Error: "IP Freq module: address resolution disabled; verdict "freq_dha" disabled as a result" in the filter-hub log

Article:TECH83434  |  Created: 2005-01-06  |  Updated: 2006-01-28  |  Article URL http://www.symantec.com/docs/TECH83434
Article Type
Technical Solution

Issue



You are seeing the following warning in the filter-hub log:

"(WARNING:5732.1088502576): [47015] IP Freq module: address resolution disabled; verdict "freq_dha" disabled as a result."


Solution



This warning is caused when Directory Harvest attacks have been enabled, but an LDAP Synchronization source has not been configured correctly. To solve this problem, either configure an LDAP synchronization server, or disable Directory Harvest attacks.

The implication of this warning message is that the Directory Harvest verdict is disabled.




Technical Information
The LDAP synch data stored on the appliance might be corrupted or incomplete. If the operating system for the appliance is upgraded to version 4.1.2.x, then use the following sections in order presented to remove the LDAP sync data and then re-add.


To remove the LDAP sync data from the command line

  1. Log on to the appliance with an admin account.
  2. Open the command line.
  3. At the prompt, press Enter after typing in the command:
    clear syncdata
  4. A prompt displays, type:
    Yes

    This process may take time, please wait until it completes before proceeding to the next step.
To remove LDAP sources from the Control Center
  1. Open the Control Center.
  2. On the menu bar, click Settings.
  3. In the left pane, under Settings, click LDAP Settings.
  4. In the right pane, under LDAP Server, check an LDAP sources and then click Delete.
    Repeat until all LDAP sources are removed.

To disable scanner replication
  1. Open the Control Center.
  2. On the menu bar, click Settings.
  3. In the left pane, under Settings, click Replication Settings.
  4. In the right pane, under LDAP Server, uncheck Enable Scanner Replication.

To re-add LDAP sources from the Control Center
  1. Open the Control Center.
  2. On the menu bar, click Settings.
  3. In the left pane, under Settings, click LDAP Settings.
  4. In the right pane, under LDAP Server, check an LDAP sources and then click Add.
    Re-add the LDAP sources.

To enable scanner replication
  1. Open the Control Center.
  2. On the menu bar, click Settings.
  3. In the left pane, under Settings, click Replication Settings.
  4. In the right pane, under LDAP Server, check Enable Scanner Replication.
  5. On the menu bar, click Status.
  6. In the left pane, under Overview, click LDAP Synchronization.
  7. In the right pane, under LDAP Synchronization Status monitor the progress of the synchronization.
  8. In the left pane, Under Overview, click Scanner Replication.
  9. In the right pane, under Scanner Replication Settings, monitor to ensure the replication process ends correctly.




Legacy ID



2005060610191563


Article URL http://www.symantec.com/docs/TECH83434


Terms of use for this information are found in Legal Notices