This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Sandstorm: sandboxd.log errors upon startup, no clear indication that the service is working, strange error in smtp.log

After activating Sandstorm at a customers site (license installation, tick boxes in Web and Mail Security), there is no clear indicator that this service works.

sandboxd.log contains:

2016:07:28-09:05:27 fw-2 sandboxd[20982]: [20982/     (nil)]        config.c:269   read_config_file Unknown sandboxd configuration key: cache_expire
2016:07:28-09:05:27 fw-2 sandboxd[20982]: [20982/     (nil)]        config.c:591   read_hostslist_file g_file_get_contents: Failed to open file '/etc/hosts.list': No such file or directory
2016:07:28-09:05:27 fw-2 sandboxd[20982]: [20982/     (nil)]        config.c:634   read_hostslist Failed to read hosts.list file
2016:07:28-09:05:27 fw-2 sandboxd[20982]: [20982/     (nil)]           ssl.c:192   ssl_ctx_dh_init Success to set DH parameters to be used; options bitmask [ 0x1520004 ]
2016:07:28-09:05:27 fw-2 sandboxd[20982]: [20982/     (nil)]      sandboxd.c:331   main Sandbox Daemon (c) 2015 Sophos Ltd, Release 1234567
2016:07:28-09:05:28 fw-1 sandboxd[23211]: [23211/     (nil)]        config.c:269   read_config_file Unknown sandboxd configuration key: cache_expire
2016:07:28-09:05:28 fw-1 sandboxd[23211]: [23211/     (nil)]        config.c:591   read_hostslist_file g_file_get_contents: Failed to open file '/etc/hosts.list': No such file or directory
2016:07:28-09:05:28 fw-1 sandboxd[23211]: [23211/     (nil)]        config.c:634   read_hostslist Failed to read hosts.list file
2016:07:28-09:05:28 fw-1 sandboxd[23211]: [23211/     (nil)]           ssl.c:192   ssl_ctx_dh_init Success to set DH parameters to be used; options bitmask [ 0x1520004 ]
2016:07:28-09:05:28 fw-1 sandboxd[23211]: [23211/     (nil)]      sandboxd.c:331   main Sandbox Daemon (c) 2015 Sophos Ltd, Release 1234567
2016:07:28-09:05:32 fw-2 sandboxd[20982]: [21006/     (nil)]        config.c:269   read_config_file Unknown sandboxd configuration key: cache_expire
2016:07:28-09:05:33 fw-1 sandboxd[23211]: [23234/     (nil)]        config.c:269   read_config_file Unknown sandboxd configuration key: cache_expire

which makes me a little bit nervous.http.log contains sandboxd="-" (which did it before activating) and smtp.log contains no indicator apart from

2016:07:28-09:40:12 fw-1 smtpd[26056]: MASTER[26056]: sandbox_watcher died restarting
2016:07:28-09:40:12 fw-2 smtpd[6036]: MASTER[6036]: sandbox_watcher died restarting

which looks not good at all. SG230, most recent version 9.404.


Is there anybody out there who runs sandbox successful (proven?) and can check the log entries.

That would be nice.



This thread was automatically locked due to age.
  • Hi,

    This is a taken into consideration as Bug ID: NUTM-4400. I suggest you to rebuild the database.

    Thanks

    Sachin Gurung
    Team Lead | Sophos Technical Support
    Knowledge Base  |  @SophosSupport  |  Video tutorials
    Remember to like a post.  If a post (on a question thread) solves your question use the 'This helped me' link.

  • Hi, Tobias, and welcome to the UTM Community!

    I think Sachin meant to run the following command as root at the command line: /etc/init.d/postgresql92 rebuild

    That command will delete all the data currently in the databases including that in Reporting graphs, but I assume you're just starting and that that's not an issue for you.  If you're running the SMTP Proxy, those databases will be re-populated so you will lose no quarantined or spooled emails.

    Cheers - Bob

     
    Sophos UTM Community Moderator
    Sophos Certified Architect - UTM
    Sophos Certified Engineer - XG
    Gold Solution Partner since 2005
    MediaSoft, Inc. USA