0006791: Avast antivirus hammers web proxy with loop error

View Revisions: Issue #6791		[ All Revisions ] [ Back to Issue ]
Summary	0006791: Avast antivirus hammers web proxy with loop error

Revision	2016-01-21 08:54 by dloper
Additional Information	Work arounds. To identify workstations running Avast, search the log files for entries of traffic browsing port 8080 that don't originate from the server...for example, if your server was 192.168.1.1: 1453207399.270 120000 192.168.1.96 TCP_MISS/000 0 GET http://192.168.1.1:8080/ [^] - DIRECT/192.168.1.1 - you will see lines like this for the recursives, but you will also se other traffic like this: 1453207399.287 120046 192.168.1.159 TCP_MISS/000 0 GET http://192.168.1.1:8080/ [^] - DIRECT/192.168.1.123 - This also may work: grep "http://192.168.1.1:8080" [^] /var/log/squid/access.log \| grep -v "DIRECT/192.168.1.1 " (Notice the space at the end of the "DIRECT/192.168.1.1 " portion) In this case, 192.168.1.123 is your culprit machine. Your options are to remove Avast from this workstation or to create a custom firewall rule so that it will bypass the proxy (see: https://www.clearos.com/resources/documentation/clearos/content:en_us:kb_o_custom_firewall_module_examples [^])

Revision	2016-01-01 06:26 by user2
Additional Information