R80.30 - mygateway ipstcl2: Special characters found

AkosBakos — Wed, 14 Apr 2021 11:33:44 GMT

Hi All,

Gateway Version: R80.30 (2.6) - JHF 226

I found a lot of enties in customer's messages file. I know there is a characther but, how can I point out which configuration contains it?

Can you help me?

(part of ) /var/log/messages:

Apr 14 05:14:31 2021 mygateway ipstcl2: Special characters found
Apr 14 05:14:31 2021 mygateway ipstcl2: check_special_char: The value of the key catid contained special character
Apr 14 05:14:31 2021 mygateway ipstcl2: Special characters found
Apr 14 05:14:32 2021 mygateway ipstcl2: check_special_char: The value of the key HTNAME contained special character
Apr 14 05:14:32 2021 mygateway ipstcl2: Special characters found
Apr 14 05:14:32 2021 mygateway ipstcl2: check_special_char: The value of the key direct contained special character
Apr 14 05:14:32 2021 mygateway ipstcl2: Special characters found
Apr 14 05:14:32 2021 mygateway ipstcl2: check_special_char: The value of the key v contained special character
Apr 14 05:14:32 2021 mygateway ipstcl2: Special characters found
Apr 14 05:14:32 2021 mygateway ipstcl2: check_special_char: The value of the key v contained special character
Apr 14 05:14:32 2021 mygateway ipstcl2: Special characters found
Apr 14 05:16:13 2021 mygateway ipstcl2: check_special_char: The value of the key type_id[] contained special character
Apr 14 05:16:13 2021 mygateway ipstcl2: Special characters found
Apr 14 05:16:18 2021 mygateway ipstcl2: check_special_char: The value of the key INIFILE contained special character
Apr 14 05:16:18 2021 mygateway ipstcl2: Special characters found
Apr 14 05:16:18 2021 mygateway ipstcl2: check_special_char: The value of the key helpFile contained special character
Apr 14 05:16:18 2021 mygateway ipstcl2: Special characters found
Apr 14 05:16:18 2021 mygateway ipstcl2: check_special_char: The value of the key lookup contained special character
Apr 14 05:16:18 2021 mygateway ipstcl2: Special characters found
Apr 14 05:16:18 2021 mygateway ipstcl2: check_special_char: The value of the key manufacturers_id contained special character
Apr 14 05:16:18 2021 mygateway ipstcl2: Special characters found
Apr 14 05:16:18 2021 mygateway ipstcl2: check_special_char: The value of the key helpFile contained special character
Apr 14 05:16:18 2021 mygateway ipstcl2: Special characters found
Apr 14 05:16:18 2021 mygateway ipstcl2: check_special_char: The value of the key return contained special character
Apr 14 05:16:18 2021 mygateway ipstcl2: Special characters found
Apr 14 05:16:18 2021 mygateway ipstcl2: check_special_char: The value of the key Itemid contained special character
Apr 14 05:16:18 2021 mygateway ipstcl2: Special characters found
Apr 14 05:16:18 2021 mygateway ipstcl2: check_special_char: The value of the key appName contained special character
Apr 14 05:16:18 2021 mygateway ipstcl2: Special characters found
Apr 14 05:16:18 2021 mygateway ipstcl2: check_special_char: The value of the key menu contained special character
Apr 14 05:16:18 2021 mygateway ipstcl2: Special characters found
Apr 14 05:16:19 2021 mygateway ipstcl2: check_special_char: The value of the key pageTitle contained special character
Apr 14 05:16:19 2021 mygateway ipstcl2: Special characters found
Apr 14 05:16:19 2021 mygateway ipstcl2: check_special_char: The value of the key width contained special character
Apr 14 05:16:19 2021 mygateway ipstcl2: Special characters found
Apr 14 05:16:19 2021 mygateway ipstcl2: check_special_char: The value of the key text contained special character
Apr 14 05:16:19 2021 mygateway ipstcl2: Special characters found
Apr 14 05:16:19 2021 mygateway ipstcl2: check_special_char: The value of the key confirm contained special character
Apr 14 05:16:19 2021 mygateway ipstcl2: Special characters found
Apr 14 05:16:19 2021 mygateway ipstcl2: non-valid characters found
Apr 14 05:16:19 2021 mygateway ipstcl2: check_special_char: The value of the key op contained special character
Apr 14 05:16:19 2021 mygateway ipstcl2: Special characters found
Apr 14 05:16:19 2021 mygateway ipstcl2: check_special_char: The key &name contains special character
Apr 14 05:16:19 2021 mygateway ipstcl2: Special characters found
Apr 14 05:16:20 2021 mygateway ipstcl2: check_special_char: The key <script>alert(document.domain)</script> contains special character
Apr 14 05:16:20 2021 mygateway ipstcl2: Special characters found
Apr 14 05:16:20 2021 mygateway ipstcl2: check_special_char: The value of the key type contained special character
Apr 14 05:16:20 2021 mygateway ipstcl2: Special characters found
Apr 14 05:16:20 2021 mygateway ipstcl2: check_special_char: The value of the key bn contained special character
Apr 14 05:16:20 2021 mygateway ipstcl2: Special characters found

Re: R80.30 - mygateway ipstcl2: Special characters found

_Val_ — Wed, 14 Apr 2021 12:06:55 GMT

What does the oldest message say?

Re: R80.30 - mygateway ipstcl2: Special characters found

AkosBakos — Wed, 14 Apr 2021 12:10:15 GMT

Unfortunately the oldest messages file does not contain the first message.
Thats my problem.
I suppose that, customer configurates SNMP, now my investigation focus on this.
Any other ideas are welcome 🙂

Re: R80.30 - mygateway ipstcl2: Special characters found

_Val_ — Wed, 14 Apr 2021 12:14:54 GMT

Please check that SNMP, FTP/TFTP and other customer configuration, do not contain any special character in a username or password. If you cannot find any, please clean the messages and reboot, then tail message file for the occurrence.

Re: R80.30 - mygateway ipstcl2: Special characters found

AkosBakos — Mon, 26 Apr 2021 06:24:16 GMT

Hi Val,

We did the reboot, and the first occurence is this:

Apr 23 02:34:48 2021 mygw ipstcl2: check_special_char: The value of the key target contained special character
Apr 23 02:34:48 2021 mygw ipstcl2: Special characters found

Can you suggest further steps? Or I need to open a TAC case?

BR,

Ákos

Re: R80.30 - mygateway ipstcl2: Special characters found

eltonsimoes — Sun, 11 Feb 2024 05:35:15 GMT

Hi,

I also experienced this same problem in version R81.10 jhf take 130 in the Check Point 7000 model. In my case, it was a special character (!) that was added by one of the administrators in the input message (banner). After removing the character, the error no longer appeared in /var/log/messages. Hope this helps!

Best regards,

Elton Simões

topic Re: R80.30 - mygateway ipstcl2: Special characters found in Firewall and Security Management

R80.30 - mygateway ipstcl2: Special characters found

Re: R80.30 - mygateway ipstcl2: Special characters found

Re: R80.30 - mygateway ipstcl2: Special characters found

Re: R80.30 - mygateway ipstcl2: Special characters found

Re: R80.30 - mygateway ipstcl2: Special characters found

Re: R80.30 - mygateway ipstcl2: Special characters found