Thread Info
  • State Not Answered
  • Locked Locked
  • Replies 74 replies
  • Subscribers 2 subscribers
  • Views 40565 views
  • Users 0 members are here
Options
Suggested
This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

http Proxy gone down after upgrade to 8.303

HMaster
I also have problems after the upgrade form 8.302 to 8.303.

My network behind the Astaro Appliance cannot connect to the Internet anymore. Except when I change the InternetExplorer/FireFox setting to not use Proxy settings. 
Before the upgrade all systems (laptops/desktops/servers) could connect to without any problems. (Only 1 desktop had problems with FireFox proxy settings in combination with Facebook.com (constantly asking for network username and password)).

I checked many settings in the Astaro. Changed the WebFiltering Authantication mode form "None" to "Active Directory SSO" with 2 AD groups. But nothing works. 
I found out, that the problems lie in the http-proxy settings, because the Exange server behind tha Astaro has no problems on the port 25. While the port 8080 is blocked. 

PLEASE HELP!

See below for a copy/paste from the LiveLog

2012:05:19-15:13:41 VUURMUUR httpproxy[4282]: id="0002" severity="info" sys="SecureWeb" sub="http" name="web request blocked" action="block" method="GET" srcip="192.168.87.115" dstip="" user="huib" statuscode="407" cached="0" profile="REF_asOsBDRyvy (Proxy Filter)" filteraction=" ()" size="4718" request="0xac63048" url="www.google.nl/" exceptions="" error=""
2012:05:19-15:13:56 VUURMUUR httpproxy[4282]: id="0002" severity="info" sys="SecureWeb" sub="http" name="web request blocked" action="block" method="GET" srcip="192.168.87.115" dstip="" user="huib" statuscode="403" cached="0" profile="REF_asOsBDRyvy (Proxy Filter)" filteraction="REF_DefaultHTTPCFFBlockAction (Default content filter block action)" size="6600" request="0xac63048" url="www.google.nl/" exceptions="" error=""
2012:05:19-15:15:09 VUURMUUR httpproxy[4282]: id="0003" severity="info" sys="SecureWeb" sub="http" request="(nil)" function="confd_config_reload_func" file="confd-client.c" line="721" message="reloading config"
2012:05:19-15:15:10 VUURMUUR httpproxy[4282]: id="0003" severity="info" sys="SecureWeb" sub="http" request="(nil)" function="parse_address" file="util.c" line="548" message="getaddrinfo: passthrough6.fw-notify.net: Name or service not known"
2012:05:19-15:15:10 VUURMUUR httpproxy[4282]: id="0003" severity="info" sys="SecureWeb" sub="http" request="(nil)" function="confd_config_filter" file="confd-client.c" line="2596" message="failed to resolve passthrough6.fw-notify.net, using 2a01:198:200:680::8080"
2012:05:19-15:15:10 VUURMUUR httpproxy[4282]: id="0003" severity="info" sys="SecureWeb" sub="http" request="(nil)" function="confd_config_reload_func" file="confd-client.c" line="759" message="reloading config done, new version 330"
2012:05:19-15:15:25 VUURMUUR httpproxy[4282]: id="0003" severity="info" sys="SecureWeb" sub="http" request="0x9d53710" function="auth_adir_update_sid_whitelist_callback" file="auth_adir.c" line="1020" message="winbindd lookup of SID for groupname [Astaro Proxy Users] failed ()"
2012:05:19-15:15:25 VUURMUUR httpproxy[4282]: id="0003" severity="info" sys="SecureWeb" sub="http" request="0x9d53710" function="auth_adir_getsid_callback" file="auth_adir.c" line="586" message="winbindd request failed ()"
2012:05:19-15:15:25 VUURMUUR httpproxy[4282]: id="0002" severity="info" sys="SecureWeb" sub="http" name="web request blocked" action="block" method="GET" srcip="192.168.87.1" dstip="" user="administrator" statuscode="407" cached="0" profile="REF_asOsBDRyvy (Proxy Filter)" filteraction=" ()" size="4718" request="0x9d53710" url="www.google.nl/" exceptions="" error=""
2012:05:19-15:15:28 VUURMUUR httpproxy[4282]: id="0002" severity="info" sys="SecureWeb" sub="http" name="web request blocked" action="block" method="GET" srcip="192.168.87.1" dstip="" user="administrator" statuscode="403" cached="0" profile="REF_asOsBDRyvy (Proxy Filter)" filteraction="REF_DefaultHTTPCFFBlockAction (Default content filter block action)" size="6600" request="0x9d53710" url="www.google.nl/" exceptions="" error=""

