- zorp-hu - lists.balabit.hu

AnyPy aszinkron I/O
by Szabó Endre Zoltán 30 Mar '12

30 Mar '12

Kedves Zorperek, Egy aszinkron protokollhoz szeretnék proxyt készíteni 0-ról, az AnyPy.AnyPyProxy használatával, de úgy látom, hogy erre nagyon nincs lehetőség, mert a jelenlegi implementáció csak blocking-io-t tud. ugye van ez a howto egy kedves listatagtól: http://magwas.rulez.org/anypy-howto-3.html Ehhez ha patkolni kell keményen az anypy környékén. Van rá esély, hogy upstreambe bekerül a patch? Esetleg más módszer? üdv, end.re Figyelmeztetés Ez az e-mail üzenet, a fenti címzetteknek szánt, üzleti titoktartás alá eső bizalmas információkat tartalmaz. Téves kézbesítés esetén kérjük, értesítsen a fent megjelölt telefon, fax számokon, vagy e-mail címen. Az eredeti példány visszaküldéséről címünkre, majd törléséről, azonnal rendelkezni szíveskedjen. Notice: This e-mail contains privileged and confidential business information intended only for the use of addresses(s) named above. Should you have received it in error, please notify us by phone or e-mail, and delete after returning the original e-mail to our address.

