Thread Info
  • State Verified Answer
  • Locked Locked
  • Replies 12 replies
  • Answers 1 answer
  • Subscribers 6 subscribers
  • Views 7633 views
  • Users 0 members are here
Options
Suggested
This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Web filtering stop working

Vass Károly

Hello!

Two days ago during the day, the modules were lost and since then no filtering or categorization works. Settings have not changed.

Stopping the machine / disconnecting the power did not help with the solution.

Current software version...: 9.713019

2023:01:13-00:14:41 fw httpproxy[3215]: id="0003" severity="info" sys="SecureWeb" sub="http" request="(nil)" function="load_scanners" file="scanner.c" line="1054" message="failed to load scanner aptpscanner.so: <DEFAULT>/aptpscanner.so: cannot open shared object file: No such file or directory"
2023:01:13-00:14:41 fw httpproxy[3215]: id="0003" severity="info" sys="SecureWeb" sub="http" request="(nil)" function="load_scanners" file="scanner.c" line="1054" message="failed to load scanner early_scr_scanner.so: <DEFAULT>/early_scr_scanner.so: cannot open shared object file: No such file or directory"
2023:01:13-00:14:41 fw httpproxy[3215]: id="0003" severity="info" sys="SecureWeb" sub="http" request="(nil)" function="load_scanners" file="scanner.c" line="1054" message="failed to load scanner early_uri_scanner.so: <DEFAULT>/early_uri_scanner.so: cannot open shared object file: No such file or directory"
2023:01:13-00:14:41 fw httpproxy[3215]: id="0003" severity="info" sys="SecureWeb" sub="http" request="(nil)" function="load_scanners" file="scanner.c" line="1054" message="failed to load scanner pcrescanner.so: <DEFAULT>/pcrescanner.so: cannot open shared object file: No such file or directory"
2023:01:13-00:14:41 fw httpproxy[3215]: id="0003" severity="info" sys="SecureWeb" sub="http" request="(nil)" function="load_scanners" file="scanner.c" line="1054" message="failed to load scanner regexscanner.so: <DEFAULT>/regexscanner.so: cannot open shared object file: No such file or directory"
2023:01:13-00:14:41 fw httpproxy[3215]: id="0003" severity="info" sys="SecureWeb" sub="http" request="(nil)" function="load_scanners" file="scanner.c" line="1054" message="failed to load scanner fileextensionscanner.so: <DEFAULT>/fileextensionscanner.so: cannot open shared object file: No such file or directory"
2023:01:13-00:14:41 fw httpproxy[3215]: id="0003" severity="info" sys="SecureWeb" sub="http" request="(nil)" function="load_scanners" file="scanner.c" line="1054" message="failed to load scanner geoipscanner.so: <DEFAULT>/geoipscanner.so: cannot open shared object file: No such file or directory"
2023:01:13-00:14:41 fw httpproxy[3215]: id="0003" severity="info" sys="SecureWeb" sub="http" request="(nil)" function="load_scanners" file="scanner.c" line="1054" message="failed to load scanner scr_scanner.so: <DEFAULT>/scr_scanner.so: cannot open shared object file: No such file or directory"
2023:01:13-00:14:41 fw httpproxy[3215]: id="0003" severity="info" sys="SecureWeb" sub="http" request="(nil)" function="load_scanners" file="scanner.c" line="1054" message="failed to load scanner uri_scanner.so: <DEFAULT>/uri_scanner.so: cannot open shared object file: No such file or directory"
2023:01:13-00:14:41 fw httpproxy[3215]: id="0003" severity="info" sys="SecureWeb" sub="http" request="(nil)" function="load_scanners" file="scanner.c" line="1054" message="failed to load scanner safesearchscanner.so: <DEFAULT>/safesearchscanner.so: cannot open shared object file: No such file or directory"
2023:01:13-00:14:41 fw httpproxy[3215]: id="0003" severity="info" sys="SecureWeb" sub="http" request="(nil)" function="load_scanners" file="scanner.c" line="1054" message="failed to load scanner magicscanner.so: <DEFAULT>/magicscanner.so: cannot open shared object file: No such file or directory"
2023:01:13-00:14:41 fw httpproxy[3215]: id="0003" severity="info" sys="SecureWeb" sub="http" request="(nil)" function="load_scanners" file="scanner.c" line="1054" message="failed to load scanner saviscanner.so: <DEFAULT>/saviscanner.so: cannot open shared object file: No such file or directory"
2023:01:13-00:14:41 fw httpproxy[3215]: id="0003" severity="info" sys="SecureWeb" sub="http" request="(nil)" function="load_scanners" file="scanner.c" line="1054" message="failed to load scanner avirascanner.so: <DEFAULT>/avirascanner.so: cannot open shared object file: No such file or directory"
2023:01:13-00:14:41 fw httpproxy[3215]: id="0003" severity="info" sys="SecureWeb" sub="http" request="(nil)" function="load_scanners" file="scanner.c" line="1054" message="failed to load scanner sandboxscanner.so: <DEFAULT>/sandboxscanner.so: cannot open shared object file: No such file or directory"
2023:01:13-00:14:41 fw httpproxy[3215]: id="0003" severity="info" sys="SecureWeb" sub="http" request="(nil)" function="load_scanners" file="scanner.c" line="1054" message="failed to load scanner navlscanner.so: <DEFAULT>/navlscanner.so: cannot open shared object file: No such file or directory"
2023:01:13-00:14:41 fw httpproxy[3215]: id="0003" severity="info" sys="SecureWeb" sub="http" request="(nil)" function="load_scanners" file="scanner.c" line="1054" message="failed to load scanner forcecaching.so: <DEFAULT>/forcecaching.so: cannot open shared object file: No such file or directory"
2023:01:13-00:14:41 fw httpproxy[3215]: id="0003" severity="info" sys="SecureWeb" sub="http" request="(nil)" function="confd_config_reload_func" file="confd-client.c" line="658" message="reloading config done, new version 548"
The so files are in place.
Please I need help to fix it.


