Strange behavior of SOGo3 on NS7.
When I login Sogo with a user created on GUI I was not able to create an imap-account. If I did so, login stucked in mailbox0. I created a local user on the machine. After that I was able to use an imap-account on my ISP’S server. If I create a user with GUI the command cat /etc/pwasswd does’t show this user. Is this meant to this way, because of ldap-server in the container?
Wrong link/open page when you want to access "Samba audit"
Wrong link/open page when you want to access Samba audit from “Report -> Samba audit” or from “Applications -> Samba Audit -> OPEN”.
Similar, but slightly different errors that a couple of other folks have reported (sorry, can’t cut/paste the text):
Also, had issues where the ethernet interfaces were configured, but always had to issue a manual “ifconfig up” to them before they could be used. I’m going to try another couple of installs to see if I can narrow down the circumstances.
Cheers.
I can confirm also the problem reported by @GG_jr and @EddieA about genRandomHash.
The correct util.pm file was named util.pm.mod, therefore any call is still looking at the old file. The solution is to rename util.pm.mod to util.pm:
cd /usr/share/perl5/vendor_perl/esmith/
mv util.pm.mod util.pm
After that, a reinstall of the affected packages should work as expected.
1 Like
SOGo should work both with DC and Directory.
What user provide did you use? I can try to reproduce .it.
Sorry guys, we missed an rpm upload. 
The issue is already solved here: Undefined subroutine &esmith::util::genRandomHash · Issue #5057 · NethServer/dev · GitHub
I just push the package to the master mirror!
2 Likes
@alefattorini, @davidep, @giacomo
Hello to all,
When we will have Web Content Filter and Web Proxy ready to install from Software Center?
TIA,
Gabriel
I just pushed the new comps to the master mirror 
Thanks for reporting!
3 Likes
Sorry i’m on vacation for the next 2 weeks.
Will answer when i’m back.
Thx. Best regards. Ralf
The problems were solved:
- Web Content Filter and Web Proxy are available for install in Software center
- Samba audit can be opened/accessed
- Graphs - OK
- Web proxy stats - OK
5 Likes
Thanks flatspin. I will make the changes in VirtualBox and give it another try.
1 Like
Download the certificate for transparent SSL mode, not works from GUI
How should work:
-
NethServer GUI -> Gateway -> Web proxy -> Proxy tab -> right click on “http://your_ip/proxy.crt” -> select “Open Link in New Tab” -> save the certificate.
-
Import the certificate as “Trusted Authorities” on used browser(s).
Instead of this, at the Step 1, when you select “Open Link in New Tab”, a new page will be open and you will see the “certificate”, so you cannot download the proxy certificate (please see the attached screenshot).
Same thing if you do left click on “http://your_ip/proxy.crt”.
I have tried also with MS IE.
Can anyone else confirm this?
Thank you!
HINT:
- the certificate can be saved on USB to be installed later on each client.
- any other known methods for download (WinSCP, …) and deploying the certificate to the clients can be used.
1 Like
I think it is more of a browser thing, but there was some php directive to force a file download.
How should work:
NethServer GUI -> Gateway -> Web proxy -> Proxy tab -> right click on “http://yourip/proxy.crt” -> select “Save link/target as…” -> save the certificate._
Linux Mint 17 + Firefox 47: left click, right click -> Save link as…, open in new tab, all three methods show a download window.
VM with Windows 10 (not up to date):
- IE11 at defaults cannot access the server-manager (shows only the grey background), to get access had to uncheck compatibility view for intranet sites; http://yourip/proxy.crt shows the certificate.
- Edge: shows the certificate but cannot download it. There isn’t a Save as… option (I’ve read it might be ready with a recent update).
- Firefox 48: Right click -> Save link as… works. Left click or open in new tab shows the certificate content. Can be saved using CTRL+S or save as… menu.
Windows 7 + Firefox 47/48: Same as with Windows 10.
Chrome (in Linux Mint, Windows 7): shows the certificate content unless right click -> Save as…
When the certificate is shown it can be saved by CTRL+S or Save as… menu.