2012:05:19-15:22:14 VUURMUUR httpproxy[4282]: id="0003" severity="info" sys="SecureWeb" sub="http" request="0xab54e68" function="auth_adir_update_sid_whitelist_callback" file="auth_adir.c" line="1020" message="winbindd lookup of SID for groupname [Astaro Proxy Users] failed ()"
2012:05:19-15:22:14 VUURMUUR httpproxy[4282]: id="0003" severity="info" sys="SecureWeb" sub="http" request="0xab54e68" function="auth_adir_update_sid_whitelist_callback" file="auth_adir.c" line="1020" message="winbindd lookup of SID for groupname [Astaro Proxy Users] failed ()"
2012:05:19-15:22:14 VUURMUUR httpproxy[4282]: id="0003" severity="info" sys="SecureWeb" sub="http" request="0xab54e68" function="auth_adir_getsid_callback" file="auth_adir.c" line="586" message="winbindd request failed ()"
2012:05:19-15:22:14 VUURMUUR httpproxy[4282]: id="0002" severity="info" sys="SecureWeb" sub="http" name="web request blocked" action="block" method="GET" srcip="192.168.87.1" dstip="" user="administrator" statuscode="407" cached="0" profile="REF_asOsBDRyvy (Proxy Filter)" filteraction=" ()" size="4718" request="0xab54e68" url="www.google.nl/" exceptions="" error=""
2012:05:19-15:22:14 VUURMUUR httpproxy[4282]: id="0003" severity="info" sys="SecureWeb" sub="http" request="0xab54e68" function="auth_adir_update_sid_whitelist_callback" file="auth_adir.c" line="1020" message="winbindd lookup of SID for groupname [Astaro Proxy Users] failed ()"
2012:05:19-15:22:14 VUURMUUR httpproxy[4282]: id="0003" severity="info" sys="SecureWeb" sub="http" request="0xab54e68" function="auth_adir_getsid_callback" file="auth_adir.c" line="586" message="winbindd request failed ()"
2012:05:19-15:22:14 VUURMUUR httpproxy[4282]: id="0002" severity="info" sys="SecureWeb" sub="http" name="web request blocked" action="block" method="GET" srcip="192.168.87.1" dstip="" user="administrator" statuscode="407" cached="0" profile="REF_asOsBDRyvy (Proxy Filter)" filteraction=" ()" size="4718" request="0xab54e68" url="www.google.nl/" exceptions="" error=""
2012:05:19-15:22:14 VUURMUUR httpproxy[4282]: id="0003" severity="info" sys="SecureWeb" sub="http" request="0xab54e68" function="auth_adir_getsid_callback" file="auth_adir.c" line="586" message="winbindd request failed ()"
2012:05:19-15:22:14 VUURMUUR httpproxy[4282]: id="0002" severity="info" sys="SecureWeb" sub="http" name="web request blocked" action="block" method="GET" srcip="192.168.87.1" dstip="" user="administrator" statuscode="407" cached="0" profile="REF_asOsBDRyvy (Proxy Filter)" filteraction=" ()" size="4718" request="0xab54e68" url="www.google.nl/" exceptions="" error=""
2012:05:19-15:22:17 VUURMUUR httpproxy[4282]: id="0002" severity="info" sys="SecureWeb" sub="http" name="web request blocked" action="block" method="GET" srcip="192.168.87.1" dstip="" user="administrator" statuscode="403" cached="0" profile="REF_asOsBDRyvy (Proxy Filter)" filteraction="REF_DefaultHTTPCFFBlockAction (Default content filter block action)" size="6600" request="0xab54e68" url="www.google.nl/" exceptions="" error=""
2012:05:19-15:22:17 VUURMUUR httpproxy[4282]: id="0002" severity="info" sys="SecureWeb" sub="http" name="web request blocked" action="block" method="GET" srcip="192.168.87.1" dstip="" user="administrator" statuscode="403" cached="0" profile="REF_asOsBDRyvy (Proxy Filter)" filteraction="REF_DefaultHTTPCFFBlockAction (Default content filter block action)" size="6600" request="0xab54e68" url="www.google.nl/" exceptions="" error=""
2012:05:19-15:22:17 VUURMUUR httpproxy[4282]: id="0002" severity="info" sys="SecureWeb" sub="http" name="web request blocked" action="block" method="GET" srcip="192.168.87.1" dstip="" user="administrator" statuscode="403" cached="0" profile="REF_asOsBDRyvy (Proxy Filter)" filteraction="REF_DefaultHTTPCFFBlockAction (Default content filter block action)" size="6600" request="0xab54e68" url="www.google.nl/" exceptions="" error=""