This thread was automatically locked due to age.
Parents
  • 0

    Hello  ,

    Thank you for reaching out to the community, can you please share the output of the following:

    1.) ls -larth /var/storage/cores/
    2.) Have you tried restarting httpproxy ? - /var/mdw/scripts/httpproxy restart
    3.) version

    Thanks & Regards,
    _______________________________________________________________

    Vivek Jagad | Team Lead, Technical Support, Global Customer Experience

    Log a Support Case | Sophos Service Guide
    Best Practices – Support Case  | Security Advisories 
    Compare Sophos next-gen Firewall | Fortune Favors the prepared
    Sophos Community | Product Documentation | Sophos Techvids | SMS
    If a post solves your question please use the 'Verify Answer' button.

  • 0 in reply to Vivek Jagad

    Hello!

    # ls -larth /var/storage/cores/
    total 8.0K
    drwxr-xr-x 14 root root 4.0K Dec 13 2021 ..
    drwx------ 2 root root 4.0K Jan 12 23:37 .

    Unfortunately, neither the service restart nor the machine restart/stop-start help

    # /var/mdw/scripts/httpproxy restart
    :: Restarting httpproxy
    :: Stopping httpproxy done
    :: Starting httpproxy done

    2023:01:13-16:23:26 fw httpproxy[28577]: id="0003" severity="info" sys="SecureWeb" sub="http" request="(nil)" function="epoll_loop" file="epoll.c" line="863" message="starting exit cleanup"
    2023:01:13-16:23:27 fw httpproxy[28577]: id="0003" severity="info" sys="SecureWeb" sub="http" request="(nil)" function="scan_exit" file="scanner.c" line="964" message="scanner subsystem shutting down"
    2023:01:13-16:23:27 fw httpproxy[28577]: id="0003" severity="info" sys="SecureWeb" sub="http" request="(nil)" function="scan_exit" file="scanner.c" line="970" message="scanner subsystem shut down"
    2023:01:13-16:23:27 fw httpproxy[28577]: id="0003" severity="info" sys="SecureWeb" sub="http" request="(nil)" function="epoll_exit" file="epoll.c" line="683" message="epoll subsystem shutting down"
    2023:01:13-16:23:27 fw httpproxy[28577]: id="0003" severity="info" sys="SecureWeb" sub="http" request="(nil)" function="epoll_exit" file="epoll.c" line="700" message="epoll subsystem shut down"
    2023:01:13-16:23:27 fw httpproxy[28577]: id="0003" severity="info" sys="SecureWeb" sub="http" request="(nil)" function="disk_cache_release_cache" file="diskcache.c" line="407" message="writing cache index"
    2023:01:13-16:23:27 fw httpproxy[28577]: id="0003" severity="info" sys="SecureWeb" sub="http" request="(nil)" function="disk_cache_release_cache" file="diskcache.c" line="409" message="writing cache index done"
    2023:01:13-16:23:27 fw httpproxy[28577]: id="0003" severity="info" sys="SecureWeb" sub="http" request="(nil)" function="main" file="httpproxy.c" line="407" message="shutdown finished, exiting"
    2023:01:13-16:23:28 fw httpproxy[28967]: id="0003" severity="info" sys="SecureWeb" sub="http" request="(nil)" function="main" file="httpproxy.c" line="286" message="reading configuration"
    2023:01:13-16:23:29 fw httpproxy[28967]: id="0003" severity="info" sys="SecureWeb" sub="http" request="(nil)" function="parse_address" file="util.c" line="540" message="getaddrinfo: passthrough6.fw-notify.net: Name or service not known"
    2023:01:13-16:23:29 fw httpproxy[28967]: id="0003" severity="info" sys="SecureWeb" sub="http" request="(nil)" function="confd_config_filter" file="confd-client.c" line="3893" message="failed to resolve passthrough6.fw-notify.net, using 2a01:198:200:680::8080"
    2023:01:13-16:23:29 fw httpproxy[28967]: id="0003" severity="info" sys="SecureWeb" sub="http" request="(nil)" function="main" file="httpproxy.c" line="312" message="caching templates"
    2023:01:13-16:23:29 fw httpproxy[28967]: id="0003" severity="info" sys="SecureWeb" sub="http" request="(nil)" function="main" file="httpproxy.c" line="315" message="reading profiles"
    2023:01:13-16:23:29 fw httpproxy[28967]: id="0003" severity="info" sys="SecureWeb" sub="http" request="(nil)" function="disk_cache_read" file="diskcache.c" line="1766" message="calculated md5sum: [4ECC1A50DE9890F28A368E5DF2DA187F], file md5sum: [4ECC1A50DE9890F28A368E5DF2DA187F]"
    2023:01:13-16:23:29 fw httpproxy[28967]: id="0003" severity="info" sys="SecureWeb" sub="http" request="(nil)" function="adir_auth_init" file="auth_adir.c" line="1092" message="gss_acquire_cred host/fw.home.lan@HOME.LAN: No such file or directory"
    2023:01:13-16:23:29 fw httpproxy[28967]: id="0003" severity="info" sys="SecureWeb" sub="http" request="(nil)" function="load_scanners" file="scanner.c" line="1054" message="failed to load scanner aptpscanner.so: <DEFAULT>/aptpscanner.so: cannot open shared object file: No such file or directory"
    2023:01:13-16:23:29 fw httpproxy[28967]: id="0003" severity="info" sys="SecureWeb" sub="http" request="(nil)" function="load_scanners" file="scanner.c" line="1054" message="failed to load scanner early_scr_scanner.so: <DEFAULT>/early_scr_scanner.so: cannot open shared object file: No such file or directory"