3 Likes
IPS report should be under Report, which should be the word “Reports”
4 Likes
Not sure where to go from here. The /var/log/squidGuard is full of blocked urls and I tried changing the /etc/e-smith/templates/etc/lightsquid/lightsquid.cfg to
#path to access.log
$logpath ="/var/log/squidGuard";
and
$logpath ="/var/log/squidGuard/urlfilter.log";
for giggles but no dice.
Edit;
I shutdown the vm last night and restarted it this morning, received the same error, but I left it running and checked a few hours later and it was reporting without error as in the screenshots by @GG_jr a couple of posts after mine.
I will say, I believe the report to be… to put it mildly, utterly useless. Now I use other gateway distros, paid and free, with robust, comprehensive reporting so I expect a lot, but this is… not very useful, I can’t even tell what’s blocked so I’m not sure of the point of this in the gui.
Is there something I’m missing, is there cli configuration that can be done to at least break out what was blocked, or break out categories, something that shows what squid is doing other than a basic list of web sites?
2 Likes
The lightsquid parser is set to run daily. Maybe we have to wait until the cron job runs.
To force it we can run:
/usr/sbin/lightparser.pl
or what the cron job has:
/usr/sbin/lightparser.pl -y /var/log/squid/access.log
4 Likes
Hi @dnutan ,
Thank you!
I have installed the Web proxy module on Aug 05 at 00:40, so, after 24 hours, Web proxy stats, should have been seen.
Aug 05 00:40:04 Updated: kernel-tools-libs-3.10.0-327.28.2.el7.x86_64
Aug 05 00:40:05 Updated: kernel-tools-3.10.0-327.28.2.el7.x86_64
Aug 05 00:40:06 Updated: python-perf-3.10.0-327.28.2.el7.x86_64
Aug 05 00:40:19 Installed: kernel-3.10.0-327.28.2.el7.x86_64
Aug 05 00:42:13 Installed: perl-GD-2.49-3.el7.x86_64
Aug 05 00:42:13 Installed: clamav-data-empty-0.99.2-1.el7.noarch
Aug 05 00:42:14 Installed: clamav-lib-0.99.2-1.el7.x86_64
Aug 05 00:42:16 Installed: clamav-filesystem-0.99.2-1.el7.noarch
Aug 05 00:42:16 Installed: clamav-server-0.99.2-1.el7.x86_64
Aug 05 00:42:17 Installed: clamav-server-systemd-0.99.2-1.el7.noarch
Aug 05 00:42:17 Installed: clamav-update-0.99.2-1.el7.x86_64
Aug 05 00:42:18 Installed: clamav-0.99.2-1.el7.x86_64
Aug 05 00:42:18 Installed: clamav-unofficial-sigs-3.7.2-1.el7.noarch
Aug 05 00:42:18 Installed: nethserver-antivirus-1.2.0-1.ns7.noarch
Aug 05 00:42:19 Installed: perl-GDTextUtil-0.86-23.el7.noarch
Aug 05 00:42:19 Installed: 1:perl-GDGraph-1.44-15.el7.noarch
Aug 05 00:42:19 Installed: perl-GDGraph3d-0.63-23.el7.noarch
Aug 05 00:42:20 Installed: lightsquid-1.8-18.el7.lux.noarch
Aug 05 00:42:20 Installed: c-icap-libs-0.4.2-1.ns7.x86_64
Aug 05 00:42:21 Installed: c-icap-0.4.2-1.ns7.x86_64
Aug 05 00:42:21 Installed: nethserver-c-icap-1.1.0-1.ns7.noarch
Aug 05 00:42:22 Installed: libecap-0.2.0-9.el7.x86_64
Aug 05 00:42:22 Installed: perl-DB_File-1.830-6.el7.x86_64
Aug 05 00:42:22 Installed: 1:perl-FCGI-0.74-8.el7.x86_64
Aug 05 00:42:23 Installed: perl-CGI-3.63-4.el7.noarch
Aug 05 00:42:23 Installed: lightsquid-apache-1.8-18.el7.lux.noarch
Aug 05 00:42:23 Installed: samba-winbind-modules-4.2.10-7.el7_2.x86_64
Aug 05 00:42:24 Installed: samba-winbind-4.2.10-7.el7_2.x86_64
Aug 05 00:42:25 Installed: samba-winbind-clients-4.2.10-7.el7_2.x86_64
Aug 05 00:42:25 Installed: libtool-ltdl-2.4.2-21.el7_2.x86_64
Aug 05 00:42:27 Installed: 7:squid-3.3.8-26.el7_2.4.x86_64
Aug 05 00:42:28 Installed: nethserver-squid-1.4.0-1.ns7.noarch
Aug 05 00:42:28 Installed: squidclamav-6.15-1.ns7.x86_64
Aug 05 00:42:32 Installed: squidGuard-1.4-26.el7.x86_64
Aug 05 00:42:32 Installed: nethserver-squidguard-1.5.0-1.ns7.noarch
Aug 05 00:42:33 Installed: nethserver-squidclamav-1.3.0-1.ns7.noarch
Aug 05 00:42:33 Installed: nethserver-lightsquid-1.1.0-1.ns7.noarch
I have run “/usr/sbin/lightparser.pl”, unfortunately before opened NS GUI, so, I don’t know if the the Web proxy stats showed or no, the records.
