Table of Contents
- How to Read the Documentation
- 1. Kernun Product Overview
- 1. Kernun Net Access (KNA)
- 2. Kernun Mail Access (KMA)
- 3. Kernun VPN Access (KVPNA)
- 4. Kernun Office Access (KOA)
- 5. Kernun Web Access (KWA)
- 6. Product Summary
- 2. Kernun Hardware
- 3. Kernun System Management
- 1. Installation Media, Releases, and Builds
- 2. Disk Space Layout
- 3. Licensing
- 4. Boot Manager
- 5. Installation
- 5.1. Standalone Installer
- 5.2. Initial Configuration
- 5.3. Installation from the GUI
- 5.4. Installation from the Command Line
- 6. Backup and Restoring
- 6.1. Backup and Restoring from the GUI
- 6.2. Backup and Restoring from the Command Line
- 6.3. Restoring a Backup in the Standalone Installer
- 7. Upgrade
- 7.1. Upgrade from the GUI
- 7.2. Upgrade from the Command Line
- 8. Audit
- 9. Emergency Repair Environment
- 4. User Interface
- 1. Graphical User Interface
- 1.1. Kernun GUI Launcher
- 1.2. GKAT—Management Console
- 1.3. Logs
- 1.4. GCML — Configuration
- 1.5. Locking
- 2. Command Line Interface
- 2.1. Command Line Interface Details
- 2.2. C3H —
Command Completion and Context Help
- 2.3. KAT — Kernun Admin Tool
- 2.4. CML — Configuration Meta Language
- 3. Administrative Utilities
- 5. Configuration Basics
- 1. Configuration Language
- 2. The Initial Configuration
- 2.1. Global Level
- 2.2. System
- 2.3. SSH Server
- 2.4. Local Mail Handling
- 2.5. Application Proxies and ACLs
- 2.6. DNS Proxy
- 2.7. HTTP Proxy
- 2.8. FTP Proxy
- 2.9. HTTPS and SSH Proxy
- 2.10. SMTP Proxy
- 2.11. IMAP4 and POP3 Proxy
- 3. Changing the Configuration
- 3.1. Adding TCP Proxies
- 6. Advanced features
- 1. Packet Filter
- 1.1. Packet Flow
- 1.2. Packet Filtering
- 1.3. Antispoofing Using Packet Filter
- 1.4. Selective Packet Forwarding
- 1.5. Network Address Translation
- 1.6. Packet Forwarding along with NAT
- 2. System Configuration
- 2.1. User Accounts
- 2.2. Network Interfaces
- 2.3. Static Routes
- 2.4. File
/etc/rc.conf - 2.5. Kernel Parameters in
/etc/sysctl.conf - 2.6. Configuration of the cron Daemon
- 3. Caching Name Server
- 4. DNS and DHCP Services
- 4.1. DNS Server for the Local Zone
- 4.2. DHCP Server for the Local Network
- 5. Time Synchronization with NTP
- 6. Monitoring of Kernun Operation
- 6.1. Logging Configuration
- 6.2. Log Rotation
- 6.3. Monitoring of Active Sessions
- 6.4. Proxy Statistics Generation
- 6.5. Monitoring of System Parameters
- 7. Networking in Proxies
- 7.1. Transparent Proxies
- 7.2. A Proxy and a Server on the Same Port
- 7.3. Listening on a port range
- 8. H.323 Proxies
- 9. SIP Proxy
- 10. SQLNet Proxy
- 11. UDP Proxy
- 12. Cooperation of HTTP and FTP Proxies
- 13. Secure Communication Using SSL/TLS
- 14. User Authentication
- 14.1. Authentication Methods
- 14.2. Authentication in FTP Proxy
- 14.3. Basic Authentication in HTTP Proxy
- 14.4. NTLM Authentication in HTTP Proxy
- 14.5. HTTP Authentication Proxy
- 14.6. Out of Band Authentication
- 15. Antivirus Checking of Data
- 15.1. Connection
- 15.2. Antivirus Results
- 15.3. Antivirus in Proxies
- 15.4. SMTP Proxy: Discarding Infected Mails
- 15.5. SMTP Proxy: Replacing Infected Documents
- 15.6. Antivirus in POP3 and IMAP4 Proxies
- 15.7. Dr.WEB, ClamAV and NOD32 Specifics
- 16. Antispam Processing of E-mail
- 16.1. Antispam Engine
- 16.2. White-, Grey-, and Blacklists
- 17. Content Processing
- 17.1. Content Type Detection
- 17.2. HTML Filtering
- 17.3. MIME Processing
- 18. Filtering HTTP Requests by URI
- 18.1. URL Matching and Rewriting
- 18.2. Blacklists in HTTP Proxy
- 18.3. Kernun Clear Web DataBase
- 18.4. Using External Web Filter
- 19. Intrusion Detection/Prevention System
- 19.1. Update of Rules
- 20. Traffic Shaping
- 21. Virtual Private Networks — OpenVPN
- 21.1. Remote Access Server
- 21.2. Network to Network
- 21.3. Accessing the virtual network
- 21.4. Logs
- 22. Virtual Private Networks — IPsec
- 22.1. IPsec Wizard
- 22.2. IPsec Configuration
- 23. High Availability Clusters
- 24. IPv6
- I. Kernun Firewall Reference (1)
- HtmlMatchPasswd.pm — encapsulates the databases of the HTML form value control
tool html-match-db(1) for storing two couples of
credentials (internal username and password and external username and
password). It also keeps the logs of the actions over the particular
accounts.
- clear-web-db-update.sh — tool for updating the Clear Web DataBase
- clear-web-db — tool for managing the Clear Web DataBase
- diskdb — tool for creating and querying file system content
database
- fwpasswd — create and update password authentication files
- greplog.sh — tool for selecting messages from Kernun logs
- html-match-db — controls databases of HTML form values used by the generic
data matching module
- kernun-audit — checks for bugs and new versions of the Kernun software
- license — tool for checking Kernun license file
- mkblacklist — tool for converting http-proxy blacklists into DB
format
- monitor — report current status of Kernun proxies
- ooba-samba — uses a Samba server to update the
out of band authentication user list
- printblacklist — tool for converting http-proxy blacklists into textual
format
- quarc.sh — mail quarantine control tool
- resolveblacklist — tool for resolving hostnames in http-proxy
blacklists
- rrd — system parameter watching
- sum-avas — print a summary of antivirus and antispam usage
- sum-dns — print a summary of dns-proxy usage
- sum-http — print a summary of the http-proxy usage
- sum-proxy — print a summary of a proxy usage
- sum-smtp — print a summary of the smtp-proxy usage
- switchlog — distribute messages from Kernun log according to message id
and proxy name
- triplicator — SMTP Grey-listing Triplet Database Manipulator
- II. Kernun Firewall Reference (5)
- acl — format of acl component configuration
- altq — format of altq component configuration
- auth — format of auth component configuration
- clear-web-db — format of clear-web-db component configuration
- common — format of common component configuration
- dhcp-server — format of dhcp-server component configuration
- dns-proxy — format of dns-proxy component configuration
- dns-proxy.cfg — format of dns-proxy program configuration file
- ftp-proxy — format of ftp-proxy component configuration
- ftp-proxy.cfg — format of ftp-proxy program configuration file
- gk-proxy — format of gk-proxy component configuration
- gk-proxy.cfg — format of gk-proxy program configuration file
- h323-proxy — format of h323-proxy component configuration
- h323-proxy.cfg — format of h323-proxy program configuration file
- http-proxy — format of http-proxy component configuration
- http-proxy.cfg — format of http-proxy program configuration file
- icap-server — format of icap-server component configuration
- icap-server.cfg — format of icap-server program configuration file
- imap4-proxy — format of imap4-proxy component configuration
- imap4-proxy.cfg — format of imap4-proxy program configuration file
- interface — format of interface component configuration
- ipc — format of ipc component configuration
- ipsec — format of ipsec component configuration
- kernun.cml — format of Kernun configuration file
- ldap — format of ldap component configuration
- listen-on — format of listen-on component configuration
- log — format of log component configuration
- mod-antispam — format of mod-antispam component configuration
- mod-antivirus — format of mod-antivirus component configuration
- mod-html-filter — format of mod-html-filter component configuration
- mod-mail-doc — format of mod-mail-doc component configuration
- mod-match — format of mod-match component configuration
- monitoring — format of monitoring component configuration
- nameserver — format of nameserver component configuration
- netio — format of netio component configuration
- nls — format of nls component configuration
- ntp — format of ntp component configuration
- openvpn — format of openvpn component configuration
- packet-filter — format of packet-filter component configuration
- pfconfd.cfg — format of pfconfd program configuration file
- pop3-proxy — format of pop3-proxy component configuration
- pop3-proxy.cfg — format of pop3-proxy program configuration file
- proxy — format of proxy component configuration
- radius — format of radius component configuration
- resolver — format of resolver component configuration
- sip-proxy — format of sip-proxy component configuration
- sip-proxy.cfg — format of sip-proxy program configuration file
- smtp-proxy — format of smtp-proxy component configuration
- smtp-proxy.cfg — format of smtp-proxy program configuration file
- sqlnet-proxy — format of sqlnet-proxy component configuration
- sqlnet-proxy.cfg — format of sqlnet-proxy program configuration file
- ssl — format of ssl component configuration
- sysctl — format of sysctl component configuration
- system — format of system component configuration
- tcp-proxy — format of tcp-proxy component configuration
- tcp-proxy.cfg — format of tcp-proxy program configuration file
- tcpserver — format of tcpserver component configuration
- test-expr — format of test-expr
command-line arguments
- udp-proxy — format of udp-proxy component configuration
- udp-proxy.cfg — format of udp-proxy program configuration file
- udpserver — format of udpserver component configuration
- III. Kernun Firewall Reference (6)
- ARGS-000 — Application initialisation failed when preparing getopt() system call
- ARGS-001 — Application has improperly started
- ARGS-002 — Application command line arguments array is NULL
- ARGS-010 — Application requested to register an illegal option char
- ARGS-011 — Function initgetopt() failed due to duplicate command-line option
- ARGS-012 — Function initgetopt() failed due to a large option set
- ARGS-013 — Function initgetopt() failed due to a large option set
- ARGS-500 — Command line argument array starts by a NULL pointer (bad program name)
- ARGS-520 — Command-line option used more than once
- ARGS-521 — Application called with an unknown command-line option
- ARGS-522 — Application called with option without proper argument
- ARGS-523 — Option -f specifies too long filename
- ARGS-524 — Options on command line are followed by an extra argument
- ARGS-529 — Terminal message in case of wrong command line parameters
- ASN1-300 — Parser ran out of read buffer
- ASN1-700 — Parser read integer out of allowed range
- ASN1-701 — Parser read integer coding length greater than 4 bytes
- ASN1-702 — Parser read length encoding starting with two ones
- ASN1-720 — Parser read IA5 string character with unknown code
- AUTH-110 — Authorisation handle cannot be allocated
- AUTH-111 — Authorisation password file cannot be opened
- AUTH-112 — Authorisation tool cannot be opened
- AUTH-131 — Authorisation password file read failed
- AUTH-135 — Call to authentication library failed
- AUTH-631 — User not found in authorisation password file
- AUTH-632 — User password does not match to the one in password file
- AUTH-635 — User password/response rejected by authetication tool
- AUTH-731 — Proxy-user name too long
- AUTR-500 — Configuration does not contain RADIUS library settings
- AUTR-501 — RADIUS server host is not correctly specified in configuration file
- AUTR-600 — A call to RADIUS client library returned an error
- AUTR-601 — RADIUS client library initialization failed
- AUTR-602 — A response of unknown type was received from a RADIUS server
- AUTR-603 — A user was rejected by a RADIUS server
- AUTR-604 — A user was accepted by a RADIUS server
- AUTR-605 — A RADIUS server has sent a challenge to a user
- AUTR-606 — A user has respoded to an authentication challenge
- CASE-500 — Obsolete feature used in configuration
- CFGL-020 — Incorrect call of regexpizelist()
- CFGL-031 — Incorrect key is to be searched in list
- CFGL-340 — List extraction function called with insufficient array
- CFGL-500 — Attempt to add item '*' into non-extended list
- CFGL-501 — Too deep sublist nesting
- CFGL-520 — Adding to '*'-list requested
- CFGL-521 — Adding of exclude-member to simple list requested
- CFGL-522 — Overlapping range is to be added to list
- CFGL-523 — Lower and upper bounds are not compatible
- CFGL-524 — Adding of string, regexp or sock range requested
- CFGL-549 — Name-set represents no section
- CFGP-100 — Revoking configuration file from RCS failed
- CFGP-500 — Configuration file is empty
- CFGP-501 — First character of configuration is illegal
- CFGP-531 — Illegal character found
- CFGP-532 — Configuration contains character string
- CFGP-533 — Integer found in configuration is too large
- CFGP-534 — Illegal character found in IP address
- CFGP-535 — Illegal syntax of IP address
- CFGP-544 — Alphanumeric character expected in configuration
- CFGP-545 — Incorrect character escape sequence used in string
- CFGP-546 — String expression not closed
- CFGP-547 — String or regexp exceeded the maximum length
- CFGP-548 — String or regexp not closed
- CFGP-549 — IP address probably not closed
- CFGP-591 — IPv4 address byte value too big
- CFGP-592 — IPv4 address byte empty
- CFGP-593 — Incorrect number of IPv4 address bytes
- CFGP-594 — IPv4 address syntax error
- CFGP-595 — IPv4 mask specification invalid
- CFGP-596 — IPv4 mask specification invalid
- CFGP-599 — IPv6 addresses not supported yet
- CFGR-000 — Section/item parser routine failed
- CFGR-003 — Application version tag misformed
- CFGR-109 — Parser initialisation failed
- CFGR-110 — System error during configuration reading
- CFGR-160 — Item addition to list failed
- CFGR-161 — Value to list conversion failed
- CFGR-162 — Sublist creation failed
- CFGR-500 — Configuration integrity constraints error
- CFGR-501 — Parser started without configuration file
- CFGR-502 — No VERSION statement in configuration
- CFGR-503 — VERSION statement has incorrect argument
- CFGR-504 — VERSION statement has incorrect argument
- CFGR-505 — VERSION statement repeated
- CFGR-511 — Configuration item must be closed by semicolon
- CFGR-512 — Section must begin with left brace
- CFGR-513 — List member must be followed by comma or right brace
- CFGR-514 — Configuration ended incorrectly
- CFGR-515 — Closing brace not found
- CFGR-517 — Item/subsection name expected in configuration
- CFGR-518 — Item/subsection name expected in configuration
- CFGR-519 — Incorrect configuration directive found
- CFGR-520 — Obligatory keyword not found
