Troubleshooting Apache HTTP Proxy

If the ESET Dynamic Threat Defense is failing and Apache HTTP Proxy is used to cache the communication, you can enable diagnostic logging for the Apache HTTP Proxy to investigate the problem. You can provide the logs to ESET Technical Support for further analysis.

The diagnostic logging is a performance intensive process. Be aware of the possible loss of performance and use it only temporarily. Enable the logging only for a necessary time period.

Enable diagnostic logging for Apache HTTP Proxy

1.Stop the Apache HTTP Proxy service using the command: sc stop ApacheHttpProxy

2.Back up the configuration file httpd.conf. It is usually located at C:\Program Files\Apache HTTP Proxy\conf

3.Modify the configuration file as described below:

a)Un-comment (delete the # at the beginning):
LoadModule log_config_module modules/mod_log_config.dll

b)Add the line below in the beginning of the  <IfModule log_config_module> section:

LogFormat "%h %l %u %t \"%r\" %>s %b \"%{Referer}i\" \"%{User-Agent}i\" \"%{cache-status}e\"" combined-cache

c)Comment the line (add # at the beginning):
CustomLog "logs/access.log" common

d)Change the line CacheLockMaxAge 10 to CacheLockMaxAge 15

e)Change the line ProxyTimeOut 900 to ProxyTimeOut 1200

f)In the section <VirtualHost *:3128>, below the line ServerName r.edtd.eset.com, add the lines:
<If "%{REQUEST_METHOD} == 'CONNECT'">
Require all denied
</If> 
 

g)Change the line:
ProxyPass / https://r.edtd.eset.com/ timeout=300 keepalive=On ttl=100 max=10 smax=10
to following:
ProxyPass / https://r.edtd.eset.com/ timeout=300 enablereuse=On keepalive=On ttl=100 max=100 smax=10

h)Add the following lines to the end of the file:

ErrorLog '|"C:/Program Files/Apache HTTP Proxy/bin/rotatelogs.exe" -n 10 "C:/Program Files/Apache HTTP Proxy/logs/error.log" 1M'

CustomLog '|"C:/Program Files/Apache HTTP Proxy/bin/rotatelogs.exe" -n 10 "C:/Program Files/Apache HTTP Proxy/logs/access.log" 100M' combined-cache

3.Save the httpd.conf file and start the Apache HTTP Proxy service:
sc start ApacheHttpProxy

Next steps

Keep the logging on only for a necessary time period and copy the logs after it is disabled. Logs are located at:

C:/Program Files/Apache HTTP Proxy/logs/error.log

C:/Program Files/Apache HTTP Proxy/logs/access.log

To disable the diagnostic logging:

1.Stop the Apache HTTP Proxy service.

2.Revert the configuration file from the backup.

3.Start the Apache HTTP Proxy service.