Thread Info
  • Locked Locked
  • Replies 0 replies
  • Subscribers 2 subscribers
  • Views 5001 views
  • Users 0 members are here
Options
Suggested
This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Web proxy stopping just after midnight UTM Home version 9.351-3

bblank

2 times recently my web proxy stops working just after midnight.  Stopping/starting the web proxy "fixes" it... anyone seeing similar issues?  Log files below:

2015:12:12-00:09:42 gateway httpproxy[5583]: id="0003" severity="info" sys="SecureWeb" sub="http" request="(nil)" function="geoip_reload" file="geoipscanner.c" line="134" message="reloading geoip pattern"
2015:12:12-00:10:02 gateway httpproxy[5583]: id="0003" severity="info" sys="SecureWeb" sub="http" request="(nil)" function="saviscanner_log" file="saviscanner.c" line="351" message="Reloading SAVI threat data"
2015:12:12-00:10:23 gateway httpproxy[5583]: id="0003" severity="info" sys="SecureWeb" sub="http" request="(nil)" function="saviscanner_log" file="saviscanner.c" line="351" message="Reloading SAVI threat data finished, engine 3.61.0, threat data 5.19 from 15/9/2015 (9905640 detected threats)"
2015:12:12-00:10:23 gateway httpproxy[5583]: id="0003" severity="info" sys="SecureWeb" sub="http" request="(nil)" function="saviscanner_log" file="saviscanner.c" line="351" message="SAVI reload done, reducing the number of SAVI instances from 9 to 0 (usage stats: min 87/avg 975/max 2020)"
2015:12:12-00:11:24 gateway httpproxy[5583]: id="0001" severity="info" sys="SecureWeb" sub="http" name="http access" action="pass" method="CONNECT" srcip="192.168.2.120" dstip="216.58.216.197" user="" ad_domain="" statuscode="200" cached="0" profile="REF_DefaultHTTPProfile (Default Web Filter Profile)" filteraction="REF_DefaultHTTPCFFAction (Default content filter action)" size="1949" request="0xe0dde000" url="https://216.58.216.197/" referer="" error="" authtime="0" dnstime="2" cattime="44626" avscantime="0" fullreqtime="240261166" device="0" auth="0" ua="" exceptions="" category="9998" reputation="unverified" categoryname="Uncategorized" country="United States"
2015:12:12-00:11:29 gateway httpproxy[5583]: id="0001" severity="info" sys="SecureWeb" sub="http" name="http access" action="pass" method="CONNECT" srcip="192.168.2.120" dstip="216.58.216.196" user="" ad_domain="" statuscode="200" cached="0" profile="REF_DefaultHTTPProfile (Default Web Filter Profile)" filteraction="REF_DefaultHTTPCFFAction (Default content filter action)" size="3103" request="0xe1909800" url="https://216.58.216.196/" referer="" error="" authtime="0" dnstime="2" cattime="209" avscantime="0" fullreqtime="341038239" device="0" auth="0" ua="" exceptions="" category="181" reputation="neutral" categoryname="Marketing/Merchandising" country="United States"
2015:12:12-00:15:35 gateway httpproxy[5583]: id="0001" severity="info" sys="SecureWeb" sub="http" name="http access" action="pass" method="CONNECT" srcip="192.168.2.107" dstip="132.245.22.146" user="" ad_domain="" statuscode="200" cached="0" profile="REF_DefaultHTTPProfile (Default Web Filter Profile)" filteraction="REF_DefaultHTTPCFFAction (Default content filter action)" size="5210" request="0xe1ae1800" url="https://pod51043.outlook.com/" referer="" error="" authtime="0" dnstime="125215" cattime="226" avscantime="0" fullreqtime="803290429" device="0" auth="0" ua="" exceptions="" category="156" reputation="trusted" categoryname="Web Mail" country="United States"