1 0

url redirect hiba
by tusi 14 Mar '12

14 Mar '12

Sziasztok, probalom a zorp 3.9.2-t mukodesre birni. Alapjaban mar majdnem minden megy, csak az url redirect nem. Az alabbi konfig file-ok eseten, bizonyos oldalakra valoban a www.balabit.hu jon be (pl www.mta.hu) viszont szamos esetben az eredeti oldal (pl index.hu) hibajelzessel (a kert oldal nem talalhato). Mi lehet a hiba? Koszonom, tusi policy.py: from Zorp.Core import * from Zorp.Plug import * from Zorp.Http import * from Zorp.Proxy import * Zorp.firewall_name = 'fal' InetZone("out", "0.0.0.0/0", inbound_services=[ "in_out_http",\ ], outbound_services=[ ]) InetZone("in", "172.16.0.0/16", inbound_services=[ ], outbound_services=[ "in_out_http",\ ]) class MyHttpProxy(HttpProxy): def config(self): HttpProxy.config(self) self.request["GET"] = (HTTP_REQ_POLICY, self.filterURL) def filterURL(self, method, url, version): self.request_url = "http://www.balabit.hu/" return HTTP_REQ_ACCEPT def in2out_http(): Service(name="in_out_http", proxy_class=MyHttpProxy, router=TransparentRouter()) Dispatcher(bindto=DBIface(protocol=ZD_PROTO_TCP, iface="eth1", ip="172.16.0.254", port=50080), service="in_out_http", transparent=TRUE, threaded=FALSE, backlog=255) --------------------------------------------- instances.conf: in2out_http --log-tags --verbose 2 -p /etc/zorp/policy.py -------------------------------------------- iptables -L: Chain INPUT (policy ACCEPT) target prot opt source destination ACCEPT all -- anywhere anywhere state RELATED,ESTABLISHED ACCEPT all -- anywhere anywhere LOintra all -- 172.16.0.0/16 anywhere Chain FORWARD (policy DROP) target prot opt source destination LOG all -- anywhere anywhere LOG level warning prefix `DROP FORWARD:' DROP all -- anywhere anywhere Chain OUTPUT (policy ACCEPT) target prot opt source destination Chain LOintra (1 references) target prot opt source destination -------------------------------------------- iptables -t mangle -L: Chain PREROUTING (policy ACCEPT) target prot opt source destination PRio all -- 172.16.0.0/16 anywhere Chain INPUT (policy ACCEPT) target prot opt source destination Chain FORWARD (policy ACCEPT) target prot opt source destination Chain OUTPUT (policy ACCEPT) target prot opt source destination Chain POSTROUTING (policy ACCEPT) target prot opt source destination Chain PRio (1 references) target prot opt source destination TPROXY tcp -- anywhere anywhere tcp dpt:www TPROXY redirect 172.16.0.254:50080 mark 0x1/0x1 -------------------------------------------- zorpctl version: Zorp 3.9.2 Revision: ssh+git://coroner@git.balabit//var/scm/git/zorp/zorp-core--mainline--4.0#master#c52537337d6add922cdb65a04767d8a74b2eef12 Compile-Date: Sep 2 2011 18:19:46 Config-Date: 2011/09/02 Trace: off Debug: off IPOptions: off IPFilter-Tproxy: off Netfilter-Tproxy: on Linux22-Tproxy: off libzorpll 3.9.1.0 Revision: Compile-Date: Sep 2 2011 13:48:33 Trace: off MemTrace: off Caps: on Debug: off StackDump: off ------------------------------------------ 6-os loglevelen cliens http://index.hu-t keri: Mar 13 17:43:24 fal zorp/in2out_http[10007]: core.debug(6): (dsp/dispatch:0): Incoming connection; protocol='1', remote='AF_INET(172.16.7.61:47962)', local='AF_INET(217.20.130.97:80)', dest='AF_INET(217.20.130.97:80)' Mar 13 17:43:24 fal zorp/in2out_http[10007]: core.session(5): (svc/in_out_http): Starting service; name='in_out_http' Mar 13 17:43:24 fal zorp/in2out_http[10007]: core.session(3): (svc/in_out_http:9): Starting proxy instance; client_fd='21', client_address='AF_INET(172.16.7.61:47962)', client_zone='Zone(in, 172.16.0.0/16)', client_local='AF_INET(217.20.130.97:80)', client_protocol='TCP' Mar 13 17:43:24 fal zorp/in2out_http[10007]: core.session(5): (svc/in_out_http:9/http): Proxy starting; class='MyHttpProxy', proxy='http' Mar 13 17:43:24 fal zorp/in2out_http[10007]: core.debug(6): (dsp/dispatch:0): Incoming connection; protocol='1', remote='AF_INET(172.16.7.61:47963)', local='AF_INET(217.20.130.97:80)', dest='AF_INET(217.20.130.97:80)' Mar 13 17:43:24 fal zorp/in2out_http[10007]: core.debug(6): (svc/in_out_http:9/http): thread starting; Mar 13 17:43:24 fal zorp/in2out_http[10007]: core.session(5): (svc/in_out_http): Starting service; name='in_out_http' Mar 13 17:43:24 fal zorp/in2out_http[10007]: core.session(3): (svc/in_out_http:10): Starting proxy instance; client_fd='22', client_address='AF_INET(172.16.7.61:47963)', client_zone='Zone(in, 172.16.0.0/16)', client_local='AF_INET(217.20.130.97:80)', client_protocol='TCP' Mar 13 17:43:24 fal zorp/in2out_http[10007]: core.session(5): (svc/in_out_http:10/http): Proxy starting; class='MyHttpProxy', proxy='http' Mar 13 17:43:24 fal zorp/in2out_http[10007]: core.debug(6): (svc/in_out_http:9/http): Attribute changed; attribute='language', newvalue=''en'' Mar 13 17:43:24 fal zorp/in2out_http[10007]: core.debug(6): (svc/in_out_http:9/http): Attribute fetched; attribute='ssl', value='ZPolicyStruct object type Shared' Mar 13 17:43:24 zorp/in2out_http[10007]: last message repeated 7 times Mar 13 17:43:24 fal zorp/in2out_http[10007]: core.debug(6): (svc/in_out_http:9/http): Attribute fetched; attribute='request', value='<Zorp hash object at 0x7f216a486a08>' Mar 13 17:43:24 zorp/in2out_http[10007]: last message repeated 3 times Mar 13 17:43:24 fal zorp/in2out_http[10007]: core.debug(6): (svc/in_out_http:9/http): Attribute fetched; attribute='ssl', value='ZPolicyStruct object type Shared' Mar 13 17:43:24 zorp/in2out_http[10007]: last message repeated 2 times Mar 13 17:43:24 fal zorp/in2out_http[10007]: http.debug(6): (svc/in_out_http:9/http): Fetching request and headers; Mar 13 17:43:24 fal zorp/in2out_http[10007]: core.debug(6): (svc/in_out_http:10/http): thread starting; Mar 13 17:43:24 fal zorp/in2out_http[10007]: core.debug(6): (svc/in_out_http:10/http): Attribute changed; attribute='language', newvalue=''en'' Mar 13 17:43:24 fal zorp/in2out_http[10007]: core.debug(6): (svc/in_out_http:10/http): Attribute fetched; attribute='ssl', value='ZPolicyStruct object type Shared' Mar 13 17:43:24 zorp/in2out_http[10007]: last message repeated 7 times Mar 13 17:43:24 fal zorp/in2out_http[10007]: core.debug(6): (svc/in_out_http:10/http): Attribute fetched; attribute='request', value='<Zorp