Pass List and Categories not working in Lite

[ronsolve]

Hi,
Really strange behavior in Web Filter Lite. I am trying to allow zynga.com. I put it in the pass list.
I go to a computer and surf there. On the computer I see that it is blocked as a Gambling site. I go to the Untangle event log and it says "in URLs Pass list" and both blocked and Flagged say false, Uri has a '/' and there is an IP for the server. Doesn't look like the Web Lite is blocking it - but it is.

Okay - so I uncheck gambling on the block list categories. Same behavior.

Okay- so I turn off Web Filter lite - and it passes.

There are NO OTHER setups in Web filter lite. No File Types, Mime Types, Blocked List Edited Sites, etc.

Another strange observation is the rack had two copies of Reports and Attack Blocker. I uninstalled the duplicates and it seems fine.

Can I uninstall Web filter lite and then reinstall it? Would that help? Otherwise I am lost.

Ron

[dmorris]

You had two reports and two attack blockers?
How did you do that?

My guess is that you have two web filters and so the results aren't making much sense.

What is the output of 'ucli instances'

[ronsolve]

Hi Derek,

How did I do that?? Hum? I didn't do anything. Untangle does the install.

I would like to answer you question about Ucli instances, but don't have the foggiest where or what they are. Could you provide directions on how I provide them to you??

Thanks,

Ron

[ronsolve]

Oh - I only "see" one web filter light in the rack and when I stop it - I can go to the desired URL.

Ron

[ronsolve]

Hi,

Well - maybe I figured it out and there does look like there are two instances. This is run with the webfilter stopped:
~ # ucli instances [root @ 173]
22 untangle-node-webfilter INITIALIZED Default Rack
14 untangle-node-webfilter RUNNING Default Rack
15 untangle-node-clam RUNNING Default Rack
3 untangle-node-clam RUNNING Default Rack
13 untangle-node-spyware RUNNING Default Rack
21 untangle-node-spyware RUNNING Default Rack
12 untangle-node-spamassassin RUNNING Default Rack
24 untangle-node-spamassassin RUNNING Default Rack
25 untangle-node-phish RUNNING Default Rack
8 untangle-node-phish RUNNING Default Rack
9 untangle-node-protofilter RUNNING Default Rack
23 untangle-node-protofilter RUNNING Default Rack
6 untangle-node-firewall RUNNING Default Rack
19 untangle-node-ips RUNNING Default Rack
7 untangle-node-ips RUNNING Default Rack
2 untangle-casing-ftp RUNNING Service
16 untangle-casing-http RUNNING Service
4 untangle-casing-http RUNNING Service
5 untangle-casing-mail RUNNING Service
17 untangle-casing-mail RUNNING Service
10 untangle-node-reporting RUNNING Service
26 untangle-node-openvpn INITIALIZED Service
20 untangle-node-shield RUNNING Service
1 untangle-node-router RUNNING Service

Of course, there looks like there are 2 of everything. So here is with the web filter running:

~ # ucli instances [root @ 173]
22 untangle-node-webfilter RUNNING Default Rack
14 untangle-node-webfilter RUNNING Default Rack
15 untangle-node-clam RUNNING Default Rack
3 untangle-node-clam RUNNING Default Rack
13 untangle-node-spyware RUNNING Default Rack
21 untangle-node-spyware RUNNING Default Rack
12 untangle-node-spamassassin RUNNING Default Rack
24 untangle-node-spamassassin RUNNING Default Rack
25 untangle-node-phish RUNNING Default Rack
8 untangle-node-phish RUNNING Default Rack
9 untangle-node-protofilter RUNNING Default Rack
23 untangle-node-protofilter RUNNING Default Rack
6 untangle-node-firewall RUNNING Default Rack
19 untangle-node-ips RUNNING Default Rack
7 untangle-node-ips RUNNING Default Rack
2 untangle-casing-ftp RUNNING Service
16 untangle-casing-http RUNNING Service
4 untangle-casing-http RUNNING Service
5 untangle-casing-mail RUNNING Service
17 untangle-casing-mail RUNNING Service
10 untangle-node-reporting RUNNING Service
26 untangle-node-openvpn INITIALIZED Service
20 untangle-node-shield RUNNING Service
1 untangle-node-router RUNNING Service


Okay - so now what do I do??

Thanks,

Ron

[dmorris]

any idea how it go like this?
you can use "ucli destroy #" to destroy the dupes where # is the node ID.

still, I'd be worried about how it got like this.
At any point did you start installing apps again or do a restore or anything weird?
If you email support@untangle.com with your UID and enable remote support I can look at the logs and try to figure out whats going on.

[ronsolve]

Derek,

I didn't do anything. No restores, nothing. Unix is not my box.

I sent Support what you requested.

Best,

Ron