Thread Info
  • State Not Answered
  • Locked Locked
  • Replies 8 replies
  • Subscribers 1 subscriber
  • Views 4178 views
  • Users 0 members are here
Options
Suggested
This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

HTTP proxy not running - restarted

dknyinva
Hello everyone,

Running 9.204-20 and this morning woke up and notice a firewall notification on my iPhone stating "HTTP proxy not running - restarted".  I checked the log and notice a bunch of errors listed below.  None of my devices can get to the Internet unless I put it in the transparent mode skiplist.  I try turning off / on the web filtering and even rebooted and it didn't help.  Anyone seeing similar  problem?

BTW, IPv6 is not enabled

Thanks

function="load_scanners" file="scanner.c" line="687" message="avirascanner.so: scanner initialization failure"
2014:07:30-09:49:57 isecsolutions httpproxy[29069]: id="0003" severity="info" sys="SecureWeb" sub="http" request="(nil)" function="main" file="httpproxy.c" line="271" message="reading configuration"
2014:07:30-09:49:57 isecsolutions httpproxy[29069]: id="0003" severity="info" sys="SecureWeb" sub="http" request="(nil)" function="parse_address" file="util.c" line="583" message="getaddrinfo: passthrough6.fw-notify.net: Name or service not known"
2014:07:30-09:49:57 isecsolutions httpproxy[29069]: id="0003" severity="info" sys="SecureWeb" sub="http" request="(nil)" function="confd_config_filter" file="confd-client.c" line="3308" message="failed to resolve passthrough6.fw-notify.net, using 2a01:198:200:680::8080"
2014:07:30-09:49:57 isecsolutions httpproxy[29069]: id="0003" severity="info" sys="SecureWeb" sub="http" request="(nil)" function="main" file="httpproxy.c" line="292" message="reading profiles"
2014:07:30-09:49:57 isecsolutions httpproxy[29069]: id="0003" severity="info" sys="SecureWeb" sub="http" request="(nil)" function="disk_cache_zap" file="diskcache.c" line="450" message="creating cache"
2014:07:30-09:49:58 isecsolutions httpproxy[29069]: id="0003" severity="info" sys="SecureWeb" sub="http" request="(nil)" function="scanner_init" file="aptpscanner.c" line="171" message="ATP loaded"
2014:07:30-09:49:58 isecsolutions httpproxy[29069]: id="0003" severity="info" sys="SecureWeb" sub="http" request="(nil)" function="sc_load_list" file="scr_scanner.c" line="1305" message="failed to load list"
2014:07:30-09:49:58 isecsolutions httpproxy[29069]: id="0003" severity="info" sys="SecureWeb" sub="http" request="(nil)" function="scanner_init" file="avirascanner.c" line="307" message="failed to load Avira engine: aviraglue_init() failed to load: /var/pattern/avira3/libsavapi3.so: cannot open shared object file: File name too long"
2014:07:30-09:49:58 isecsolutions httpproxy[29069]: id="0003" severity="info" sys="SecureWeb" sub="http" request="(nil)" function="load_scanners" file="scanner.c" line="687" message="avirascanner.so: scanner initialization failure"
2014:07:30-09:50:29 isecsolutions httpproxy[29330]: id="0003" severity="info" sys="SecureWeb" sub="http" request="(nil)" function="main" file="httpproxy.c" line="271" message="reading configuration"
2014:07:30-09:50:30 isecsolutions httpproxy[29330]: id="0003" severity="info" sys="SecureWeb" sub="http" request="(nil)" function="parse_address" file="util.c" line="583" message="getaddrinfo: passthrough6.fw-notify.net: Name or service not known"
2014:07:30-09:50:30 isecsolutions httpproxy[29330]: id="0003" severity="info" sys="SecureWeb" sub="http" request="(nil)" function="confd_config_filter" file="confd-client.c" line="3308" message="failed to resolve passthrough6.fw-notify.net, using 2a01:198:200:680::8080"
2014:07:30-09:50:30 isecsolutions httpproxy[29330]: id="0003" severity="info" sys="SecureWeb" sub="http" request="(nil)" function="main" file="httpproxy.c" line="292" message="reading profiles"