hash object at 0x7f216a486aa8>' Mar 13 17:43:24 zorp/in2out_http[10007]: last message repeated 3 times Mar 13 17:43:24 fal zorp/in2out_http[10007]: core.debug(6): (svc/in_out_http:10/http): Attribute fetched; attribute='ssl', value='ZPolicyStruct object type Shared' Mar 13 17:43:24 zorp/in2out_http[10007]: last message repeated 2 times Mar 13 17:43:24 fal zorp/in2out_http[10007]: http.debug(6): (svc/in_out_http:10/http): Fetching request and headers; Mar 13 17:43:24 fal zorp/in2out_http[10007]: http.request(6): (svc/in_out_http:9/http): Request details; command='GET', url='/', version='HTTP/1.1' Mar 13 17:43:24 fal zorp/in2out_http[10007]: http.debug(6): (svc/in_out_http:9/http): processing request and headers; Mar 13 17:43:24 fal zorp/in2out_http[10007]: http.debug(6): (svc/in_out_http:9/http): Filtering request and headers; Mar 13 17:43:24 fal zorp/in2out_http[10007]: core.debug(6): (svc/in_out_http:9/http): Attribute changed; attribute='request_url', newvalue=''http://www.balabit.hu/'' Mar 13 17:43:24 fal zorp/in2out_http[10007]: http.debug(6): (svc/in_out_http:9/http): Reprocessing filtered request; Mar 13 17:43:24 fal zorp/in2out_http[10007]: http.accounting(4): (svc/in_out_http:9/http): Accounting; command='GET', url='http://www.balabit.hu/' Mar 13 17:43:24 fal zorp/in2out_http[10007]: http.debug(6): (svc/in_out_http:9/http): Sending request and headers, copying request data; Mar 13 17:43:24 fal zorp/in2out_http[10007]: core.debug(6): (svc/in_out_http:9/http): Attribute fetched; attribute='server_local_tos', value='0' Mar 13 17:43:24 fal zorp/in2out_http[10007]: core.debug(6): (svc/in_out_http:9/http): Established connection; protocol='1', remote='AF_INET(217.20.130.97:80)', local='AF_INET(193.6.29.253:54202)', dest='AF_INET(217.20.130.97:80)' Mar 13 17:43:24 fal zorp/in2out_http[10007]: core.session(3): (svc/in_out_http:9/http): Server connection established; server_fd='23', server_address='AF_INET(217.20.130.97:80)', server_zone='Zone(out, 0.0.0.0/0)', server_local='AF_INET(193.6.29.253:54202)', server_protocol='TCP' Mar 13 17:43:24 fal zorp/in2out_http[10007]: core.debug(6): (svc/in_out_http:9/http): Attribute fetched; attribute='request_method', value=''GET'' Mar 13 17:43:24 fal zorp/in2out_http[10007]: http.debug(6): (svc/in_out_http:9/http): Stacked proxy accepted data; Mar 13 17:43:24 fal zorp/in2out_http[10007]: http.debug(6): (svc/in_out_http:9/http): Fetching response and headers; Mar 13 17:43:24 fal zorp/in2out_http[10007]: http.debug(6): (svc/in_out_http:9/http): Processing response and headers; Mar 13 17:43:24 fal zorp/in2out_http[10007]: http.debug(6): (svc/in_out_http:9/http): Filtering response and headers; Mar 13 17:43:24 fal zorp/in2out_http[10007]: http.debug(6): (svc/in_out_http:9/http): Copying response and headers, copying response data; Mar 13 17:43:24 fal zorp/in2out_http[10007]: core.debug(6): (svc/in_out_http:9/http): Attribute fetched; attribute='request_method', value=''GET'' Mar 13 17:43:24 fal zorp/in2out_http[10007]: http.debug(6): (svc/in_out_http:9/http): Stacked proxy accepted data; Mar 13 17:43:24 fal zorp/in2out_http[10007]: http.debug(6): (svc/in_out_http:9/http): Fetching request and headers; Mar 13 17:43:24 fal zorp/in2out_http[10007]: http.request(6): (svc/in_out_http:9/http): Request details; command='GET', url='/favicon.ico', version='HTTP/1.1' Mar 13 17:43:24 fal zorp/in2out_http[10007]: http.debug(6): (svc/in_out_http:9/http): processing request and headers; Mar 13 17:43:24 fal zorp/in2out_http[10007]: http.debug(6): (svc/in_out_http:9/http): Filtering request and headers; Mar 13 17:43:24 fal zorp/in2out_http[10007]: core.debug(6): (svc/in_out_http:9/http): Attribute changed; attribute='request_url', newvalue=''http://www.balabit.hu/'' Mar 13 17:43:24 fal zorp/in2out_http[10007]: http.debug(6): (svc/in_out_http:9/http): Reprocessing filtered request; Mar 13 17:43:24 fal zorp/in2out_http[10007]: http.accounting(4): (svc/in_out_http:9/http): Accounting; command='GET', url='http://www.balabit.hu/' Mar 13 17:43:24 fal zorp/in2out_http[10007]: http.debug(6): (svc/in_out_http:9/http): Sending request and headers, copying request data; Mar 13 17:43:24 fal zorp/in2out_http[10007]: core.debug(6): (svc/in_out_http:9/http): Attribute fetched; attribute='request_method', value=''GET'' Mar 13 17:43:24 fal zorp/in2out_http[10007]: http.debug(6): (svc/in_out_http:9/http): Stacked proxy accepted data; Mar 13 17:43:24 fal zorp/in2out_http[10007]: http.debug(6): (svc/in_out_http:9/http): Fetching response and headers; Mar 13 17:43:24 fal zorp/in2out_http[10007]: http.debug(6): (svc/in_out_http:9/http): Processing response and headers; Mar 13 17:43:24 fal zorp/in2out_http[10007]: http.debug(6): (svc/in_out_http:9/http): Filtering response and headers; Mar 13 17:43:24 fal zorp/in2out_http[10007]: http.debug(6): (svc/in_out_http:9/http): Copying response and headers, copying response data; Mar 13 17:43:24 fal zorp/in2out_http[10007]: core.debug(6): (svc/in_out_http:9/http): Attribute fetched; attribute='request_method', value=''GET'' Mar 13 17:43:24 fal zorp/in2out_http[10007]: http.debug(6): (svc/in_out_http:9/http): Stacked proxy accepted data; Mar 13 17:43:24 fal zorp/in2out_http[10007]: http.debug(6): (svc/in_out_http:9/http): Fetching request and headers; (latrhato, hogy a 217.20.130.97 iphez kapcsolodik) ------------------------------------------------ 6-os loglevelen cliens http://www.mta.hu-t keri: Mar 13 17:49:03 fal rsyslogd-2177: imuxsock lost 530 messages from pid 10007 due to rate-limiting Mar 13 17:49:03 fal zorp/in2out_http[10007]: core.debug(6): (dsp/dispatch:0): Incoming connection; protocol='1', remote='AF_INET(172.16.7.61:39781)', local='AF_INET(195.111.1.69:80)', dest='AF_INET(195.111.1.69:80)' Mar 13 17:49:03 fal zorp/in2out_http[10007]: core.session(5): (svc/in_out_http): Starting service; name='in_out_http' Mar 13 17:49:03 fal zorp/in2out_http[10007]: core.session(3): (svc/in_out_http:79): Starting proxy instance; client_fd='19', client_address='AF_INET(172.16.7.61:39781)', client_zone='Zone(in, 172.16.0.0/16)', client_local='AF_INET(195.111.1.69:80)', client_protocol='TCP' Mar 13 17:49:03 fal zorp/in2out_http[10007]: core.session(5): (svc/in_out_http:79/http): Proxy starting; class='MyHttpProxy', proxy='http' Mar 13 17:49:03 fal zorp/in2out_http[10007]: core.debug(6): (svc/in_out_http:79/http): thread starting; Mar 13 17:49:03 fal zorp/in2out_http[10007]: core.debug(6): (svc/in_out_http:79/http): Attribute changed; attribute='language', newvalue=''en'' Mar 13 17:49:03 fal zorp/in2out_http[10007]: core.debug(6): (svc/in_out_http:79/http): Attribute fetched; attribute='ssl', value='ZPolicyStruct object type Shared' Mar 13 17:49:03 zorp/in2out_http[10007]: last message repeated 7 times Mar 13 17:49:03 fal zorp/in2out_http[10007]: core.debug(6): (svc/in_out_http:79/http): Attribute fetched; attribute='request', value='<Zorp hash object at 0x7f216a486ad0>' Mar 13 17:49:03 zorp/in2out_http[10007]: last message repeated 3 times Mar 13 17:49:03 fal zorp/in2out_http[10007]: core.debug(6): (svc/in_out_http:79/http): Attribute fetched; attribute='ssl', value='ZPolicyStruct object type Shared' Mar 13 17:49:03 zorp/in2out_http[10007]: last message repeated 2 times Mar 13 17:49:03 fal zorp/in2out_http[10007]: http.debug(6): (svc/in_out_http:79/http): Fetching request and headers; Mar 13 17:49:03 fal zorp/in2out_http[10007]: http.request(6): (svc/in_out_http:79/http): Request details; command='GET', url='/', version='HTTP/1.1' Mar 13 17:49:03 fal zorp/in2out_http[10007]: http.debug(6): (svc/in_out_http:79/http): processing request and headers; Mar 13 17:49:03 fal zorp/in2out_http[10007]: http.debug(6): (svc/in_out_http:79/http): Filtering request and headers; Mar 13 17:49:03 fal zorp/in2out_http[10007]: core.debug(6): (svc/in_out_http:79/http): Attribute changed; attribute='request_url', newvalue=''http://www.balabit.hu/'' Mar 13 17:49:03 fal zorp/in2out_http[10007]: http.debug(6): (svc/in_out_http:79/http): Reprocessing filtered request; Mar 13 17:49:03 fal zorp/in2out_http[10007]: http.accounting(4): (svc/in_out_http:79/http): Accounting; command='GET', url='http://www.balabit.hu/' Mar 13 17:49:03 fal zorp/in2out_http[10007]: http.debug(6): (svc/in_out_http:79/http): Sending request and headers, copying request data; Mar 13 17:49:03 fal zorp/in2out_http[10007]: core.debug(6): (svc/in_out_http:79/http): Attribute fetched; attribute='server_local_tos', value='0' Mar 13 17:49:03 fal zorp/in2out_http[10007]: core.debug(6): (dsp/dispatch:0): Incoming connection; protocol='1', remote='AF_INET(172.16.7.61:39782)', local='AF_INET(195.111.1.69:80)', dest='AF_INET(195.111.1.69:80)' Mar 13 17:49:03 fal zorp/in2out_http[10007]: core.session(5): (svc/in_out_http): Starting service; name='in_out_http' Mar 13 17:49:03 fal zorp/in2out_http[10007]: core.session(3): (svc/in_out_http:80): Starting proxy instance; client_fd='22', client_address='AF_INET(172.16.7.61:39782)', client_zone='Zone(in, 172.16.0.0/16)', client_local='AF_INET(195.111.1.69:80)', client_protocol='TCP' Mar 13 17:49:03 fal zorp/in2out_http[10007]: core.session(5): (svc/in_out_http:80/http): Proxy starting; class='MyHttpProxy', proxy='http' Mar 13 17:49:03 fal zorp/in2out_http[10007]: core.debug(6): (svc/in_out_http:80/http): thread starting; Mar 13 17:49:03 fal zorp/in2out_http[10007]: core.debug(6): (svc/in_out_http:80/http): Attribute changed; attribute='language', newvalue=''en'' Mar 13 17:49:03 fal zorp/in2out_http[10007]: core.debug(6): (svc/in_out_http:80/http): Attribute fetched; attribute='ssl', value='ZPolicyStruct object type Shared' Mar 13 17:49:03 zorp/in2out_http[10007]: last message repeated 7 times Mar 13 17:49:03 fal zorp/in2out_http[10007]: core.debug(6): (svc/in_out_http:80/http): Attribute fetched; attribute='request', value='<Zorp hash object at 0x7f216a486968>' Mar 13 17:49:03 zorp/in2out_http[10007]: last message repeated 3 times Mar 13 17:49:03 fal zorp/in2out_http[10007]: core.debug(6): (svc/in_out_http:80/http): Attribute fetched; attribute='ssl', value='ZPolicyStruct object type Shared' Mar 13 17:49:03 zorp/in2out_http[10007]: last message repeated 2 times Mar 13 17:49:03 fal zorp/in2out_http[10007]: http.debug(6): (svc/in_out_http:80/http): Fetching request and headers; Mar 13 17:49:03 fal zorp/in2out_http[10007]: core.debug(6): (svc/in_out_http:79/http): Established connection; protocol='1', remote='AF_INET(195.111.1.69:80)', local='AF_INET(193.6.29.253:36376)', dest='AF_INET(195.111.1.69:80)' Mar 13 17:49:03 fal zorp/in2out_http[10007]: core.session(3): (svc/in_out_http:79/http): Server connection established; server_fd='21', server_address='AF_INET(195.111.1.69:80)', server_zone='Zone(out, 0.0.0.0/0)', server_local='AF_INET(193.6.29.253:36376)', server_protocol='TCP' Mar 13 17:49:03 fal zorp/in2out_http[10007]: core.debug(6): (svc/in_out_http:79/http): Attribute fetched; attribute='request_method', value=''GET'' Mar 13 17:49:03 fal zorp/in2out_http[10007]: http.debug(6): (svc/in_out_http:79/http): Stacked proxy accepted data; Mar 13 17:49:03 fal zorp/in2out_http[10007]: http.debug(6): (svc/in_out_http:79/http): Fetching response and headers; Mar 13 17:49:03 fal zorp/in2out_http[10007]: http.debug(6): (svc/in_out_http:79/http): Processing response and headers; Mar 13 17:49:03 fal zorp/in2out_http[10007]: http.debug(6): (svc/in_out_http:79/http): Filtering response and headers; Mar 13 17:49:03 fal zorp/in2out_http[10007]: http.debug(6): (svc/in_out_http:79/http): Copying response and headers, copying response data; Mar 13 17:49:03 fal zorp/in2out_http[10007]: core.debug(6): (svc/in_out_http:79/http): Attribute fetched; attribute='request_method', value=''GET'' Mar 13 17:49:03 fal zorp/in2out_http[10007]: http.debug(6): (svc/in_out_http:79/http): Stacked proxy accepted data; Mar 13 17:49:03 fal zorp/in2out_http[10007]: http.debug(6): (svc/in_out_http:79/http): Fetching request and headers; Mar 13 17:49:03 fal zorp/in2out_http[10007]: core.debug(6): (dsp/dispatch:0): Incoming connection; protocol='1', remote='AF_INET(172.16.7.61:33196)', local='AF_INET(85.236.55.39:80)', dest='AF_INET(85.236.55.39:80)' Mar 13 17:49:03 fal zorp/in2out_http[10007]: core.session(5): (svc/in_out_http): Starting service; name='in_out_http' Mar 13 17:49:03 fal zorp/in2out_http[10007]: core.session(3): (svc/in_out_http:81): Starting proxy instance; client_fd='24', client_address='AF_INET(172.16.7.61:33196)', client_zone='Zone(in, 