Sophos Firewall blocking local debugging on VS 2013

Sophos Firewall is blocking local debugging on VS 2013. Unfortunately the firewall log isn't saying much about what is being blocked. The article below says uninstalling and reinstalling would work but that doesn't seem to be the right solution.
https://social.msdn.microsoft.com/Forums/en-US/56ef23f8-5906-448e-b967-4da3bd2f981d/x64-unrecognized-error-occoured-in-the-windows-web-services-framework-vs-2013?forum=vsdebug

Hi Questionqwe,
Thank you for posting in MSDN forum.
Based on your issue, could you please tell me what operation you do and then get the error message?
Whether you debug a project from VS2013 and then get the error message?
If yes, you get the error message for a specified project or all different type projects get same error message.
Generally, I know that when we debug a project in the VS2013, the firewall may be impact the VS debug. So the better way is that you disable the Sophos Firewall or un-install the Sophos Firewall and then check if you can debug your project successfully in
this VS2013.
In addition, since this Sophos Firewall is third-party tool, we are not support it. So if possible, I suggest you can consult this issue directly to the Sophos Firewall official site:
http://www.firewalls.com/contacts/ , maybe you will get better support.
Thanks for your understanding.
Best Regards,
We are trying to better understand customer views on social support experience, so your participation in this interview project would be greatly appreciated if you have time. Thanks for helping make community forums a great place.
Click
HERE to participate the survey.

Similar Messages

Is there a way to force Local Debug

Hi,
I can't debug on any oracle 9i server, having this issue :
Executing PL/SQL: ALTER SESSION SET PLSQL_DEBUG=TRUE
Executing PL/SQL: ALTER SESSION SET PLSQL_COMPILER_FLAGS=INTERPRETED
Executing PL/SQL: CALL DBMS_DEBUG_JDWP.CONNECT_TCP( '127.0.0.1', '4000' )
ORA-30683: failure establishing connection to debugger
ORA-12541: TNS:no listener
ORA-06512: at "SYS.DBMS_DEBUG_JDWP", line 68
ORA-06512: at line 1
The reason is, I guess, because the Oracle server can't access my computer because there is a firewall between them that I can't remove ...
But, I also use some Oracle 8i db, behind the same firewall, and these work great !
It seems that SQL developper do some local debug on oracle 8i, and some remote debug on oracle 9i.
Is there a way to force local debug on Oracle 9i db from sql developper ? (it should be possible, because TOAD debug works perfectly, so I guess it's using local debug)
Thanks !

Thanks
but I already tried that
It seems I need to provide my IP address, so that the server can access my computer.
But even if I provide it, it's impossible for the server to access my computer because there is a firewall between us that I can't remove ...
There's no way for me to do some remote debug ..
That's why I'd like to do some local debug ...

Firewall blocks afp even though enabled!?

This relates to a G5 running 10.4.11 and a mac pro running 10.5.5
We are having a nightmare with file sharing between two machines. We can connect fine from the mac pro to the g5 via a ethernet router. We can't however connect from the g5 -we can however connect to the internet and pinging the mac pro works. We have tried connecting with the bonjour adress and the ip addres - no results. The personal file sharing tabs in system preferences on both machines are ticked. The firewall is set to allow essential services, and below are listed printer sharing, file sharing etc. However i opened the log and saw that a few afp connections had just been denied - turn the firewall off and we can connect to the macpro. Surely we should be able to connect on a local area network without the firewall blocking it? It also denies cupsd (we have a printer networked to the g5) but also less frequently nmbd, which seems weird as to my limited knowledge this is to do with windows file sharing - and we do not have a windows machine on the network.
Weirdly I enabled the firewalls on both machines fairly recently after noticing they were off - however my client (i am a retoucher) has confirmed that filesharing was always like this - even when firewall off which I seem to recollect as correct. In theory if we have a router with firewall enabled do we need the firewall on on the macs?
Please help I have reached the limit of my knowledge on this one! Many thanks

On the MacPro > System Preferences > Sharing > File Sharing, is the list of shared folders what you expect and for each shared folder, are the authorized users and permissions set up as you would expect? Clicking on the options button underneath that panel, is AFP checked, and if desired or necessary, SMB and/or FTP?
In theory, I would say yes, if you have full faith in the personal integrity of all the local users on the LAN, and you believe them to be cautious enough that they won't have inadvertently downloaded and installed some sort of malware onto their machines, and you believe that your LAN is adequately secured (e.g., using WPA2 for the WLAN), then it is true, you should only need to maintain the firewall at the internet-facing router.