Anyway, now it works.
I will check in the next days to see if everything it’s ok.
BR,
Gabriel
1 Like
POP3 Proxy issues
POP3 proxy: enabled
- Antivirus: enabled
- Antispam: enabled
I cannot receive emails (Mozilla Thunderbird, POP3, port 110):
Aug 6 19:40:07 dc-ad p3scan[16123]: POP3 Connection from 192.168.1.11:62675
Aug 6 19:40:07 dc-ad p3scan[16123]: Real-server address is 91.195.62.2:110
Aug 6 19:40:07 dc-ad p3scan[16123]: Ignoring servers TOP capability...
Aug 6 19:40:07 dc-ad p3scan[16123]: Ignoring servers PIPELINING capability...
Aug 6 19:40:07 dc-ad p3scan[16123]: Session done (Clean Exit). Mails: 0 Bytes: 0
Aug 6 19:40:51 dc-ad p3scan[16180]: POP3 Connection from
192.168.1.11:62678
Aug 6 19:40:51 dc-ad p3scan[16180]: Real-server address is
91.195.62.2:110
Aug 6 19:40:51 dc-ad p3scan[16180]: Ignoring servers TOP capability...
Aug 6 19:40:51 dc-ad p3scan[16180]: Ignoring servers PIPELINING
capability...
Aug 6 19:40:52 dc-ad p3scan[16180]: WARNING: Your scanner returned
neither 0, a viruscode, nor a good viruscode, but 2
Aug 6 19:40:52 dc-ad p3scan[16180]: ERR: We can't say if it is a virus!
So we have to give the client the mail! You should check your
configuration/system
Aug 6 19:40:52 dc-ad p3scan[16180]: ERR: Scanner returned unexpected
error code. You should check your configuration/system.
Aug 6 19:40:52 dc-ad p3scan[16180]: ERR: Exiting now...
Aug 6 19:40:52 dc-ad p3scan: ERR: Scanner returned unexpected error
code. You should check your configuration/system.
Aug 6 19:40:52 dc-ad p3scan[15990]: ERR: Attention: child with pid
16180 died with abnormal termsignal (11)! This is probably a bug. Please
report to the author. numprocs is now 0
Aug 6 19:40:52 dc-ad kernel: p3scan[16180]: segfault at 241 ip
00007f36d8582ab4 sp 00007ffe52b8c4c0 error 4 in
libc-2.17.so[7f36d853a000+1b7000]
_**POP3 proxy**: enabled_
_**- Antivirus**: disabled_
_- **Antispam**: enabled or disabled_
_**I can receive emails (Mozilla Thunderbird, POP3, port 110):**_
Aug 6 19:47:14 dc-ad /sbin/e-smith/db[16688]:
/var/lib/nethserver/db/configuration: OLD
p3scan=service|SSLScan|enabled|SpamScan|enabled|TCPPort|8110|Template|/etc/p3scan/p3scan-en.mail|VirusScan|enabled|access||status|enabled
Aug
6 19:47:14 dc-ad /sbin/e-smith/db[16688]:
/var/lib/nethserver/db/configuration: NEW
p3scan=service|SSLScan|enabled|SpamScan|enabled|TCPPort|8110|Template|/etc/p3scan/p3scan-en.mail|VirusScan|disabled|access||status|enabled
Aug
6 19:47:14 dc-ad dbus-daemon: dbus[646]: [system] Activating via
systemd: service name='org.freedesktop.timedate1'
unit='dbus-org.freedesktop.timedate1.service'
Aug 6 19:47:14 dc-ad dbus[646]: [system] Activating via systemd:
service name='org.freedesktop.timedate1'
unit='dbus-org.freedesktop.timedate1.service'
Aug 6 19:47:14 dc-ad systemd: Starting Time & Date Service...