2015:12:12-00:15:49 gateway httpproxy[5583]: id="0003" severity="info" sys="SecureWeb" sub="http" request="(nil)" function="http_parser_context_execute" file="http_parser_context.c" line="97" message="Unable to parse a http message of 517 bytes (HPE_INVALID_METHOD: invalid HTTP method)"
2015:12:12-00:15:49 gateway httpproxy[5583]: id="0003" severity="info" sys="SecureWeb" sub="http" request="0xe14e2000" function="read_request_headers" file="request.c" line="1540" message="unable to parse a http message on handler 130 (Resource temporarily unavailable)"
2015:12:12-00:15:49 gateway httpproxy[5583]: id="0003" severity="info" sys="SecureWeb" sub="http" request="(nil)" function="http_parser_context_execute" file="http_parser_context.c" line="97" message="Unable to parse a http message of 78 bytes (HPE_INVALID_METHOD: invalid HTTP method)"
2015:12:12-00:15:49 gateway httpproxy[5583]: id="0003" severity="info" sys="SecureWeb" sub="http" request="0xe1f9b000" function="read_request_headers" file="request.c" line="1540" message="unable to parse a http message on handler 130 (Resource temporarily unavailable)"
2015:12:12-00:15:49 gateway httpproxy[5583]: id="0003" severity="info" sys="SecureWeb" sub="http" request="(nil)" function="http_parser_context_execute" file="http_parser_context.c" line="97" message="Unable to parse a http message of 517 bytes (HPE_INVALID_METHOD: invalid HTTP method)"
2015:12:12-00:15:49 gateway httpproxy[5583]: id="0003" severity="info" sys="SecureWeb" sub="http" request="0xe1cb6000" function="read_request_headers" file="request.c" line="1540" message="unable to parse a http message on handler 130 (Resource temporarily unavailable)"
2015:12:12-00:15:49 gateway httpproxy[5583]: id="0003" severity="info" sys="SecureWeb" sub="http" request="(nil)" function="http_parser_context_execute" file="http_parser_context.c" line="97" message="Unable to parse a http message of 78 bytes (HPE_INVALID_METHOD: invalid HTTP method)"
2015:12:12-00:15:49 gateway httpproxy[5583]: id="0003" severity="info" sys="SecureWeb" sub="http" request="0xdce33000" function="read_request_headers" file="request.c" line="1540" message="unable to parse a http message on handler 130 (Resource temporarily unavailable)"
2015:12:12-00:15:49 gateway httpproxy[5583]: id="0003" severity="info" sys="SecureWeb" sub="http" request="(nil)" function="http_parser_context_execute" file="http_parser_context.c" line="97" message="Unable to parse a http message of 517 bytes (HPE_INVALID_METHOD: invalid HTTP method)"
2015:12:12-00:15:49 gateway httpproxy[5583]: id="0003" severity="info" sys="SecureWeb" sub="http" request="0xe0bf6000" function="read_request_headers" file="request.c" line="1540" message="unable to parse a http message on handler 130 (Resource temporarily unavailable)"
2015:12:12-00:15:49 gateway httpproxy[5583]: id="0003" severity="info" sys="SecureWeb" sub="http" request="(nil)" function="http_parser_context_execute" file="http_parser_context.c" line="97" message="Unable to parse a http message of 78 bytes (HPE_INVALID_METHOD: invalid HTTP method)"
2015:12:12-00:15:49 gateway httpproxy[5583]: id="0003" severity="info" sys="SecureWeb" sub="http" request="0xe1ae1800" function="read_request_headers" file="request.c" line="1540" message="unable to parse a http message on handler 130 (Resource temporarily unavailable)"