Firewall blocks Airplay (even under 'allow all traffic')

Hi every body,
I am somewhat at the end of my knowledge. I have a mac mini server running Lion 10.7.2 server. Interestingly, my the server's firewall blocks
a) all airplay traffic and
b) 'reading Airport confirguration' requests
even when the firewall is set to 'allow all traffic'. However, when I completely switch it off, everything works just fine.
Any help would really be appreciated.
Thanks a lot.
Nonresidentalien
P.S. I have also tried to open ports 80 (t), 443(t), 554 (t/u), 3689(t), 5297(t), 5289(t/u), 5353(u), 49159(u) and 49163(u) with no success

Pointing to the IPv6 thread was a good idea. After reading it, I found out that the firewall preferences in Server Admin only show you IPv4 related firewall rules.
There is a terminal command that allows you to play with IPv6 rules. And by doing so, I was actually able to get AirPlay working again.
First, you want to show you the current IPv6 firewall rules. In my case they looked like this (10.7.2):
reptilehouse:~ sascha$ sudo ip6fw show
01000        285      96163 allow ipv6 from any to any via lo0
01100         66       5750 allow ipv6 from any to ff02::/16
65000          0          0 deny ipv6 from any to any
65535          6        306 allow ipv6 from any to any
As you can see, rule number 01100 only allows traffic to the local subnet, while the next rule (65000) blocks anything else. So you want to get rid of 65000:
reptilehouse:~ sascha$ sudo ip6fw delete 65000
To confirm, show the rule table again and you should see 65000 is gone:
reptilehouse:~ sascha$ sudo ip6fw show
01000        285      96163 allow ipv6 from any to any via lo0
01100         66       5750 allow ipv6 from any to ff02::/16
65535          6        306 allow ipv6 from any to any
Mind you, the rule numbers could be different on your system and you could see more or less rules. But you get the idea.
What I don't know if whether this is sticky, e.g. survives a reboot.

10.6 Server's Firewall Blocks It's Own Internet Connection

I had this problem about two years ago when I was trying to run 10.6 on my home server (Mac mini) for the first time. Eventually I gave up, reverted the mini back to 10.5, and ram problem-free for years. When 10.7 came out, I tried to upgrade the mini to that. That didn't go well either, but mostly due to Lion missing many many features (suprise!). So I figured that 10.6's problems were fixed by now, and gave it another shot. It went fine and I've been running for about a month problem free (or so I thought). But now it's offline again. I finally found one other person on another forum that had the EXACT same problem as me. And reading this description, I realize that I have been having problems all long, I just assumed they were my ISP's problems, not my own.
So here's what happens. The firewall in 10.6 server will "freak out". It will be running normally, then suddenly it will go haywire and block everything. And I mean everything. My computer won't even be able to get an IP via DHCP. Everything is blocked. But as soon as you stop the firewall, everything works normally. You can even modify the firewall rules, and set it up so there are NO deny rules, and EVERY connection to and from every host is set to allow. And the firewall still blocks everything. This is the same exact thing that happened 2 years ago when I first tried to run 10.6 Server on my mini. The difference is that back then, this would happen either immediatly, or within a day. This time around, with 10.6.8, it took about a month before suddenly, without any provocation, all internet connections stopped.
I've had this happen on multiple computers. I don't do anything special, I just set up a basic firewall scheme where everything in the LAN range is allowed, and everything from "any" is allowed only to service ports I'm running. The basic gateway setup. Now I was running 10.6 Server on my laptop (for netbooting) and it would do the same thing. But because my laptop wasn't acting as a gateway, I could just turn the firewall off (you need the firewall for NAT). My mini server IS acting as a gateway, as was another mini I set up for a client of mine (that eventualy I changed over so they were running off an airport, and the mini server was just a client. But I don't want that setup at home, I want my mini to be the router).
I have verizon Fios internet. 25/25, it's great. The ONT is in my basement, and it's plugged into the same fused outlet as our freezer. From time to time, when the power goes out, it trips that breaker and the outlet goes dead. My itnernet is gone and I have to go reset the outlet. Once I do, my mini won't get an IP from Verizon until I reboot the mini. Not once. Not twice. Usually 5-10 reboots, and suddenly it will get an IP. I always assumed this was a verizon problem. Until I read someone else's post about this same problem. Turns out, that's the firewall blocking DHCP again! If you turn the firewall off, you don't have to keep rebooting, it will grab an IP right away.
At least I'm not crazy! So what is going on here? Does anyone have any idea what is going on with my firewall, or how I can fix it?
Lastly, after 4.5 hours of complete inability to get an internet connection with the firewall on, it just started working again. I now have fully functional, normal internet. I find it hard to believe 10.6 has a firewall that is simply broken. I find it even harder to believe I'm imagining things, or that I've had fluke after fluke. Something is going on with 10.6 Server.