    2023:01:13-16:23:29 fw httpproxy[28967]: id="0003" severity="info" sys="SecureWeb" sub="http" request="(nil)" function="load_scanners" file="scanner.c" line="1054" message="failed to load scanner early_uri_scanner.so: <DEFAULT>/early_uri_scanner.so: cannot open shared object file: No such file or directory"
    2023:01:13-16:23:29 fw httpproxy[28967]: id="0003" severity="info" sys="SecureWeb" sub="http" request="(nil)" function="load_scanners" file="scanner.c" line="1054" message="failed to load scanner pcrescanner.so: <DEFAULT>/pcrescanner.so: cannot open shared object file: No such file or directory"
    2023:01:13-16:23:29 fw httpproxy[28967]: id="0003" severity="info" sys="SecureWeb" sub="http" request="(nil)" function="load_scanners" file="scanner.c" line="1054" message="failed to load scanner regexscanner.so: <DEFAULT>/regexscanner.so: cannot open shared object file: No such file or directory"
    2023:01:13-16:23:29 fw httpproxy[28967]: id="0003" severity="info" sys="SecureWeb" sub="http" request="(nil)" function="load_scanners" file="scanner.c" line="1054" message="failed to load scanner fileextensionscanner.so: <DEFAULT>/fileextensionscanner.so: cannot open shared object file: No such file or directory"
    2023:01:13-16:23:29 fw httpproxy[28967]: id="0003" severity="info" sys="SecureWeb" sub="http" request="(nil)" function="load_scanners" file="scanner.c" line="1054" message="failed to load scanner geoipscanner.so: <DEFAULT>/geoipscanner.so: cannot open shared object file: No such file or directory"
    2023:01:13-16:23:29 fw httpproxy[28967]: id="0003" severity="info" sys="SecureWeb" sub="http" request="(nil)" function="load_scanners" file="scanner.c" line="1054" message="failed to load scanner scr_scanner.so: <DEFAULT>/scr_scanner.so: cannot open shared object file: No such file or directory"
    2023:01:13-16:23:29 fw httpproxy[28967]: id="0003" severity="info" sys="SecureWeb" sub="http" request="(nil)" function="load_scanners" file="scanner.c" line="1054" message="failed to load scanner uri_scanner.so: <DEFAULT>/uri_scanner.so: cannot open shared object file: No such file or directory"
    2023:01:13-16:23:29 fw httpproxy[28967]: id="0003" severity="info" sys="SecureWeb" sub="http" request="(nil)" function="load_scanners" file="scanner.c" line="1054" message="failed to load scanner safesearchscanner.so: <DEFAULT>/safesearchscanner.so: cannot open shared object file: No such file or directory"
    2023:01:13-16:23:29 fw httpproxy[28967]: id="0003" severity="info" sys="SecureWeb" sub="http" request="(nil)" function="load_scanners" file="scanner.c" line="1054" message="failed to load scanner magicscanner.so: <DEFAULT>/magicscanner.so: cannot open shared object file: No such file or directory"
    2023:01:13-16:23:29 fw httpproxy[28967]: id="0003" severity="info" sys="SecureWeb" sub="http" request="(nil)" function="load_scanners" file="scanner.c" line="1054" message="failed to load scanner saviscanner.so: <DEFAULT>/saviscanner.so: cannot open shared object file: No such file or directory"
    2023:01:13-16:23:29 fw httpproxy[28967]: id="0003" severity="info" sys="SecureWeb" sub="http" request="(nil)" function="load_scanners" file="scanner.c" line="1054" message="failed to load scanner avirascanner.so: <DEFAULT>/avirascanner.so: cannot open shared object file: No such file or directory"
    2023:01:13-16:23:29 fw httpproxy[28967]: id="0003" severity="info" sys="SecureWeb" sub="http" request="(nil)" function="load_scanners" file="scanner.c" line="1054" message="failed to load scanner sandboxscanner.so: <DEFAULT>/sandboxscanner.so: cannot open shared object file: No such file or directory"
    2023:01:13-16:23:29 fw httpproxy[28967]: id="0003" severity="info" sys="SecureWeb" sub="http" request="(nil)" function="load_scanners" file="scanner.c" line="1054" message="failed to load scanner navlscanner.so: <DEFAULT>/navlscanner.so: cannot open shared object file: No such file or directory"
    2023:01:13-16:23:29 fw httpproxy[28967]: id="0003" severity="info" sys="SecureWeb" sub="http" request="(nil)" function="load_scanners" file="scanner.c" line="1054" message="failed to load scanner forcecaching.so: <DEFAULT>/forcecaching.so: cannot open shared object file: No such file or directory"
    2023:01:13-16:23:29 fw httpproxy[28967]: id="0003" severity="info" sys="SecureWeb" sub="http" request="(nil)" function="main" file="httpproxy.c" line="356" message="notifiying argos daemon"
    2023:01:13-16:23:29 fw httpproxy[28967]: id="0003" severity="info" sys="SecureWeb" sub="http" request="(nil)" function="argos_notify" file="httpproxy.c" line="210" message="connect: Connection refused"
    2023:01:13-16:23:29 fw httpproxy[28967]: id="0003" severity="info" sys="SecureWeb" sub="http" request="(nil)" function="main" file="httpproxy.c" line="362" message="finished startup"
    2023:01:13-16:23:29 fw httpproxy[28967]: Integrated HTTP-Proxy (c) 2007-2016 Sophos Ltd, Release 328.g0f2a61aa.rb2