- CFGR-521 — Integer value expected in configuration
- CFGR-523 — String value expected in configuration
- CFGR-524 — Enumeration value expected in configuration
- CFGR-525 — Hostname/IP address expected in configuration
- CFGR-526 — Hostname/regexp/IP network expected in configuration
- CFGR-527 — Regular expression expected in configuration
- CFGR-528 — Hostname/IP address not followed by a colon
- CFGR-529 — IP address value and type incompatibility
- CFGR-530 — Section reference invalid
- CFGR-531 — Section reference invalid
- CFGR-540 — Element is not optional
- CFGR-542 — Integer value too large
- CFGR-543 — Port/service name invalid
- CFGR-544 — Empty hostname is not allowed
- CFGR-545 — Direct integer value not allowed
- CFGR-546 — Using of hostnames is not allowed
- CFGR-547 — Enumeration keyword invalid
- CFGR-548 — Time value is not in hhmm format
- CFGR-549 — List of values is not allowed
- CFGR-550 — Section defined more than once
- CFGR-551 — Name of repeatable section missing
- CFGR-552 — Name of repeatable section too long
- CFGR-559 — Nonrepeatable item defined more than once
- CFGR-560 — List not closed by regular member
- CFGR-561 — Excluding members not allowed in simple lists
- CFGR-562 — Member ranges not allowed in simple lists
- CFGR-563 — Operator '*' not allowed in simple lists
- CFGR-564 — List member reading failed
- CFGR-566 — Member ranges not allowed
- CFGR-590 — Negative final configuration message
- CFGR-700 — Configuration file has been opened
- CFGR-710 — Configuration hash reader report
- CFGR-790 — Configuration successfully completed
- CKGB-100 — Cannot copy system configuration file prototype to system image
- CKGB-121 — Kernun component configuration generation failed
- CKGB-191 — Cannot create directory
- CKGB-192 — System call failed
- CKGB-331 — Syslog devices over
- CKGB-390 — Filename too long
- CKGB-500 — Kernun configuration file contains no SYSTEM
- CKGB-560 — ALTQ queue set definition incorrect
- CKGB-561 — ALTQ queue set definition incorrect
- CKGB-562 — ALTQ queue set definition incorrect
- CKGB-563 — ALTQ queue set definition incorrect
- CKGB-564 — ALTQ queue set definition incorrect
- CKGB-565 — ALTQ queue set definition incorrect
- CKGB-566 — ALTQ queue set definition incorrect
- CKGB-567 — ALTQ queue set definition incorrect
- CKGB-573 — Proxy probably uses reserved port and will not operate
- CKGB-580 — System resolver nameserver specification invalid
- CKGB-584 — Nameserver zone defined by incorrect address
- CKGB-587 — Socket collision report message
- CKGB-710 — Kernun generation started
- CKGB-711 — Kernun verification started
- CKGB-718 — Kernun verification/generation has failed
- CKGB-719 — Kernun verification/generation has succeeded
- CKGB-790 — Particular system configuration file saved
- CKGB-799 — Particular system configuration file failure
- CMLI-120 — File completion failed
- CMLI-125 — Path to Kernun manual pages invalid
- CMLI-190 — KAT cannot display output to terminal
- CMLI-700 — User interface startup message
- CMLI-709 — User interface closeup message
- CMLI-710 — CML C3H failed
- CMLI-711 — CML C3H failed
- CMLI-712 — CML C3H failed
- CMLI-713 — CML C3H failed
- CMLI-714 — Cannot use C3H for long lines
- CMLI-720 — C3H cannot find filename continuation
- CMLI-725 — Manual page section invalid
- CMLI-775 — Automatic reply in batch mode
- CMLK-101 — Unaccessible diretory
- CMLK-130 — KAT sends signal to proxy/ssh server
- CMLK-140 — KAT cannot determine running processes
- CMLK-149 — KAT component control command failed for some component
- CMLK-156 — Log file line misformed
- CMLK-500 — Current directory information
- CMLK-509 — Current directory change error report
- CMLK-540 — Misformed line found in 'component.lst' file
- CMLK-541 — Unknown component type found in 'component.lst' file
- CMLK-542 — KAT cannot read proxy configuration
- CMLK-609 — Issued command denied in read-only mode
- CMLK-700 — KAT exiting
- CMLK-702 — KAT/CML file name invalid
- CMLK-708 — KAT command option not known
- CMLK-709 — KAT command name not known
- CMLK-710 — Configuration hash report
- CMLK-712 — KAT cannot find continuation
- CMLK-713 — Too many arguments to KAT command
- CMLK-714 — Incorrect selection for KAT operation
- CMLK-715 — KAT command parameter invalid
- CMLK-716 — KAT command parameters invalid
- CMLK-720 — KAT cannot find CML SYSTEM file tree
- CMLK-725 — Configuration RCS version shortcut invalid
- CMLK-731 — KAT KILL command invoked with incorrect signal name/number
- CMLK-732 — KAT KILL command invoked without application name
- CMLK-733 — KAT KILL command invoked with incorrect child specification
- CMLK-740 — KAT detected running application, cannot start new one
- CMLK-742 — Not daemonized proxy cannot be started by KAT
- CMLK-748 — Command can be applied to Kernun proxies only
- CMLK-749 — Component control command failed to finish
- CMLK-755 — No log file matching given criteria exists
- CMLM-621 — Issued command denied in read-only mode
- CMLM-701 — Configuration consistency warning
- CMLM-702 — Configuration consistency warning
- CMLM-713 — CML /SAVE operation not completed
- CMLM-714 — CML command-line options incompatible
- CMLM-715 — Bad revision number requested
- CMLM-720 — Unknown CML command name
- CMLM-721 — CML command misuse
- CMLM-722 — Invalid arguments of CML command
- CMLM-731 — Bad parameter, information not available
- CMLM-732 — Bad parameter, information not available
- CMLM-740 — Bad parameter, target node invalid
- CMLM-750 — Multinode operation allowed only for structured comments
- CMLR-113 — Include file path is invalid
- CMLR-510 — Configuration version inconsistency
- CMLR-511 — Configuration file incomplete
- CMLR-512 — Configuration file probably corrupted
- CMLR-513 — Configuration root path setting failed
- CMLR-515 — Include directive failed for some reason
- CMLR-518 — Configuration file probably corrupted
- CMLR-519 — Configuration file not loaded after previous errors
- CMLR-530 — Incorrect CML path specification
- CMLR-540 — Incorrect high-level configuration command usage
- CMLR-542 — CML include file content incorrect
- CMLR-543 — Compound comment syntax error
- CMLR-550 — General CML syntax error message
- CMLR-551 — CML parser detected syntax error
- CMLR-552 — Section format error
- CMLR-560 — Item completeness error
- CMLR-564 — Excluding member misuse
- CMLR-565 — Configuration directive not closed properly
- CMLR-566 — List definition misformed
- CMLR-567 — Item definition misformed
- CMLR-569 — Item completeness error
- CMLR-570 — Variable definition misformed
- CMLR-571 — Variable definition misformed
- CMLR-572 — Variable definition misformed
- CMLR-573 — Variable definition misformed
- CMLR-574 — CML SWITCH command syntax error
- CMLR-575 — CML SWITCH/CASE command syntax error
- CMLR-580 — CML parser detected syntax error
- CMLR-581 — CML parser detected syntax error
- CMLR-582 — CML parser detected syntax error
- CMLR-583 — CML parser detected syntax error
- CMLR-584 — CML parser detected syntax error
- CMLR-585 — CML parser detected syntax error
- CMLR-586 — CML parser detected syntax error
- CMLR-587 — CML SWITCH/CASE command syntax error
- CMLR-590 — Configuration directive misformed
- CMLR-591 — Configuration directive misformed
- CMLR-592 — Configuration directive misformed
- CMLR-593 — Configuration directive specified twice
- CMLR-710 — Final loading result message
- CMLR-712 — Configuration loading was aborted
- CMLR-713 — INCLUDE statements with relative paths found
- CMLR-720 — Operation not allowed in this point of configuration
- CMLR-721 — Improper use of /EDIT command
- CMLR-732 — CML command parameter invalid
- CMLR-770 — Incorrect variable definition
- CMLS-110 — Configuration file cannot be opened
- CMLS-114 — Configuration was not succesfully saved
- CMLS-311 — Inline-file line format invalid
- CMLS-321 — Variable or sublist tree too deep
- CMLS-501 — Incorrect variable usage
- CMLS-505 — Incorrect for loop usage
- CMLS-506 — Incorrect variable application
- CMLS-507 — CML SWITCH command incompleteness found
- CMLS-510 — Inline-file line format invalid
- CMLS-511 — Inline-file line format invalid
- CMLS-541 — ACL level 1 inconsistency
- CMLS-551 — Incorrect for loop usage
- CMLS-561 — Two SHARED files/directories have the same name
- CMLS-569 — Shared file or directory check failed
- CMLS-719 — Bad filter parameter of /SHOW command
- CMLT-302 — Name chosen is not allowed
- CMLT-501 — Name chosen is not allowed
- CMLT-502 — Name chosen is not allowed
- CMLT-521 — Incorrect variable usage
- CMLT-530 — Reference leading toward end of configuration
- CMLT-533 — Variable/path incosistency warning
- CMLT-534 — Variable or reference invalid
- CMLT-540 — Incorrect CML path construction
- CMLT-541 — Incorrect CML path construction
- CMLT-542 — Incorrect CML path construction
- CMLT-543 — Incorrect CML path construction
- CMLT-544 — Incorrect CML path construction
- CMLT-545 — Incorrect CML path construction
- CMLT-548 — Incorrect CML path construction
- CMLT-549 — Path continuation invalid
- CMLT-559 — Undefined value referenced
- CMLT-560 — Integer value incompatibility
- CMLT-561 — Mnemonic name misuse
- CMLT-563 — Overlapping range is to be added to list
- CMLT-564 — Item element value incorrect
- CMLT-565 — SOCK type incompatibility warning
- CMLT-566 — Inline-file specification incorrect
- CMLT-568 — List value inconsistency
- CMLT-569 — Type and value inconsistency
- CMLT-570 — Configuration redundancy warning
- CMLT-572 — Name chosen is not allowed
- CMLT-573 — ACL name '*' inconsistency
- CMLT-574 — Dynamic names for some section types unimplemented
- CMLT-575 — CML SWITCH command syntax error
- CMLT-577 — Illegal sections in for-loop definition
- CMLT-578 — Context inconsistency warning
- CMLT-579 — Section variable definition incorrect
- CMLT-583 — String concatenation is allowed in variable definition only
- CMLT-584 — Parameter declaration misplaced
- CMLT-589 — Top level section misuse
- CMLT-591 — Parametrized variable misuse
- CMLT-592 — Parametrized variable misuse
- CMLT-593 — List tail meaningless
- CMLT-594 — List not closed by regular member
- CMLT-720 — Operation not allowed in this point of configuration
- CMLT-722 — Clipboard empty
- CMLT-723 — Cannot undelete node
- CMLT-724 — Undelete not possible
- CMLT-770 — CML operation not allowed due to context check
- CMLT-771 — Incorrect CML edit operation
- CMLT-772 — CML command misuse
- CMLT-800 — CML configuration identification report
- CMLT-801 — CML configuration CDF version report
- CMLT-802 — CML configuration root path report
- CMLT-803 — CML configuration origin report
- DHDR-710 — Document header syntax error
- DHDR-711 — Document header syntax error
- DHDR-712 — Document header syntax error
- DHDR-721 — Document header syntax error
- DNSC-001 — Zone name not found in cache
- DNSC-002 — Domain name not found in cache
- DNSC-192 — Cannot get list of IP addresses
- DNSC-580 — No valid root server record for zone
- DNSC-590 — Non-periodical cleanup did not clear cache sufficiently
- DNSC-600 — Received answer contains our own address to be queried
- DNSC-700 — Cache storing function finds resource record of incorrect type
- DNSC-701 — Resolving process cannot continue due to incorrect answer
- DNSC-702 — Resource record set contains no valid authority records
- DNSC-705 — Glue records missing
- DNSC-897 — Cache cleanup efectivity report
- DNSC-898 — Cache cleanup final report
- DNSC-899 — Cache capacity report
- DNSC-980 — No valid server record for domain
- DNSE-001 — Request state is invalid
- DNSE-003 — Event on socket non belonging to any request
- DNSE-012 — Used socket registered by another request
- DNSE-013 — Request tried to open second server connection
- DNSE-097 — Invalid event in particular request state
- DNSE-105 — ALTQ queue assigment has failed
- DNSE-109 — Syscall select() in main proxy loop failed
- DNSE-120 — Binding to a random port failed
- DNSE-130 — Getting a socket or preparing it to work failed
- DNSE-210 — Reading request from UDP socket failed
- DNSE-211 — Accepting connection on TCP socket failed
- DNSE-212 — Reading request from TCP connection failed
- DNSE-218 — Timeout expired when reading query
- DNSE-219 — Client closed TCP connection
- DNSE-221 — Connection to server failed
- DNSE-228 — Timeout expired when reading reply
- DNSE-230 — Sending request to server failed
- DNSE-239 — Server has closed connection during sending query to it
- DNSE-240 — Reading reply from server failed
- DNSE-249 — Server closed TCP connection
- DNSE-260 — Reply was not sent to client
- DNSE-269 — Client has closed connection during sending reply to it
- DNSE-300 — Requests table is exhausted
- DNSE-301 — Sockets table is exhausted
- DNSE-308 — DNS request table monitoring message
- DNSE-309 — Requests table dump final info
- DNSE-310 — Received query length exceeds allowed size
- DNSE-340 — Reading reply from server failed
- DNSE-342 — UDP reply from server exceeds 512 bytes
- DNSE-360 — Proxy cannot send response via TCP
- DNSE-361 — Reply is too long, it could cause problem to resolver
- DNSE-390 — Cannot connect server due to long name
- DNSE-590 — Proxy tried all possible forwarders getting no answer
- DNSE-612 — Named DNS operation not implemented
- DNSE-613 — Only single-query requests implemented
- DNSE-614 — Named resource record class not implemented
- DNSE-615 — DNS extensions not implemented
- DNSE-710 — Received query/response is shorter than minimal size
- DNSE-711 — Request is formally incorrect
- DNSE-712 — Named DNS operation not known
- DNSE-713 — Request must contain exactly one QUERY
- DNSE-714 — Query resource record contains unknown class
- DNSE-715 — IXFR query with invalid NS part
- DNSE-716 — Bad transport protocol for AXFR request
- DNSE-740 — Proxy received reply with unexpected response code
- DNSE-741 — Query section of the answer does not match one of request
- DNSE-742 — Nameserver response contains invalid flags
- DNSE-743 — Zone transfer response does not start with SOA
- DNSE-744 — Incremental zone transfer response does not end with proper SOA
- DNSE-749 — Server connection is not idle
- DNSE-750 — Too deep recursion of internal requests
- DNSE-790 — Proxy tried all possible servers getting no answer
- DNSE-791 — Retry of request is not allowed
- DNSE-792 — Information about domain contains no glue record