2015:12:12-00:15:49 gateway httpproxy[5583]: id="0003" severity="info" sys="SecureWeb" sub="http" request="(nil)" function="http_parser_context_execute" file="http_parser_context.c" line="97" message="Unable to parse a http message of 517 bytes (HPE_INVALID_METHOD: invalid HTTP method)"
2015:12:12-00:15:49 gateway httpproxy[5583]: id="0003" severity="info" sys="SecureWeb" sub="http" request="0xe0aec800" function="read_request_headers" file="request.c" line="1540" message="unable to parse a http message on handler 130 (Resource temporarily unavailable)"
2015:12:12-00:15:49 gateway httpproxy[5583]: id="0003" severity="info" sys="SecureWeb" sub="http" request="(nil)" function="http_parser_context_execute" file="http_parser_context.c" line="97" message="Unable to parse a http message of 78 bytes (HPE_INVALID_METHOD: invalid HTTP method)"
2015:12:12-00:15:49 gateway httpproxy[5583]: id="0003" severity="info" sys="SecureWeb" sub="http" request="0xe14b1000" function="read_request_headers" file="request.c" line="1540" message="unable to parse a http message on handler 130 (Resource temporarily unavailable)"
2015:12:12-00:15:49 gateway httpproxy[5583]: id="0003" severity="info" sys="SecureWeb" sub="http" request="(nil)" function="http_parser_context_execute" file="http_parser_context.c" line="97" message="Unable to parse a http message of 517 bytes (HPE_INVALID_METHOD: invalid HTTP method)"
2015:12:12-00:15:49 gateway httpproxy[5583]: id="0003" severity="info" sys="SecureWeb" sub="http" request="0xdd303800" function="read_request_headers" file="request.c" line="1540" message="unable to parse a http message on handler 130 (Resource temporarily unavailable)"
2015:12:12-00:15:49 gateway httpproxy[5583]: id="0003" severity="info" sys="SecureWeb" sub="http" request="(nil)" function="http_parser_context_execute" file="http_parser_context.c" line="97" message="Unable to parse a http message of 78 bytes (HPE_INVALID_METHOD: invalid HTTP method)"
2015:12:12-00:15:49 gateway httpproxy[5583]: id="0003" severity="info" sys="SecureWeb" sub="http" request="0xe2147800" function="read_request_headers" file="request.c" line="1540" message="unable to parse a http message on handler 131 (Resource temporarily unavailable)"

THESE LOGS REPEAT ALL NIGHT LONG...


2015:12:12-07:34:29 gateway httpproxy[5583]: id="0003" severity="info" sys="SecureWeb" sub="http" request="0xd590a800" function="read_request_headers" file="request.c" line="1540" message="unable to parse a http message on handler 4745 (Resource temporarily unavailable)"
2015:12:12-07:34:32 gateway httpproxy[5583]: id="0003" severity="info" sys="SecureWeb" sub="http" request="(nil)" function="http_parser_context_execute" file="http_parser_context.c" line="97" message="Unable to parse a http message of 2644 bytes (HPE_INVALID_METHOD: invalid HTTP method)"
2015:12:12-07:34:32 gateway httpproxy[5583]: id="0003" severity="info" sys="SecureWeb" sub="http" request="0xd5b9d000" function="read_request_headers" file="request.c" line="1540" message="unable to parse a http message on handler 4745 (Resource temporarily unavailable)"
2015:12:12-07:36:37 gateway httpproxy[5583]: id="0003" severity="info" sys="SecureWeb" sub="http" request="(nil)" function="confd_config_reload_func" file="confd-client.c" line="580" message="reloading config"


AT THIS POINT I TURN OFF/ON THE WEB PROXY...


