Thread Info
  • State Not Answered
  • Locked Locked
  • Replies 7 replies
  • Subscribers 1 subscriber
  • Views 1601 views
  • Users 0 members are here
Options
Suggested
This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Some errors I am seeing

William Warren
I am seeing this in the logs quote a bit:
erity="info" sys="SecureWeb" sub="http" request="(nil)" function="sc_log" file="scr_scanner.c" line="1098" message="2nd colon found in domain with no username"
2011:07:22-21:37:32 firewall httpproxy[4045]: id="0003" severity="info" sys="SecureWeb" sub="http" request="(nil)" function="sc_log" file="scr_scanner.c" line="1098" message="2nd colon found in domain with no username"
2011:07:22-21:37:32 firewall httpproxy[4045]: id="0003" severity="info" sys="SecureWeb" sub="http" request="(nil)" function="sc_log" file="scr_scanner.c" line="1098" message="2nd colon found in domain with no username"
2011:07:22-21:37:32 firewall httpproxy[4045]: id="0003" severity="info" sys="SecureWeb" sub="http" request="(nil)" function="sc_log" file="scr_scanner.c" line="1098" message="2nd colon found in domain with no username"
2011:07:22-21:37:32 firewall httpproxy[4045]: id="0003" severity="info" sys="SecureWeb" sub="http" request="(nil)" function="sc_log" file="scr_scanner.c" line="1098" message="2nd colon found in domain with no username"


This thread was automatically locked due to age.
Parents
  • 0
    proxy jsut went bonkers..it is now randomly blocking all kinds of stuff.  I'm reverting my enitre "fleet" to 8.103 until 8.2 is relaly out of beta.

    2011:07:23-00:54:23 firewall httpproxy[15664]: id="0002" severity="info" sys="SecureWeb" sub="http" name="web request blocked" action="block" method="GET" srcip="192.168.255.52" dstip="74.125.226.131" user="" statuscode="502" cached="0" profile="REF_DefaultHTTPProfile (Default Proxy)" filteraction="REF_DefaultHTTPCFFAction (Default content filter action)" size="90" request="0x894ea00" url="clients1.google.com/.../search
    2011:07:23-00:54:23 firewall httpproxy[15664]: id="0002" severity="info" sys="SecureWeb" sub="http" name="web request blocked" action="block" method="GET" srcip="192.168.255.52" dstip="74.125.93.104" user="" statuscode="502" cached="0" profile="REF_DefaultHTTPProfile (Default Proxy)" filteraction="REF_DefaultHTTPCFFAction (Default content filter action)" size="20" request="0x894ba28" url="www.google.com/s
    2011:07:23-00:54:23 firewall httpproxy[15664]: id="0002" severity="info" sys="SecureWeb" sub="http" name="web request blocked" action="block" method="GET" srcip="192.168.255.52" dstip="74.125.93.104" user="" statuscode="502" cached="0" profile="REF_DefaultHTTPProfile (Default Proxy)" filteraction="REF_DefaultHTTPCFFAction (Default content filter action)" size="13576" request="0x8686400" url="www.google.com/s
    2011:07:23-00:54:23 firewall httpproxy[15664]: id="0002" severity="info" sys="SecureWeb" sub="http" name="web request blocked" action="block" method="GET" srcip="192.168.255.52" dstip="74.125.93.104" user="" statuscode="502" cached="0" profile="REF_DefaultHTTPProfile (Default Proxy)" filteraction="REF_DefaultHTTPCFFAction (Default content filter action)" size="20" request="0x947c800" url="www.google.com/s

    Owner:  Emmanuel Technology Consulting

    http://etc-md.com

    Former Sophos SG(Astaro) advocate/researcher/Silver Partner

    PfSense w/Suricata, ntopng, 

    Other addons to follow

Reply
  • 0
    proxy jsut went bonkers..it is now randomly blocking all kinds of stuff.  I'm reverting my enitre "fleet" to 8.103 until 8.2 is relaly out of beta.

    2011:07:23-00:54:23 firewall httpproxy[15664]: id="0002" severity="info" sys="SecureWeb" sub="http" name="web request blocked" action="block" method="GET" srcip="192.168.255.52" dstip="74.125.226.131" user="" statuscode="502" cached="0" profile="REF_DefaultHTTPProfile (Default Proxy)" filteraction="REF_DefaultHTTPCFFAction (Default content filter action)" size="90" request="0x894ea00" url="clients1.google.com/.../search
    2011:07:23-00:54:23 firewall httpproxy[15664]: id="0002" severity="info" sys="SecureWeb" sub="http" name="web request blocked" action="block" method="GET" srcip="192.168.255.52" dstip="74.125.93.104" user="" statuscode="502" cached="0" profile="REF_DefaultHTTPProfile (Default Proxy)" filteraction="REF_DefaultHTTPCFFAction (Default content filter action)" size="20" request="0x894ba28" url="www.google.com/s
    2011:07:23-00:54:23 firewall httpproxy[15664]: id="0002" severity="info" sys="SecureWeb" sub="http" name="web request blocked" action="block" method="GET" srcip="192.168.255.52" dstip="74.125.93.104" user="" statuscode="502" cached="0" profile="REF_DefaultHTTPProfile (Default Proxy)" filteraction="REF_DefaultHTTPCFFAction (Default content filter action)" size="13576" request="0x8686400" url="www.google.com/s
    2011:07:23-00:54:23 firewall httpproxy[15664]: id="0002" severity="info" sys="SecureWeb" sub="http" name="web request blocked" action="block" method="GET" srcip="192.168.255.52" dstip="74.125.93.104" user="" statuscode="502" cached="0" profile="REF_DefaultHTTPProfile (Default Proxy)" filteraction="REF_DefaultHTTPCFFAction (Default content filter action)" size="20" request="0x947c800" url="www.google.com/s

    Owner:  Emmanuel Technology Consulting

    http://etc-md.com

    Former Sophos SG(Astaro) advocate/researcher/Silver Partner

    PfSense w/Suricata, ntopng, 

    Other addons to follow

Children
No Data
Cookie Information Banner