Author Topic: HTTP proxy doesn't work sometimes - Help me, please!  (Read 3353 times)

ZeroBit

  • Zen Apprentice
  • *
  • Posts: 10
  • Karma: +0/-0
    • View Profile
HTTP proxy doesn't work sometimes - Help me, please!
« on: June 16, 2009, 11:19:48 am »
I have a real problem. Sometimes my proxy stops to work. I don't know why. I do nothing with server, but unexpectedly it stops working and even from a windows computer the command telnet 192.168.x.x 3128 does not connect to proxy and then it can connect without any reason. Interesting that in the network there are some computers with very small chance to connect, and computers with a big chance to connect to proxy. And when it's impossible connect thru proxy, it's impossible to connect to ebox thru https also. (But ebox computer is pinging at this very moment) I think it is the problem with firewall. But I don't know what to do. Help me please.

I use 2 gateways (ADSL-modems) 192.168.2.1 and 192.168.2.3 with traffic balancing. Both of them are 2048 bit/s for Dowload. Default GW is 192.168.2.1.
External static interface is eth0 192.168.2.5
Internal static interface is eth1 192.168.10.6
What I've noticed when I used proxy when it worked is that any http traffic went through 192.168.2.1 (I ALWAYS saw ITS external IP on sites which I visited and never saw external IP assigned for 192.168.2.3) I did ot make any rule for http traffic in "Multigateway rules". How can I be sure that balancing of the traffic really works?

P.S. Sorry for my English. I am from Ukraine.
« Last Edit: June 22, 2009, 01:25:31 pm by ZeroBit »

Javier Amor Garcia

  • Zentyal Staff
  • Zen Hero
  • *****
  • Posts: 1225
  • Karma: +12/-0
    • View Profile
Re: HTTP proxy doesn't work sometimes
« Reply #1 on: June 17, 2009, 08:50:07 am »
There was a error when dansguardian logs rotations, is fixed now but if you upgrade it may remain.
Please take a look to your /etc/logrotate.d/dansguardian and compare with it this. In case you have a different file copy it and restart the ebox-squid module.

If this does not work we will lok for another thing
« Last Edit: June 18, 2009, 10:07:55 am by sixstone »

ZeroBit

  • Zen Apprentice
  • *
  • Posts: 10
  • Karma: +0/-0
    • View Profile
Re: HTTP proxy doesn't work sometimes
« Reply #2 on: June 18, 2009, 08:06:45 am »
The URL given doesn't open. I have the newest version of ebox.

javi

  • Zen Hero
  • *****
  • Posts: 1042
  • Karma: +0/-0
    • View Profile
Re: HTTP proxy doesn't work sometimes
« Reply #3 on: June 18, 2009, 09:53:03 am »
What's your eBox version?

sixstone

  • Zentyal Staff
  • Zen Hero
  • *****
  • Posts: 1417
  • Karma: +26/-0
    • View Profile
    • Sixstone's blog
Re: HTTP proxy doesn't work sometimes
« Reply #4 on: June 18, 2009, 10:08:20 am »
The URL given doesn't open. I have the newest version of ebox.

Try the same URL without "s", http://.

Best,
My secret is my silence...

ZeroBit

  • Zen Apprentice
  • *
  • Posts: 10
  • Karma: +0/-0
    • View Profile
Re: HTTP proxy doesn't work sometimes
« Reply #5 on: June 18, 2009, 12:22:48 pm »
What's your eBox version?
Version 1.0-1

ZeroBit

  • Zen Apprentice
  • *
  • Posts: 10
  • Karma: +0/-0
    • View Profile
Re: HTTP proxy doesn't work sometimes
« Reply #6 on: June 18, 2009, 01:18:04 pm »
There was a error when dansguardian logs rotations, is fixed now but if you upgrade it may remain.
Please take a look to your /etc/logrotate.d/dansguardian and compare with it this. In case you have a different file copy it and restart the ebox-squid module.

If this does not work we will lok for another thing
My file is:
/var/log/dansguardian/access.log {
   rotate 5
   daily
   prerotate
      /etc/init.d/dansguardian stop > /dev/null 2>&1 || true
   endscript
   postrotate
      /etc/init.d/dansguardian start > /dev/null 2>&1
   endscript
}

Comparing to this there is no diffrence.

Is there a solution? Connect occasionally dissappears.

Javier Amor Garcia

  • Zentyal Staff
  • Zen Hero
  • *****
  • Posts: 1225
  • Karma: +12/-0
    • View Profile
Re: HTTP proxy doesn't work sometimes - UNSOLVED
« Reply #7 on: June 18, 2009, 02:21:08 pm »
Quote
Comparing to this there is no diffrence.

