This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

List subscription has expired for my web proxy

Hi All

I've recently got the error below:

2012:02:15-12:11:47 ******  httpproxy[6308]: id="0001" severity="info" sys="SecureWeb" sub="http" name="http access" action="pass" method="POST" srcip="192.168.2.5" dstip="198.186.193.234" user="" statuscode="200" cached="0" profile="REF_CnNPwVRtng (Internal Users)" filteraction="REF_DefaultHTTPCFFBlockAction (Internal Users)" size="335" request="0x9d1a480" url="www.squid-cache.org/.../html"
2012:02:15-12:11:50 ******  httpproxy[6308]: id="0003" severity="info" sys="SecureWeb" sub="http" request="(nil)" function="sc_log" file="scr_scanner.c" line="1091" message="Response status was 400 (Bad Request) instead of 200"
2012:02:15-12:11:50 ******  httpproxy[6308]: id="0003" severity="info" sys="SecureWeb" sub="http" request="(nil)" function="sc_log" file="scr_scanner.c" line="1091" message="The download function returned a permanent error"
2012:02:15-12:11:50 ******  httpproxy[6308]: id="0003" severity="info" sys="SecureWeb" sub="http" request="(nil)" function="sc_log" file="scr_scanner.c" line="1091" message="Failed to download increment 32203"
2012:02:15-12:11:50 ******  httpproxy[6308]: id="0003" severity="info" sys="SecureWeb" sub="http" request="(nil)" function="sc_update_list" file="scr_scanner.c" line="1176" message="failed to download list: 1, status 6"
2012:02:15-12:11:50 ******  httpproxy[6308]: id="0003" severity="info" sys="SecureWeb" sub="http" request="(nil)" function="sc_update_list" file="scr_scanner.c" line="1180" message="Error message while downloading list: The list subscription for this serial number *********************  has expired."
2012:02:15-12:11:50 ******  httpproxy[6308]: id="0003" severity="info" sys="SecureWeb" sub="http" request="(nil)" function="sc_update_list" file="scr_scanner.c" line="1181" message="serial: ***************Xx, perm serial: *********************"


Something I need to be worried about? I keep getting this every now and then

Thanks


This thread was automatically locked due to age.
  • Astaro is aware of the issue and is in contact with the database provider.  

    This only affects the small percentage of installs utilizing the unsupported Local Content Filter Database feature and the existing database will continue to operate normally.
  • Thanks

    Is there a workaround for it so far?
  • switch back to cloudy until this issue gets fixed.  instead of mem or disk use none then restart the http proxy..
  • i've turned mem back on and it seems to have now been fixed..[:)]
  • Thanks William. I am using disk option as I only have 2G RAM. I will rest the option and post back if I still continue to have issues
  • nods..[:)] xkxkxkxkxk(filler for limit)
  • issue is back on the latest stable version