172.16.0.0/16)', client_local='AF_INET(85.236.55.39:80)', client_protocol='TCP' Mar 13 17:49:03 fal zorp/in2out_http[10007]: core.session(5): (svc/in_out_http:81/http): Proxy starting; class='MyHttpProxy', proxy='http' Mar 13 17:49:03 fal zorp/in2out_http[10007]: core.debug(6): (svc/in_out_http:81/http): thread starting; Mar 13 17:49:03 fal zorp/in2out_http[10007]: core.debug(6): (dsp/dispatch:0): Incoming connection; protocol='1', remote='AF_INET(172.16.7.61:33197)', local='AF_INET(85.236.55.39:80)', dest='AF_INET(85.236.55.39:80)' Mar 13 17:49:03 fal zorp/in2out_http[10007]: core.session(5): (svc/in_out_http): Starting service; name='in_out_http' Mar 13 17:49:03 fal zorp/in2out_http[10007]: core.session(3): (svc/in_out_http:82): Starting proxy instance; client_fd='25', client_address='AF_INET(172.16.7.61:33197)', client_zone='Zone(in, 172.16.0.0/16)', client_local='AF_INET(85.236.55.39:80)', client_protocol='TCP' Mar 13 17:49:03 fal zorp/in2out_http[10007]: core.session(5): (svc/in_out_http:82/http): Proxy starting; class='MyHttpProxy', proxy='http' Mar 13 17:49:03 fal zorp/in2out_http[10007]: core.debug(6): (svc/in_out_http:81/http): Attribute changed; attribute='language', newvalue=''en'' Mar 13 17:49:03 fal zorp/in2out_http[10007]: core.debug(6): (svc/in_out_http:81/http): Attribute fetched; attribute='ssl', value='ZPolicyStruct object type Shared' Mar 13 17:49:03 zorp/in2out_http[10007]: last message repeated 7 times Mar 13 17:49:03 fal zorp/in2out_http[10007]: core.debug(6): (svc/in_out_http:81/http): Attribute fetched; attribute='request', value='<Zorp hash object at 0x7f216a486aa8>' Mar 13 17:49:03 zorp/in2out_http[10007]: last message repeated 3 times Mar 13 17:49:03 fal zorp/in2out_http[10007]: core.debug(6): (svc/in_out_http:81/http): Attribute fetched; attribute='ssl', value='ZPolicyStruct object type Shared' Mar 13 17:49:03 zorp/in2out_http[10007]: last message repeated 2 times Mar 13 17:49:03 fal zorp/in2out_http[10007]: http.debug(6): (svc/in_out_http:81/http): Fetching request and headers; Mar 13 17:49:03 fal zorp/in2out_http[10007]: http.request(6): (svc/in_out_http:81/http): Request details; command='GET', url='/', version='HTTP/1.1' Mar 13 17:49:03 fal zorp/in2out_http[10007]: http.debug(6): (svc/in_out_http:81/http): processing request and headers; Mar 13 17:49:03 fal zorp/in2out_http[10007]: http.debug(6): (svc/in_out_http:81/http): Filtering request and headers; Mar 13 17:49:03 fal zorp/in2out_http[10007]: core.debug(6): (svc/in_out_http:82/http): thread starting; Mar 13 17:49:03 fal zorp/in2out_http[10007]: core.debug(6): (svc/in_out_http:81/http): Attribute changed; attribute='request_url', newvalue=''http://www.balabit.hu/'' Mar 13 17:49:03 fal zorp/in2out_http[10007]: http.debug(6): (svc/in_out_http:81/http): Reprocessing filtered request; Mar 13 17:49:03 fal zorp/in2out_http[10007]: http.accounting(4): (svc/in_out_http:81/http): Accounting; command='GET', url='http://www.balabit.hu/' Mar 13 17:49:03 fal zorp/in2out_http[10007]: http.debug(6): (svc/in_out_http:81/http): Sending request and headers, copying request data; Mar 13 17:49:03 fal zorp/in2out_http[10007]: core.debug(6): (svc/in_out_http:82/http): Attribute changed; attribute='language', newvalue=''en'' Mar 13 17:49:03 fal zorp/in2out_http[10007]: core.debug(6): (svc/in_out_http:82/http): Attribute fetched; attribute='ssl', value='ZPolicyStruct object type Shared' Mar 13 17:49:03 zorp/in2out_http[10007]: last message repeated 7 times Mar 13 17:49:03 fal zorp/in2out_http[10007]: core.debug(6): (svc/in_out_http:82/http): Attribute fetched; attribute='request', value='<Zorp hash object at 0x7f216a486fa8>' Mar 13 17:49:03 zorp/in2out_http[10007]: last message repeated 3 times Mar 13 17:49:03 fal zorp/in2out_http[10007]: core.debug(6): (svc/in_out_http:82/http): Attribute fetched; attribute='ssl', value='ZPolicyStruct object type Shared' Mar 13 17:49:03 zorp/in2out_http[10007]: last message repeated 2 times Mar 13 17:49:03 fal zorp/in2out_http[10007]: core.debug(6): (svc/in_out_http:81/http): Attribute fetched; attribute='server_local_tos', value='0' Mar 13 17:49:03 fal zorp/in2out_http[10007]: http.debug(6): (svc/in_out_http:82/http): Fetching request and headers; Mar 13 17:49:03 fal zorp/in2out_http[10007]: core.debug(6): (svc/in_out_http:81/http): Established connection; protocol='1', remote='AF_INET(85.236.55.39:80)', local='AF_INET(193.6.29.253:53942)', dest='AF_INET(85.236.55.39:80)' Mar 13 17:49:03 fal zorp/in2out_http[10007]: core.session(3): (svc/in_out_http:81/http): Server connection established; server_fd='28', server_address='AF_INET(85.236.55.39:80)', server_zone='Zone(out, 0.0.0.0/0)', server_local='AF_INET(193.6.29.253:53942)', server_protocol='TCP' Mar 13 17:49:03 fal zorp/in2out_http[10007]: core.debug(6): (svc/in_out_http:81/http): Attribute fetched; attribute='request_method', value=''GET'' Mar 13 17:49:03 fal zorp/in2out_http[10007]: http.debug(6): (svc/in_out_http:81/http): Stacked proxy accepted data; Mar 13 17:49:03 fal zorp/in2out_http[10007]: http.debug(6): (svc/in_out_http:81/http): Fetching response and headers; Mar 13 17:49:03 fal zorp/in2out_http[10007]: http.debug(6): (svc/in_out_http:81/http): Processing response and headers; Mar 13 17:49:03 fal zorp/in2out_http[10007]: http.debug(6): (svc/in_out_http:81/http): Filtering response and headers; Mar 13 17:49:03 fal zorp/in2out_http[10007]: http.debug(6): (svc/in_out_http:81/http): Copying response and headers, copying response data; Mar 13 17:49:03 fal zorp/in2out_http[10007]: core.debug(6): (svc/in_out_http:81/http): Attribute fetched; attribute='request_method', value=''GET'' Mar 13 17:49:03 fal zorp/in2out_http[10007]: http.debug(6): (svc/in_out_http:81/http): Stacked proxy accepted data; Mar 13 17:49:03 fal zorp/in2out_http[10007]: http.debug(6): (svc/in_out_http:81/http): Fetching request and headers; Mar 13 17:49:04 fal zorp/in2out_http[10007]: core.debug(6): (dsp/dispatch:0): Incoming connection; protocol='1', remote='AF_INET(172.16.7.61:33198)', local='AF_INET(85.236.55.39:80)', dest='AF_INET(85.236.55.39:80)' Mar 13 17:49:04 fal zorp/in2out_http[10007]: core.session(5): (svc/in_out_http): Starting