2014:07:30-09:50:30 isecsolutions httpproxy[29330]: id="0003" severity="info" sys="SecureWeb" sub="http" request="(nil)" function="disk_cache_zap" file="diskcache.c" line="450" message="creating cache"
2014:07:30-09:50:30 isecsolutions httpproxy[29330]: id="0003" severity="info" sys="SecureWeb" sub="http" request="(nil)" function="scanner_init" file="aptpscanner.c" line="171" message="ATP loaded"
2014:07:30-09:50:30 isecsolutions httpproxy[29330]: id="0003" severity="info" sys="SecureWeb" sub="http" request="(nil)" function="sc_load_list" file="scr_scanner.c" line="1305" message="failed to load list"
2014:07:30-09:50:30 isecsolutions httpproxy[29330]: id="0003" severity="info" sys="SecureWeb" sub="http" request="(nil)" function="scanner_init" file="avirascanner.c" line="307" message="failed to load Avira engine: aviraglue_init() failed to load: /var/pattern/avira3/libsavapi3.so: cannot open shared object file: File name too long"
2014:07:30-09:50:30 isecsolutions httpproxy[29330]: id="0003" severity="info" sys="SecureWeb" sub="http" request="(nil)" function="load_scanners" file="scanner.c" line="687" message="avirascanner.so: scanner initialization failure"
2014:07:30-09:50:51 isecsolutions httpproxy[29535]: id="0003" severity="info" sys="SecureWeb" sub="http" request="(nil)" function="main" file="httpproxy.c" line="271" message="reading configuration"
2014:07:30-09:50:52 isecsolutions httpproxy[29535]: id="0003" severity="info" sys="SecureWeb" sub="http" request="(nil)" function="parse_address" file="util.c" line="583" message="getaddrinfo: passthrough6.fw-notify.net: Name or service not known"
2014:07:30-09:50:52 isecsolutions httpproxy[29535]: id="0003" severity="info" sys="SecureWeb" sub="http" request="(nil)" function="confd_config_filter" file="confd-client.c" line="3308" message="failed to resolve passthrough6.fw-notify.net, using 2a01:198:200:680::8080"
2014:07:30-09:50:52 isecsolutions httpproxy[29535]: id="0003" severity="info" sys="SecureWeb" sub="http" request="(nil)" function="main" file="httpproxy.c" line="292" message="reading profiles"
2014:07:30-09:50:52 isecsolutions httpproxy[29535]: id="0003" severity="info" sys="SecureWeb" sub="http" request="(nil)" function="disk_cache_zap" file="diskcache.c" line="450" message="creating cache"
2014:07:30-09:50:52 isecsolutions httpproxy[29535]: id="0003" severity="info" sys="SecureWeb" sub="http" request="(nil)" function="scanner_init" file="aptpscanner.c" line="171" message="ATP loaded"
2014:07:30-09:50:52 isecsolutions httpproxy[29535]: id="0003" severity="info" sys="SecureWeb" sub="http" request="(nil)" function="sc_load_list" file="scr_scanner.c" line="1305" message="failed to load list"
2014:07:30-09:50:52 isecsolutions httpproxy[29535]: id="0003" severity="info" sys="SecureWeb" sub="http" request="(nil)" function="scanner_init" file="avirascanner.c" line="307" message="failed to load Avira engine: aviraglue_init() failed to load: /var/pattern/avira3/libsavapi3.so: cannot open shared object file: File name too long"
2014:07:30-09:50:52 isecsolutions httpproxy[29535]: id="0003" severity="info" sys="SecureWeb" sub="http" request="(nil)" function="load_scanners" file="scanner.c" line="687" message="avirascanner.so: scanner initialization failure"


This thread was automatically locked due to age.
  • 0
    I'm not running 9.2 but these thoughts may help:

    Does the timeline correspond with an avira update?  "grep Installing.*avira /var/log/up2date.log"

    Disable avira engline by switching to single av scan if dual scan and specifying Sophos engine?

    Nudge avira update from command line (root) "auisys.plx --types avira3"
  • 0 in reply to teched_01
    I'm not running 9.2 but these thoughts may help:

    Does the timeline correspond with an avira update?  "grep Installing.*avira /var/log/up2date.log"

    Disable avira engline by switching to single av scan if dual scan and specifying Sophos engine?

