. just owa has Problems. -> https://community.sophos.com/products/unified-threat-management/astaroorg/f/81/t/65338

I will test the new release 9.171 tomorrow..
Cancel
Vote Up 0 Vote Down

Sign in to reply

Verify Answer

Cancel