- DNSE-793 — Querying to name loops back to itself
- DNSE-794 — Reasonable amount of attempts exhausted
- DNSE-795 — Informational output of requests dependency
- DNSE-798 — Internal request final report
- DNSE-799 — Request timed out
- DNSI-500 — Section LISTEN-ON contains incorrect address
- DNSP-010 — Searching of ACL failed
- DNSP-500 — Zone transfer cannot be resolved
- DNSP-510 — Cannot force source address in dns-proxy
- DNSP-610 — Request is not covered by configuration
- DNSP-641 — Reply resource record policy decision
- DNSP-649 — Reply resource record not found in configuration
- DNSP-700 — Notification about the mode of operation of the proxy
- DNSP-701 — The proxy has been initialized and is ready to accept packets
- DNSP-709 — Proxy received signal, exiting immediately
- DNSP-808 — Session has started, client connection has arrived
- DNSP-809 — TCP session finished
- DNSP-810 — ACL decision has been made, operation either accepted or rejected
- DNSP-820 — ACL decision has been made, operation either accepted or rejected
- DNSP-860 — Request processing finished
- DNSR-001 — Name or label being stored is too long
- DNSR-011 — Resource record of unknown type being stored
- DNSR-301 — Read domain name exceeds 254 characters
- DNSR-310 — DNS message RR count limit reached
- DNSR-619 — Resource record contains unimplemented feature
- DNSR-630 — Answer resource record has class oher than IN
- DNSR-631 — Answer resource record has unimplemented or incorrect type
- DNSR-653 — Query resource record type unimplemented
- DNSR-654 — Reply resource record type unimplemented
- DNSR-702 — Label contains incorrect character
- DNSR-703 — Token does not start with 00 or 11 bits couple
- DNSR-704 — Token length exceeds end of block
- DNSR-705 — Token references offset greater than offset of itself
- DNSR-710 — Resource record length differs from length field value
- DNSR-711 — Resource record exceeds block boundary
- DNSR-717 — Received block length disagree with total length of resource records
- DNSR-718 — Received block length disagree with total length of resource records
- DNSR-719 — Resource record formally incorrect
- DNSR-730 — Nameserver response inconsistency message
- DNSR-731 — General appearance incorrectness message
- DNSR-732 — DNS reply contains incorrect CNAME
- DNSR-734 — Irrelevant additional record found
- DNSR-735 — Nameserver response contains invalis CNAME chain
- DNSR-753 — Query resource record type unknown
- DNSR-754 — Reply resource record type unknown
- DNSX-501 — QUERY or REPLY item will never act
- DNSX-502 — No QUERY item contains operation requiring REPLY/FAKE definition
- DNSX-503 — No REPLY item found in forwarding or resolving ACL
- DNSX-510 — Faked name is longer then 254 characters
- DNSX-511 — Faked name label is longer then 64 characters
- DNSX-512 — Faked name contains invalid character
- FTPH-739 — Resending FTP server reply to HTTP proxy
- FTPH-750 — FTP directory listing not understood
- FTPP-090 — TCP server returned with error
- FTPP-099 — Final startup failure message
- FTPP-573 — Proxy probably uses reserved port and will not operate
- FTPP-808 — Session has started, client connection has arrived
- FTPP-809 — Session finished
- FTPS-009 — Answer prepared for client has no response code
- FTPS-105 — ALTQ queue assigment has failed
- FTPS-110 — Searching of ACL failed
- FTPS-119 — Authentication system is unsable
- FTPS-131 — Connection to server failed
- FTPS-230 — Target server name cannot be resolved to IP address
- FTPS-232 — Target server connection failed
- FTPS-234 — Targer server response invalid
- FTPS-238 — I/O operation on socket failed
- FTPS-239 — Control socket closed by peer
- FTPS-341 — Client reply buffer is over
- FTPS-342 — Data command parameter exceeded internal buffer size
- FTPS-530 — Next-hop server/proxy name cannot be resolved to IP address
- FTPS-532 — Next-hop server/proxy connection failed
- FTPS-533 — Address being to be forced as source toward the server cannot be resolved
- FTPS-534 — Next-hop server/proxy response invalid
- FTPS-628 — User illegally requested connection to non-ftp port
- FTPS-640 — FTP command has been rejected
- FTPS-642 — Simple username expected
- FTPS-643 — Username should contain target server
- FTPS-644 — Password must combine proxy user's and remote user's ones
- FTPS-679 — PORT family command has illegal parameter
- FTPS-690 — Data transfer size limit exceeded
- FTPS-691 — Data transfer size limit exceeded
- FTPS-701 — Timeout reached
- FTPS-710 — Too many commands used prior to connecting to server
- FTPS-732 — Command not allowed if target server known
- FTPS-738 — Remote server has answered with error message
- FTPS-739 — Remote server has logically closed session
- FTPS-744 — RNTO received without RNFR
- FTPS-745 — Proxy received an unknown command
- FTPS-746 — FTP command syntax error
- FTPS-747 — FTP initialisation command USER/PASS duplicated
- FTPS-748 — User setting required
- FTPS-749 — Port required by user is invalid
- FTPS-771 — Received EPSV command with bad argument
- FTPS-773 — Data transfer parameter commands invalid if EPSV ALL is set
- FTPS-774 — PORT family command contains bad argument
- FTPS-791 — Reissuing the REST command failed
- FTPS-810 — ACL decision has been made, operation either accepted or rejected
- FTPS-819 — Proxy user authentication finished
- FTPS-820 — ACL decision has been made, operation either accepted or rejected
- FTPS-840 — FTP command received
- FTPS-870 — File Transfer Protocol command handling
- FTPT-001 — Wrong address of server requested
- FTPT-105 — ALTQ queue assigment has failed
- FTPT-110 — Searching of ACL failed
- FTPT-119 — Cannot recognize document type
- FTPT-181 — Data connection accept failed
- FTPT-280 — Data connection to peer cannot be established
- FTPT-281 — Cannot create listening socket for data transfer
- FTPT-288 — Data connection not established
- FTPT-289 — Another data connection arrived
- FTPT-600 — Data arrived from wrong peer
- FTPT-688 — PASV family command response contains bad address
- FTPT-689 — Data connection arrived from bad peer
- FTPT-690 — Data transfer size limit exceeded
- FTPT-702 — Listening timeout expired
- FTPT-746 — FTP command syntax error
- FTPT-772 — Received repeated data transfer parameter command
- FTPT-788 — PASV family command response invalid
- FTPT-830 — ACL decision has been made, operation either accepted or rejected
- FTPT-872 — Client used data command without transfer parameter setting
- FTPT-880 — Data transfer initialized
- FTPT-881 — Data connection server established
- FTPT-890 — Data transfer stopped
- H225-700 — Unrecoverable H.323 parser error
- H225-710 — Received packet with unimplemented H.323 feature
- H225-720 — Received packet with more RAS/CSA addresses
- H245-700 — Unrecoverable H.323 parser error
- H245-710 — Received packet with unimplemented H.323 feature
- H245-711 — Received packet with unimplemented H.323 feature
- HTCT-100 — An operation with the cookie table failed
- HTCT-102 — An operation with the cookie table failed
- HTCT-104 — An operation with the cookie table failed
- HTCT-105 — An operation with the cookie table failed
- HTCT-107 — An operation with the cookie table failed
- HTCT-108 — An operation with the cookie table failed
- HTCT-800 — A cookie has been received from other client than expected
- HTCW-100 — Closing a Clear Web DataBase file failed
- HTCW-101 — Opening a Clear Web DataBase file failed
- HTCW-102 — Reading all records from a Clear Web DataBase file failed
- HTCW-103 — The Clear Web DataBase cannot test whether its database was changed
- HTCW-104 — Search operation in the Clear Web DataBase file failed
- HTCW-105 — Inserting a record into the Clear Web DataBase file failed
- HTCW-106 — Deleting a record from the Clear Web DataBase file failed
- HTCW-700 — The Clear Web DataBase cannot open its updated database file
- HTTA-100 — AProxy session table initialization failed
- HTTA-101 — AProxy session table initialization failed
- HTTA-102 — A new proxy process cannot use the session table
- HTTA-157 — AProxy session table lock cannot be unlocked
- HTTA-500 — AProxy session table must have non-zero size
- HTTA-502 — Required item OOB_AUTH-SRV missing in configuration
- HTTA-600 — An error occurred when calling authentication functions
- HTTA-601 — RADIUS state does not fit into the session table entry
- HTTA-710 — Information about OOB user authentication
- HTTA-720 — Information about AProxy user authentication
- HTTA-801 — Client returned invalid authentication data to AProxy
- HTTA-802 — AProxy session table lock cannot be locked
- HTTA-803 — Maximum number of sessions reached, no new session cannot be created
- HTTA-804 — User name does not fit into the session table entry
- HTTA-805 — Client returned invalid contents of the authentication form to AProxy
- HTTA-806 — AProxy cannot prepare the authentication form
- HTTA-807 — List of groups does not fit into the session table entry
- HTTA-808 — OOB external authentication produces too long lines
- HTTA-809 — OOBA update list line not understood
- HTTA-810 — Unterminated line at the end of an OOBA update list is ignored
- HTTA-811 — An OOB-authenticated user cannot be found in LDAP
- HTTA-812 — A user tried logout without previous login
- HTTA-813 — Authentication form incorrectly filled/sent
- HTTA-858 — AProxy cannot decode the request
- HTTF-800 — The proxy cannot convert FTP directory listing into an HTML page
- HTTF-801 — The proxy cannot convert FTP directory listing into an HTML page
- HTTF-802 — The proxy cannot convert FTP directory listing into an HTML page
- HTTH-025 — Invalid method number in parsed request line
- HTTH-101 — The proxy cannot replace credentials
- HTTH-102 — The proxy cannot replace credentials
- HTTH-105 — ALTQ queue assigment has failed
- HTTH-701 — Information about source address of the connection to the server
- HTTH-702 — A new request has been started
- HTTH-703 — Information about user authentication on the proxy
- HTTH-704 — A URL is temporarily accessible due to bypass
- HTTH-705 — Bypass has been activated for a single domain
- HTTH-706 — Bypass life time has expired and must be reactivated
- HTTH-707 — Bypass has not been activated or has expired and must be reactivated
- HTTH-708 — The bypass activation page has not been returned to the proxy in time
- HTTH-709 — Bypass cannot be activated due to an internal error
- HTTH-711 — Maximum number of bypass sessions has been reached
- HTTH-712 — Bypass has been activated for a set of categories
- HTTH-713 — A request has terminated
- HTTH-714 — A request has terminated
- HTTH-715 — Information about a request
- HTTH-716 — A set of categories has been looked up in the Clear Web DataBase
- HTTH-717 — Bypass is disabled due to an internal error in the bypass table
- HTTH-718 — A URL is temporarily accessible due to bypass
- HTTH-741 — Proxy repairs invalid Host request header
- HTTH-750 — Data from server were rejected by antivirus checking
- HTTH-792 — The proxy cannot initialize client CONNECT data filtering
- HTTH-793 — The proxy cannot initialize server CONNECT data filtering
- HTTH-794 — The proxy cannot perform NTLM authentication
- HTTH-795 — NTLM authentication data format is invalid
- HTTH-796 — The proxy cannot execute an external program
- HTTH-797 — Bad format of a cookie deletion request
- HTTH-798 — Matching of request body data not possible
- HTTH-799 — Matching of response data not possible
- HTTH-800 — Cannot decode the server response due to an unsupported encoding
- HTTH-801 — Http-proxy cannot communicate with ftp-proxy
- HTTH-802 — Connection of http-proxy with ftp-proxy, is not configured
- HTTH-803 — The client has not sent compulsory HTTP/1.1 Host header
- HTTH-804 — Challenge/response proxy authentication is not supported
- HTTH-805 — The request URI has been invalidated by a rewrite operation
- HTTH-806 — The request specifies an unsupported scheme
- HTTH-807 — Setup for request body decoding failed
- HTTH-808 — Setup for request body encoding failed
- HTTH-809 — The proxy cannot initialize the image filtration module
- HTTH-810 — The proxy received the status line from the server twice
- HTTH-811 — Reports REQUEST-ACL used for this request
- HTTH-812 — HTTP header name contains an illegal character
- HTTH-813 — HTTP header does not contain the colon separating name and value
- HTTH-814 — Repeated HTTP header which may occur only once
- HTTH-815 — Value of a HTTP header is invalid and cannot be parsed
- HTTH-816 — Internal form of a HTTP header is invalid
- HTTH-817 — Repeated HTTP header which may occur only once
- HTTH-818 — HTTP request line must contain a HTTP method
- HTTH-819 — HTTP request line must contain a HTTP request URI
- HTTH-820 — HTTP version in request or response is invalid
- HTTH-821 — Something invalid at the end of the HTTP request line
- HTTH-822 — A bad %xx sequence in URI has been encountered
- HTTH-823 — Internal form of URI is invalid
- HTTH-824 — Internal form of HTTP version is invalid
- HTTH-825 — Internal form of HTTP request line is invalid
- HTTH-826 — Status line must contain version identifier
- HTTH-827 — Status line must contain a valid status code
- HTTH-828 — Internal form of HTTP status line is invalid
- HTTH-829 — Internal form of a HTTP header is invalid
- HTTH-830 — Unknown type of authentication
- HTTH-831 — URI cannot be parsed
- HTTH-832 — Only GET method is allowed in HTTP v. 0.9 requests
- HTTH-833 — Received HTTP message has an unsupported version of HTTP
- HTTH-834 — Content-Length header contains an invalid value
- HTTH-835 — Request or status line is forbidden by REQUEST-ACL
- HTTH-836 — Request or response header is forbidden by REQUEST-ACL
- HTTH-837 — Request failed due to inoperative web filter
- HTTH-838 — Invalid HTTP status code in response from server
- HTTH-839 — Request continues despite web filter failure
- HTTH-840 — Proxy cannot configure NAT address mapping on connection to server
- HTTH-841 — Proxy cannot initialize data related to server connection
- HTTH-842 — Proxy cannot create modules for communication with the server
- HTTH-843 — Proxy cannot create module for sending CONNECT response headers
- HTTH-844 — The proxy cannot process response headers
- HTTH-845 — An unexpected error occurred when searching REQUEST-ACLs
