Thread Info
  • State Not Answered
  • Locked Locked
  • Replies 37 replies
  • Subscribers 2 subscribers
  • Views 177555 views
  • Users 0 members are here
Options
Suggested
This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

9.208 BUG: Various IPS *** Caught Term-Signal

Siarom
We have several customers with complaints of failure access (page loading incomplete information), all with IPS enabled and after disabling the feature, the hits just bounce right back.

Not detected any problems via logs ... could verify that this is a bug?


This thread was automatically locked due to age.
ips-2014-11-17.zip
Parents Reply Children
  • 0 in reply to thomas_brewster
    We are slow rolling this 9.172 IPS update out. It seems to be going well so far.

    -Thomas


    For any that are still following this;

    The 9.172 update appears to be stable. We just had one site that reported network connectivity "Outlook disconnect issues" today. That site's UTM has been rebooted and appears to be functioning properly again. The unit's IPS log was oddly blank since ~11 pm yesterday.

    Yesterday we re-enabled the IPS and then forced a download of the latest update.

    1. Check version
    rpm -qi u2d-ipsbundle
    2. Download IPS update
    audld.plx --types ipsbundle
    3.  Apply update
    auisys.plx --types ipsbundle
    4. Check version
    rpm -qi u2d-ipsbundle 

    Results from above.

    #1
    UTM:/root # rpm -qi u2d-ipsbundle

    Name        : u2d-ipsbundle                Relocations: (not relocatable)
    Version     : 9                                 Vendor: Astaro GmbH & Co. KG
    Release     : 169                           Build Date: Tue 18 Nov 2014 08:45:38 AM CST
    Install Date: Wed 19 Nov 2014 04:53:37 AM CST      Build Host: kar-patternbuild1
    Group       : Pattern                       Source RPM: u2d-ipsbundle-9-169.src.rpm
    Size        : 43249637                         License: Astaro
    Signature   : (none)
    Packager    : Astaro GmbH & Co. KG
    URL         : http://www.astaro.com
    Summary     : Snort Engine and Ruleset
    Description :
    Snort Engine and Ruleset
    Distribution: Astaro Security Gateway

    #2
    UTM:/root # audld.plx --types ipsbundle

    Starting Up2Date Package Downloader
    Authenticating ...
    Authentication successful!
    Starting Up2Date Download
    Starting sync mode for 'ipsbundle'
      Downloading Up2Date Package http://175.41.132.12:80/asg/v9/ipsbundle/u2d-ipsbundle-9.172.tgz.gpg
       ++++++++++++++++   100% - 12489861 bytes received
    Fileset synchronous

    #3

    UTM:/root # auisys.plx --types ipsbundle

    Starting Up2Date Package Installer
    Searching for available up2date packages for type 'ipsbundle'

    Installing up2date package version 9.172
      Verifying up2date package signature
      Unpacking installation instructions
      Unpacking up2date package container
      Running pre-installation checks
      Starting up2date package installation
        Testing install package: u2d-ipsbundle-9-172.i686.rpm                      OK
        Installing rpm package: u2d-ipsbundle-9-172.i686.rpm                       OK
        Executing script hook : exec /usr/local/bin/patterndist ipsbundle          OK
        Running syncing step 0                                                     OK
        Running syncing step 1                                                     OK
      Successfully installed Up2Date package

    Up2Date Package Installer finished, exiting

    #4

    UTM:/root # rpm -qi u2d-ipsbundle

    Name        : u2d-ipsbundle                Relocations: (not relocatable)
    Version     : 9                                 Vendor: Astaro GmbH & Co. KG
    Release     : 172                           Build Date: Tue 25 Nov 2014 02:45:41 AM CST
    Install Date: Mon 01 Dec 2014 11:03:27 AM CST      Build Host: kar-patternbuild1
    Group       : Pattern                       Source RPM: u2d-ipsbundle-9-172.src.rpm
    Size        : 43313121                         License: Astaro
    Signature   : (none)
    Packager    : Astaro GmbH & Co. KG
    URL         : http://www.astaro.com
    Summary     : Snort Engine and Ruleset
    Description :
    Snort Engine and Ruleset
    Distribution: Astaro Security Gateway