Menu

Show posts

This section allows you to view all posts made by this member. Note that you can only see posts made in areas you currently have access to.

Show posts Menu

Topics - evanrich

#1
I ended up having to roll back (fresh install) 22.1.10_4 after experiencing numerous issues with some services.   

After updating, Whatsapp, facebook messanger, facebook (web), youtube, and a few other services woudl not load, both on my desktops and mobile devices.   Nothing between 22.1.10 and 22.7 changed, but as a test, I disabled (completely shut off, and in some cases uninstalled)  the following:

Suricata
Zenarmor
c-icap/clamav
any firewall rule/nat rule for the above
disabling any custom tuning parameters

I see traffic going outbound to say, whatsapp via the live log, but for whatever reason, they never work.  I also attempted multiple restarts of the firewall but that didnt' help.   I also tried to use external DNS thinking it might be an issue with unbound (after seeing another post about unbound restarting) but this didn't help either.

As soon as I rolled back to 22.1.10_4, re-importing the exact same config I had (with all those services enabled)   facebook/youtube/whatsapp etc started working again.

Also of note, is that the zenarmor dashboard graphs would not render either, they just showed some error (forget what it said).  22.1.10 worked, so my guess is maybe zenarmor doesn't play nicely with php8?

At some point i might try a fresh install of 22.7 again, but based on this and other issues present I'll probably wait for 22.7.1 or what not to come out.   Open to thoughts on what it could be though.  For what it's worth, switching between OpenSSL and LibreSSL didnt change anything either (yes I read the upgrade guide and had switched back to OpenSSL prior to upgrading to 22.7)
#2
I had c-icap set up and working with webproxy/clam av in 22.1.10_4, but after updating to 22.7, i notice some issues.  In the c-icap logs, it shows:
Fri Jul 29 23:53:52 2022, main proc, Possibly a term signal received. Monitor process going to term all children
Fri Jul 29 23:53:41 2022, main proc, Possibly a term signal received. Monitor process going to term all children
Fri Jul 29 23:53:39 2022, 27129/12672768, Antivirus engine is not available, allow 204
Fri Jul 29 23:53:39 2022, 27129/12672768, Registry 'virus_scan::engines' does not exist!
Fri Jul 29 23:53:39 2022, 27129/12676352, Registry 'virus_scan::engines' does not exist!
Fri Jul 29 23:53:39 2022, 27129/12669184, Antivirus engine is not available, allow 204
Fri Jul 29 23:53:39 2022, 27129/12669184, Registry 'virus_scan::engines' does not exist!
Fri Jul 29 23:53:39 2022, 27129/12672768, Antivirus engine is not available, allow 204
Fri Jul 29 23:53:39 2022, 27129/12672768, Registry 'virus_scan::engines' does not exist!
Fri Jul 29 23:53:39 2022, 27129/12669184, Antivirus engine is not available, allow 204
Fri Jul 29 23:53:39 2022, 27129/12669184, Registry 'virus_scan::engines' does not exist!
Fri Jul 29 23:53:39 2022, 27129/12672768, Antivirus engine is not available, allow 204
Fri Jul 29 23:53:37 2022, 27129/12670976, Antivirus engine is not available, allow 204
Fri Jul 29 23:53:37 2022, 27129/12670976, Registry 'virus_scan::engines' does not exist!
Fri Jul 29 23:53:37 2022, 27129/12669184, Registry 'virus_scan::engines' does not exist!
Fri Jul 29 23:53:36 2022, 27129/12670976, Registry 'virus_scan::engines' does not exist!
Fri Jul 29 23:53:36 2022, 27129/12670976, Registry 'virus_scan::engines' does not exist!
Fri Jul 29 23:53:36 2022, 27129/12676352, Registry 'virus_scan::engines' does not exist!
Fri Jul 29 23:53:36 2022, 27129/12672768, Registry 'virus_scan::engines' does not exist!
Fri Jul 29 23:53:36 2022, 27129/12678144, Registry 'virus_scan::engines' does not exist!


I've tried restarting clamav, c-icap, webproxy, etc, nothing works...anyone have any ideas?