2015:12:12-07:36:37 gateway URID[5223]: T=5223 ------ 1 - [exit] SIGTERM: exiting
2015:12:12-07:36:38 gateway httpproxy[5583]: id="0003" severity="info" sys="SecureWeb" sub="http" request="(nil)" function="parse_address" file="util.c" line="464" message="getaddrinfo: passthrough6.fw-notify.net: Name or service not known"
2015:12:12-07:36:38 gateway httpproxy[5583]: id="0003" severity="info" sys="SecureWeb" sub="http" request="(nil)" function="confd_config_filter" file="confd-client.c" line="3562" message="failed to resolve passthrough6.fw-notify.net, using 2a01:198:200:680::8080"
2015:12:12-07:36:38 gateway httpproxy[5583]: id="0003" severity="info" sys="SecureWeb" sub="http" request="(nil)" function="epoll_loop" file="epoll.c" line="862" message="starting exit cleanup"
2015:12:12-07:40:13 gateway httpproxy[6571]: id="0003" severity="info" sys="SecureWeb" sub="http" request="(nil)" function="main" file="httpproxy.c" line="271" message="reading configuration"
2015:12:12-07:40:14 gateway httpproxy[6571]: id="0003" severity="info" sys="SecureWeb" sub="http" request="(nil)" function="parse_address" file="util.c" line="464" message="getaddrinfo: passthrough6.fw-notify.net: Name or service not known"
2015:12:12-07:40:14 gateway httpproxy[6571]: id="0003" severity="info" sys="SecureWeb" sub="http" request="(nil)" function="confd_config_filter" file="confd-client.c" line="3562" message="failed to resolve passthrough6.fw-notify.net, using 2a01:198:200:680::8080"
2015:12:12-07:40:14 gateway httpproxy[6571]: id="0003" severity="info" sys="SecureWeb" sub="http" request="(nil)" function="main" file="httpproxy.c" line="295" message="caching templates"
2015:12:12-07:40:14 gateway httpproxy[6571]: id="0003" severity="info" sys="SecureWeb" sub="http" request="(nil)" function="main" file="httpproxy.c" line="298" message="reading profiles"
2015:12:12-07:40:14 gateway httpproxy[6571]: id="0003" severity="info" sys="SecureWeb" sub="http" request="(nil)" function="disk_cache_zap" file="diskcache.c" line="436" message="creating cache"
2015:12:12-07:40:14 gateway httpproxy[6571]: id="0003" severity="info" sys="SecureWeb" sub="http" request="(nil)" function="scanner_init" file="aptpscanner.c" line="173" message="ATP unavailable"
2015:12:12-07:40:34 gateway httpproxy[6571]: id="0003" severity="info" sys="SecureWeb" sub="http" request="(nil)" function="scanner_init" file="saviscanner.c" line="372" message="Successfully loaded SAVI threat data, engine 3.61.0, threat data 5.19 from 15/9/2015 (9905616 detected threats)"
2015:12:12-07:40:34 gateway httpproxy[6571]: id="0003" severity="info" sys="SecureWeb" sub="http" request="(nil)" function="main" file="httpproxy.c" line="337" message="notifiying argos daemon
2015:12:12-07:40:34 gateway httpproxy[6571]: id="0003" severity="info" sys="SecureWeb" sub="http" request="(nil)" function="argos_notify" file="httpproxy.c" line="199" message="connect: Connection refused"
2015:12:12-07:40:34 gateway httpproxy[6571]: id="0003" severity="info" sys="SecureWeb" sub="http" request="(nil)" function="main" file="httpproxy.c" line="343" message="finished startup"
2015:12:12-07:40:34 gateway httpproxy[6571]: Integrated HTTP-Proxy (c) 2007-2015 Sophos Ltd, Release 105.g8d3f7b3
2015:12:12-07:40:53 gateway httpproxy[6571]: id="0001" severity="info" sys="SecureWeb" sub="http" name="http access" action="pass" method="GET" srcip="192.168.2.118" dstip="8.28.16.201" user="" ad_domain="" statuscode="200" cached="8" profile="REF_DefaultHTTPProfile (Default Web Filter Profile)" filteraction="REF_DefaultHTTPCFFAction (Default content filter action)" size="0" request="0xe944800" url="sp.cwfservice.net/.../" referer="" error="" authtime="0" dnstime="233591" cattime="3694230" avscantime="13841129" fullreqtime="17993930" device="0" auth="0" ua="K9 Web Protection 4.4.279" exceptions="" country="United States" content-type="text/xml"
