[prev in list] [next in list] [prev in thread] [next in thread] 

List:       sidewinder
Subject:    Re: [Sidewinder] RE:  One Error Message fill the logs.
From:       Josh Archambault <josh () snowplow ! org>
Date:       2001-12-21 0:44:59
[Download RAW message or body]

Two things:

1) I think you two are misunderstanding the problem.  The "WebProxy"
and the https and http proxies are very different pieces of software. 
The https proxy has had a few "issues" in the past and will probably
need the work-around that Samantha suggests (call support).

2) This is simply not true.  Squid (aka WebProxy in Sidewinder) will
pass https traffic just fine.  You were given bad information, I'm
afraid.  You ought to be able to pass all browser initiated traffic
(including http, https, ftp, and even gopher!) through the WebProxy
without issue.

-J



Chip Shepard wrote:
> 
> I encountered this problem as well.  Secure computing stated that https did
> not work under webproxy and in order to fix it we would need to remove https
> settings in the browser for webproxy.  So now we have our browser set to the
> following.
> 
> http:  10.1.0.91 port 8080
> https:
> ftp:   10.1.0.91 port 8080
> 
> Message: 2
> Date: Wed, 19 Dec 2001 10:27:07 -0600 (CST)
> From: Samantha Fetter <sama@enteract.com>
> To: =?iso-8859-1?q?thomas=20koenig?= <meinereinerseiner@yahoo.de>
> Cc: Sidewinder@adeptech.com
> Subject: Re: [Sidewinder] One Error Message fill the logs
> 
> Thomas,
> 
> That is an issue with the https proxy in 5.1.1.01.  I'd recommend
> contacting Secure Support and they can walk you through implementing a
> generic proxy to use.
> It was believed to be fixed in 5.2 (5.2.1/5.2.0.01?) though apparently
> there may still be some issues, and they're working on it.
> 
> Cheers,
> Samantha
> 
> On Wed, 19 Dec 2001, [iso-8859-1] thomas koenig wrote:
> 
> > Hi,
> >
> > We've installed Sidewinder 5.1101 - our problem are to
> > large logfiles.
> > I've trace the audit.raw with acat and find out that
> > the most entries like:
> >
> > Dec 19 14:46:08 2001 CET  f_ssl_proxy a_server t_error
> > p_major
> > pid: 317 ruid: 0 euid: 0 pgid: 317 fid: 2000001 logid:
> > 0 cmd: 'gsslp'
> > domain: Htps edomain: Htps
> > +|httpsp|ERROR|MAJOR|SSL_PROXY|SERVER
> > =Invalid SSL Handshake Type: 159
> >
> > There are thousands of such messages, wich comes very
> > quickly for a short time.
> > It makes the logs in this moment very large. +100 MB
> > in 10 minutes.
> >
> > What tells me the message?
> >
> > Whats wrong?
> >
> > thanks in advance
> > thomas
> 
> _______________________________________________
> Sidewinder mailing list
> Sidewinder@adeptech.com
> http://mail.adeptech.com/mailman/listinfo/sidewinder

[prev in list] [next in list] [prev in thread] [next in thread]