The DNS skapegoat just doesn't make sense.
Why would "improper" DNS cause OS X's firewall to block all network connections? Even the server's ability to make it's own DHCP connection?
As far as a router, I don't want to use a cheap unreliable residential router. I have a home file server that, aside from running 10.6, makes a super reliable router. And port mapping aside, OS X Server's DHCP server is great to use. Rock solid. It makes no sense to run a cheap residential router when I have a home server. Then every 6-18 months, I get to deal with that router slowly failing, as my internet connection gets slower and slower. No thanks.
So back to this firewall issue. I've talked to Apple aobut this before, and they give the same generic "DNS has to be right" answer to basically every problem I've ever had with 10.6 Server (hinting at endless CalDAV problems). But no one has every explained what that specifically means, or how something like wrong DNS (whatever that even means) can cause the firewall to block everything. This just makes no sense to me. And this especially does not explain why, after 10 reboots or so, everything just magically starts running normally.
I just had an incedent today where I woke up to no internet. I rebooted 3 times. Each time, I either got a self-assigned IP address, or the ethernet interface would toggled between "unplugged" and "no-ip". I could turn the firewall off and the server would INSTANTLY start functioning normally. I'd happily run without a firewall, and just turn all services I'm not using off. However NAT needs the firewall, so without the firewall, the Server is the only Mac on the network that has an internet connection. So I kept rebooting and rebooting, and I think about 8 reboots later, like magic, the server came up, grabbed an IP, and everything started working normally.
Also my IP through my ISP is dynamic, and that isn't going to change. So yes, I am trying to use OS X Server as my router on a dynamic internet connection. I've been doing this since the days of Mac OS X Server 10.1. Only 10.6 has had any problems at all.
So really, "10.6 is more picky about DNS" isn't an answer to this problem. Or, at least, it's not a sufficient answer. I need much more information than that.

TCP/IP portrange for local Debugging

How can I restrict the TCP/IP ports used to connect from the server to the client when locally debugging with JDeveloper 10g?
I'm talking about this command (executed by JDeveloper):
call dbms_debug_jdwp.connect_tcp(ip-address, port)
Thanks.

The implementation of the Blackfin target is partially located in "plug-in" VIs that you can access. Open "C:\Program Files\National Instruments\LabVIEW 7.1 Embedded\resource\LabVIEW Targets\Embedded\vdk\vdk_LEP_TargetPlugin\LEP_vdk_ScriptCompiler.vi". You can see in the attached screenshot where this plugin VI determines the IP of the host PC and concatenates it in as a compiler flag. You can modify this LabVIEW code to hard-code that IP if you have multiple IP addresses, or even add functionality to programmatically get the correct IP address!
Message Edited by Michael P on 09-14-2006 02:22 PM
Michael P
National Instruments
Attachments:
BFIP.JPG ‏49 KB

Firewall blocks web sharing

2 computers, laptop with Snow Leopard, large web site in ~/Sites/htdocs, with .shtml files and an SSI file to add text common to all .shtml files. I'd like to see this on the desktop computer as it appears to others , but Firewall blocks web sharing on laptop. How do I fix Firewall?

System Preferences>Sharing. Is File Sharing selected?

Sophos uninstaller says "Sophos Anti-virus is not installed" but sophos still blocks websites.

Hi, I downloaded the free (trial?) version and didn't like it blocking websites. I dragged the app to the trash and, of course, it didn't uninstall. Looked it up and got a (I think there are more than one) remove tool for sophos but it says it can't find sophos on my MAC. Yet, when browsing the internet, sophos still blocks websites. Any suggestions? I'm a little frustrated. Thanks in advance, Willie