    Nudge avira update from command line (root) "auisys.plx --types avira3"
    Changed to a single scan did the trick.  I had dual scan previously and after seeing the error, had changed to Sophos as default but didn't solve it.  Wonder what happens?

    Thanks teched
  • 0
    Interesting, I have all of my users on single-scan Avira, but only two are on 9.2 until the problems in 9.204 (DHCP Options, etc.) are solved.  I'm not aware of this problem at the two sites on 9.204, then again, I don't consider an occasional service restart to be a problem unless someone complains. [;)]

    Cheers - Bob
  • 0 in reply to BAlfson
    Although web proxy is working, I'm still getting an savi_scan error.  Interestingly, the website EICAR for testing virus download appears to allow file to download of (txt and zip files) instead of a block page.

    Bob,

    Someone else appears to have the same issue https://community.sophos.com/products/unified-threat-management/astaroorg/f/55/t/46343

    request="0x1123eaa0" function="savi_scan" file="saviscanner.c" line="132" message="SAVI engine scan failed: Unknown SAVI error [0x80070057] (-1)"
    2014:07:31-12:56:04 isecsolutions httpproxy[14138]: id="0003" severity="info" sys="SecureWeb" sub="http" request="0x1123eaa0" function="savi_scan" file="saviscanner.c" line="132" message="SAVI engine scan failed: Unknown SAVI error [0x80070057] (-1)"
    2014:07:31-12:56:04 isecsolutions httpproxy[14138]: id="0001" severity="info" sys="SecureWeb" sub="http" name="http access" action="pass" method="POST" srcip="192.168.50.54" dstip="173.194.46.7" user="" statuscode="200" cached="0" profile="REF_DefaultHTTPProfile (Default Web Filter Profile)" filteraction="REF_DefaultHTTPCFFAction (Default content filter action)" size="799" request="0x1123eaa0" url="http://safebrowsing.clients.google.com/safebrowsing/downloads?client=googlechrome&appver=11.0.696.77&pver=2.2&wrkey=AKEgNis72IHHhU9CP-wV6g8208bjumZEn90mPnv_SJ5diPXaidNC4sMFREIcBT6EeNGs0jYt0zlFIUivptJezm2PSDXOY4UMtw==" exceptions="cache" error="" authtime="0" dnstime="398" cattime="150" avscantime="132" fullreqtime="158742" device="0" auth="0" country="United States" reputation="neutral" category="178" reputation="neutral" categoryname="Internet Services" content-type="application/vnd.google.safebrowsing-update" application="googsafe"
    2014:07:31-12:56:04 isecsolutions httpproxy[14138]: id="0003" severity="info" sys="SecureWeb" sub="http" request="0x9ed33ba0" function="savi_scan" file="saviscanner.c" line="132" message="SAVI engine scan failed: Unknown SAVI error [0x80070057] (-1)"
    2014:07:31-12:56:04 isecsolutions httpproxy[14138]: id="0001" severity="info" sys="SecureWeb" sub="http" name="http access" action="pass" method="GET" srcip="192.168.50.54" dstip="74.125.227.162" user="" statuscode="200" cached="0" profile="REF_DefaultHTTPProfile (Default Web Filter Profile)" filteraction="REF_DefaultHTTPCFFAction (Default content filter action)" size="1883" request="0x9ed33ba0" url="http://safebrowsing-cache.google.com/safebrowsing/rd/ChNnb29nLW1hbHdhcmUtc2hhdmFyEAEYi8wIIJTMCCoFESYCAA8yBQsmAgA_" exceptions="cache" error="" authtime="0" dnstime="88" cattime="409" avscantime="139" fullreqtime="35173" device="0" auth="0" country="United States" category="178" reputation="neutral" categoryname="Internet Services" content-type="application/vnd.google.safebrowsing-chunk" application="googsafe"
    2014:07:31-12:56:04 isecsolutions httpproxy[14138]: id="0003" severity="info" sys="SecureWeb" sub="http" request="0x9ed33ba0" function="savi_scan" file="saviscanner.c" line="132" message="SAVI engine scan failed: Unknown SAVI error [0x80070057] (-1)"