service; name='in_out_http' Mar 13 17:49:04 fal zorp/in2out_http[10007]: core.session(3): (svc/in_out_http:83): Starting proxy instance; client_fd='29', client_address='AF_INET(172.16.7.61:33198)', client_zone='Zone(in, 172.16.0.0/16)', client_local='AF_INET(85.236.55.39:80)', client_protocol='TCP' Mar 13 17:49:04 fal zorp/in2out_http[10007]: core.session(5): (svc/in_out_http:83/http): Proxy starting; class='MyHttpProxy', proxy='http' Mar 13 17:49:04 fal zorp/in2out_http[10007]: core.debug(6): (dsp/dispatch:0): Incoming connection; protocol='1', remote='AF_INET(172.16.7.61:33199)', local='AF_INET(85.236.55.39:80)', dest='AF_INET(85.236.55.39:80)' Mar 13 17:49:04 fal zorp/in2out_http[10007]: core.debug(6): (svc/in_out_http:83/http): thread starting; Mar 13 17:49:04 fal zorp/in2out_http[10007]: core.session(5): (svc/in_out_http): Starting service; name='in_out_http' Mar 13 17:49:04 fal zorp/in2out_http[10007]: core.session(3): (svc/in_out_http:84): Starting proxy instance; client_fd='30', client_address='AF_INET(172.16.7.61:33199)', client_zone='Zone(in, 172.16.0.0/16)', client_local='AF_INET(85.236.55.39:80)', client_protocol='TCP' Mar 13 17:49:04 fal zorp/in2out_http[10007]: core.session(5): (svc/in_out_http:84/http): Proxy starting; class='MyHttpProxy', proxy='http' Mar 13 17:49:04 fal zorp/in2out_http[10007]: core.debug(6): (svc/in_out_http:84/http): thread starting; Mar 13 17:49:04 fal zorp/in2out_http[10007]: core.debug(6): (svc/in_out_http:83/http): Attribute changed; attribute='language', newvalue=''en'' Mar 13 17:49:04 fal zorp/in2out_http[10007]: core.debug(6): (svc/in_out_http:83/http): Attribute fetched; attribute='ssl', value='ZPolicyStruct object type Shared' Mar 13 17:49:04 zorp/in2out_http[10007]: last message repeated 7 times Mar 13 17:49:04 fal zorp/in2out_http[10007]: core.debug(6): (svc/in_out_http:83/http): Attribute fetched; attribute='request', value='<Zorp hash object at 0x7f216a486f58>' Mar 13 17:49:04 zorp/in2out_http[10007]: last message repeated 3 times Mar 13 17:49:04 fal zorp/in2out_http[10007]: core.debug(6): (svc/in_out_http:83/http): Attribute fetched; attribute='ssl', value='ZPolicyStruct object type Shared' Mar 13 17:49:04 zorp/in2out_http[10007]: last message repeated 2 times Mar 13 17:49:04 fal zorp/in2out_http[10007]: core.debug(6): (svc/in_out_http:84/http): Attribute changed; attribute='language', newvalue=''en'' Mar 13 17:49:04 fal zorp/in2out_http[10007]: core.debug(6): (svc/in_out_http:84/http): Attribute fetched; attribute='ssl', value='ZPolicyStruct object type Shared' Mar 13 17:49:04 zorp/in2out_http[10007]: last message repeated 7 times Mar 13 17:49:04 fal zorp/in2out_http[10007]: core.debug(6): (svc/in_out_http:84/http): Attribute fetched; attribute='request', value='<Zorp hash object at 0x7f216a411490>' Mar 13 17:49:04 zorp/in2out_http[10007]: last message repeated 3 times Mar 13 17:49:04 fal zorp/in2out_http[10007]: core.debug(6): (svc/in_out_http:84/http): Attribute fetched; attribute='ssl', value='ZPolicyStruct object type Shared' Mar 13 17:49:04 zorp/in2out_http[10007]: last message repeated 2 times Mar 13 17:49:04 fal zorp/in2out_http[10007]: http.debug(6): (svc/in_out_http:83/http): Fetching request and headers; Mar 13 17:49:04 fal zorp/in2out_http[10007]: http.debug(6): (svc/in_out_http:84/http): Fetching request and headers; Mar 13 17:49:04 fal zorp/in2out_http[10007]: http.request(6): (svc/in_out_http:83/http): Request details; command='GET', url='/hu/', version='HTTP/1.1' Mar 13 17:49:04 fal zorp/in2out_http[10007]: http.debug(6): (svc/in_out_http:83/http): processing request and headers; Mar 13 17:49:04 fal zorp/in2out_http[10007]: http.debug(6): (svc/in_out_http:83/http): Filtering request and headers; Mar 13 17:49:04 fal zorp/in2out_http[10007]: core.debug(6): (svc/in_out_http:83/http): Attribute changed; attribute='request_url', newvalue=''http://www.balabit.hu/'' Mar 13 17:49:04 fal zorp/in2out_http[10007]: http.debug(6): (svc/in_out_http:83/http): Reprocessing filtered request; Mar 13 17:49:04 fal zorp/in2out_http[10007]: http.accounting(4): (svc/in_out_http:83/http): Accounting; command='GET', url='http://www.balabit.hu/' Mar 13 17:49:04 fal zorp/in2out_http[10007]: http.debug(6): (svc/in_out_http:83/http): Sending request and headers, copying request data; Mar 13 17:49:04 fal zorp/in2out_http[10007]: core.debug(6): (svc/in_out_http:83/http): Attribute fetched; attribute='server_local_tos', value='0' Mar 13 17:49:04 fal zorp/in2out_http[10007]: core.debug(6): (svc/in_out_http:83/http): Established connection; protocol='1', remote='AF_INET(85.236.55.39:80)', local='AF_INET(193.6.29.253:53943)', dest='AF_INET(85.236.55.39:80)' Mar 13 17:49:04 fal zorp/in2out_http[10007]: core.session(3): (svc/in_out_http:83/http): Server connection established; server_fd='33', server_address='AF_INET(85.236.55.39:80)', server_zone='Zone(out, 0.0.0.0/0)', server_local='AF_INET(193.6.29.253:53943)', server_protocol='TCP' Mar 13 17:49:04 fal zorp/in2out_http[10007]: core.debug(6): (svc/in_out_http:83/http): Attribute fetched; attribute='request_method', value=''GET'' Mar 13 17:49:04 fal zorp/in2out_http[10007]: http.debug(6): (svc/in_out_http:83/http): Stacked proxy accepted data; Mar 13 17:49:04 fal zorp/in2out_http[10007]: http.debug(6): (svc/in_out_http:83/http): Fetching response and headers; Mar 13 17:49:04 fal zorp/in2out_http[10007]: http.debug(6): (svc/in_out_http:83/http): Processing response and headers; Mar 13 17:49:04 fal zorp/in2out_http[10007]: http.debug(6): (svc/in_out_http:83/http): Filtering response and headers; Mar 13 17:49:04 fal zorp/in2out_http[10007]: http.debug(6): (svc/in_out_http:83/http): Copying response and headers, copying response data; Mar 13 17:49:04 fal zorp/in2out_http[10007]: core.debug(6): (svc/in_out_http:83/http): Attribute fetched; attribute='request_method', value=''GET'' Mar 13 17:49:04 fal zorp/in2out_http[10007]: http.debug(6): (svc/in_out_http:83/http): Stacked proxy accepted data; Mar 13 17:49:04 fal zorp/in2out_http[10007]: http.debug(6): (svc/in_out_http:83/http): Fetching request and headers; (www.mta.hu utan a www.balabit.hu-t is lekeri. Azt sem ertem, miert kell a www.mta.hu oldalt lekernie??)