    # version

    Current software version...: 9.713019
    Hardware type..............: Software Appliance
    Installation image.........: 9.705-3.1
    Installation type..........: asg
    Installed pattern version..: 218893
    Downloaded pattern version.: 218893
    Up2Dates applied...........: 9 (see below)
    sys-9.705-9.706-3.8.1.tgz (May 6 2021)
    sys-9.706-9.706-8.9.1.tgz (May 25 2021)
    sys-9.706-9.707-9.5.1.tgz (Jul 9 2021)
    sys-9.707-9.708-5.6.1.tgz (Dec 3 2021)
    sys-9.708-9.709-6.3.1.tgz (Feb 8 2022)
    sys-9.709-9.710-3.1.1.tgz (Apr 10 2022)
    sys-9.710-9.711-1.5.1.tgz (Apr 27 2022)
    sys-9.711-9.712-5.13.2.tgz (Oct 3 16:42)
    sys-9.712-9.713-13.19.1.tgz (Nov 21 22:18)
    Up2Dates available.........: 0
    Factory resets.............: 0
    Timewarps detected.........: 53

  • +1 in reply to Vass Károly

    I have the solution:

    According to the log, modulepath failed for some reason:
    message="failed to load scanner geoipscanner.so: <DEFAULT>/geoipscanner.so

    The wrong value was queried

    # cc get http modulepath
    <DEFAULT>

    Enter the good value manually

    # cc set http modulepath '<DEFAULT>'
    1

    Querying the current value

    # cc get http modulepath
    <DEFAULT>

    Restart service

    # /var/mdw/scripts/httpproxy restart
    :: Restarting httpproxy
    :: Stopping httpproxy done
    :: Starting httpproxy done