    2014:01:04-14:22:35 ****** httpproxy[5534]: id="0003" severity="info" sys="SecureWeb" sub="http" request="(nil)" function="parse_address" file="util.c" line="579" message="getaddrinfo: passthrough6.fw-notify.net: Name or service not known"
    2014:01:04-14:22:35 ****** httpproxy[5534]: id="0003" severity="info" sys="SecureWeb" sub="http" request="(nil)" function="confd_config_filter" file="confd-client.c" line="2805" message="failed to resolve passthrough6.fw-notify.net, using 2a01:******80::8080"
    2014:01:04-14:22:38 ****** httpproxy[5534]: id="0003" severity="info" sys="SecureWeb" sub="http" request="(nil)" function="confd_config_reload_func" file="confd-client.c" line="748" message="reloading config done, new version 8160"
    2014:01:04-14:22:38 ****** httpproxy[5534]: id="0003" severity="info" sys="SecureWeb" sub="http" request="(nil)" function="confd_config_reload_func" file="confd-client.c" line="706" message="reloading config"
    2014:01:04-14:22:38 ****** httpproxy[5534]: id="0003" severity="info" sys="SecureWeb" sub="http" request="(nil)" function="parse_address" file="util.c" line="579" message="getaddrinfo: passthrough6.fw-notify.net: Name or service not known"
    2014:01:04-14:22:38 ****** httpproxy[5534]: id="0003" severity="info" sys="SecureWeb" sub="http" request="(nil)" function="confd_config_filter" file="confd-client.c" line="2805" message="failed to resolve passthrough6.fw-notify.net, using 2a01:******80::8080"
    2014:01:04-14:22:40 ****** httpproxy[5534]: id="0003" severity="info" sys="SecureWeb" sub="http" request="(nil)" function="confd_config_reload_func" file="confd-client.c" line="748" message="reloading config done, new version 8161"
    2014:01:04-14:22:49 ****** httpproxy[5476]: id="0003" severity="info" sys="SecureWeb" sub="http" request="(nil)" function="main" file="httpproxy.c" line="263" message="reading configuration"
    2014:01:04-14:22:50 ****** httpproxy[5476]: id="0003" severity="info" sys="SecureWeb" sub="http" request="(nil)" function="parse_address" file="util.c" line="579" message="getaddrinfo: passthrough6.fw-notify.net: Name or service not known"
    2014:01:04-14:22:50 ****** httpproxy[5476]: id="0003" severity="info" sys="SecureWeb" sub="http" request="(nil)" function="confd_config_filter" file="confd-client.c" line="2805" message="failed to resolve passthrough6.fw-notify.net, using 2a01:******80::8080"
    2014:01:04-14:22:50 ****** httpproxy[5476]: id="0003" severity="info" sys="SecureWeb" sub="http" request="(nil)" function="main" file="httpproxy.c" line="283" message="reading profiles"
    2014:01:04-14:22:51 ****** httpproxy[5476]: id="0003" severity="info" sys="SecureWeb" sub="http" request="(nil)" function="disk_cache_zap" file="diskcache.c" line="449" message="creating cache"
    2014:01:04-14:22:59 ****** httpproxy[5476]: id="0003" severity="info" sys="SecureWeb" sub="http" request="(nil)" function="sc_load_list" file="scr_scanner.c" line="1214" message="New list serial number: 43838, expires at Sun Feb 2 21:46:30 2014
    2014:01:04-14:23:09 ****** httpproxy[5476]: id="0003" severity="info" sys="SecureWeb" sub="http" request="(nil)" function="sc_log" file="scr_scanner.c" line="1177" message="Response status was 400 (Bad Request) instead of 200"
    2014:01:04-14:23:09 ****** httpproxy[5476]: id="0003" severity="info" sys="SecureWeb" sub="http" request="(nil)" function="sc_log" file="scr_scanner.c" line="1177" message="The download function returned a permanent error"
    2014:01:04-14:23:09 ****** httpproxy[5476]: id="0003" severity="info" sys="SecureWeb" sub="http" request="(nil)" function="sc_log" file="scr_scanner.c" line="1177" message="Failed to download increment 43839"
    2014:01:04-14:23:09 ****** httpproxy[5476]: id="0003" severity="info" sys="SecureWeb" sub="http" request="(nil)" function="sc_update_list" file="scr_scanner.c" line="752" message="failed to download list: 1, status 6"
    2014:01:04-14:23:09 ****** httpproxy[5476]: id="0003" severity="info" sys="SecureWeb" sub="http" request="(nil)" function="sc_update_list" file="scr_scanner.c" line="755" message="Error message while downloading list: The list subscription for this serial number ****** has expired."
    2014:01:04-14:23:09 ****** httpproxy[5476]: id="0003" severity="info" sys="SecureWeb" sub="http" request="(nil)" function="sc_update_list" file="scr_scanner.c" line="756" message="serial: ******, perm serial: ******"
    2014:01:04-14:23:29 ****** httpproxy[5476]: id="0003" severity="info" sys="SecureWeb" sub="http" request="(nil)" function="avirascanner_log" file="avirascanner.c" line="89" message="Successfully initialized Avira SAVAPI library 1.5.0, expires 20140331, AVE 8.2.12.166, VDF 7.11.123.132 (6125182 signatures)"  
  • wingman the new 9.1x and above web proxy actually does a partial caching of the content filter database.  I have disabled the mem option.  One thing you have to do right now is enable endpoint protection to enable this feature.  you don't have to activate any endpoints just turn it on.  It's just about as fast as the mem option and much more stable.
  • Are you seeing the partial caching in 9.1xx+ with sxl, "legacy" McAfee/trustedsource cffs or both (either) content filter configuration?

    Edit:
    I've gathered from the folliwing thread that enabling endpoint protection makes the system use sxl.  https://community.sophos.com/products/unified-threat-management/astaroorg/f/81/t/65420
  • sxl..if you don't enable the endpoint protection you don't get sxl usage and thus the caching.