- HTTH-846 — The request is denied because it does not match any REQUEST-ACL
- HTTH-847 — Matching REQUEST-ACL contains item DENY
- HTTH-848 — Request URI has a form unsupported by http-proxy
- HTTH-849 — A file to be sent as a response does not exist or is not readable
- HTTH-850 — Antivirus has reported a virus
- HTTH-851 — The proxy is unable to verify user authentication
- HTTH-852 — The proxy cannot establish an SSL/TLS secure channel to the server
- HTTH-853 — The request specifies an unsupported scheme
- HTTH-854 — AProxy is enabled in the configuration, but cannot be initialized
- HTTH-855 — FTP requests allow only downloading (GET) and uploading (PUT) data
- HTTH-856 — HTTP Host header contains an invalid port number
- HTTH-857 — Proxy cannot interpret Transfer-Encoding header
- HTTH-858 — Transfer-Encoding header defines an incorrect encoding
- HTTH-859 — Transfer-Encoding header defines an incorrect encoding
- HTTH-860 — Communication with a FTP server failed
- HTTH-861 — A file to be sent as a response does not exist or is not readable
- HTTH-862 — The proxy cannot decode chunked trasfer encoding of response
- HTTH-863 — The proxy cannot use an external program to reply to a request
- HTTH-864 — Cannot decode the server response due to an unsupported encoding
- HTTH-865 — Proxy informs the client about an unsupported content encoding
- HTTH-866 — The proxy cannot encode the response into the chunked encoding
- HTTH-867 — The proxy cannot decode a gzipped response
- HTTH-868 — The proxy cannot perform requested HTML filtration
- HTTH-869 — The proxy cannot return a directory listing obtained from ftp-proxy
- HTTH-870 — The proxy cannot send the response to the antivirus
- HTTH-871 — The client has closed the connection when it should not
- HTTH-872 — The request line is wrong
- HTTH-873 — A request cannot escape from a subdirectory
- HTTH-874 — The request headers are wrong
- HTTH-875 — Proxy cannot configure NAT address mapping on connection to ftp-proxy
- HTTH-876 — Forwarding the request to ftp-proxy failed
- HTTH-877 — Request line processing failed
- HTTH-878 — The request line does not fit into the appropriate buffer
- HTTH-879 — Request header processing failed
- HTTH-880 — A request line does not fit into the appropriate buffer
- HTTH-881 — The server has closed the connection when it should not
- HTTH-882 — The status line is wrong
- HTTH-883 — A cookie modification failed
- HTTH-884 — The response headers are wrong
- HTTH-885 — Status line processing failed
- HTTH-886 — The status line does not fit into the appropriate buffer
- HTTH-887 — Response header processing failed
- HTTH-888 — A response line does not fit into the appropriate buffer
- HTTH-889 — The request would require the proxy to connect back to itself
- HTTH-890 — HTTP header value contains an illegal character
- HTTH-891 — Repeated HTTP header which may occur only once
- HTTH-892 — An unexpected error occurred when searching DOC-ACLs
- HTTH-893 — Reports DOC-ACL used for this request
- HTTH-894 — The request is denied because it does not match any DOC-ACL
- HTTH-895 — Matching DOC-ACL contains item DENY
- HTTH-896 — Proxy cannot use the module for guessing MIME types
- HTTH-897 — The server has specified response body length incorrectly
- HTTH-898 — The client has specified request body length incorrectly
- HTTH-899 — The proxy is unable to verify user authentication
- HTTH-901 — The proxy cannot extract lifetime information from a cookie
- HTTH-923 — Proxy requests user authentication
- HTTH-924 — Proxy authentication request sent to client
- HTTP-104 — The main loop for serving clients (tcpserver) failed
- HTTP-105 — ALTQ queue assigment has failed
- HTTP-123 — Blacklist database cannot be used
- HTTP-124 — The proxy cannot use SSL/TLS
- HTTP-125 — The table for storing modified cookie cannot be initialized
- HTTP-126 — The proxy cannot delete stored cookie values
- HTTP-501 — AProxy configuration error
- HTTP-502 — AProxy configuration error
- HTTP-710 — A new proxy session has been started
- HTTP-711 — A proxy session has terminated
- HTTP-712 — Session ACLs have been processed
- HTTP-801 — Error during initial processing of a new session
- HTTP-802 — The next request on a persistent connection cannot be processed
- HTTP-803 — Error during initialization of a new request
- HTTP-804 — The client has closed the connection to the proxy
- HTTP-810 — The proxy is unable to respond with a local file
- HTTP-811 — The proxy is unable to respond with a local file
- HTTP-812 — The proxy is unable to respond with a local file
- HTTP-813 — Data size limit has been exceeded
- HTTP-814 — Data size limit has been exceeded
- HTTP-815 — Data size limit has been exceeded
- HTTP-816 — Data size limit has been exceeded
- HTTP-817 — An unexpected error occurred when searching SESSION-ACLs
- HTTP-818 — The session is denied because it does not match any SESSION-ACL
- HTTP-819 — Matching SESSION-ACL contains item DENY
- HTTP-820 — The proxy captured a CONNECT request and will handle it itself
- HTTP-821 — The proxy creates a TCP tunnel to the server
- HTTP-822 — A shared library cannot be used
- HTTP-823 — A shared library does not contain a required function
- HTTP-824 — A shared library cannot be initialized
- HTTP-825 — The proxy is unable to respond with locally generated data
- HTTP-852 — The proxy cannot establish an SSL/TLS secure channel from the client
- ICAB-700 — Received ICAP message has unsupported version of ICAP
- ICAB-701 — ICAP version in request is invalid
- ICAB-710 — ICAP request line misformed
- ICAB-711 — Request line ends incorrectly
- ICAB-725 — ICAP Host header contains an invalid port number
- ICAB-730 — Unknown type of authentication
- ICAR-120 — An unexpected error occurred when searching REQUEST-ACLs
- ICAR-140 — Setup for request body decoding failed
- ICAR-150 — Proxy cannot use the module for guessing MIME types
- ICAR-160 — The proxy cannot send the response to the antivirus
- ICAR-170 — The proxy cannot encode the response into the chunked encoding
- ICAR-200 — The client has closed the connection when it should not
- ICAR-580 — The status line does not fit into the appropriate buffer
- ICAR-581 — A response line does not fit into the appropriate buffer
- ICAR-620 — Matching SERVICE-ACL contains item DENY
- ICAR-621 — The request is denied because it does not match any SERVICE-ACL
- ICAR-625 — Matching REQUEST-ACL contains item DENY
- ICAR-626 — The request is denied because it does not match any REQUEST-ACL
- ICAR-630 — Matching DOC-ACL contains item DENY
- ICAR-631 — The request is denied because it does not match any DOC-ACL
- ICAR-711 — The request line is wrong
- ICAR-712 — The request headers are wrong
- ICAR-715 — The request specifies an unsupported scheme
- ICAR-716 — The client has not sent compulsory HTTP/1.1 Host header
- ICAR-727 — Challenge/response proxy authentication is not supported
- ICAR-728 — Proxy requests user authentication
- ICAR-729 — The proxy is unable to verify user authentication
- ICAR-810 — A new request has been started
- ICAR-819 — A request has terminated
- ICAR-820 — Reports SERVICE-ACL used for this request
- ICAR-825 — Reports REQUEST-ACL used for this request
- ICAR-829 — Information about user authentication on the proxy
- ICAR-830 — Reports DOC-ACL used for this request
- ICAS-111 — Blacklist database cannot be used
- ICAS-130 — Error during initial processing of a new session
- ICAS-131 — The next request on a persistent connection cannot be processed
- ICAS-132 — The proxy cannot establish an SSL/TLS secure channel from the client
- ICAS-133 — ALTQ queue assigment has failed
- ICAS-139 — Error during initialization of a new request
- ICAS-191 — The proxy cannot use SSL/TLS
- ICAS-330 — Data size limit has been exceeded
- ICAS-621 — Session denied due to no matching SESSION-ACL
- ICAS-622 — Matching SESSION-ACL contains item DENY
- ICAS-801 — Session has started, client connection has arrived
- ICAS-809 — Session finished
- ICAS-821 — SESSION-ACL search report
- IMAP-100 — The main loop for serving clients (tcpserver) failed
- IMAP-101 — ALTQ queue assigment has failed
- IMAP-200 — Cannot change source address of a connection to a server
- IMAP-201 — The proxy cannot initialize a connection to a server
- IMAP-202 — The proxy cannot initialize a connection to a server
- IMAP-700 — Session ACL has been processed
- IMAP-701 — Command ACL has been processed
- IMAP-702 — A client has been disconnected from the proxy
- IMAP-704 — A new client has connected to the proxy
- IMAP-705 — The source address of a connection to a server has been changed
- IMAP-706 — Information about direction of a mail transfer
- IMAP-710 — A command has been denied by ACL
- IMAP-711 — A capability has been denied by ACL
- IMAP-712 — An unimplemented capability received from the server
- IMAP-713 — An unimplemented command received from the client
- IMAP-760 — Mail ACL has been processed
- IMAP-800 — Proxy initialization failed
- IMAP-801 — An error occurred during searching SESSION-ACLs
- IMAP-802 — The client has been denied by SESSION-ACL
- IMAP-803 — The proxy is unable to verify user authentication
- IMAP-804 — The proxy does not know a server address to connect
- IMAP-805 — Initial processing of a new client connection has failed
- IMAP-806 — Proxy cannot start SSL/TLS on the client connection
- IMAP-807 — Proxy cannot start IMAP4 protocol
- IMAP-808 — An error occurred during searching COMMAND-ACLs
- IMAP-809 — The client has been denied by COMMAND-ACL
- IMAP-810 — Limit for session duration has been reached
- IMAP-811 — The client is sending too much data
- IMAP-812 — The server is sending too much data
- IMAP-813 — Proxy cannot start SSL/TLS on the server connection
- IMAP-814 — The session is being idle for too long
- IMAP-817 — A temporary file cannot be read
- IMAP-818 — A mail from the server cannot be processed
- IMAP-819 — The proxy is unable to get size of a temporary file
- IMAP-820 — The client has unexpectedly disconnected from the proxy
- IMAP-821 — The server has unexpectedly disconnected from the proxy
- IMAP-822 — A FETCH response does not correspond to the FETCH command
- IMAP-823 — Proxy cannot decode length of a literal
- IMAP-824 — A client command line is too long
- IMAP-825 — A server response line is too long
- IMAP-843 — IMAP4 BINARY protocol extension (RFC3516) is not implemented
- IMAP-844 — The proxy does not understand a request for mail data
- IMAP-845 — The proxy detented data which should not occur in a FETCH response
- IMAP-846 — The server response is not a valid mail
- IMAP-847 — Bad format of an IMAP4 command line
- IMAP-848 — A command tag does not fit to a buffer in the proxy
- IMAP-850 — The proxy cannot create a temporary file
- IMAP-851 — The proxy is unable pro process a mail
- IMAP-852 — A mail from client to server is denied by configuration
- IMAP-853 — A mail from client to server is denied by configuration
- IMAP-854 — Bad format of an IMAP4 response line
- IMAP-855 — A response tag does not match the last last command
- IMAP-856 — A response tag does not match the last last command
- IMAP-857 — The proxy is unable to get size of a temporary file
- IMAP-858 — A command tag does not fit to a buffer in the proxy
- IMAP-860 — The proxy cannot create a temporary file
- IMAP-861 — The proxy cannot start processing of a mail
- IMAP-862 — A mail from server to client is denied by configuration
- IMAP-863 — A mail from server to client is denied by configuration
- IMAP-865 — The proxy cannot finish processing of a mail
- IMAP-867 — The client asked for a nonexistent part of a mail
- IMAP-868 — The proxy cannot sent a mail in the form of literal string
- IMAP-870 — There is not cached mail in the proxy
- IMAP-871 — The proxy received unexpected data from the server
- IPCL-100 — The proxy cannot create a lock for synchronizing its processes
- IPCL-101 — The proxy cannot write its PID to the lock file
- IPCL-102 — The proxy cannot close a lock file
- IPCL-103 — The proxy cannot delete a lock file
- IPCL-104 — A proxy process cannot open a lock file
- IPCL-106 — A proxy process cannot lock a lock file
- IPCL-107 — A proxy process cannot unlock a lock file
- IPSE-800 — Bad interface referenced in an IPSEC configuration section
- IPSE-801 — No interface referenced in an IPSEC configuration section
- IPSE-802 — Configuration directory of the ISAKMP daemon cannot be generated
- IPSE-803 — The specified DH group value is not allowed
- KERN-001 — Function called with NULL parameter
- KERN-002 — Expression has incorrect (NULL) value
- KERN-003 — An unexpected true value of a Boolean expression detected
- KERN-011 — Library function returned unknown return value
- KERN-012 — Application has detected an incorrect value
- KERN-100 — System call failed with reported errno
- KEYV-701 — Keyword-value parser error
- KEYV-702 — Keyword-value parser error
- KEYV-703 — Keyword-value parser error
- KEYV-704 — Keyword-value parser error
- KEYV-710 — Keyword-value parser error
- KEYV-711 — Keyword-value parser error
- KEYV-751 — Keyword-value parser error
- LDAP-301 — Buffer for ldap filter is too short for storing string "(|(attribute_name=value)(attribute_name=value))"
- LDAP-302 — Buffer for ldap filter is too short for storing string "(attribute_name=value)"
- LDAP-501 — Bad attribute name
- LDAP-502 — Invalid configuration of the server's URI
- LDAP-601 — Bad username
- LDAP-603 — User not found in the LDAP database
- LDAP-607 — Bind to account successful
- LDAP-610 — Bind LDAP server to the user's DN unsuccessful due to invalid credentials
- LDAP-613 — Error when binding to the LDAP server using user's DN
- LDAP-701 — LDAP initialization failed
- LDAP-702 — More than 1 value returned as the group name
- LDAP-703 — Setting LDAP_OPT_X_TLS_KEYFILE failed
- LDAP-704 — More than 1 object for user found in the LDAP directory
- LDAP-706 — More than 1 value returned as the users default GID number
- LDAP-707 — ldap_start_tls_s returned error
- LDAP-709 — Error while searching for the user's UID number
- LDAP-710 — Error getting users's DN
- LDAP-711 — Error retrieving group number from the group's node
- LDAP-712 — Error retrieving user's default GID number
- LDAP-713 — Error while searching for the user's GID list
- LDAP-714 — Setting LDAP_OPT_X_TLS_REQUIRE_CERT option failed
- LDAP-715 — Setting LDAP_OPT_TIMEOUT option failed