    2023:01:13-18:01:39 fw httpproxy[2107]: id="0003" severity="info" sys="SecureWeb" sub="http" request="(nil)" function="epoll_loop" file="epoll.c" line="863" message="starting exit cleanup"
    2023:01:13-18:01:39 fw httpproxy[2107]: id="0003" severity="info" sys="SecureWeb" sub="http" request="(nil)" function="scan_exit" file="scanner.c" line="964" message="scanner subsystem shutting down"
    2023:01:13-18:01:39 fw httpproxy[2107]: [tid 2317731968]: [aptp_disconnect]: aptp socket has been disconnected
    2023:01:13-18:01:39 fw httpproxy[2107]: [tid 2317731968]: [aptp_exit] APTP cleanup done
    2023:01:13-18:01:42 fw httpproxy[2107]: id="0003" severity="info" sys="SecureWeb" sub="http" request="(nil)" function="scan_exit" file="scanner.c" line="970" message="scanner subsystem shut down"
    2023:01:13-18:01:42 fw httpproxy[2107]: id="0003" severity="info" sys="SecureWeb" sub="http" request="(nil)" function="epoll_exit" file="epoll.c" line="683" message="epoll subsystem shutting down"
    2023:01:13-18:01:42 fw httpproxy[2107]: id="0003" severity="info" sys="SecureWeb" sub="http" request="(nil)" function="epoll_exit" file="epoll.c" line="700" message="epoll subsystem shut down"
    2023:01:13-18:01:42 fw httpproxy[2107]: id="0003" severity="info" sys="SecureWeb" sub="http" request="(nil)" function="disk_cache_release_cache" file="diskcache.c" line="407" message="writing cache index"
    2023:01:13-18:01:42 fw httpproxy[2107]: id="0003" severity="info" sys="SecureWeb" sub="http" request="(nil)" function="disk_cache_release_cache" file="diskcache.c" line="409" message="writing cache index done"
    2023:01:13-18:01:42 fw httpproxy[2107]: id="0003" severity="info" sys="SecureWeb" sub="http" request="(nil)" function="main" file="httpproxy.c" line="407" message="shutdown finished, exiting"
    2023:01:13-18:01:44 fw httpproxy[3293]: id="0003" severity="info" sys="SecureWeb" sub="http" request="(nil)" function="main" file="httpproxy.c" line="286" message="reading configuration"
    2023:01:13-18:01:45 fw httpproxy[3293]: id="0003" severity="info" sys="SecureWeb" sub="http" request="(nil)" function="parse_address" file="util.c" line="540" message="getaddrinfo: passthrough6.fw-notify.net: Name or service not known"
    2023:01:13-18:01:45 fw httpproxy[3293]: id="0003" severity="info" sys="SecureWeb" sub="http" request="(nil)" function="confd_config_filter" file="confd-client.c" line="3893" message="failed to resolve passthrough6.fw-notify.net, using 2a01:198:200:680::8080"
    2023:01:13-18:01:45 fw httpproxy[3293]: id="0003" severity="info" sys="SecureWeb" sub="http" request="(nil)" function="main" file="httpproxy.c" line="312" message="caching templates"
    2023:01:13-18:01:45 fw httpproxy[3293]: id="0003" severity="info" sys="SecureWeb" sub="http" request="(nil)" function="main" file="httpproxy.c" line="315" message="reading profiles"
    2023:01:13-18:01:45 fw httpproxy[3293]: id="0003" severity="info" sys="SecureWeb" sub="http" request="(nil)" function="disk_cache_read" file="diskcache.c" line="1766" message="calculated md5sum: [10E09B5A9847B6B32A97F87DC5974D16], file md5sum: [10E09B5A9847B6B32A97F87DC5974D16]"
    2023:01:13-18:01:45 fw httpproxy[3293]: id="0003" severity="info" sys="SecureWeb" sub="http" request="(nil)" function="adir_auth_init" file="auth_adir.c" line="1092" message="gss_acquire_cred host/fw.home.lan@HOME.LAN: No such file or directory"
    2023:01:13-18:01:45 fw httpproxy[3293]: id="0003" severity="info" sys="SecureWeb" sub="http" request="(nil)" function="scanner_init" file="aptpscanner.c" line="167" message="oculusd port = 25000 ; initializing ATP..."
    2023:01:13-18:01:45 fw httpproxy[3293]: id="0003" severity="info" sys="SecureWeb" sub="http" request="(nil)" function="scanner_init" file="aptpscanner.c" line="172" message="ATP loaded"
    2023:01:13-18:02:00 fw httpproxy[3293]: id="0003" severity="info" sys="SecureWeb" sub="http" request="(nil)" function="scanner_init" file="saviscanner.c" line="521" message="Successfully loaded SAVI threat data, engine 3.86.1, threat data 5.97 from 22/11/2022 (79324053 detected threats)"
    2023:01:13-18:02:17 fw httpproxy[3293]: id="0003" severity="info" sys="SecureWeb" sub="http" request="(nil)" function="avirascanner_log" file="avirascanner.c" line="66" message="Successfully initialized Avira SAVAPI library 4.15.13, expires 20230227, AVE 8.3.66.14, VDF 8.19.32.54 (8852087 signatures)"
    2023:01:13-18:02:17 fw httpproxy[3293]: id="0003" severity="info" sys="SecureWeb" sub="http" request="(nil)" function="libnavl_log" file="navl_externals_posix.c" line="43" message="E: InitInstance: Error initializing instance of plugin HPACK_UTIL"
    2023:01:13-18:02:17 fw httpproxy[3293]: id="0003" severity="info" sys="SecureWeb" sub="http" request="(nil)" function="main" file="httpproxy.c" line="356" message="notifiying argos daemon"
    2023:01:13-18:02:17 fw httpproxy[3293]: id="0003" severity="info" sys="SecureWeb" sub="http" request="(nil)" function="argos_notify" file="httpproxy.c" line="210" message="connect: Connection refused"
    2023:01:13-18:02:17 fw httpproxy[3293]: id="0003" severity="info" sys="SecureWeb" sub="http" request="(nil)" function="main" file="httpproxy.c" line="362" message="finished startup"
    2023:01:13-18:02:17 fw httpproxy[3293]: Integrated HTTP-Proxy (c) 2007-2016 Sophos Ltd, Release 328.g0f2a61aa.rb2
    2023:01:13-18:02:17 fw httpproxy[3293]: [tid 2116155136]: [aptp_connect]: aptp socket connect succeeded

    Modules and filters have started again.

