hi
my firewall started acting weird today. it stopped working twice today. no ping, no webmin login, no console login, nada, zip, nothing. even the blinking cursor on the console stopped blinking. no kernel dump or any error message which could lead me to the source of the error...
i am pretty sure that the hardware is okay.
users reported problems with the proxy (pages do not load properly, no connection at all etc.), so i had a look at the proxy-logfiles. (i know there are issues with the proxy, especially with the content filtering enabled.)
i saw that the content filter logfile is filling up with endless messages like the following:
2004:07:06-14:40:50 (none) weed[3531]: Profile profile_9 starting for: protocol:'http', user:'internet1', facility:'response', src_address:'192.168.100.219' RESULT:'100', REASON:'SCAN', LAST SCANNER:'/usr/lib/libhttp_list.so'
2004:07:06-14:42:51 (none) weed[3199]: Profile http_auth starting for: protocol:'http', user:'internet1', facility:'authenticate', src_address:'192.168.100.219' RESULT:'300', REASON:'Authenticate HyperDyper + AUA', LAST SCANNER:'/usr/lib/libaua.so'
2004:07:06-14:42:51 (none) weed[3199]: Profile profile_8 starting for: protocol:'http', user:'internet1', facility:'request', src_address:'192.168.100.219' RESULT:'100', REASON:'Scan Request HyperDyper', LAST SCANNER:'/usr/lib/libcofs.so'
2004:07:06-14:43:00 (none) weed[3044]: Profile http_auth starting for: protocol:'http', user:'juze05', facility:'authenticate', src_address:'192.168.101.205' RESULT:'300', REASON:'Authenticate HyperDyper + AUA', LAST SCANNER:'/usr/lib/libaua.so'
2004:07:06-14:43:00 (none) weed[3044]: Profile profile_8 starting for: protocol:'http', user:'juze05', facility:'request', src_address:'192.168.101.205' RESULT:'100', REASON:'Scan Request HyperDyper', LAST SCANNER:'/usr/lib/libcofs.so'
2004:07:06-14:43:00 (none) weed[3044]: Profile profile_9 starting for: protocol:'http', user:'juze05', facility:'response', src_address:'192.168.101.205' RESULT:'100', REASON:'SCAN', LAST SCANNER:'/usr/lib/libweedpcre.so'
2004:07:06-14:43:04 (none) weed[3025]: Profile http_auth starting for: protocol:'http', user:'juze05', facility:'authenticate', src_address:'192.168.101.205' RESULT:'300', REASON:'Authenticate HyperDyper + AUA', LAST SCANNER:'/usr/lib/libaua.so'
2004:07:06-14:43:04 (none) weed[3025]: Profile profile_8 starting for: protocol:'http', user:'juze05', facility:'request', src_address:'192.168.101.205' RESULT:'100', REASON:'Scan Request HyperDyper', LAST SCANNER:'/usr/lib/libcofs.so'
2004:07:06-14:43:05 (none) weed[3025]: Profile profile_9 starting for: protocol:'http', user:'juze05', facility:'response', src_address:'192.168.101.205' RESULT:'100', REASON:'SCAN', LAST SCANNER:'/usr/lib/libweedpcre.so'
is this ok? if the answer is yes, why is the content scanner so noisy? there are 10 users using this proxy and they managed to create an 18 mb logfile in about 5 hours!
my configuration:
1,7 ghz celeron, 512 mb ram
asl 5.012
content filtering enabled ( with cobion surf protection )
user authentication via local users, content scanning profiles assigned via network definition.
no virus protection
This thread was automatically locked due to age.