This discussion has been locked.

You can no longer post new replies to this discussion. If you have a question you can start a new discussion

utm 9.3 causing website login invalid response error

After upgrading to 9.3 and 9.3.01 I have found a courrier website that sophos busts the login for

eTrac

doesn't matter if you type the username and password correct or not, either way it gives an error of 'invalid response'

so far creating a web proxy exception has had no effect on this.

14:11:19-09:45:05 fw httpproxy[6075]: id="0002" severity="info" sys="SecureWeb" sub="http" name="web request blocked" action="block" method="POST" srcip="192.168.69.135" dstip="204.193.149.161" user="" ad_domain="" statuscode="502" cached="0" profile="REF_DefaultHTTPProfile (Default Web Filter Profile)" filteraction="REF_DefaultHTTPCFFAction (Default content filter action)" size="2629" request="0xe3b53000" url="apps.etrac.net/.../33.0" exceptions="av,auth,content,url,ssl,certcheck,certdate,mime,cache,fileextension,size"

This thread was automatically locked due to age.

Parents

0 Euphrates_01 over 10 years ago

I'm seeing the same issue on mine with only started when upgrading to 9.3. Here are some logs:


2014:11:14-08:50:45 utm httpproxy[5576]: id="0003" severity="info" sys="SecureWeb" sub="http" request="0x27c0e800" function="parse_status_line" file="response.c" line="1439" message="invalid status code: 0"

2014:11:14-08:50:45 utm httpproxy[5576]: id="0003" severity="info" sys="SecureWeb" sub="http" request="0x27c0e800" function="read_response_headers" file="response.c" line="280" message="invalid response line on handler 134"

2014:11:14-08:50:45 utm httpproxy[5576]: id="0002" severity="info" sys="SecureWeb" sub="http" name="web request blocked" action="block" method="GET" srcip="192.168.69.1" dstip="205.196.120.8" user="" ad_domain="" statuscode="502" cached="0" profile="REF_HttProContaInterNetwo2 (Euphrates Web Filter Profile)" filteraction="REF_HttCffEuphrWebFilte (Euphrates Web Filter Action)" size="2528" request="0x27c0e800" url="http://www. {see edit note}/download/u20q655h4yjq962/RT-N66U_3.0.0.4_376.48_1.zip" referer="" error="Invalid response" authtime="0" dnstime="271" cattime="59" avscantime="0" fullreqtime="200329" device="0" auth="0" ua="Mozilla/5.0 (Windows NT 6.1; WOW64; rv:33.0) Gecko/20100101 Firefox/33.0" exceptions="" category="170" reputation="trusted" categoryname="Personal Network Storage" application="mediafre" app-id="287"

I updated to 9.302-2 last night to see if it fixed it and it has not. Just checked (currently on pattern number 71069) and it is still not working.

Another user appears to be having the same problem here:

https://community.sophos.com/products/unified-threat-management/astaroorg/f/82/t/65880

Reply

0 Euphrates_01 over 10 years ago

I'm seeing the same issue on mine with only started when upgrading to 9.3. Here are some logs:


2014:11:14-08:50:45 utm httpproxy[5576]: id="0003" severity="info" sys="SecureWeb" sub="http" request="0x27c0e800" function="parse_status_line" file="response.c" line="1439" message="invalid status code: 0"

2014:11:14-08:50:45 utm httpproxy[5576]: id="0003" severity="info" sys="SecureWeb" sub="http" request="0x27c0e800" function="read_response_headers" file="response.c" line="280" message="invalid response line on handler 134"

2014:11:14-08:50:45 utm httpproxy[5576]: id="0002" severity="info" sys="SecureWeb" sub="http" name="web request blocked" action="block" method="GET" srcip="192.168.69.1" dstip="205.196.120.8" user="" ad_domain="" statuscode="502" cached="0" profile="REF_HttProContaInterNetwo2 (Euphrates Web Filter Profile)" filteraction="REF_HttCffEuphrWebFilte (Euphrates Web Filter Action)" size="2528" request="0x27c0e800" url="http://www. {see edit note}/download/u20q655h4yjq962/RT-N66U_3.0.0.4_376.48_1.zip" referer="" error="Invalid response" authtime="0" dnstime="271" cattime="59" avscantime="0" fullreqtime="200329" device="0" auth="0" ua="Mozilla/5.0 (Windows NT 6.1; WOW64; rv:33.0) Gecko/20100101 Firefox/33.0" exceptions="" category="170" reputation="trusted" categoryname="Personal Network Storage" application="mediafre" app-id="287"

Children

0 agentdr8 over 10 years ago in reply to Euphrates_01

I'm seeing the same issue on mine with only started when upgrading to 9.3. Here are some logs:


2014:11:14-08:50:45 utm httpproxy[5576]: id="0003" severity="info" sys="SecureWeb" sub="http" request="0x27c0e800" function="parse_status_line" file="response.c" line="1439" message="invalid status code: 0"

2014:11:14-08:50:45 utm httpproxy[5576]: id="0003" severity="info" sys="SecureWeb" sub="http" request="0x27c0e800" function="read_response_headers" file="response.c" line="280" message="invalid response line on handler 134"

2014:11:14-08:50:45 utm httpproxy[5576]: id="0002" severity="info" sys="SecureWeb" sub="http" name="web request blocked" action="block" method="GET" srcip="192.168.69.1" dstip="205.196.120.8" user="" ad_domain="" statuscode="502" cached="0" profile="REF_HttProContaInterNetwo2 (Euphrates Web Filter Profile)" filteraction="REF_HttCffEuphrWebFilte (Euphrates Web Filter Action)" size="2528" request="0x27c0e800" url="http://www.{see edit note}/download/u20q655h4yjq962/RT-N66U_3.0.0.4_376.48_1.zip" referer="" error="Invalid response" authtime="0" dnstime="271" cattime="59" avscantime="0" fullreqtime="200329" device="0" auth="0" ua="Mozilla/5.0 (Windows NT 6.1; WOW64; rv:33.0) Gecko/20100101 Firefox/33.0" exceptions="" category="170" reputation="trusted" categoryname="Personal Network Storage" application="mediafre" app-id="287"

I updated to 9.302-2 last night to see if it fixed it and it has not. Just checked (currently on pattern number 71069) and it is still not working.

Another user appears to be having the same problem here:

https://www.astaro.org/beta-versions/utm-9-3-beta/54631-utm-9-301-invalid-response-error-when-downloading-files.html

Yep, that URL still fails on mine with 9.302-2 and patterns 71120. I put the 9.209-8 binary back and the URL works. I still think the problem is related specifically to the httpproxy binary and not the patterns, but that's just based on my testing.

If a moderator could move this thread to the Beta sub it would probably get more attention.