    2023:01:13-18:06:22 fw httpproxy[3293]: id="0001" severity="info" sys="SecureWeb" sub="http" name="http access" action="pass" method="CONNECT" srcip="192.168.1.11" dstip="40.126.32.74" user="" group="" ad_domain="" statuscode="200" cached="0" profile="REF_DefaultHTTPProfile (Default Web Filter Profile)" filteraction="REF_DefaultHTTPCFFAction (Default content filter action)" size="30841" request="0x6412c00" url="login.microsoftonline.com" referer="" error="" authtime="0" dnstime="71897" aptptime="450" cattime="47609" avscantime="0" fullreqtime="125553944" device="0" auth="0" ua="" exceptions="mime" category="105" reputation="trusted" categoryname="Business" country="Netherlands"
Reply
  • +1 in reply to Vass Károly

    I have the solution:

    According to the log, modulepath failed for some reason:
    message="failed to load scanner geoipscanner.so: &lt;DEFAULT&gt;/geoipscanner.so

    The wrong value was queried

    # cc get http modulepath
    &lt;DEFAULT&gt;

    Enter the good value manually

    # cc set http modulepath '<DEFAULT>'
    1

    Querying the current value

    # cc get http modulepath
    <DEFAULT>

    Restart service

    # /var/mdw/scripts/httpproxy restart
    :: Restarting httpproxy
    :: Stopping httpproxy done
    :: Starting httpproxy done