    2014:07:31-12:56:04 isecsolutions httpproxy[14138]: id="0001" severity="info" sys="SecureWeb" sub="http" name="http access" action="pass" method="GET" srcip="192.168.50.54" dstip="74.125.227.162" user="" statuscode="200" cached="0" profile="REF_DefaultHTTPProfile (Default Web Filter Profile)" filteraction="REF_DefaultHTTPCFFAction (Default content filter action)" size="1647" request="0x9ed33ba0" url="http://safebrowsing-cache.google.com/safebrowsing/rd/ChNnb29nLW1hbHdhcmUtc2hhdmFyEAAYnYcJILCHCSoGpkMCAP8HMgadQwIA_wE" exceptions="cache" error="" authtime="0" dnstime="0" cattime="528" avscantime="143" fullreqtime="26403" device="0" auth="0" country="United States" category="178" reputation="neutral" categoryname="Internet Services" content-type="application/vnd.google.safebrowsing-chunk" application="googsafe"
    2014:07:31-12:56:04 isecsolutions httpproxy[14138]: id="0003" severity="info" sys="SecureWeb" sub="http" request="0x9ed33ba0" function="savi_scan" file="saviscanner.c" line="132" message="SAVI engine scan failed: Unknown SAVI error [0x80070057] (-1)"
    2014:07:31-12:56:04 isecsolutions httpproxy[14138]: id="0001" severity="info" sys="SecureWeb" sub="http" name="http access" action="pass" method="GET" srcip="192.168.50.54" dstip="74.125.227.162" user="" statuscode="200" cached="0" profile="REF_DefaultHTTPProfile (Default Web Filter Profile)" filteraction="REF_DefaultHTTPCFFAction (Default content filter action)" size="1570" request="0x9ed33ba0" url="http://safebrowsing-cache.google.com/safebrowsing/rd/ChFnb29nLXBoaXNoLXNoYXZhchABGIntCiCw7QoqB522AgD__w8yB4m2AgD__w8" exceptions="cache" error="" authtime="0" dnstime="0" cattime="514" avscantime="133" fullreqtime="24299" device="0" auth="0" country="United States" category="178" reputation="neutral" categoryname="Internet Services" content-type="application/vnd.google.safebrowsing-chunk" application="googsafe"
    2014:07:31-12:56:04 isecsolutions httpproxy[14138]: id="0003" severity="info" sys="SecureWeb" sub="http" request="0x9ed33ba0" function="savi_scan" file="saviscanner.c" line="132" message="SAVI engine scan failed: Unknown SAVI error [0x80070057] (-1)"
    2014:07:31-12:56:04 isecsolutions httpproxy[14138]: id="0001" severity="info" sys="SecureWeb" sub="http" name="http access" action="pass" method="GET" srcip="192.168.50.54" dstip="74.125.227.162" user="" statuscode="200" cached="0" profile="REF_DefaultHTTPProfile (Default Web Filter Profile)" filteraction="REF_DefaultHTTPCFFAction (Default content filter action)" size="2981" request="0x9ed33ba0" url="http://safebrowsing-cache.google.com/safebrowsing/rd/ChFnb29nLXBoaXNoLXNoYXZhchAAGJnWFCCe1hQyBRkrBQA_" exceptions="cache" error="" authtime="0" dnstime="0" cattime="324" avscantime="132" fullreqtime="23131" device="0" auth="0" country="United States" category="178" reputation="neutral" categoryname="Internet Services" content-type="application/vnd.google.safebrowsing-chunk" application="googsafe"
    2014:07:31-12:56:04 isecsolutions httpproxy[14138]: id="0003" severity="info" sys="SecureWeb" sub="http" request="0x9ed33ba0" function="savi_scan" file="saviscanner.c" line="132" message="SAVI engine scan failed: Unknown SAVI error [0x80070057] (-1)"function="confd_config_reload_func" file="confd-client.c" line="711" message="reloading config"
    2014:07:31-12:57:43 isecsolutions httpproxy[14138]: id="0003" severity="info" sys="SecureWeb" sub="http" request="(nil)" function="parse_address" file="util.c" line="583" message="getaddrinfo: passthrough6.fw-notify.net: Name or service not known"
    2014:07:31-12:57:43 isecsolutions httpproxy[14138]: id="0003" severity="info" sys="SecureWeb" sub="http" request="(nil)" function="confd_config_filter" file="confd-client.c" line="3308" message="failed to resolve passthrough6.fw-notify.net, using 2a01:198:200:680::8080"