Hi Willie,
Sorry you're having trouble. If you uninstall by dragging the app to the trash instead of using the remove sophos tool, this sort of thing unfortunately tends to happen.
One thing I wanted to mention is that if you don't want Sophos to block websites, you can actually disable the web filtering feature. All you have to do is click the sheild icon > preferences > web protection and toggle the switch to 'off.'
Another question, I was just curious if you were having trouble with Sophos blocking sites that you thought were safe? We should only block you from accessing malicious websites, so if we were interferring with accessing "regular" sites, you can let us know which sites were incorrectly blocked, and we'll take another look at it.
All that said, if you just want to remove Sophos there's a couple things you can do.
1. Restart your mac, reinstall Sophos, and then once it's working properly, use the 'Remove Sophos Antivirus' app to remove it
2. Manually remove Sophos
- Open Activity Monitor and stop any processes with "Sophos" in the name
- Open Finder, and remove everything in the following list:
/Library/Sophos Anti-Virus
/Library/LaunchDaemos/com.sophos.*
/Library/LaunchAgents/com.sophos.*
/Library/Preferences/com.sophos.*
/Library/Logs/Sophos Anti-Virus.log
/Applications/Sophos Anti-Virus.app
/Applications/Sophos Remove.app
/var/db/receipts/com.sophos.*
Note: You'll need administrative rights to remove most of those files. Then reboot, to ensure everything is cleared from memory too. Then run through the list again, to ensure you got everything.
Warning: Be cautious when deleting things in some of those directories. Not everything in there is related to our software - our files contain the name "Sophos".
Hope that helps, let me know if you have any trouble!

OS X firewall blocks iTMS

I've spent about two hours trying to figure out why OS X personal firewall blocks the Music Store, with no luck. Unless the firewall is turned off, the other computers (all Macs) on the network cannot log in. The sympton is the "Accessing the store" and eventually timing out.
There are a lot of Windows-specific posts about firewall problems, but none that I could find about the Mac firewall.

I have an additional Ethernet card in my Mac, and share the Internet access via that card. The built in port is connected to a cable modem.
The Ethernet out (from the second card) goes to a sixteen port GigE switch, which lights up various ports around the house.
I don't use any wireless in the house.
Andrew

Firewall blocking video chat connection

I tried to video chat with my wife today from work on my PlayBook. Got a message about a firewall blocking it when it tried to connect us. It gave no further info so it's kind of hard for me to figure out whether this is my work wifi or my own router at home causing this.
Where can I find more info on this?
Staff UI Prototyper (read: full-time hacker)
My BB10 apps: Screamager | Scientific RPN Calculator | The Last Weather App

Hello TheMarco,
Do you know if porting forwarding has been enabled for the firewall settings?
-HMthePirate
Come follow your BlackBerry Technical Team on twitter! @BlackBerryHelp
Be sure to click Kudos! for those who have helped you.Click Solution? for posts that have solved your issue(s)!

Firewall blocks DHCP after Logic Board Change

I had my computer in repair and they changed the logic board. Since then "Set access to specific services" setting misbehaves and blocks DHCP configuration.
After the repair it asked me to allow incoming connections for configd. I denied because I did not know it.
Problem: configd is not listed in Preferences so it cannot be unblocked!!!
How can I completely reset the rules table and start over?
Firewall[41]: Deny configd data in from 10.37.129.1:67 uid = 0 proto=17
Firewall[41]: Deny mDNSResponder data in from 169.254.203.40:5353 uid = 0 proto=17

I give up. This is a horrible issue. Now, the Firewall blocks internet access to configd and mDNSResponder after wakeup from suspend despite being on the "Allow all incoming" list of the System Preferences panel.
The firewall has become useless.
Jul 17 14:22:13 garfield2 Firewall[42]: Deny configd data in from 10.37.129.1:67 uid = 0 proto=17
Jul 17 14:22:15 garfield2 Firewall[42]: Deny configd data in from 10.211.55.1:67 uid = 0 proto=17
Jul 17 14:22:22 garfield2 Firewall[42]: Deny configd data in from 10.37.129.1:67 uid = 0 proto=17
Jul 17 14:22:24 garfield2 Firewall[42]: Deny configd data in from 10.211.55.1:67 uid = 0 proto=17
Jul 17 14:22:30 garfield2 Firewall[42]: Deny configd data in from 10.37.129.1:67 uid = 0 proto=17
Jul 20 09:18:58 garfield2 Firewall[42]: Deny mDNSResponder data in from fe80::21b:63ff:fe9b:37d4:5353 uid = 0 proto=17
Jul 20 09:18:58 garfield2 Firewall[42]: Deny mDNSResponder data in from fe80::21c:42ff:fe00:0:5353 uid = 0 proto=17
Jul 20 09:18:58 garfield2 Firewall[42]: Deny mDNSResponder data in from fe80::21c:42ff:fe00:1:5353 uid = 0 proto=17
Jul 20 09:18:58 garfield2 Firewall[42]: Deny mDNSResponder data in from fe80::21b:63ff:fe9b:37d4:5353 uid = 0 proto=17

Firewall blocking access to app store

Anyone know how to circumvent a firewall blocking app store access (same for itunes) - I can confirm access when on a different network.

found http://support.apple.com/kb/TS1629 which give port number etc for itunes - which I assume as the same for app store

Firewall blocking access to Hyper-V Virtual Machine. Please hep!