5 10

Apt repo
by Tamas Barina 06 Mar '12

06 Mar '12

Sziasztok, Van v.mi hir? Tamas Barina

2 1

zorpGPL apt
by Tamas Barina 28 Feb '12

28 Feb '12

" Viszont, hogy jo hir is legyen, ha egy kesobbi verzioban javitva lett, es az arra valo upgrade is megoldhato, tervbe van veve, hogy a nagyon kozel jovoben (ertsd: a heten) elerhetove kerul egy olyan apt-getelheto zorp repo, amiben a legfrissebb Zorp GPL van. Tobbek kozt Squeeze-re is forgatva." Ezt ertsem, ugy hogy Ubuntu 10.04-re is lesz 3.9.x verzio deb csomag? :) Tamas Barina

2 6

zorp 3.3.6 memory leak
by Mark Szabo 28 Feb '12

28 Feb '12

sziasztok, a kovetkezo verziokat hasznalom, debian squeeze -n csomagbol telepitve. 64 bites kernel/userland Zorp 3.3.6 Revision: ssh+git://sasa@git.balabit //var/scm/git/zorp/zorp-core--mainline--3.3#master#6edb5a74eba572a6ffd442b5a9760c3c3ac7907e Compile-Date: Nov 11 2010 14:43:34 libzorpll 3.3.0.12 Revision: ssh+git://hidden@git.balabit //var/scm/git/zorp/libzorpll--mainline--3.3#master#ac32b2a0ec71fbb94690d959fedb55217d8c5ec5 Compile-Date: Jun 20 2010 22:42:59 a tapasztalat az, hogy egyre tobb memoriat eszik a zorp instance. az elmult 5 napban peldaul igy alakult: PID USER PR NI VIRT RES SHR S %CPU %MEM TIME+ COMMAND 27250 zorp 20 0 247m 41m 3896 S 0 1.0 0:01.83 zorp 27250 zorp 20 0 334m 113m 3896 S 0 2.8 0:06.60 zorp 27250 zorp 20 0 443m 209m 3896 S 0 5.1 0:11.89 zorp 27250 zorp 20 0 576m 291m 3896 S 0 7.1 0:18.71 zorp 27250 zorp 20 0 695m 393m 3896 S 0 9.6 0:26.66 zorp es sajnos ez igy megy tovabb mig az oom killer el nem intezni nehany het mulva. a kerdesem az, hogy ismert hibarol van-e szo? elkepzelheto, hogy javitva lesz a squeeze csomagban? Üdv, Márk

