This discussion has been locked.

You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Zoneminder behind Webserver Protection

I have a Ubuntu Zoneminder CCTV installation at home that I am trying to run behind my Sophos UTM 9.004-34 firewall. I have tried every setting adjustment in the Webserver setup but cannot seem to get it to work.
If I do straight NAT port forwarding, it works. I tried disabling all the checkbox settings in the basic webserver protections set and the system still will not stream. Access to the SQL interface works elements work (basic web interface of the SQL data, etc., just the streaming will not work. The streaming system works by downloading the a Cambozola java app that then recieves the MPEG stream to the local browser from the webserver. When trying to view the stream the video part of the application displays a broken image element.

Here are the Webprotection logs when trying to stream the video:

 

2013:02:11-17:00:16 utm reverseproxy: srcip="127.0.0.1" localip="127.0.0.1" size="66" user="-" host="127.0.0.1" method="GET" statuscode="200" reason="-" extra="-" time="543332" url="/lb-status" server="localhost" referer="-" cookie="-" set-cookie="-"
2013:02:11-17:00:23 utm reverseproxy: srcip="127.0.0.1" localip="127.0.0.1" size="66" user="-" host="127.0.0.1" method="GET" statuscode="200" reason="-" extra="-" time="445" url="/lb-status" server="localhost" referer="-" cookie="-" set-cookie="-"
2013:02:11-17:00:36 utm reverseproxy: srcip="1.1.1.1" localip="2.2.2.2" size="6976" user="-" host="1.1.1.1" method="GET" statuscode="200" reason="-" extra="-" time="101979" url="/zm/index.php" server="zm.mydomain.com" referer="zm.mydomain.com/.../index.php" cookie="zmBandwidth=medium; zmSkin=classic; replayMode=gapless; zmMontageLayout=montage_2wide.css; ZMSESSID=oqv8562gc6k5vursn0monqhci3" set-cookie="-"
2013:02:11-17:00:37 utm reverseproxy: srcip="1.1.1.1" localip="2.2.2.2" size="0" user="-" host="1.1.1.1" method="GET" statuscode="200" reason="-" extra="-" time="442167" url="/cgi-bin/nph-zms" server="zm.mydomain.com" referer="zm.mydomain.com/.../index.php
2013:02:11-17:00:37 utm reverseproxy: [Mon Feb 11 17:00:37 2013] [error] [client 1.1.1.1] (20014)Internal error: proxy: error reading status line from remote server zm.mydomain.com:80, referer: zm.mydomain.com/.../index.php
2013:02:11-17:00:38 utm reverseproxy: [Mon Feb 11 17:00:38 2013] [error] [client 1.1.1.1] (20014)Internal error: proxy: error reading status line from remote server zm.mydomain.com:80, referer: zm.mydomain.com/.../index.php
2013:02:11-17:00:38 utm reverseproxy: [Mon Feb 11 17:00:38 2013] [error] [client 1.1.1.1] proxy: Error reading from remote server returned by /cgi-bin/nph-zms, referer: zm.mydomain.com/.../index.php
2013:02:11-17:00:38 utm reverseproxy: srcip="1.1.1.1" localip="2.2.2.2" size="409" user="-" host="1.1.1.1" method="GET" statuscode="502" reason="-" extra="-" time="212521" url="/cgi-bin/nph-zms" server="zm.mydomain.com" referer="zm.mydomain.com/.../index.php
2013:02:11-17:00:39 utm reverseproxy: srcip="1.1.1.1" localip="2.2.2.2" size="59" user="-" host="1.1.1.1" method="POST" statuscode="200" reason="-" extra="-" time="148234" url="/zm/index.php" server="zm.mydomain.com" referer="zm.mydomain.com/.../index.php
2013:02:11-17:00:39 utm reverseproxy: srcip="1.1.1.1" localip="2.2.2.2" size="6204" user="-" host="1.1.1.1" method="POST" statuscode="200" reason="-" extra="-" time="41979" url="/zm/index.php" server="zm.mydomain.com" referer="zm.mydomain.com/.../index.php
2013:02:11-17:00:44 utm reverseproxy: srcip="1.1.1.1" localip="2.2.2.2" size="59" user="-" host="1.1.1.1" method="POST" statuscode="200" reason="-" extra="-" time="121977" url="/zm/index.php" server="zm.mydomain.com" referer="zm.mydomain.com/.../index.php
2013:02:11-17:00:47 utm reverseproxy: [Mon Feb 11 17:00:47 2013] [error] [client 1.1.1.1] (20014)Internal error: proxy: error reading status line from remote server zm.mydomain.com:80, referer: zm.mydomain.com/.../index.php
2013:02:11-17:00:47 utm reverseproxy: srcip="1.1.1.1" localip="2.2.2.2" size="0" user="-" host="1.1.1.1" method="GET" statuscode="200" reason="-" extra="-" time="24490" url="/cgi-bin/nph-zms" server="zm.mydomain.com" referer="zm.mydomain.com/.../index.php
2013:02:11-17:00:47 utm reverseproxy: srcip="1.1.1.1" localip="2.2.2.2" size="409" user="-" host="1.1.1.1" method="GET" statuscode="502" reason="-" extra="-" time="50930" url="/cgi-bin/nph-zms" server="zm.mydomain.com" referer="zm.mydomain.com/.../index.php
2013:02:11-17:00:47 utm reverseproxy: [Mon Feb 11 17:00:47 2013] [error] [client 1.1.1.1] (20014)Internal error: proxy: error reading status line from remote server zm.mydomain.com:80, referer: zm.mydomain.com/.../index.php
2013:02:11-17:00:47 utm reverseproxy: [Mon Feb 11 17:00:47 2013] [error] [client 1.1.1.1] proxy: Error reading from remote server returned by /cgi-bin/nph-zms, referer: zm.mydomain.com/.../index.php
2013:02:11-17:00:49 utm reverseproxy: srcip="1.1.1.1" localip="2.2.2.2" size="59" user="-" host="1.1.1.1" method="POST" statuscode="200" reason="-" extra="-" time="130352" url="/zm/index.php" server="zm.mydomain.com" referer="zm.mydomain.com/.../index.php

This thread was automatically locked due to age.

0 skydiver over 12 years ago

Sorry. Can a moderator move this thread to the Web Server Security Forum?
Cancel
Vote Up 0 Vote Down
0 BarryG over 12 years ago

Hi, what does the ZoneMinder team say about WAFs / Proxies?

I've used ZoneMinder in the past, and it does a lot of streaming, etc. Maybe the WAF can't handle that?

Barry
Cancel
Vote Up 0 Vote Down
- 0 skydiver over 12 years ago in reply to BarryG
  
  I haven't checked with Zoneminder team. I was hoping for the ability to hide 3-4 different website/servers behind the firewall. Looks like I may need to rethink my options.
  Cancel
  Vote Up 0 Vote Down
0 BarryG over 12 years ago

You could setup a NAT on a different port for zoneminder, and use the WAF for the rest.

Barry
Cancel
Vote Up 0 Vote Down