Aug 6 19:47:14 dc-ad dbus[646]: [system] Successfully activated service
'org.freedesktop.timedate1'
Aug 6 19:47:14 dc-ad dbus-daemon: dbus[646]: [system] Successfully
activated service 'org.freedesktop.timedate1'
Aug 6 19:47:14 dc-ad systemd: Started Time & Date Service.
Aug 6 19:47:14 dc-ad esmith::event[16692]: Event:
nethserver-p3scan-update
Aug 6 19:47:14 dc-ad esmith::event[16692]: Migrating existing database
configuration
Aug 6 19:47:14 dc-ad esmith::event[16692]: Migrating existing database
certificates
Aug 6 19:47:14 dc-ad esmith::event[16692]: Migrating existing database
networks
Aug 6 19:47:14 dc-ad esmith::event[16692]: Migrating existing database
accounts
Aug 6 19:47:14 dc-ad esmith::event[16692]: Migrating existing database
routes
Aug 6 19:47:14 dc-ad esmith::event[16692]: Migrating existing database
hosts
Aug 6 19:47:14 dc-ad esmith::event[16692]: Migrating existing database
proxypass
Aug 6 19:47:14 dc-ad esmith::event[16692]: Migrating existing database
fwrules
Aug 6 19:47:14 dc-ad esmith::event[16692]: Migrating existing database
fwservices
Aug 6 19:47:15 dc-ad esmith::event[16692]: Migrating existing database
portforward
Aug 6 19:47:15 dc-ad esmith::event[16692]: Migrating existing database
tc
Aug 6 19:47:15 dc-ad esmith::event[16692]: Migrating existing database
dhcp
Aug 6 19:47:15 dc-ad esmith::event[16692]: Migrating existing database
contentfilter
Aug 6 19:47:15 dc-ad esmith::event[16692]: Migrating existing database
vhosts
Aug 6 19:47:15 dc-ad esmith::event[16692]: Migrating existing database
domains
Aug 6 19:47:15 dc-ad esmith::event[16692]: Action:
/etc/e-smith/events/nethserver-p3scan-update/S00initialize-default-databases
SUCCESS [0.488224]
Aug 6 19:47:15 dc-ad esmith::event[16692]: expanding
/etc/mail/spamassassin/bwlist.cf
Aug 6 19:47:15 dc-ad esmith::event[16692]: expanding
/etc/mail/spamassassin/p3scan.cf
Aug 6 19:47:15 dc-ad esmith::event[16692]: expanding
/etc/p3scan/p3scan.conf
Aug 6 19:47:15 dc-ad esmith::event[16692]: Action:
/etc/e-smith/events/actions/generic_template_expand SUCCESS [0.282509]
Aug 6 19:47:15 dc-ad esmith::event[16695]: Event:
nethserver-firewall-base-save nethserver-p3scan-update
Aug 6 19:47:15 dc-ad esmith::event[16695]: Action:
/etc/e-smith/events/nethserver-firewall-base-save/S02providers-cleanup
SUCCESS [0.206411]
Aug 6 19:47:15 dc-ad esmith::event[16695]: expanding /etc/collectd.conf
Aug 6 19:47:15 dc-ad esmith::event[16695]: expanding /etc/hosts
Aug 6 19:47:15 dc-ad esmith::event[16695]: expanding /etc/lsm/lsm.conf
Aug 6 19:47:15 dc-ad esmith::event[16695]: expanding
/etc/shorewall/actions
Aug 6 19:47:15 dc-ad esmith::event[16695]: expanding
/etc/shorewall/hosts
Aug 6 19:47:15 dc-ad esmith::event[16695]: expanding
/etc/shorewall/interfaces
Aug 6 19:47:15 dc-ad esmith::event[16695]: expanding
/etc/shorewall/maclist
Aug 6 19:47:16 dc-ad esmith::event[16695]: expanding
/etc/shorewall/mangle
Aug 6 19:47:16 dc-ad esmith::event[16695]: expanding