2015:12:12-07:40:53 gateway httpproxy[6571]: id="0001" severity="info" sys="SecureWeb" sub="http" name="http access" action="pass" method="GET" srcip="192.168.2.118" dstip="8.28.16.201" user="" ad_domain="" statuscode="200" cached="8" profile="REF_DefaultHTTPProfile (Default Web Filter Profile)" filteraction="REF_DefaultHTTPCFFAction (Default content filter action)" size="0" request="0xe942800" url="sp.cwfservice.net/.../" referer="" error="" authtime="0" dnstime="242296" cattime="3671431" avscantime="13843979" fullreqtime="18021762" device="0" auth="0" ua="K9 Web Protection 4.4.279" exceptions="" country="United States" content-type="text/xml"
2015:12:12-07:40:53 gateway httpproxy[6571]: id="0001" severity="info" sys="SecureWeb" sub="http" name="http access" action="pass" method="GET" srcip="192.168.2.118" dstip="8.28.16.201" user="" ad_domain="" statuscode="200" cached="0" profile="REF_DefaultHTTPProfile (Default Web Filter Profile)" filteraction="REF_DefaultHTTPCFFAction (Default content filter action)" size="61" request="0xa746800" url="sp.cwfservice.net/.../" referer="" error="" authtime="0" dnstime="793" cattime="245" avscantime="8802036" fullreqtime="8986150" device="0" auth="0" ua="K9 Web Protection 4.4.279" exceptions="" country="United States" content-type="text/xml"
2015:12:12-07:40:53 gateway httpproxy[6571]: id="0001" severity="info" sys="SecureWeb" sub="http" name="http access" action="pass" method="GET" srcip="192.168.2.100" dstip="8.28.16.201" user="" ad_domain="" statuscode="200" cached="0" profile="REF_DefaultHTTPProfile (Default Web Filter Profile)" filteraction="REF_DefaultHTTPCFFAction (Default content filter action)" size="61" request="0x9f7d800" url="sp.cwfservice.net/.../pixel.gif referer="" error="" authtime="0" dnstime="1039" cattime="210" avscantime="11961739" fullreqtime="12104629" device="0" auth="0" ua="K9 Web Protection 4.4.276" exceptions="" country="Hong Kong" content-type="text/xml"
2015:12:12-07:40:53 gateway httpproxy[6571]: id="0001" severity="info" sys="SecureWeb" sub="http" name="http access" action="pass" method="GET" srcip="192.168.2.100" dstip="8.28.16.201" user="" ad_domain="" statuscode="200" cached="0" profile="REF_DefaultHTTPProfile (Default Web Filter Profile)" filteraction="REF_DefaultHTTPCFFAction (Default content filter action)" size="61" request="0xe34e1800" url="sp.cwfservice.net/.../pixel.gif referer="" error="" authtime="0" dnstime="2155" cattime="92149" avscantime="13868286" fullreqtime="14117189" device="0" auth="0" ua="K9 Web Protection 4.4.276" exceptions="" country="Hong Kong" content-type="text/xml"
2015:12:12-07:40:53 gateway httpproxy[6571]: id="0001" severity="info" sys="SecureWeb" sub="http" name="http access" action="pass" method="GET" srcip="192.168.2.100" dstip="8.28.16.201" user="" ad_domain="" statuscode="200" cached="0" profile="REF_DefaultHTTPProfile (Default Web Filter Profile)" filteraction="REF_DefaultHTTPCFFAction (Default content filter action)" size="61" request="0x9f5a000" url="sp.cwfservice.net/.../pixel.gif referer="" error="" authtime="0" dnstime="11179" cattime="201" avscantime="10224278" fullreqtime="10375187" device="0" auth="0" ua="K9 Web Protection 4.4.276" exceptions="" country="United States" content-type="text/xml"
2015:12:12-07:40:53 gateway httpproxy[6571]: id="0001" severity="info" sys="SecureWeb" sub="http" name="http access" action="pass" method="GET" srcip="192.168.2.118" dstip="8.28.16.201" user="" ad_domain="" statuscode="200" cached="0" profile="REF_DefaultHTTPProfile (Default Web Filter Profile)" filteraction="REF_DefaultHTTPCFFAction (Default content filter action)" size="61" request="0xe2773000" url="sp.cwfservice.net/.../" referer="" error="" authtime="0" dnstime="812" cattime="211" avscantime="7757954" fullreqtime="7940820" device="0" auth="0" ua="K9 Web Protection 4.4.279" exceptions="" country="United States" content-type="text/xml"