- LDAP-716 — Setting LDAP_OPT_TIMELIMIT failed
- LDAP-717 — Setting LDAP_OPT_NETWORK_TIMEOUT option failed
- LDAP-718 — Error binding to the LDAP server
- LDAP-721 — Setting LDAP_OPT_PROTOCOL_VERSION option failed
- LDAP-722 — Setting LDAP_OPT_X_TLS_CERTFILE failed
- LDAP-723 — Setting LDAP_OPT_X_TLS_CACERTFILE option failed
- LDAP-724 — Setting LDAP_OPT_X_TLS_CACERTDIR option failed
- LDAP-726 — Error retrieving group number from the group's node
- LDAP-727 — Getting LDAP_OPT_X_TLS_CTX option failed
- LDAP-728 — Setting LDAP_OPT_X_TLS_CTX option failed
- LDAP-729 — List of groups for a user cannot be obtained from Active Directory
- LDAP-730 — List of groups for a user cannot be obtained from Active Directory
- LDAP-731 — List of groups for a user cannot be obtained from Active Directory
- LDAP-732 — List of groups for a user cannot be obtained from Active Directory
- LDAP-733 — Setting LDAP_OPT_REFERRALS failed
- LDAP-734 — Failed to reinitialize the LDAP structure
- LDAP-901 — Unsuscpected behaiour; ldap_result returned unsuspected value
- LIBA-700 — Reports the list of user groups matched by an ACL
- LIBI-009 — Closing of file descriptor failed
- LIBI-101 — Socket number not applicable to select()
- LIBI-102 — Traffic shaping support not present in kernel and system libraries
- LIBI-103 — Cannot configure traffic shaping for a network socket
- LIBI-141 — Function dupip() failed to allocate memory
- LIBI-220 — Setting of socket option failed
- LIBI-221 — File descriptor flag operation failed
- LIBI-230 — Attempt to connect timed out
- LIBI-941 — Function dupip() allocates memory at specified address
- LIBP-031 — System call of sigaction() failed
- LIBP-120 — System call to daemon() failed
- LIBP-730 — Kernun signal handler caught signal
- LIBP-931 — Kernun signal handler has been registered
- LIBT-001 — Syscall gettimeofday() failed
- LIBT-120 — System clock disruption
- LIBT-150 — Sleeping for a time interval terminated with error
- LIBT-959 — A system call was interrupted by a signal
- LIBU-020 — Wrong formatting directive
- LIBU-021 — Printing bad address argument
- LIBU-022 — Printing bad regexp argument
- LIBU-023 — Printing bad IP argument
- LIBU-140 — Error during re-creating file
- LIBU-145 — Input file opening failed
- LIBU-320 — Printing too long string
- LIBU-330 — Filename too long
- LIBU-510 — Regular expression library fails to compile given regexp
- LIBU-530 — Filename contains invalid characters
- LIBU-533 — Filename longer than OS limitations
- LIBU-534 — Library function cannot assemble file name
- LICC-100 — The Kernun license file cannot be found or read
- LICC-101 — The license fail verification failed
- LICC-102 — Cannot check hardware serial number
- LICC-103 — Cannot check hrdware serial number
- LICC-500 — A component is not available and cannot be configured
- LICC-501 — A component is not available and cannot be configured
- LICC-502 — Each SYSTEM section should contain PRODUCT specification
- LICC-700 — Information about a license
- LICC-701 — Reports date when new functionality will not be licensed
- LICC-800 — The license file has bad content
- LICC-801 — The license file does not permit the named component to run
- LICC-802 — The license is no longer valid
- LICC-803 — Cannot check hardware serial number
- LICC-804 — License was issued for another computer
- LICC-805 — License was issued for another software version
- LIST-001 — There are bad links in a linked list data structure
- MAVS-101 — The proxy cannot initialize the file used for communication with antivirus
- MAVS-102 — The proxy cannot initialize the file used for communication with antivirus
- MAVS-103 — Antivirus module cannot read data
- MAVS-104 — Antivirus module cannot read data
- MAVS-105 — ALTQ queue assigment has failed
- MAVS-200 — Communication with antivirus failed
- MAVS-201 — Communication with antivirus failed
- MAVS-202 — The request for an antivirus does not fit into a buffer
- MAVS-203 — Communication with antivirus failed
- MAVS-204 — Communication with antivirus failed
- MAVS-205 — The proxy cannot forward data checked by antivirus
- MAVS-700 — Data are not checked by antivirus due to to big size
- MAVS-710 — The antivirus program reported a file as clean
- MAVS-800 — The antivirus is unable to check data received from the proxy
- MAVS-801 — The proxy has received EOF when waiting for data from antivirus
- MAVS-802 — The proxy cannot store data for a later check by an antivirus
- MAVS-810 — The antivirus program has found some viruses
- MAVS-811 — The antivirus program has found some virus
- MAVS-820 — ClamAV antivirus has not returned the expected reply
- MAVS-821 — ClamAV antivirus has not returned a valid reply
- MAVS-830 — Proxy does not understand a response from NOD32 antivirus
- MAVS-920 — Status code returned by DrWeb antivirus
- MAVS-930 — Status message returned by NOD32 antivirus
- MCHU-702 — Found error in chunked body from the client or server
- MCHU-703 — Found error in chunked body from the client or server
- MCHU-704 — Found error in chunked body from the client or server
- MCHU-705 — Found error in chunked body from the client or server
- MEMM-000 — Memory manager detected a cycle in its internal data structures
- MEMM-001 — Re-initialization of memory management is not allowed
- MEMM-002 — Reparenting of root resource pool is not allowed
- MEMM-003 — Invalid value in memory allocation limits
- MEMM-004 — The structure of resource pools must always be a tree
- MEMM-005 — Repeated deletion of a cleanup function attempted
- MEMM-010 — Root resource pool can never be destroyed
- MEMM-011 — Specification of a string to be copied is invalid
- MEMM-100 — An allocation error occurred
- MEMM-101 — Cannot allocate memory, process will terminate
- MEMM-102 — Cannot allocate memory
- MEMM-103 — Cannot allocate memory, process will terminate
- MEMM-104 — Cannot allocate memory
- MEMM-105 — Maximum size of a pool reached, cannot allocate more memory
- MEMM-106 — Cannot allocate too large memory block
- MEMM-107 — Maximum number of allocated blocks in a pool reached
- MEMM-108 — Maximum number of sub-pools of a resource pool reached
- MEMM-109 — Cannot allocate memory for a pool structure
- MEMM-110 — Cannot register a function to be called at process exit
- MEMM-111 — Cannot register a function to be called at process exit
- MEMM-112 — Cannot register a cleanup function in a pool, process will terminate
- MEMM-113 — Cannot register a cleanup function in a pool
- MEMM-114 — Maximum number of registered cleanup handlers reached
- MEMM-115 — Cannot allocate memory for a pool structure, process will terminate
- MEMM-116 — Cannot create a new resource pool, process will terminate
- MEMM-117 — Cannot create a new resource pool
- MEMM-120 — Cannot allocate memory on the stack
- MEMM-121 — Cannot allocate memory on the stack, process will terminate
- MEMM-122 — Cannot register a pair of related cleanup functions in pools
- MEMM-125 — A resource pool cannot get assigned name
- MGZI-100 — Gzip (de)compression cannot be initialized
- MGZI-101 — Gzip (de)compression failed
- MGZI-102 — An error occurred in the zlib data compression library
- MGZI-103 — An unexpected end of file occurred while reading compressed data
- MIME-101 — Proxy cannot use the library for guessing MIME types
- MIME-103 — Proxy cannot use the library for guessing MIME types
- MIME-104 — It is not known if compiled database is up to date
- MIME-105 — The magic database cannot be compiled
- MIME-106 — The magic database cannot be compiled
- MIME-150 — The proxy is unable to open the file with definitions of MIME types
- MIME-151 — Data structure for suffix->MIME type mapping cannot be initialized
- MIME-152 — The proxy is unable to read the file with definitions of MIME types
- MIME-153 — The proxy is unable to close the file with definitions of MIME types
- MIME-154 — An error occurred when storing a value to DB database
- MIME-160 — Error when looking MIME type in database
- MIME-501 — Configuration specifies more than 3 doctype identification methods
- MIME-502 — Magic database cannot be compiled
- MIME-550 — There is very long line in the file defining MIME types
- MIME-551 — A file extension occurs twice in the file defining MIME types
- MIME-700 — The magic database will be recompiled by the proxy
- MIME-701 — The magic database will not be recompiled by the proxy
- MIMX-503 — Configuration specifies incorrect doctype identification method
- MMAT-100 — The proxy cannot save values from a HTML form
- MMAT-101 — The proxy cannot close a database with HTML form values
- MMAT-102 — The proxy cannot open a database used for replacing HTML form values
- MMAT-103 — The proxy cannot open a database of values searched for in HTML forms
- MMAT-800 — The proxy denied further communication because of forbidden data
- MMAT-801 — The proxy cannot store values from a HTML form for later searching
- MMAT-802 — The proxy cannot look up received HTML form data in a database
- MMAT-803 — Forbidden data found in a HTML form
- MMAT-804 — The proxy cannot look up received HTML form data in a database
- MMAT-805 — The proxy cannot look up received HTML form data in a database
- MMAT-806 — The proxy denied further communication because of missing required data
- MMCC-105 — ALTQ queue assigment has failed
- MMCC-131 — Connection to server failed
- MMCC-181 — H.245 control connection accept failed
- MMCC-231 — Target server cannot be connected within timeout period
- MMCC-232 — Target server connection failed
- MMCC-281 — Cannot create listening socket for H.245 session
- MMCC-530 — Next-hop server/proxy name cannot be resolved to IP address
- MMCC-533 — Address being to be forced as source toward the server cannot be resolved
- MMCC-700 — H.225/H.245 packet format error
- MMCC-710 — H.323 destination missing
- MMCC-711 — H.323 destination unknown
- MMCC-720 — Q.931 packet format error
- MMCC-721 — Unimplemented feature in H.323 protocol
- MMCC-730 — Q.931 address unexpected
- MMCC-731 — Unknown Q.931 message
- MMCC-742 — Unimplemented feature in H.323 protocol
- MMCC-781 — Peer cancelled H.245 connection before accepting
- MMCC-808 — Session initialized, proxy is ready to mediate communication
- MMCC-881 — H.245 session announced and ready
- MMCD-105 — ALTQ queue assigment has failed
- MMCD-110 — H.323 chnannel cannot be created
- MMCD-219 — Peer cancelled channel connection before accepting
- MMCD-600 — Maximal number of H.323 data channel reached
- MMCD-610 — Data connection arrived from bad peer
- MMCD-720 — H.323 data channel I/O failed
- MMCD-721 — H.323 data channel I/O failed
- MMCD-810 — H.323 data channel announced and ready
- MMCG-121 — Udp-proxy was not able to find an ACL appropriate to session
- MMCG-590 — ANY-address used as listen-on for gk-proxy
- MMCG-810 — A datagram from a client has arrived, a session has started
- MMCG-811 — Session initialized, proxy is ready to mediate communication
- MMCG-812 — Session finished
- MMCG-821 — ACL decision has been made, operation either accepted or rejected
- MMCP-090 — TCP server returned with error
- MMCP-099 — Final startup failure message
- MMCP-100 — Proxy main loop select call failed
- MMCP-104 — Original connection destination getting failed
- MMCP-105 — ALTQ queue assigment has failed
- MMCP-110 — Searching of ACL failed
- MMCP-200 — Proxy main loop timeout reached
- MMCP-239 — TPKT socket closed by peer
- MMCP-500 — ACL misconfigured
- MMCP-700 — Misformed TPKT packet received
- MMCP-801 — Client connection arrives to proxy
- MMCP-808 — Session has started, client connection has arrived
- MMCP-809 — Session finished
- MMCP-810 — ACL decision has been made, operation either accepted or rejected
- MMCR-700 — Nonrecoverable parser error reading RAS packet
- MMCR-701 — Unknown RAS packet received
- MMCR-710 — RRQ RAS packet does not contain crucial attributes
- MMCR-720 — URQ RAS packet does not contain crucial attributes
- MMCR-730 — Unknown client registers known H.323/URL identification
- MMCR-800 — RAS packet parsing summary
- MMCY-100 — YP map file cannot be opened
- MMCY-110 — YP map file has incorrect content
- MMCY-111 — RAS YP map file corrupted
- MMCY-113 — RAS YP map file corrupted
- MMCY-120 — YP map file cannot be extended
- MMCY-121 — YP map file seek failed
- MMCY-130 — Memory (re)mapping of YP file failed
- MMCY-510 — RAS YP map file outdated
- MNIO-001 — Invalid network communication mode
- MNIO-003 — Unexpected data found in data buffers during certain operations
- MNIO-021 — Invalid network communication mode
- MNIO-100 — Proxy cannot check for unexpected connection close
- MNIO-101 — Proxy cannot check for unexpected connection close
- MNIO-102 — Proxy cannot check for unexpected connection close
- MNIO-103 — Proxy cannot check for unexpected connection close
- MNIO-150 — Cannot connect to server due to resolution error
- MNIO-151 — Cannot connect to server due to bad socket name
- MNIO-160 — Connection to a remote server timed out
- MNIO-170 — Connection to a remote server failed
- MNIO-171 — Address of a local network socket cannot be obtained
- MNIO-172 — Address of a remote network socket cannot be obtained
- MNIO-200 — Data from client contains bare line-feed character
- MNIO-301 — The proxy has received a line which does not fit into its buffers
- MNIO-302 — The proxy has received a line which does not fit into its buffers
- MNIO-303 — Timeout while waiting for connection close
- MNIO-600 — Peer has sent a certificate which does not satisfy proxy's requirements
- MNIO-710 — A network connection has been successfully established
- MNIO-800 — Some error occurred during receiving data from a network socket
- MNIO-802 — Some error occurred during sending data to a network socket
- MNIO-803 — Connection to a remote server failed
- MNIO-840 — Attempt to shut down one or both directions of a connection failed
- MNIO-850 — There is no more addresses the proxy could try to connect to
- MNIO-851 — A network socket cannot be created
- MNIO-852 — An error occurred in handling the SSL/TLS protocol
- MNIO-853 — A system call failed during a SSL/TLS operation
- MNIO-870 — The proxy cannot shutdown a SSL/TLS connection properly
- MNIO-871 — A TCP connection has been closed without a proper SSL/TLS shutdown
- MODM-003 — System call setitimer() unexpectedly failed