This thread was automatically locked due to age.
  • 0 in reply to HMaster
    Yes, Softrelease.
    I've already seen!

    Thx
  • 0
    Ffiene, I don't understand what causes winbindd to stop working, but you might want to contact Astaro Support to have them look at your cluster.  I don't know of an effective way to restart it other than with a reboot.

    Cheers - Bob
     
    Sophos UTM Community Moderator
    Sophos Certified Architect - UTM
    Sophos Certified Engineer - XG
    Gold Solution Partner since 2005
    MediaSoft, Inc. USA
  • 0 in reply to BAlfson
    Yes, Astaro Support is already informed.

    They have acknowledged, that there is a problem with the proxy/winbindd update.
    But this takes always some time, because i have to talk to my first level support (which i only have to contact if i know there is a bug) to discuss this, 'til they forward this to Astaro!

    Direct support would be better!

    Regards!
  • 0
    Have they given you an alternative to a reboot?  I didn't see anything in the Known Issues List.

    Cheers - Bob
     
    Sophos UTM Community Moderator
    Sophos Certified Architect - UTM
    Sophos Certified Engineer - XG
    Gold Solution Partner since 2005
    MediaSoft, Inc. USA
  • 0
    Not yet!
    I am waiting for an answer.

    I think they will replace the samba or proxy rpm.

    Hopefully they will not forget to update the salve, too, as last time! ;-)
    I had to do it by myself.
  • 0
    Wierd things happen Yesterday.
    My admin account on the AD server (direct RDP session) could use the Internet browser via http proxy whitout any problems.
    My husband on her laptop (win7 business) got an AD logon box.

    Looked to me that the discovery of AD users in the Astaro didn't go well. I did a Prefetch to rediscover the users, but I am still not sure if it is working. Because I am now at the office, so I have to wait a few hours to check again.

    I am allready happy that the problems with the proxy/winbindd update are acknowledged. Hopefully there will be a beter update soon.

    :edit: lost the firewall connection again this afternoon. After a few cold boots, I got connection again. But I cannot say I am pleased with the situation. The new update has to come very soon!
  • 0 in reply to HMaster
    Terrible performance of the Astaro this weekend. [:@]

    Within 10 minutes the http-proxy works or fails. And then only for half of the accounts. I have to check if the problems are account or sytem related.

    Confidence is getting lost on the astro. [:@]
  • 0
    sounds like something is corrupted inside of your vm.  I would shutdown that vm and reinstlal to a new one with a config backup.

    Owner:  Emmanuel Technology Consulting

    http://etc-md.com

    Former Sophos SG(Astaro) advocate/researcher/Silver Partner

    PfSense w/Suricata, ntopng, 

    Other addons to follow

  • 0 in reply to William Warren
    hello,
    i have the same problème since i have updated astaro from 8.302 to 8.303
    update to 8.304 change nothing.

    i try to add astaro to my 2008R2 domain but now it doesn't work.

    does someone know if astaro are working on a solution.
  • 0
    i try to add astaro to my 2008R2 domain but now it doesn't work


    Ensure that you delete the Astaro computer object in AD before trying to re-join the domain.
    __________________
    ACE v8/SCA v9.3

    ...still have a v5 install disk in a box somewhere.

    http://xkcd.com
    http://www.tedgoff.com/mb
    http://www.projectcartoon.com/cartoon/1
Cookie Information Banner