    2023:01:13-18:01:39 fw httpproxy[2107]: id="0003" severity="info" sys="SecureWeb" sub="http" request="(nil)" function="epoll_loop" file="epoll.c" line="863" message="starting exit cleanup"
    2023:01:13-18:01:39 fw httpproxy[2107]: id="0003" severity="info" sys="SecureWeb" sub="http" request="(nil)" function="scan_exit" file="scanner.c" line="964" message="scanner subsystem shutting down"
    2023:01:13-18:01:39 fw httpproxy[2107]: [tid 2317731968]: [aptp_disconnect]: aptp socket has been disconnected
    2023:01:13-18:01:39 fw httpproxy[2107]: [tid 2317731968]: [aptp_exit] APTP cleanup done
    2023:01:13-18:01:42 fw httpproxy[2107]: id="0003" severity="info" sys="SecureWeb" sub="http" request="(nil)" function="scan_exit" file="scanner.c" line="970" message="scanner subsystem shut down"
    2023:01:13-18:01:42 fw httpproxy[2107]: id="0003" severity="info" sys="SecureWeb" sub="http" request="(nil)" function="epoll_exit" file="epoll.c" line="683" message="epoll subsystem shutting down"
    2023:01:13-18:01:42 fw httpproxy[2107]: id="0003" severity="info" sys="SecureWeb" sub="http" request="(nil)" function="epoll_exit" file="epoll.c" line="700" message="epoll subsystem shut down"
    2023:01:13-18:01:42 fw httpproxy[2107]: id="0003" severity="info" sys="SecureWeb" sub="http" request="(nil)" function="disk_cache_release_cache" file="diskcache.c" line="407" message="writing cache index"
    2023:01:13-18:01:42 fw httpproxy[2107]: id="0003" severity="info" sys="SecureWeb" sub="http" request="(nil)" function="disk_cache_release_cache" file="diskcache.c" line="409" message="writing cache index done"
    2023:01:13-18:01:42 fw httpproxy[2107]: id="0003" severity="info" sys="SecureWeb" sub="http" request="(nil)" function="main" file="httpproxy.c" line="407" message="shutdown finished, exiting"
    2023:01:13-18:01:44 fw httpproxy[3293]: id="0003" severity="info" sys="SecureWeb" sub="http" request="(nil)" function="main" file="httpproxy.c" line="286" message="reading configuration"
    2023:01:13-18:01:45 fw httpproxy[3293]: id="0003" severity="info" sys="SecureWeb" sub="http" request="(nil)" function="parse_address" file="util.c" line="540" message="getaddrinfo: passthrough6.fw-notify.net: Name or service not known"
    2023:01:13-18:01:45 fw httpproxy[3293]: id="0003" severity="info" sys="SecureWeb" sub="http" request="(nil)" function="confd_config_filter" file="confd-client.c" line="3893" message="failed to resolve passthrough6.fw-notify.net, using 2a01:198:200:680::8080"
    2023:01:13-18:01:45 fw httpproxy[3293]: id="0003" severity="info" sys="SecureWeb" sub="http" request="(nil)" function="main" file="httpproxy.c" line="312" message="caching templates"
    2023:01:13-18:01:45 fw httpproxy[3293]: id="0003" severity="info" sys="SecureWeb" sub="http" request="(nil)" function="main" file="httpproxy.c" line="315" message="reading profiles"
    2023:01:13-18:01:45 fw httpproxy[3293]: id="0003" severity="info" sys="SecureWeb" sub="http" request="(nil)" function="disk_cache_read" file="diskcache.c" line="1766" message="calculated md5sum: [10E09B5A9847B6B32A97F87DC5974D16], file md5sum: [10E09B5A9847B6B32A97F87DC5974D16]"