- MODM-004 — System call getitimer() unexpectedly failed
- MODM-005 — An unregistered file descriptor has been selected for I/O
- MODM-007 — A deadlock detected in the proxy
- MODM-008 — Creating a temporary resource pool outside a module's run() function
- MODM-009 — Cannot write data to nonexistent output buffer
- MODM-010 — Debugging output of the module manager in case of an internal error
- MODM-011 — Non-existent group number assigned to a new module
- MODM-012 — Non-existent group number assigned to a new module
- MODM-040 — Inconsistent file descriptor and netio structure
- MODM-100 — A program cannot be executed
- MODM-101 — A process for a program execution cannot be created
- MODM-102 — A proxy cannot communicate with an executed program
- MODM-156 — Proxy cannot determine transparency of a client connection
- MODM-801 — A serious error occurred, the client will be disconnected
- MODM-802 — A serious error occurred, the client will be disconnected
- MODM-803 — An error occurred, an error message will be sent to the client
- MODM-804 — A timeout expired which killed the current client's request
- MODM-805 — A process exceeded a maximum allowed runtime
- MODM-806 — A process exceeded a maximum allowed runtime
- MODM-821 — Initialization of a new request failed
- MODM-832 — Initialization of a new proxy module failed
- MODM-835 — A per-client module cannot be attached to a request
- MODM-838 — A per-client module cannot be detached from a request
- MONI-100 — Proxy cannot initialize communication with monitoring utility
- MONI-101 — Proxy cannot initialize communication with monitoring utility
- MONI-102 — Proxy cannot initialize communication with monitoring utility
- MONI-103 — Proxy cannot terminate monitoring properly
- MONI-500 — Proxy cannot initialize communication with monitoring utility
- MPWF-001 — Unknown content of ICAP response Encapsulated header
- MPWF-200 — Proxy cannot communicate with the web filter
- MPWF-201 — Proxy cannot communicate with the web filter
- MPWF-202 — A web filtration request does not fit to a buffer
- MPWF-203 — The proxy is unable to return the web filter response
- MPWF-700 — The web filter has rejected the request
- MPWF-800 — The web filter terminated its response unexpectedly
- MPWF-801 — A web filter response does not fit to a buffer
- MPWF-802 — A web filter response cannot be processed
- MPWF-810 — Request failed due to inoperative web filter
- MPWF-811 — Request continues despite web filter failure
- MRDF-000 — Trying to subtitute a nonexisting string in a file
- MRDF-003 — Unexpected data found in data buffers during certain operations
- MRDF-100 — A file cannot be opened for reading
- MRDF-101 — A file size cannot be obtained
- MRDF-102 — A file cannot be mapped to memory
- MRDF-300 — Line longer than internal buffer size
- MRDF-800 — Trying to subtitute a nonexisting string in a file
- MSPA-105 — ALTQ queue assigment has failed
- MSPA-310 — Antispam report truncated
- MSPA-709 — Antispam failed, spam score invalid
- MSPA-710 — Spam checker has returned unknown response
- MSPA-800 — Information about mail size and antispam score
- MWRF-100 — The proxy cannot open a local file
- NATT-002 — It is not possible to issue bind() syscall to desired address
- NETL-002 — Function netopen() attempts to change netio socket type
- NETL-003 — Internal buffer pointers are inconsistent
- NETL-010 — Improper call to netctl() function
- NETL-011 — Scratch of too many bytes requested
- NETL-012 — Function ungetc() called to empty buffer
- NETL-032 — Improper call of netgetcmd() function
- NETL-060 — Inconsistent options given to write operation
- NETL-089 — Send to invalid address requested
- NETL-101 — Shutdown operation with socket failed
- NETL-202 — Setting socket flags by fcntl() or setsockopt() failed
- NETL-203 — Preparing socket for TCP reset by setsockopt() failed
- NETL-211 — Binding of socket to printed address failed
- NETL-212 — Syscall getsockname() failed
- NETL-220 — The proxy sends TCP reset instead of normal TCP connection close
- NETL-231 — Socket read failed
- NETL-262 — Writing data to socket failed
- NETL-267 — Non-blocking write ended by some data unsent
- NETL-283 — UDP data not sent
- NETL-291 — Timeout reached during netio operation
- NETL-390 — Netio function failed due to buffer shortage
- NETL-391 — Netio function failed due to buffer shortage
- NETS-001 — Select handler size is negative
- NETS-010 — Adding too high socket number
- NETS-011 — Unregistered socket used to select
- NETS-012 — Unopened socket used to select
- NETS-101 — Too many file descriptors are requested
- NETS-228 — Timeout reached during select() syscall
- NETS-700 — Select handler manipulation function already called
- NTIF-001 — Network interface has no link address
- NTIF-004 — Network interface name not found
- NTIF-007 — Socket address information for netmask is not valid
- NTIF-101 — Kernel routing information is not available
- NTIF-102 — No memory available for kernel routing information
- NTIF-103 — No memory available for network interface information
- NTIF-901 — Function has started its operation
- NTIF-902 — Function has finished its operation
- NTLM-200 — The proxy cannot communicate with the NTLM helper program
- NTLM-201 — The proxy cannot communicate with the NTLM helper program
- NTLM-500 — NTLM-related communication with an AD controller should be limited
- NTLM-501 — NTLM-related communication should be limited by INTERFACE or NETWORK
- NTLM-800 — Client provided unexpected authentication information
- NTLM-801 — The proxy cannot communicate with the NTLM helper program
- NTLM-802 — An error has occured in the NTLM authentication module
- NTLM-803 — The NTLM helper program have not replied in time
- NTLM-804 — The NTLM helper program have returned an unexpected response
- NTLM-805 — The NTLM helper program have returned an unexpected response
- NTLM-806 — The NTLM helper program have returned an unexpected response
- NTLM-807 — NTLM authentication failed
- NTLM-808 — NTLM authentication cannot obtain group information from LDAP
- NTLM-809 — The NTLM helper program have returned a too long response
- OOBA-001 — No OOBA handle exists for a given set of configuration parameters
- OOBA-100 — The OOB authentication server cannot communicate with proxies
- OOBA-101 — The OOB authentication server cannot communicate with proxies
- OOBA-102 — The OOB authentication server cannot communicate with proxies
- OOBA-103 — The OOB authentication server cannot communicate with proxies
- OOBA-104 — The OOB authentication server cannot communicate with proxies
- OOBA-105 — Proxy cannot terminate using a session table file properly
- OOBA-106 — Proxy cannot terminate using a session table file properly
- OOBA-107 — The proxy cannot communicate with the authentication server
- OOBA-108 — Contents of the OOB authentication session table is not valid
- OOBA-109 — The OOB authentication server cannot release its session table
- OOBA-800 — Limit for number of OOB authenticated users has been reached
- OOBA-801 — A user name does not fit into the OOBA session table entry
- OOBA-802 — List of groups does not fit into the OOBA session table entry
- OSSL-000 — The proxy tried to initialize OpenSSL twice
- OSSL-001 — No SSL context exists for a given set of configuration parameters
- OSSL-002 — The required feature is not implemented in OpenSSL
- OSSL-100 — An SSL context cannot be created
- OSSL-101 — Cipher list for an SSL context cannot be set
- OSSL-102 — The proxy cannot initialize OpenSSL error logging
- OSSL-103 — Contents of the SSL error queue
- OSSL-104 — The proxy cannot load a certificate for SSL/TLS
- OSSL-105 — The proxy cannot load its private key
- OSSL-106 — The proxy cannot load a certificate revocation list
- OSSL-107 — The proxy cannot load a certificate revocation list
- OSSL-108 — The proxy cannot load a certificate revocation list
- OSSL-109 — Parameters for ephemeral DH key exchange cannot be created
- OSSL-110 — Parameters for ephemeral DH key exchange cannot be created
- OSSL-111 — A structure representing a new SSL/TLS connection cannot be created
- OSSL-112 — The OpenSSL library cannot attach to a TCP connection
- OSSL-113 — A SSL/TLS operation failed due to an OS-level I/O error
- OSSL-114 — An SSL/TLS operation due to an error at the OpenSSL library level
- OSSL-115 — The underlaying TCP connection has been unexpectedly closed
- OSSL-116 — A system call has failed during an SSL/TLS operation
- OSSL-117 — The proxy cannot load certificates of trusted certification authorities
- OSSL-118 — The proxy will not use a certificate revocation list
- OSSL-121 — The session id context cannot be set for an SSL context
- OSSL-130 — The SSL session cache cannot be initialized
- OSSL-131 — The SSL session cache cannot be initialized
- OSSL-134 — The SSL session cache cannot be initialized
- OSSL-156 — The process cannot access the SSL/TLS session cache
- OSSL-157 — The SSL/TLS session cache cannot be unlocked
- OSSL-158 — An SSL/TLS session obtained from the session cache is unusable
- OSSL-159 — An SSL/TLS session obtained from the session cache is unusable
- OSSL-160 — The process cannot access the SSL/TLS session cache
- OSSL-161 — The process cannot access a cached SSL/TLS session
- OSSL-162 — The process cannot access the SSL/TLS session cache
- OSSL-600 — The peer has not presented a certificate during SSL/TLS handshake
- OSSL-601 — Peer's certificate could not be verified
- OSSL-602 — Information about a valid peer certificate
- OVPN-001 — Openvpn failed to start the client connect script
- OVPN-098 — Final startup failure message
- OVPN-099 — Final startup failure message
- OVPN-101 — Failed to exec the openvpn daemon
- OVPN-102 — Error during accepting a connection on a socket
- OVPN-103 — Failed to open the socket for reading
- OVPN-104 — Failed to read line from the management socket
- OVPN-105 — Connection from client has been closed before accepted
- OVPN-107 — Openvpn configuration provider failed to create the server socket
- OVPN-108 — Failed to bind the unix-domain socket
- OVPN-109 — Failed to listen on the server socket
- OVPN-111 — Failed to create the client socket
- OVPN-112 — Cannot establish a connection to the openvpn management socket
- OVPN-113 — The parent process tried to signal its children and received an error
- OVPN-114 — An error occured during waiting for a child process
- OVPN-115 — Failed to unlink the socket file
- OVPN-116 — Openvpn failed to execute the client-connect script
- OVPN-301 — Openvpn configuration provider failed to read the row
- OVPN-302 — Openvpn policy enforcement failed to read the row
- OVPN-405 — Client is connected without permission, it will be disconnected now
- OVPN-406 — Openvpn policy enforcement client disconnection report
- OVPN-408 — Failed to load the client connect script
- OVPN-410 — Client is disabled now
- OVPN-501 — Failed to reread the configuration
- OVPN-502 — Openvpn section must reference an interface of the correct type
- OVPN-503 — Ifconfig-pool address must respect the interface range
- OVPN-504 — Ifconfig-push address must respect the interface range
- OVPN-505 — Address pushing in OPENVPN must respect the INTERFACE type
- OVPN-506 — OPEVNPN pushing address collision
- OVPN-507 — Interface not specified for openvpn
- OVPN-508 — Invalid interface type referenced in the openvpn section
- OVPN-510 — Ifconfig-pool collides with the ifconfig-push address
- OVPN-511 — OPENVPN pushing address must not collid with the INTERFACE address
- OVPN-512 — Ifconfig-ipv6-pool address must respect the interface IPv6 network range
- OVPN-513 — Ifconfig-ipv6-push address must respect the interface IPv6 range
- OVPN-514 — Items PROTO, LOCAL and REMOTE must respect each other's address family
- OVPN-515 — Ifconfig-ipv6-pool collides with the ifconfig-ipv6-push address
- OVPN-701 — Unknown command to the openvpn config provider
- OVPN-702 — Failed to serve the client
- OVPN-703 — Failed to connect to the openvpn manage socket
- OVPN-705 — Failed to disconnect the client
- OVPN-706 — Failed to list the connected clients
- OVPN-707 — Openvpn management command failed
- OVPN-709 — Reading the contents of file was unsuccessful
- OVPN-712 — Failed to obtain the status from the openvpn
- OVPN-801 — Openvpn config provider failed to serve the client
- OVPN-802 — Openvpn parent process failed to create a child process
- OVPN-806 — Too many openvpn terminated child processes
- OVPN-807 — Openvpn parent process detected the reload request
- PFCD-720 — PF configuration daemon failed to load new PF tables
- PFCD-820 — PF tables refresh report
- POP3-100 — The main loop for serving clients (tcpserver) failed
- POP3-101 — ALTQ queue assigment has failed
- POP3-200 — Cannot change source address of a connection to a server
- POP3-201 — The proxy cannot initialize a connection to a server
- POP3-202 — The proxy cannot initialize a connection to a server
- POP3-700 — Session ACL has been processed
- POP3-701 — Command ACL has been processed
- POP3-702 — A client has been disconnected from the proxy
- POP3-704 — A new client has connected to the proxy
- POP3-705 — The source address of a connection to a server has been changed
- POP3-710 — A command has been denied by ACL
- POP3-711 — A capability has been denied by ACL
- POP3-712 — An unimplemented capability received from the server
- POP3-800 — Proxy initialization failed
- POP3-801 — An error occurred during searching SESSION-ACLs
- POP3-802 — The client has been denied by SESSION-ACL
- POP3-803 — The proxy is unable to verify user authentication
- POP3-804 — The proxy does not know a server address to connect
- POP3-805 — Initial processing of a new client connection has failed
- POP3-806 — Proxy cannot start SSL/TLS on the client connection
- POP3-807 — Proxy cannot start POP3 protocol
- POP3-808 — An error occurred during searching COMMAND-ACLs
- POP3-809 — The client has been denied by COMMAND-ACL
- POP3-810 — Limit for session duration has been reached
- POP3-811 — The client is sending too much data
- POP3-812 — The server is sending too much data
- POP3-813 — Proxy cannot start SSL/TLS on the server connection
- POP3-814 — The session is being idle for too long
- POP3-815 — Proxy cannot create module for sending a processed mail to the client
- POP3-820 — The client has unexpectedly disconnected from the proxy