2 1

HTTPS no local cert?
by Tamas Barina 27 Feb '12

27 Feb '12

Sziasztok, Probaltam beallitani a Zorpot, hogy a HTTPS ne lokalisan megadott cert-et hasznalja. (A szerver mogotte SNI-t hasznal.) Zorp 3.3.6 + Ubuntu 10.04 Jol olvasom a dokumentacioban, hogy erre csak a 3.9 kepes? Tamas Barina

3 4

Zorp a közösségi oldalakon
by Szilárd Pfeiffer 13 Jan '12

13 Jan '12

Kedves Listatagok! A Zorp GPL immár közösségi oldalakon is nyomon követhető. http://www.linkedin.com/groups/Zorp-GPL-4166962 http://www.facebook.com/pages/Zorp-GPL/239692256091025 http://twitter.com/#!/ZorpGPL Üdvözlettel, a Zorp csapat

1 0

Zorp előadás videó (Szabad Szoftver Konferencia)
by Szilárd Pfeiffer 09 Jan '12

09 Jan '12

Megjelentek a budapesti Szabad Szoftver Konferencia videói, köztük a 'Zorp, a pokoli operátor tűzfala' címet viselő előadásé is. Ez utóbbi a következő címen érhető el: http://www.youtube.com/watch?v=nvYOCbbKz1Q&list=PLC6C3C620DAD29734 A konferencia összes videójának listája a pedig az alá: http://www.youtube.com/playlist?list=PLC6C3C620DAD29734 Üdvözlettel, a Zorp csapat

1 0

Zorp start fail
by Kálmánczi Sándor 09 Jan '12

09 Jan '12

Üdvözlet! Új vagyok itt, kérem szóljatok, ha elrontok valamit. Azzal fordulnék a levelezőlistához, hogy a ZORP GPL inditásakor így járok: Restarting Zorp Firewall Suite: AttributeError: 'module' object has no attribute 'deinit' AttributeError: 'module' object has no attribute 'purge' zorp_instance! AttributeError: 'module' object has no attribute 'deinit' AttributeError: 'module' object has no attribute 'purge' audit_instance! AttributeError: 'module' object has no attribute 'deinit' AttributeError: 'module' object has no attribute 'purge' stack_instance! The following errors occurred so far: Zorp instance startup failed, instance='zorp_instance', rc='512' Zorp instance startup failed, instance='audit_instance', rc='512' Zorp instance startup failed, instance='stack_instance', rc='512' Az alábbi konfigurációval rendelkezem: uname -a Linux zorp0 2.6.32 #8 SMP Thu Aug 4 13:28:04 CEST 2011 x86_64 GNU/Linux cat /etc/debian_version 6.0.3 ii iptables 1.4.8-3zorp1 administration tools for packet filtering and NAT ii iptables-dev 1.4.8-3zorp1 iptables development files ii libzorp-dev 3.9.2-3 Development files needed to compile Zorp modules ii libzorp3.9-0 3.9.2-3 Runtime library of Zorp ii libzorpll-dev 3.9.1.0-6 Zorp low-level functions - development files ii libzorpll3.9-1 3.9.1.0-6 Zorp low-level functions ii libzorpll3.9-1-dbg 3.9.1.0-6 Zorp low-level functions - debugging version ii libzorpll3.9-1-memtrace 3.9.1.0-6 Zorp low-level functions - memory debugging version ii linux-firmware-image kzorp.1.2 Linux kernel firmware, version 2.6.32 ii linux-image-2.6.32 kzorp.1.2 Linux kernel, version 2.6.32 ii python-kzorp 3.9.2-3 Python bindings for kzorp. ii zorp 3.9.2-3 Advanced protocol analyzing firewall ii zorp-dbg 3.9.2-3 Advanced protocol analyzing firewall ii zorp-modules 3.9.2-3 Default proxy modules for Zorp ii zorp-modules-dbg 3.9.2-3 Default proxy modules for Zorp ii libpython2.6 2.6.6-8+b1 Shared Python runtime library (version 2.6) ii python 2.6.6-3+squeeze6 interactive high-level object-oriented language (default version) ii python-central 0.6.16+nmu1 register and build utility for Python packages ii python-dev 2.6.6-3+squeeze6 header files and a static library for Python (default) ii python-dns 2.3.4-4 DNS client module for Python ii python-kzorp 3.9.2-3 Python bindings for kzorp. ii python-minimal 2.6.6-3+squeeze6 minimal subset of the Python language (default version) ii python-openssl 0.10-1 Python wrapper around the OpenSSL library ii python-support 1.0.10 automated rebuilding support for Python modules ii python2.6 2.6.6-8+b1 An interactive high-level object-oriented language (version 2.6) ii python2.6-dev 2.6.6-8+b1 Header files and a static library for Python (v2.6) ii python2.6-minimal 2.6.6-8+b1 A minimal subset of the Python language (version 2.6) A betölteni kíván configm, hogy nehogy én rontsak el valamit a http://people.balabit.hu/szilard/zorp-gpl/virtual-machines/ címen lévő "Firewall" config. Köszönöm! Tisztelettel: Cs B.U.É.K.

2 2

Zorp 3.3
by Erik Molnar 01 Sep '11

01 Sep '11

Sziasztok! A Zorp 3.3 admin dokumentáció alapján lehetőség van arra, hogy Traffic reportot generáltatni. Ezt a Zorpon vagy a ZMS - n kell állitani? A dokumentációban jelzett mappában nem találom a konfigurációs fájlt. Honnan lehet előkeriteni? Előre is köszönöm a segitségeteket. Molnár Erik

3 2