    2023:01:13-18:01:45 fw httpproxy[3293]: id="0003" severity="info" sys="SecureWeb" sub="http" request="(nil)" function="adir_auth_init" file="auth_adir.c" line="1092" message="gss_acquire_cred host/fw.home.lan@HOME.LAN: No such file or directory"
    2023:01:13-18:01:45 fw httpproxy[3293]: id="0003" severity="info" sys="SecureWeb" sub="http" request="(nil)" function="scanner_init" file="aptpscanner.c" line="167" message="oculusd port = 25000 ; initializing ATP..."
    2023:01:13-18:01:45 fw httpproxy[3293]: id="0003" severity="info" sys="SecureWeb" sub="http" request="(nil)" function="scanner_init" file="aptpscanner.c" line="172" message="ATP loaded"
    2023:01:13-18:02:00 fw httpproxy[3293]: id="0003" severity="info" sys="SecureWeb" sub="http" request="(nil)" function="scanner_init" file="saviscanner.c" line="521" message="Successfully loaded SAVI threat data, engine 3.86.1, threat data 5.97 from 22/11/2022 (79324053 detected threats)"
    2023:01:13-18:02:17 fw httpproxy[3293]: id="0003" severity="info" sys="SecureWeb" sub="http" request="(nil)" function="avirascanner_log" file="avirascanner.c" line="66" message="Successfully initialized Avira SAVAPI library 4.15.13, expires 20230227, AVE 8.3.66.14, VDF 8.19.32.54 (8852087 signatures)"
    2023:01:13-18:02:17 fw httpproxy[3293]: id="0003" severity="info" sys="SecureWeb" sub="http" request="(nil)" function="libnavl_log" file="navl_externals_posix.c" line="43" message="E: InitInstance: Error initializing instance of plugin HPACK_UTIL"
    2023:01:13-18:02:17 fw httpproxy[3293]: id="0003" severity="info" sys="SecureWeb" sub="http" request="(nil)" function="main" file="httpproxy.c" line="356" message="notifiying argos daemon"
    2023:01:13-18:02:17 fw httpproxy[3293]: id="0003" severity="info" sys="SecureWeb" sub="http" request="(nil)" function="argos_notify" file="httpproxy.c" line="210" message="connect: Connection refused"
    2023:01:13-18:02:17 fw httpproxy[3293]: id="0003" severity="info" sys="SecureWeb" sub="http" request="(nil)" function="main" file="httpproxy.c" line="362" message="finished startup"
    2023:01:13-18:02:17 fw httpproxy[3293]: Integrated HTTP-Proxy (c) 2007-2016 Sophos Ltd, Release 328.g0f2a61aa.rb2
    2023:01:13-18:02:17 fw httpproxy[3293]: [tid 2116155136]: [aptp_connect]: aptp socket connect succeeded

    Modules and filters have started again.

    2023:01:13-18:06:22 fw httpproxy[3293]: id="0001" severity="info" sys="SecureWeb" sub="http" name="http access" action="pass" method="CONNECT" srcip="192.168.1.11" dstip="40.126.32.74" user="" group="" ad_domain="" statuscode="200" cached="0" profile="REF_DefaultHTTPProfile (Default Web Filter Profile)" filteraction="REF_DefaultHTTPCFFAction (Default content filter action)" size="30841" request="0x6412c00" url="login.microsoftonline.com" referer="" error="" authtime="0" dnstime="71897" aptptime="450" cattime="47609" avscantime="0" fullreqtime="125553944" device="0" auth="0" ua="" exceptions="mime" category="105" reputation="trusted" categoryname="Business" country="Netherlands"
Children
Unfiltered HTML