Indeed this is. This is the 'other' file text:

1   /var/log/dansguardian/access.log {
2           rotate 5
3           daily
4           prerotate
5                   /etc/init.d/ebox squid stop > /dev/null 2>&1 || true
6           endscript
7           postrotate
8                   /etc/init.d/ebox squid start > /dev/null 2>&1
9           endscript
10   }


As you see is different and maybe this is the cause of your problem. You can download the correct file here[/here]

ZeroBit

  • Zen Apprentice
  • *
  • Posts: 10
  • Karma: +0/-0
    • View Profile
Re: HTTP proxy doesn't work sometimes - UNSOLVED
« Reply #8 on: June 18, 2009, 04:44:19 pm »
Thank you, I changed the text of /etc/logrotate.d/dansguardian
Now it is:
/var/log/dansguardian/access.log {
   rotate 5
   daily
   prerotate
      /etc/init.d/ebox squid stop > /dev/null 2>&1 || true
   endscript
   postrotate
      /etc/init.d/ebox squid start > /dev/null 2>&1
   endscript
}
Made reboot. And now connect to proxy is rare from any comuter from local network but not from localhost!

The rules "Filtering rules for internal networks"
Source    Destination Service    
Any    Any    any

I have many such errors in ebox.log:

2009/06/18 19:15:12 DEBUG> PgDBEngine.pm:161 EBox::PgDBEngine::insert - Error inserting data: INSERT INTO firewall ( fw_dpt, fw_spt, fw_in, fw_src, event, fw_dst, fw_out, fw_proto, timestamp) VALUES ( ?, ?, ?, ?, ?, ?, ?, ?, ?)
ERROR:  invalid input syntax for integer: ""
 
2009/06/18 19:15:12 ERROR> PgDBEngine.pm:165 EBox::PgDBEngine::insert - Error inserting data: INSERT INTO firewall ( fw_dpt, fw_spt, fw_in, fw_src, event, fw_dst, fw_out, fw_proto, timestamp) VALUES ( ?, ?, ?, ?, ?, ?, ?, ?, ?)
ERROR:  invalid input syntax for integer: ""

Problem is still here. What to do?
Nobody wants to help me. Why?
« Last Edit: June 22, 2009, 10:44:42 pm by ZeroBit »

ZeroBit

  • Zen Apprentice
  • *
  • Posts: 10
  • Karma: +0/-0
    • View Profile
Re: HTTP proxy doesn't work sometimes - Help me, please!
« Reply #9 on: June 23, 2009, 10:42:46 am »
Help me, please.

Javier Amor Garcia

  • Zentyal Staff
  • Zen Hero
  • *****
  • Posts: 1225
  • Karma: +12/-0
    • View Profile
Re: HTTP proxy doesn't work sometimes - Help me, please!
« Reply #10 on: June 23, 2009, 03:44:58 pm »
You can ignore the PgDBEngine errors, there are unrelated to the proxy.
I think that the problem is not the change of the logrotate file bz the change is due that the old file disabled the proxy when the log rotation was performed but it should not interfere with any proxy restart.
You say that you can access from your localhost but not from your internal network so it seems a proxy problem. Are you using the transparent proxy option?. Could you put the output of iptables -vL (better as file attachment)?
« Last Edit: June 23, 2009, 04:04:33 pm by sixstone »

ZeroBit

  • Zen Apprentice
  • *
  • Posts: 10
  • Karma: +0/-0
    • View Profile
Re: HTTP proxy doesn't work sometimes - Help me, please!
« Reply #11 on: June 23, 2009, 10:55:33 pm »
I am not using transparent proxy
Here is the output of iptables -vL

Javier Amor Garcia

  • Zentyal Staff
  • Zen Hero
  • *****
  • Posts: 1225
  • Karma: +12/-0
    • View Profile
Re: HTTP proxy doesn't work sometimes - Help me, please!
« Reply #12 on: June 24, 2009, 05:39:51 pm »
I see that your firewall accepts proxy connections on eth1. This is the network you have attached to your itnernal network?. If not please mark the correct interface as 'internal' network.

ZeroBit

  • Zen Apprentice
  • *
  • Posts: 10
  • Karma: +0/-0
    • View Profile
Re: HTTP proxy doesn't work sometimes - Help me, please!
« Reply #13 on: June 25, 2009, 05:33:16 pm »
Ok, I reinstalled everething from distro from http://mirror.ebox-platform.com/ebox_installer-1.0-1.iso to the different hardware
I have only two interfaces:
eth0 static checked as external 192.168.2.7
eth1 static not checked              192.168.10.7
GW's are 192.168.2.1 and 192.168.2.3 - two ADSL modems
And have the same problem. What to do?

HANNES1985

  • Zen Warrior
  • ***
  • Posts: 141
  • Karma: +0/-0
    • View Profile
    • CSIWISP
Re: HTTP proxy doesn't work sometimes - Help me, please!
« Reply #14 on: July 01, 2009, 12:12:21 pm »
I have the same problem with ebox ver1 seems that the firewall drops the ssh port and ebox for a short period does not allow even the transpernt proxy users thrugh i am downloading the beta ver 1.1.30 in hope of that problem has been solved
but I fear by the look of things other has not had the same problem !!

befor ebox ver 1 I had ebox ver 0.11.99 and was working perfectly but the new features made me to want to upgrade and not verry happy about the choice I >:( made!
Only people that wants to no more will ask!!