- POP3-821 — The server has unexpectedly disconnected from the proxy
- POP3-823 — A client command line is too long
- POP3-824 — A capability line is longer than the configured limit
- POP3-825 — A server response line is too long
- POP3-826 — An authentication challenge line is too long
- POP3-827 — An authentication answer line is too long
- POP3-829 — A command line is longer than the configured limit
- POP3-830 — A line with capability is too long
- POP3-831 — The command from the client is bad
- POP3-832 — A response line is longer than the configured limit
- POP3-833 — The response from the server is bad
- POP3-835 — A mail line is longer than the configured limit
- POP3-836 — The command from the client is bad
- POP3-837 — A mail being retrieved from the server is too big
- POP3-838 — A mail line is longer than the configured limit
- POP3-840 — A mail message contains too long line
- POP3-841 — The proxy does not understand a server response
- POP3-850 — Proxy cannot store a mail for processing
- POP3-851 — A mail cannot be processed
- POP3-852 — A mail has been rejected by DOC-ACL
- POP3-853 — A mail has been rejected by MAIL-ACL
- POP3-860 — Information about selected MAIL-ACL
- POP3-861 — Proxy cannot create module for processing a mail
- PRXY-132 — Switching list of groups from root to another user failed
- PRXY-133 — Switching real and effective GID from root to another user failed
- PRXY-134 — Switching real and effective UID from root to another user failed
- PRXY-135 — Setting login class for the proxy user failed
- PRXY-139 — Proxy cannot change its root directory
- PRXY-251 — Socket option failed to be set on the socket
- PRXY-500 — Application configuration missing
- PRXY-501 — Application configuration is not unique
- PRXY-521 — No USE-RESOLVER used
- PRXY-523 — Resolver configuration reduced
- PRXY-530 — Invalid run-time user specified
- PRXY-531 — Application cannot change its root directory if not started by root
- PRXY-533 — Application cannot be switched to unknown user
- PRXY-541 — Working directory specification invalid
- PRXY-549 — Application cannot create working directory
- PRXY-550 — The application cannot resolve an address it should be listening on
- PRXY-551 — The given IP address is not configured on any interface
- PRXY-552 — No server address to listen on
- PRXY-554 — Failed to prepare the server address
- PRXY-734 — The proxy was switched from root to some other user
- PRXY-739 — Proxy changed its root directory
- PRXY-950 — Listening socket has been prepared
- PRXY-953 — Listen-on address protocol family was deduced
- PRXY-954 — Listen-on address protocol family was deduced
- RCSL-719 — Configuration file inconsistency warning
- RDST-201 — Client has closed connection too early
- RDST-901 — Function realdest() has started its operation
- RDST-902 — Function realdest() has finished its operation
- RSLV-180 — Resolver mapping file unaccessible
- RSLV-213 — DNS resolution failed
- RSLV-330 — Resolver got response with too many resource records
- RSLV-331 — Resolver got response with too many strings
- RSLV-589 — Resolver pool directory misconfigured
- RSLV-730 — Nameserver response inconsistency message
- RSLV-735 — Nameserver response contains invalis CNAME chain
- RSLV-739 — Nameserver response contains no applicable data
- RSLV-741 — Query section of the answer does not match one of request
- RSLV-761 — Nameserver response contains invalid name
- SDPB-710 — SDP line misformed
- SDPB-720 — SDP line misformed
- SDPB-721 — SDP version unrecognized
- SDPB-740 — SDP line misformed
- SDPC-120 — Data port assignment failure
- SDPC-310 — Data channel table exhausted
- SDPC-800 — SIP data channel closed
- SIPB-710 — SIP method recognition message
- SIPB-719 — SIP line misformed
- SIPB-750 — SIP line misformed
- SIPB-751 — SIP line misformed
- SIPB-760 — SIP line misformed
- SIPB-781 — SIP line misformed
- SIPB-789 — SIP line misformed
- SIPC-180 — Routing table search failed
- SIPC-232 — Control connection attempt unsuccessful
- SIPC-310 — Control channel table exhausted
- SIPC-330 — Control channel table exhausted
- SIPC-340 — Control message line too long
- SIPC-341 — Control message unrecognized
- SIPC-588 — Listening socket missing for outgoing direction
- SIPM-380 — Control message too long
- SIPM-753 — Unsupported document body in SIP message
- SIPM-759 — SIP message misformed
- SIPP-119 — Syscall select() in main proxy loop failed
- SIPP-700 — Notification about the mode of operation of the proxy
- SIPP-701 — The proxy has been initialized and is ready to accept packets
- SIPP-708 — The proxy has unbound the sockets used for listening for clients
- SIPP-709 — The proxy has finished
- SIPR-719 — Incomplete request removed
- SIPR-729 — Request was not finished in time
- SIPR-739 — Proxy rejects request
- SIPR-740 — Client registration not accepted
- SIPR-741 — Client registration not accepted
- SIPR-745 — Call transfer requested by user
- SIPR-751 — Misplaced ACK/CANCEL request
- SIPR-759 — Misplaced ACK/CANCEL request
- SIPR-760 — Response message not accepted
- SIPR-761 — Request matching response not found
- SIPR-762 — Misordered response to request received
- SIPR-769 — Cannot match response to request
- SIPR-800 — Response to request arrived and forwarded
- SIPS-130 — Routing table search failed
- SIPS-310 — Session table exhausted
- SIPS-311 — Session table exhausted
- SIPS-530 — Listening socket missing for server session transaction
- SIPS-710 — Received request that cannot establish session
- SIPS-730 — Next-hop for request cannot be determined
- SIPS-760 — Configured IDLE-TIMEOUT expired
- SIPS-800 — Session has started, unmatched request arrived
- SIPS-801 — Session initialized, proxy is ready to mediate communication
- SIPS-809 — Session finished
- SIPS-821 — SESSION-ACL search report
- SIPS-822 — REQUEST-ACL search report
- SIPY-111 — SIP YP map file corrupted
- SIPY-113 — SIP YP map file corrupted
- SIPY-119 — SIP YP map is corrupted
- SIPY-510 — SIP YP map format is older than proxy version
- SLOG-009 — Application has improperly started
- SLOG-011 — Improper combination of arguments to opentnslog() function
- SLOG-020 — Logging function called with unknown severity code
- SLOG-100 — Backup log file cannot be opened
- SLOG-110 — Forwarding log to file failed
- SLOG-120 — A process cannot terminate its logging to memory correctly
- SLOG-121 — A file with memory log of a process cannot be deleted
- SLOG-122 — The process cannot perform logging into memory
- SLOG-123 — The process cannot perform logging into memory
- SLOG-500 — The process cannot perform logging into memory
- SLOG-501 — The process cannot perform logging into memory
- SLOG-700 — Application initial log message
- SLOG-701 — Process initial log message
- SLOG-702 — Change of program identification in log
- SLOG-703 — PID suffix will be used
- SLOG-704 — Communication to syslog daemon successfully reopened
- SLOG-710 — Log destination changed to file
- SLOG-711 — Log destination changed to standard error
- SLOG-712 — Log destination changed to syslog daemon
- SLOG-713 — Re-introduction log message
- SLOG-714 — A memory log file has been successfully initialized for a process
- SLOG-720 — Logging level changed to a new value
- SMTB-350 — Header too long
- SMTB-750 — Header contains invalid character
- SMTB-751 — Header contains invalid quoted character
- SMTB-752 — Header contains unpaired parenthesis
- SMTB-753 — Header contains incorrect quotting
- SMTB-760 — No semicolon found between header arguments
- SMTB-761 — Unquoted character occurred in header
- SMTB-762 — Illegal character used in structured header
- SMTB-780 — MIME header syntax error
- SMTB-781 — Incomplete value in MIME header
- SMTB-789 — Mail or MIME header RFC violation
- SMTC-541 — Header modification too long
- SMTC-542 — Incorrect character found in header modification configuration
- SMTC-560 — Mailbox address incorrect
- SMTC-561 — Mailbox address incorrect
- SMTC-562 — Mailbox address incorrect
- SMTC-563 — Mailbox address incorrect
- SMTC-564 — Mailbox address incorrect
- SMTC-565 — Mailbox address incorrect
- SMTC-569 — SMTP forwarders misconfiguration
- SMTD-100 — Searching of ACL failed
- SMTD-300 — Cannot read mail body line
- SMTD-320 — Message MIME structure is too large
- SMTD-340 — Mail will not be sent as-is, it must be re-assembled from parts
- SMTD-360 — Cannot write mail body line
- SMTD-511 — Incorrect header modification defined in configuration
- SMTD-700 — Possible forwarding loop
- SMTD-720 — Incorrect MIME specification
- SMTD-721 — Incorrect multipart MIME boundary definition
- SMTD-722 — Invalid Content-Transfer-Encoding
- SMTD-726 — Mail text does not contain any boundary line
- SMTD-727 — Boundary regeneration failed
- SMTD-728 — Header and body not separated
- SMTD-729 — MIME structure corrupted
- SMTD-739 — Final message reporting mail/MIME header error
- SMTD-742 — Incorrect character found in mail body
- SMTD-790 — Non US-ASCII mail not correctly declared
- SMTD-803 — DOC-ACL search report
- SMTI-502 — SMTP forwarder contains too many servers
- SMTI-520 — Incorrect black-list configuration
- SMTI-552 — Antivirus configuration inconsistency
- SMTI-553 — QUARANTINE configuration must be specified
- SMTI-554 — SMTP proxy QUARANTINE configuration inconsistent
- SMTI-555 — GREY-LISTING configuration must be specified
- SMTP-090 — TCP server returned with error
- SMTP-099 — Final startup failure message
- SMTP-104 — The proxy cannot use SSL/TLS
- SMTP-239 — Control socket closed by peer
- SMTP-738 — I/O operation on socket failed
- SMTP-801 — Session has started, client connection has arrived
- SMTP-809 — Session finished
- SMTR-101 — Searching of ACL failed
- SMTR-105 — ALTQ queue assigment has failed
- SMTR-109 — Session initialization failed
- SMTR-169 — Mail storing failed
- SMTR-181 — Quarantine storing failed
- SMTR-202 — The proxy cannot establish an SSL/TLS secure channel from the client
- SMTR-300 — The proxy has received line longer than protocol defined maximum
- SMTR-310 — Mail size reached configuration limit
- SMTR-330 — Mail too big
- SMTR-500 — Mail cannot be sent due to unknown forwarder
- SMTR-510 — Cannot force source address in SESSION-ACL
- SMTR-540 — Configuration does not cover fatal error
- SMTR-601 — Unknown client - access denied
- SMTR-602 — Unknown client - access denied
- SMTR-603 — Client found in black list
- SMTR-609 — Client sent too many bad commands
- SMTR-640 — Client sent too many RCPT commands
- SMTR-641 — Client sent too many bad RCPT commands
- SMTR-700 — SMTP command processing report
- SMTR-701 — Unknown command sent by client
- SMTR-702 — Incorrect character in SMTP command
- SMTR-703 — Client has not closed session
- SMTR-709 — Session idle timeout reached
- SMTR-710 — SMTP command syntax error
- SMTR-712 — SMTP command parameter syntax error
- SMTR-719 — SMTP command arguments not valid
- SMTR-730 — MAIL BODY parameter value not valid
- SMTR-740 — Recipient change report
- SMTR-750 — No valid recipient remained
- SMTR-760 — The proxy has received line with unencoded leading dot
- SMTR-769 — EOF encountered during mail reception
- SMTR-801 — SESSION-ACL search report
- SMTR-802 — DELIVERY-ACL search report
- SMTR-803 — MAIL-ACL search report
- SMTR-811 — Opening mail report message
- SMTR-819 — Final mail report message
- SMTS-105 — ALTQ queue assigment has failed
- SMTS-202 — The proxy cannot establish an SSL/TLS secure channel to the server
- SMTS-208 — Forwarder closed connection not using the x21 message
- SMTS-209 — Forwarder has sent x21 message
- SMTS-300 — Forwarder sent too long line
- SMTS-500 — Trivial configuration loop danger
- SMTS-533 — Address being to be forced as source toward the server cannot be resolved
- SMTS-600 — Forwarding channel does not satisfy proxy SSL requirements
- SMTS-700 — Forwarder sent unexpected response
- SMTS-708 — Mail forwarding failed
- SMTS-709 — Session idle timeout reached
- SMTS-711 — Forwarder sent incorrect response
- SMTS-720 — Forwarder sent unknown response
- SMTS-729 — Negative response got from forwarder
- SMTS-730 — Forwarder uses incorrect ESMTP option
- SMTS-739 — Forwarder rejects connection from proxy
- SMTS-740 — Recipient accepted/refused by forwarder
- SMTS-741 — Incorrect mail for 7bit forwarders
- SMTS-750 — Forwarder rejects mail body
- SMTS-815 — Sending mail report message
- SMTT-500 — Triplicator called for configuration w/o grey-listing
- SMTT-740 — Triplet database modification failed
- SMTT-741 — Triplet database modification incorrect - bad state
- SMTT-742 — Triplet database modification incorrect - bad date/time
- SMTT-743 — Triplet database modification incorrect - invalid IP address
- SMTT-744 — Triplet database modification incorrect - bad sender/recipient address
- SMTT-749 — Triplet database modification incorrect
- SMTT-810 — Triplet information display
- SMTT-820 — Triplet database statistical information
- SMTT-830 — Final report message from triplet database cleanup
- SMTV-371 — Checked domain SPF definition incorrect
- SMTV-388 — Domain name stripped suring SPF verification
- SMTV-389 — Checked domain SPF definition incorrect
- SMTV-540 — Grey-listing database filename too long
- SMTV-712 — SPF processing truncated
- SMTV-750 — Checked domain SPF definition incorrect
- SMTV-751 — No SPF definition for domain verified
- SMTV-752 — Checked domain SPF definition incorrect
- SMTV-758 — SPF processing truncated
- SMTV-759 — Final SPF processing message
- SMTV-761 — Checked domain SPF definition incorrect
- SMTV-762 — Checked domain SPF definition incorrect
- SMTV-763 — Checked domain SPF definition incorrect
- SMTV-771 — Checked domain SPF definition incorrect
- SMTV-772 — Checked domain SPF definition incorrect
- SMTV-780 — Checked domain SPF definition incorrect
- SMTX-590 — Boundary length out of bounds
- SQLP-090 — TCP server returned with error
- SQLP-099 — Final startup failure message
- SQLP-100 — Proxy main loop select call failed
- SQLP-104 — Original connection destination getting failed
- SQLP-200 — Proxy main loop timeout reached
- SQLP-239 — TCP socket closed by peer
- SQLP-500 — Database users checking not allowed in unknown protocols
- SQLP-550 — Connect string character set invalid
- SQLP-801 — Client connection arrives to proxy
- SQLP-808 — Session has started, client connection has arrived