/etc/shorewall/masq
Aug 6 19:47:16 dc-ad esmith::event[16695]: expanding /etc/shorewall/nat
Aug 6 19:47:16 dc-ad esmith::event[16695]: expanding
/etc/shorewall/policy
Aug 6 19:47:16 dc-ad esmith::event[16695]: expanding
/etc/shorewall/providers
Aug 6 19:47:16 dc-ad esmith::event[16695]: expanding
/etc/shorewall/rtrules
Aug 6 19:47:16 dc-ad esmith::event[16695]: expanding
/etc/shorewall/rules
Aug 6 19:47:16 dc-ad esmith::event[16695]: expanding
/etc/shorewall/shorewall.conf
Aug 6 19:47:16 dc-ad esmith::event[16695]: expanding
/etc/shorewall/stoppedrules
Aug 6 19:47:16 dc-ad esmith::event[16695]: expanding
/etc/shorewall/tcinterfaces
Aug 6 19:47:16 dc-ad esmith::event[16695]: expanding
/etc/shorewall/tcpri
Aug 6 19:47:16 dc-ad esmith::event[16695]: expanding
/etc/shorewall/tunnels
Aug 6 19:47:16 dc-ad esmith::event[16695]: expanding
/etc/shorewall/zones
Aug 6 19:47:16 dc-ad esmith::event[16695]: expanding
/etc/collectd.d/ping.conf
Aug 6 19:47:16 dc-ad esmith::event[16695]: expanding
/var/www/html/wpad.dat
Aug 6 19:47:16 dc-ad esmith::event[16695]: Action:
/etc/e-smith/events/actions/generic_template_expand SUCCESS [0.621858]
Aug 6 19:47:16 dc-ad systemd: Reloading.
Aug 6 19:47:16 dc-ad systemd: Configuration file
/usr/lib/systemd/system/auditd.service is marked world-inaccessible.
This has no effect as configuration data is accessible via APIs without
restrictions. Proceeding anyway.
Aug 6 19:47:16 dc-ad kernel: ipt_ULOG: ULOG: fail to register logger.
Aug 6 19:47:17 dc-ad kernel: ipt_ULOG: ULOG: fail to register logger.
Aug 6 19:47:17 dc-ad kernel: ipt_ULOG: ULOG: fail to register logger.
Aug 6 19:47:17 dc-ad logger: Shorewall reloaded
Aug 6 19:47:17 dc-ad esmith::event[16695]: [NOTICE] Shorewall restart
Aug 6 19:47:17 dc-ad esmith::event[16695]: Action:
/etc/e-smith/events/nethserver-firewall-base-save/S89nethserver-shorewall-restart
SUCCESS [1.563803]
Aug 6 19:47:18 dc-ad systemd: Reloading.
Aug 6 19:47:18 dc-ad systemd: Configuration file
/usr/lib/systemd/system/auditd.service is marked world-inaccessible.
This has no effect as configuration data is accessible via APIs without
restrictions. Proceeding anyway.
Aug 6 19:47:18 dc-ad esmith::event[16695]: [INFO] lsm is disabled:
skipped
Aug 6 19:47:18 dc-ad esmith::event[16695]: [INFO]
Aug 6 19:47:18 dc-ad systemd: Reloading.
Aug 6 19:47:18 dc-ad systemd: Configuration file
/usr/lib/systemd/system/auditd.service is marked world-inaccessible.
This has no effect as configuration data is accessible via APIs without
restrictions. Proceeding anyway.
Aug 6 19:47:18 dc-ad esmith::event[16695]: [INFO] service collectd
restart
Aug 6 19:47:18 dc-ad collectd[15949]: Exiting normally.
Aug 6 19:47:18 dc-ad collectd[15949]: collectd: Stopping 5 read
threads.
Aug 6 19:47:18 dc-ad collectd[15949]: rrdtool plugin: Shutting down the
queue thread. This may take a while.
Aug 6 19:47:18 dc-ad systemd: Stopping Collectd statistics daemon...