    2014:07:31-12:57:44 isecsolutions httpproxy[14138]: id="0003" severity="info" sys="SecureWeb" sub="http" request="(nil)" function="confd_config_reload_func" file="confd-client.c" line="752" message="Releasing unused memory"
    2014:07:31-12:57:44 isecsolutions httpproxy[14138]: id="0003" severity="info" sys="SecureWeb" sub="http" request="(nil)" function="confd_config_reload_func" file="confd-client.c" line="755" message="reloading config done, new version 279"
    2014:07:31-12:57:49 isecsolutions httpproxy[14138]: id="0003" severity="info" sys="SecureWeb" sub="http" request="(nil)" function="aptp_reload" file="aptpscanner.c" line="129" message="reloading ATP pattern"
    2014:07:31-12:57:49 isecsolutions httpproxy[14138]: id="0003" severity="info" sys="SecureWeb" sub="http" request="(nil)" function="aptp_reload" file="aptpscanner.c" line="147" message="reloading ATP pattern finished"
    2014:07:31-12:58:04 isecsolutions httpproxy[14138]: id="0003" severity="info" sys="SecureWeb" sub="http" request="(nil)" function="confd_config_reload_func" file="confd-client.c" line="711" message="reloading config"
    2014:07:31-12:58:04 isecsolutions httpproxy[14138]: id="0003" severity="info" sys="SecureWeb" sub="http" request="(nil)" function="parse_address" file="util.c" line="583" message="getaddrinfo: passthrough6.fw-notify.net: Name or service not known"
    2014:07:31-12:58:04 isecsolutions httpproxy[14138]: id="0003" severity="info" sys="SecureWeb" sub="http" request="(nil)" function="confd_config_filter" file="confd-client.c" line="3308" message="failed to resolve passthrough6.fw-notify.net, using 2a01:198:200:680::8080"
    2014:07:31-12:58:04 isecsolutions httpproxy[14138]: id="0003" severity="info" sys="SecureWeb" sub="http" request="(nil)" function="confd_config_reload_func" file="confd-client.c" line="752" message="Releasing unused memory"
    2014:07:31-12:58:04 isecsolutions httpproxy[14138]: id="0003" severity="info" sys="SecureWeb" sub="http" request="(nil)" function="confd_config_reload_func" file="confd-client.c" line="755" message="reloading config done, new version 280"
    2014:07:31-12:58:31 isecsolutions httpproxy[14138]: id="0003" severity="info" sys="SecureWeb" sub="http" request="(nil)" function="saviscanner_log" file="saviscanner.c" line="235" message="Reloading SAVI threat data"
    2014:07:31-12:58:31 isecsolutions httpproxy[14138]: id="0003" severity="info" sys="SecureWeb" sub="http" request="(nil)" function="saviscanner_log" file="saviscanner.c" line="235" message="ERROR: Failed to load Sophos Anti-Virus threat data [0x80070057]"
    2014:07:31-12:58:31 isecsolutions httpproxy[14138]: id="0003" severity="info" sys="SecureWeb" sub="http" request="(nil)" function="saviscanner_log" file="saviscanner.c" line="235" message="Reloading SAVI threat data finished, unknown version"
  • 0
    For anyone who is having problems either Avira or SAVI, please contact Support.
  • 0 in reply to Michael Dunn
    For anyone who is having problems either Avira or SAVI, please contact Support.

    Michael, does it matter if this is for home license?
  • 0
    Sorry, AFAIK support is only available for paid user (and pre-sales).  I'm just a QA guy and I don't know all the ins and outs of licensing.  I don't know of any options for home users aside from discussing in the shared community here (with no official Sophos presence).
  • 0
    Does switching back to avira (but staying on single scan) and forcing a definition update improve things?

    Do "aviratest" and "savitest" (command line) still exist in 9.2?  Do they return errors on the system in question when given a test file?