- SQLP-809 — Session finished
- SQLS-105 — ALTQ queue assigment has failed
- SQLS-110 — Searching of ACL failed
- SQLS-119 — The proxy is unable to verify user authentication
- SQLS-131 — Connection to server failed
- SQLS-230 — Target server name cannot be resolved to IP address
- SQLS-231 — Target server cannot be connected within timeout period
- SQLS-232 — Target server connection failed
- SQLS-239 — TCP socket closed by peer
- SQLS-530 — Next-hop server/proxy name cannot be resolved to IP address
- SQLS-531 — Next-hop server/proxy cannot be connected within timeout period
- SQLS-532 — Next-hop server/proxy connection failed
- SQLS-533 — Address being to be forced as source toward the server cannot be resolved
- SQLS-700 — TNS protocol version information
- SQLS-711 — TNS protocol checksum is not zero
- SQLS-719 — SQL*Net service name exceeds configured limit
- SQLS-730 — SQL*Net proxy cannot determine target server
- SQLS-732 — Unexpected packet type received
- SQLS-740 — Packet exceeds Session Data Unit
- SQLS-741 — Packet length less than header size
- SQLS-742 — Data offset points into packet structure
- SQLS-743 — Packet is too short to contain data
- SQLS-747 — Server offers TDU less than SDU
- SQLS-748 — Server offers SDU out of valid range
- SQLS-749 — Transparent Network Substrate layer error
- SQLS-750 — Connect packet contains invalid connect string
- SQLS-751 — Connect packet contains invalid connect string
- SQLS-752 — Connect packet contains invalid connect string
- SQLS-753 — Incorrect character found in attribute name
- SQLS-754 — Real destination server cannot be determined
- SQLS-759 — Connect packet contains invalid connect string
- SQLS-760 — Connect string must contain named attribute
- SQLS-761 — Named attribute of connect string must be string
- SQLS-762 — Named attribute of connect string must be list
- SQLS-763 — Named attribute of connect string value invalid
- SQLS-771 — Too many redirection packets encountered
- SQLS-781 — Continuation packet exceeds total packet size
- SQLS-782 — Total length of fragmented message not reached
- SQLS-783 — MORE flag set in packet completing whole message
- SQLS-784 — Connect/redirect string packet splitted in incorrect offset
- SQLS-810 — ACL decision has been made, session either accepted or rejected
- SQLS-819 — Proxy user authentication finished
- SQLS-820 — ACL decision has been made, operation either accepted or rejected
- SQLS-831 — Connection to server was refused
- SQLS-832 — Connection to server was redirected to another server
- SQLS-840 — Session initialized, proxy is ready to mediate communication
- SQLS-850 — Connect string parser message
- SQLT-620 — SQL*Net RPC session authentication started
- SQLT-621 — Database user successfully authenticated by SQL server
- SQLT-622 — Database user logged off
- SQLT-628 — Database user logon failed
- SQLT-629 — Database user not allowed by configuration
- SQLT-720 — Logon packet has incorrect format
- SQLT-721 — Logon packet contain too long user name
- SQLT-722 — Logon packet contains user name with invalid characters
- SQLT-723 — SQL*Net RPC LOGON partially misunderstood
- SQLT-725 — SQL*Net proxy cannot recognize RPC LOGON encoding
- SQLT-727 — SQL*Net proxy registered database authentication result
- SQLT-728 — Incorrect logging sequence
- SQLT-729 — SQL*Net Remote Procedure Call received w/o authentication
- SQLX-501 — Cannot use DB-USER for unknown protocol versions
- TCPC-100 — Socket for outgoing connection not created
- TCPC-210 — Function tcpclient() has successfully connected to server
- TCPC-218 — Connection to one of server's IP addresses failed
- TCPC-219 — Function tcpclient() failed to connect to server
- TCPC-229 — Source network address translation failed
- TCPP-104 — The main loop for serving clients (tcpserver) failed
- TCPP-105 — ALTQ queue assigment has failed
- TCPP-124 — The proxy cannot use SSL/TLS
- TCPP-200 — Proxy cannot configure NAT address mapping on connection to server
- TCPP-201 — Proxy cannot initialize data related to server connection
- TCPP-202 — Proxy cannot create modules for communication with the server
- TCPP-300 — Configured maximum of size of data from server to client exceeded
- TCPP-301 — Configured maximum of size of data from client to server exceeded
- TCPP-701 — Reports NAT mapping of source address of the server connection
- TCPP-710 — A new proxy session has been started
- TCPP-711 — A proxy session has terminated
- TCPP-712 — Reports ACL used for this session
- TCPP-801 — Proxy cannot create modules for communication with the client
- TCPP-802 — The proxy cannot establish an SSL/TLS secure channel from the client
- TCPP-803 — The proxy cannot establish an SSL/TLS secure channel to the server
- TCPP-804 — The proxy is unable to verify user authentication
- TCPP-805 — The proxy cannot initialize client data filtering
- TCPP-806 — The proxy cannot initialize server data filtering
- TCPP-850 — Some unexpected error occurred when searching ACLs
- TCPP-851 — No ACL matches the connection from the client
- TCPP-852 — The ACL matching the client connection denies access
- TCPP-853 — The proxy does not know to which server it should connect
- TCPS-001 — The parent process encountered a child process in unknown state
- TCPS-002 — The child process encountered an unknown command from the parent
- TCPS-104 — Error during waiting for a connection on multiple sockets
- TCPS-105 — Error during accepting a connection on a socket
- TCPS-109 — Cannot allocate memory for communication between parent and children
- TCPS-110 — Cannot deallocate memory for communication between parent and children
- TCPS-113 — Allocation of file descriptor array by malloc() failed
- TCPS-118 — Trying to kill a superfluos child which already terminated
- TCPS-119 — Killing a superfluos child failed
- TCPS-120 — Parent failed when trying to create a new child process
- TCPS-123 — The parent process tried to signal its children and received an error
- TCPS-124 — The parent process tried to signal its children and received an error
- TCPS-125 — Getting exit status of a terminated child process returned error
- TCPS-128 — Connection from client has been closed before accepted
- TCPS-500 — There are some invalid values in the configuration
- TCPS-501 — There are some invalid values in the configuration
- TCPS-502 — There are some invalid values in the configuration
- TCPS-503 — There are some invalid values in the configuration
- TCPS-700 — Notification about the mode of operation of the proxy
- TCPS-701 — The parent process finds out that all its children terminated
- TCPS-702 — The parent process finds out that a child was terminated by a signal
- TCPS-704 — The parent process finds out that a child exited
- TCPS-705 — The select() syscall returned and reported no ready file descriptor
- TCPS-706 — The proxy accepted a new connection from a client
- TCPS-707 — A client connection was handled
- TCPS-708 — Log level incremented in response to a received signal
- TCPS-709 — Log level decremented in response to a received signal
- TCPS-710 — Graceful proxy termination is performed after receiving a signal
- TCPS-711 — Immediate proxy termination is performed after receiving a signal
- TCPS-712 — Log level incremented in response to a received signal
- TCPS-713 — Log level decremented in response to a received signal
- TCPS-714 — The proxy parent process is waiting for termination of children
- TCPS-715 — Connection to a client was closed, proxy is waiting for another client
- TCPS-716 — The proxy has received an information request signal
- TCPS-717 — Statistical message about management of child processes
- TCPS-718 — The proxy has been initialized and is ready to accept packets
- TCPS-719 — Termination of a proxy process by a signal
- TCPS-722 — The proxy has unbound the sockets used for listening for clients
- TCPS-723 — The proxy has finished
- TCPS-730 — Log file will be reopened
- TCPS-731 — An alternative locking algorithm will be used
- TCPS-732 — The standard flock(2) locking algorithm will be used
- TCPS-800 — An address in an unsupported address family was specified for a socket
- TCPS-802 — There is not place for storing state of a new process
- TCPS-804 — A client connection was finished with error
- TCPS-805 — The child process with given PID cannot be found in the scoreboard
- TCPS-810 — The configured maximum of proxy child processes has been reached
- TCPS-811 — The tcpserver cannot be initialized properly
- TCPS-812 — Proxy runtime monitoring support cannot be initialized
- TCPS-813 — The tcpserver cannot be initialized properly
- TCPS-820 — Failed to build listen-on sockets
- TCPS-900 — Information about the number of server sockets
- TCPS-902 — The proxy starts serving connections from clients
- TCPS-903 — A client connection accepted, handling function will be called
- TCPS-904 — A new child process was started
- TCPS-905 — Initial set of children is being created
- TCPS-906 — The proxy parent process started initial children and continues
- TCPS-907 — A proxy child process is terminating itself
- TCPS-908 — Immediate child termination is performed after receiving a signal
- TCPS-909 — Graceful child termination is performed after receiving a signal
- TCPS-910 — Log level incremented in response to a received signal
- TCPS-911 — Log level decremented in response to a received signal
- TCPS-912 — The child process is superfluous and should exit
- TCPS-913 — The child process got SIGHUP, but there is no command from the parent
- TCPS-914 — The child process is superfluous and exits
- TCPS-915 — There are not enough idle children, parent is creating new ones
- TCPS-916 — There are too many idle children, some of them are asked to exit
- TEST-500 — Configuration tester expects command as -t option
- TEST-530 — Too high phase number requested
- UDPP-121 — Udp-proxy was not able to find an ACL appropriate to session
- UDPP-709 — The exit code returned by the proxy process to its parent
- UDPP-712 — The proxy is unable to verify user authentication
- UDPP-810 — A datagram from a client has arrived, a session has started
- UDPP-811 — Session initialized, proxy is ready to mediate communication
- UDPP-812 — Session finished
- UDPP-821 — ACL decision has been made, operation either accepted or rejected
- UDPS-011 — An error occurred during waiting for a child process
- UDPS-110 — The proxy is unable to create a child process
- UDPS-121 — No route to client
- UDPS-141 — No route to server
- UDPS-242 — The proxy cannot initialize communication with a server
- UDPS-320 — The number of active sessions reached table size
- UDPS-350 — UDP datagram is being sent
- UDPS-360 — The proxy received too large datagram
- UDPS-368 — Amount of data transferred exceeded its limit during a session
- UDPS-369 — The number of datagrams reached its limit during a session
- UDPS-501 — There are no addresses on which the proxy should wait for datagrams
- UDPS-510 — The proxy has failed
- UDPS-540 — Cannot resolve name needed for server connection
- UDPS-541 — Session is non-transparent and no plug-to server found in acl
- UDPS-542 — Proxy cannot receive responses from server
- UDPS-543 — Cannot use aliased interface for source-port broadcast input and output
- UDPS-630 — Data from invalid host on server side socket
- UDPS-631 — Data from server occured in session of one-way type
- UDPS-700 — Notification about the mode of operation of the proxy
- UDPS-701 — The proxy has been initialized and is ready to accept packets
- UDPS-705 — Proxy-specific code encapsulated in special function has finished
- UDPS-708 — The proxy has unbound the sockets used for listening for clients
- UDPS-709 — The proxy has finished
- UDPS-710 — The child process was unexpectedly terminated
- UDPS-711 — The child process was unexpectedly terminated by a signal
- UDPS-730 — Server addres of an any-port or any-sock session will be fixed
- UDPS-751 — Session lasts longer than allowed and will be terminated
- UDPS-752 — The peer has not sent any data for too long
- UDPS-810 — Child process PID info
- UDPS-812 — Proxy runtime monitoring support cannot be initialized
- URIP-710 — Processing %xx sequences in URI failed
- URIP-720 — URI cannot be parsed
- IV. Kernun Firewall Reference (7)
- access-control — Kernun proxies access control system
- auth — client authentication on proxy
- cluster — Kernun firewall cluster support
- configuration — general syntax of configuration files
- data-matching — generic data matching and processing in proxies
- doctype-identification — document type recognition methods and configuration
- host-matching — configuration semantics of lists of hosts
- ips — intrusion detection/prevention system and the related
aspects
- kernun — signpost to Kernun firewall manual pages
- logging — Kernun firewall logging facility
- monitoring — Kernun firewall runtime monitoring support
- netio — Kernun firewall network I/O layer
- port-range-listen — the ability of proxies to listen on a port
range and the related aspects
- resolving — DNS resolving in Kernun applications
- tcpserver — TCP client connections and process management in
proxies
- time-matching — syntax and semantics of time specification in
configuration
- traffic-shaping — Kernun firewall traffic shaping support
- transparency — network transparency and the related
aspects
- udpserver — UDP session and process management in proxies
- V. Kernun Firewall Reference (8)
- bootmgr — tool for configuring Kernun boot manager
- cml — Configuration Meta-Language
- configure-isds — creates or edits a configuration based on the template
isds.cml - dns-proxy — Domain Name System (DNS) proxy
- ftp-proxy — File Transfer Protocol (FTP) proxy
- gk-proxy — H.323 Gatekeeper RAS proxy
- h323-proxy — H.323 Protocol Family proxy
- http-proxy — HyperText Transfer Protocol (HTTP) proxy
- icap-server — ICAP server for document inspection
- imap4-proxy — Internet Message Action Protocol v. 4 (IMAP4) proxy
- kat — Kernun Admin Tool
- pop3-proxy — Post Office Protocol v. 3 (POP3) proxy
- sip-proxy — Session Initiation Protocol (SIP) proxy
- smtp-proxy — Simple Mail Transfer Protocol (SMTP) proxy
- sqlnet-proxy — Oracle SQL*Net Proxy
- sysmgr — tool for Kernun installation, upgrade, backup, and
restore
- tcp-proxy — transparent generic TCP proxy
- udp-proxy — generic UDP proxy