Aug 6 19:47:18 dc-ad collectd[15949]: ping plugin: Shutting down
thread.
Aug 6 19:47:18 dc-ad collectd[15949]: collectd: Stopping 5 write
threads.
Aug 6 19:47:18 dc-ad systemd: Started Collectd statistics daemon.
Aug 6 19:47:18 dc-ad systemd: Starting Collectd statistics daemon...
Aug 6 19:47:18 dc-ad esmith::event[16695]: [INFO] collectd restart
Aug 6 19:47:18 dc-ad esmith::event[16695]: Action:
/etc/e-smith/events/actions/adjust-services SUCCESS [0.384126]
Aug 6 19:47:18 dc-ad esmith::event[16695]: Event:
nethserver-firewall-base-save SUCCESS
Aug 6 19:47:18 dc-ad esmith::event[16692]: Action:
/etc/e-smith/events/nethserver-p3scan-update/S20firewall-adjust SUCCESS
[2.879434]
Aug 6 19:47:18 dc-ad collectd[17182]: Initialization complete, entering
read-loop.
Aug 6 19:47:18 dc-ad systemd: Reloading.
Aug 6 19:47:18 dc-ad systemd: Configuration file
/usr/lib/systemd/system/auditd.service is marked world-inaccessible.
This has no effect as configuration data is accessible via APIs without
restrictions. Proceeding anyway.
Aug 6 19:47:18 dc-ad systemd: Starting p3scan proxy...
Aug 6 19:47:18 dc-ad p3scan[17220]: P3Scan Version 2.3.2
Aug 6 19:47:18 dc-ad p3scan[17220]: Selected scannertype: basic (Basic
file invocation scanner)
Aug 6 19:47:18 dc-ad p3scan[17220]: Listen now on 0.0.0.0:8110
Aug 6 19:47:18 dc-ad p3scan[17221]: Changing uid (we are root)
Aug 6 19:47:18 dc-ad p3scan[17221]: Running as user: amavis
Aug 6 19:47:18 dc-ad systemd: Started p3scan proxy.
Aug 6 19:47:18 dc-ad esmith::event[16692]: [INFO] p3scan has been
started
Aug 6 19:47:18 dc-ad esmith::event[16692]:
Aug 6 19:47:18 dc-ad esmith::event[16692]: Action:
/etc/e-smith/events/actions/adjust-services SUCCESS [0.367546]
Aug 6 19:47:18 dc-ad esmith::event[16692]: Event:
nethserver-p3scan-update SUCCESS
esmith::event[16692]: Event: nethserver-p3scan-update SUCCESS
Aug 6 19:55:51 dc-ad p3scan[17851]: POP3 Connection from 192.168.1.11:62802
Aug 6 19:55:51 dc-ad p3scan[17851]: Real-server address is 91.195.62.2:110
Aug 6 19:55:51 dc-ad p3scan[17851]: Ignoring servers TOP capability...
Aug 6 19:55:51 dc-ad p3scan[17851]: Ignoring servers PIPELINING capability...
Aug 6 19:56:03 dc-ad p3scan[17851]: Session done (Clean Exit). Mails: 1 Bytes: 8489
Aug 6 19:56:18 dc-ad clamd: SelfCheck: Database status OK.
Aug 6 19:56:18 dc-ad clamd[2199]: SelfCheck: Database status OK.
Aug 6 19:57:35 dc-ad p3scan[17986]: POP3 Connection from 192.168.1.11:62833
Aug 6 19:57:35 dc-ad p3scan[17986]: Real-server address is 91.195.62.2:110
Aug 6 19:57:35 dc-ad p3scan[17986]: Ignoring servers TOP capability...
Aug 6 19:57:35 dc-ad p3scan[17986]: Ignoring servers PIPELINING capability...
Aug 6 19:57:46 dc-ad p3scan[17986]: Session done (Clean Exit). Mails: 1 Bytes: 126525
Please advise me!
TIA,
Gabriel
EDIT - UPDATE:
Sometimes, when I switch “Antivirus” from “enabled” to “disabled” or, vice versa, the “p3scan” service goes to “Stopped”.
1 Like
Don’t know if it will fix the issue, but there is a p3scan package in testing repo:
yum --enablerepo=nethserver-testing install nethserver-p3scan