This discussion has been locked.

You can no longer post new replies to this discussion. If you have a question you can start a new discussion

UTM 9.204 Soft-Release

We are glad to announce that we've soft-released UTM 9.204

News
· Bugfix Release
· Enhancement: WAF: Allow to configure connection timeout per backend
· Enhancement: WAF: Add "id" field to log lines
· Enhancement: SSL VPN: Log traffic volume on connection close

Remarks
· System will be rebooted
· Configuration will be upgraded
· Connected Wifi APs will perform firmware upgrade
· Connected RED devices will perform firmware upgrade

Bugfixes
22468 HTML5 iptables rule doesn't match for IPSec-routed hosts
24091 RED [RED10, RED50]: prevent RED50 from being deployed as RED10 and vice versa
24679 Rescan for Virus when releasing Quarantine Message
28973 [ALPHA] SPX: Attachment names character encoding error during PDF generation
29252 [BETA] Improve logging of SPX encryption
29446 [BETA] DLP: inconsistent dlp action identifier
30320 WiFi: Client list lacks some data for clients not seen for a long time
30640 Messages with reason "sender_blacklist" cannot be written to quarantine
31131 UTM525r5 declared as software after copper module replacement [9.2]
31174 Google Play store downloads should bypass the download patience page
31357 [SR] IPS Rule Age not available for Subnodes
31518 [9.2] Regression from V8: Recipient Verification against AD not working with LDAP-SSL
31536 If a Endpoint client with WebControl is behind a UTM it doesnt belong to or is no UTM managed Endpoint at all surfing gets slow
31560 NTP for offline provisioned REDs
31568 Winbind failed to accept socket - Too many open files [9.2]
31578 Avira Scanner can not scan pop3 mail, Error index out of bound [9.2]
31599 coredump of vpn-reporter due to not parsing the username correctly
31608 Websec reporting didn't work correctly after update to v9.201
31671 changing time steps of individual OTP tokens results in authentication failure
31691 Support IP address for SMC-Server
31696 Kernel panic after adding new Access Point
31750 Upload of exe files via waf results in segmentation fault of reverseproxy
31785 netselector does not write server sorted correctly
31792 selfmon too agressive about ctasd_inbound_mem_usage counter and ctasd_inbound_mem_usage counter
31837 kernel NULL pointer deref at nf_nat_setup_info+0x299/0x61f [nf_nat]
31878 Default exception for chrome updater/installer [9.2]
31889 Reduce exceptions for Firefox Update [9.2]
32010 Packetfilter rules are not visible in webadmin when IE is used and version 9.202 is installed
32067 Workaround for software updates/ downloads via download manager

Download
Up2Date link: ftp://ftp.astaro.de/UTM/v9/up2date/u2d-sys-9.203003-204020.tgz.gpg
Md5sum: 25f5b7ad5eb3fe2d41b9e331f06e601b
File size: ~111 MB

This thread was automatically locked due to age.

Parents

0 Mark_D_01 over 11 years ago

Hi Bob
I'm getting the below from a couple of machines after system reboot update to 9.204-20

2014:07:24-01:07:02 anubis modprobe: FATAL: Could not load /lib/modules/3.8.13.15-119.g03ba714-smp64/modules.dep: No such file or directory
2014:07:24-01:07:02 anubis modprobe: FATAL: Could not load /lib/modules/3.8.13.15-119.g03ba714-smp64/modules.dep: No such file or directory
2014:07:24-01:07:02 anubis modprobe: FATAL: Could not load /lib/modules/3.8.13.15-119.g03ba714-smp64/modules.dep: No such file or directory
2014:07:24-01:07:02 anubis modprobe: FATAL: Could not load /lib/modules/3.8.13.15-119.g03ba714-smp64/modules.dep: No such file or directory
2014:07:24-01:07:03 anubis modprobe: FATAL: Could not load /lib/modules/3.8.13.15-119.g03ba714-smp64/modules.dep: No such file or directory
2014:07:24-01:07:03 anubis modprobe: FATAL: Could not load /lib/modules/3.8.13.15-119.g03ba714-smp64/modules.dep: No such file or directory
2014:07:24-01:07:03 anubis modprobe: FATAL: Could not load /lib/modules/3.8.13.15-119.g03ba714-smp64/modules.dep: No such file or directory
2014:07:24-01:10:02 anubis kernel: [ 87.103444] NET: Registered protocol family 24
Cancel
Vote Up 0 Vote Down

Cancel
0 thedukeness over 11 years ago in reply to Mark_D_01

Hi Guys,

I installed 9.204-20 tonight but have major problems with it. None of my WAF sites respond and the live log for WAF logs nothing at all when I hit those sites. Its as if nothing is configured anymore. I see it start the service but then it logs nothing else.

I was able to revert to my reserve node still running 9.203-3 by shutting down the upgraded node (I have a HA set up). Does anyone know how to downgrade the upgraded node or have any ideas on fixing WAF?
Cancel
Vote Up 0 Vote Down

Cancel
0 ubruns over 11 years ago in reply to thedukeness

Hi Guys,

I installed 9.204-20 tonight but have major problems with it. None of my WAF sites respond and the live log for WAF logs nothing at all when I hit those sites. Its as if nothing is configured anymore. I see it start the service but then it logs nothing else.

I was able to revert to my reserve node still running 9.203-3 by shutting down the upgraded node (I have a HA set up). Does anyone know how to downgrade the upgraded node or have any ideas on fixing WAF?

A good hint from the german thread of this board:
Multiple people have same issues.
Restore a configuration from version 9.113 (restoring a 9.203 version will NOT work!).
Your WAF will work again.

Another user reportet that he then restored a 9.204-20 backup, and the WAF was working anyway.

Another (untested) hint from a Sophos men:
Disable all "XSS Attacks" in the Firewall Profiles (below WAF).
The WAF should start working, after you disabled the last one.
If WAF is running, you can reenable the "XSS Attacks" and the WAF will still work.

Hope this will help you.
Please post your result...
Cancel
Vote Up 0 Vote Down

Cancel

Reply

0 ubruns over 11 years ago in reply to thedukeness

Hi Guys,

I installed 9.204-20 tonight but have major problems with it. None of my WAF sites respond and the live log for WAF logs nothing at all when I hit those sites. Its as if nothing is configured anymore. I see it start the service but then it logs nothing else.

I was able to revert to my reserve node still running 9.203-3 by shutting down the upgraded node (I have a HA set up). Does anyone know how to downgrade the upgraded node or have any ideas on fixing WAF?

A good hint from the german thread of this board:
Multiple people have same issues.
Restore a configuration from version 9.113 (restoring a 9.203 version will NOT work!).
Your WAF will work again.

Another user reportet that he then restored a 9.204-20 backup, and the WAF was working anyway.

Another (untested) hint from a Sophos men:
Disable all "XSS Attacks" in the Firewall Profiles (below WAF).
The WAF should start working, after you disabled the last one.
If WAF is running, you can reenable the "XSS Attacks" and the WAF will still work.

Hope this will help you.
Please post your result...
Cancel
Vote Up 0 Vote Down

Cancel

Children

0 thedukeness over 11 years ago in reply to ubruns

Thanks but I think I have a different issue. I get no response from a curl against my sites and there is nothing in the WAF log. If it was being blocked it should(?) log something.
Cancel
Vote Up 0 Vote Down

Cancel