EFW Support

Support => EFW SMTP, HTTP, SIP, FTP Proxy Support => Topic started by: soomon on Thursday 26 July 2012, 08:15:10 pm



Title: endian 2.51 proxy policy / problem with logmein rescue
Post by: soomon on Thursday 26 July 2012, 08:15:10 pm
hello endian forum.

we have a problem with our endian firewall and the logmein rescue remote support software.
logein establishes the connection successfully, but the connection breaks every 10-30 seconds.

i am new to endian but i narrowed down the problem to the HTTP proxy Policy.
we use the default one:

Code:
1 filter for virus ANY ANY not required Always ANY

if i change the filterprofile to "none" it works.

so i guess the virus scanner is the problem, although i dont get why.
logmein connects via port 443 and i do not se any http traffic flowing, just ssl traffic in /var/log/httpd/ssl_engine_log

as ssl is encrypted endian should not be able to scan it. right?
how can the virus scanner then interfere with that?

connection to child 0 closed with unclean shutdown (server endian.localdomain:10443, client 192.168.0.2). but thats just the connection to the webinterface of endian. right?

which logfile can i look at?
does anyone have a tip for me?

thanks and greetings,
soomon