2015:12:12-07:40:53 gateway httpproxy[6571]: id="0001" severity="info" sys="SecureWeb" sub="http" name="http access" action="pass" method="GET" srcip="192.168.2.100" dstip="8.28.16.201" user="" ad_domain="" statuscode="200" cached="0" profile="REF_DefaultHTTPProfile (Default Web Filter Profile)" filteraction="REF_DefaultHTTPCFFAction (Default content filter action)" size="61" request="0x9c94800" url="sp.cwfservice.net/.../pixel.gif referer="" error="" authtime="0" dnstime="995" cattime="195" avscantime="9972134" fullreqtime="10110758" device="0" auth="0" ua="K9 Web Protection 4.4.276" exceptions="" country="Hong Kong" content-type="text/xml"
2015:12:12-07:40:53 gateway httpproxy[6571]: id="0001" severity="info" sys="SecureWeb" sub="http" name="http access" action="pass" method="GET" srcip="192.168.2.100" dstip="8.28.16.201" user="" ad_domain="" statuscode="200" cached="0" profile="REF_DefaultHTTPProfile (Default Web Filter Profile)" filteraction="REF_DefaultHTTPCFFAction (Default content filter action)" size="61" request="0xe2961000" url="sp.cwfservice.net/.../pixel.gif referer="" error="" authtime="0" dnstime="987" cattime="209" avscantime="12244988" fullreqtime="12394702" device="0" auth="0" ua="K9 Web Protection 4.4.276" exceptions="" country="United States" content-type="text/xml"
2015:12:12-07:40:53 gateway httpproxy[6571]: id="0060" severity="info" sys="SecureWeb" sub="http" name="web request blocked, forbidden category detected" action="block" method="GET" srcip="192.168.2.100" dstip="" user="" ad_domain="" statuscode="403" cached="0" profile="REF_DefaultHTTPProfile (Default Web Filter Profile)" filteraction="REF_DefaultHTTPCFFAction (Default content filter action)" size="5425" request="0xe34df800" url="v4.moatads.com/pixel.gif referer="www.weather.com/.../Minneapolis MN 55437:4:US" error="" authtime="0" dnstime="0" cattime="48192" avscantime="0" fullreqtime="50610" device="0" auth="0" ua="Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/46.0.2486.0 Safari/537.36 Edge/13.10586" exceptions="" reason="category" category="154" reputation="unverified" categoryname="Web Ads"
2015:12:12-07:40:53 gateway httpproxy[6571]: id="0060" severity="info" sys="SecureWeb" sub="http" name="web request blocked, forbidden category detected" action="block" method="GET" srcip="192.168.2.100" dstip="" user="" ad_domain="" statuscode="403" cached="0" profile="REF_DefaultHTTPProfile (Default Web Filter Profile)" filteraction="REF_DefaultHTTPCFFAction (Default content filter action)" size="5169" request="0x9f7c000" url="v4.moatads.com/pixel.gif referer="www.weather.com/.../Minneapolis MN 55437:4:US" error="" authtime="0" dnstime="0" cattime="94248" avscantime="0" fullreqtime="97842" device="0" auth="0" ua="Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/46.0.2486.0 Safari/537.36 Edge/13.10586" exceptions="" reason="category" category="154" reputation="unverified" categoryname="Web Ads"
2015:12:12-07:40:53 gateway httpproxy[6571]: id="0060" severity="info" sys="SecureWeb" sub="http" name="web request blocked, forbidden category detected" action="block" method="GET" srcip="192.168.2.100" dstip="" user="" ad_domain="" statuscode="403" cached="0" profile="REF_DefaultHTTPProfile (Default Web Filter Profile)" filteraction="REF_DefaultHTTPCFFAction (Default content filter action)" size="5181" request="0x9f59000" url="v4.moatads.com/pixel.gif referer="www.weather.com/.../Minneapolis MN 55437:4:US" error="" authtime="0" dnstime="0" cattime="96176" avscantime="0" fullreqtime="99598" device="0" auth="0" ua="Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/46.0.2486.0 Safari/537.36 Edge/13.10586" exceptions="" reason="category" category="154" reputation="unverified" categoryname="Web Ads"



This thread was automatically locked due to age.
Unfiltered HTML