Hi there, I hope this is the right spot for this. Allow me to explain the setup we have. We have a server with Hyper-V installed and a VC made for a DC for a small domain we have. I was able to remote into the new DC, and our exchange server
was picking it up as a DC. So far so good.....
Now, here's where we seem to have a problem. We Installed 'Symantec Endpoint Protection' As we have this on a few servers, we had a set of settings for servers. (I didn't set this part up) Now. the problem we are having is that it seems the end point protection
on the Hyper-C Host is blocking connections from Exchange/other computers (access shared folders and logging in). What can i do to resolve this? Connections seem to be fine, (Exchange will pick up the the DC, and i can access shared
folders) when i disable the firewall and network threat protection on the Hyper-V Host.
Our Exchange server is 2010
We are using Server 08 R2
Can someone please advise me on how i can get this resolved, so i don't have to leave the server with Hyper not behind a firewall or network threat protection.

Hi,
I am Chetan Savade from Symantec Technical Support Team.
There was a known issue between SEP and Hyper-V traffic. It's been resolved in the latest release of SEP. If not using the latest version upgrade to the latest version can be a possible solution.
SEP 12.1 RU4 MP1a (12.1.4104.4130) is the latest verison.
HyperV traffic was blocked with Symantec Endpoint Protection Firewall enabled
Fix ID: 3181006
Symptom: The Symantec Endpoint Protection firewall blocks HyperV traffic.
Solution: Modified the loopback packet processing in the Teefer driver.
Reference: http://www.symantec.com/docs/TECH216262
Best Regards,
CHETAN

Sophos Firewall\Reverse Proxy With Lync 2013

We currently have Lync 2013 deployed internally and working like a champ for about 5 months now. We are in the process of trying to get this rolled out externally and running into issues.
It seems we have the ports opened up properly but the MS remote connectivity analyzer comes back with certificate error "The certificate couldn't be validated because SSL negotiation wasn't successful.
I'm pretty certain our certificates are correct for the external edge server and the external firewall\Reverse proxy. From the Lync planning tool we have been following it and so far successful until the certificates. The certificates tool shows we should
have the following certs assigned: (keep in mind we have 2 separate certificates assigned)
Edge Server External
Subject name: lyncaccess.domain.com
SAN:webcon.domain.com and sip.domain.com
Reverse Proxy:
rp0100.domain.com (reverse proxy FQDN does resolve)
SAN: dialin.domain.com, meet.domain.com, and temwac.domain.com (office web apps server)
We requested the certificates from Go daddy and have them installed and the SANs are in there correct. The connectivity analyzer is able to get to our server using autodiscover over port 443, we see the traffic come in through the firewall and nothing is
blocked just the certificate could not be validated.
Has anyone deployed Lync using the Sophos UTM as a reverse Proxy any other ideas as to what we are missing with these certificates?
The certificate couldn't be validated because SSL negotiation wasn't successful.
The certificate couldn't be validated because SSL negotiation wasn't successful.

lyncdiscover.domain.com does not resolve. Discovery is working fine through the connectivity analyzer. We actually figured that part out about the SSL. It seems we had the firewall and Reverse proxy rules in place on the Sophos appliance but the firewall
rules leaving the edge server were being blocked. It took us about 1.5 days to figure that part out.
The connectivity analyzer now is able to authenticate the certificates successfully. Of course it wouldn't be a Lync roll out without the next issue coming up.
The next issue we have is the connectivity analyzer reaching the AV service. Which we are going to assume is a routing issue as well and are currently troubleshooting it:
Couldn't sign in. Error: Error Message: The endpoint was unable to register. See the ErrorCode for specific reason..
Error Type: RegisterException.
Deregister Reason: None.
Response Code: 504.
Response Text: Server time-out.
http://social.technet.microsoft.com/Forums/lync/en-US/f95c47cc-f8eb-4646-bdac-6c7244b26ff1/couldnt-sign-in-error-error-message-the-endpoint-was-unable-to-register-new-deployment?forum=ocsplanningdeployment
Wish me luck.

Firewall blocks ssh since Sept 12 update

I have a Mac Pro Early 2008 running Lion 10.7.1 (11826). Since the "Security Update 2011-005" yesterday morning (Sept 12), the firewall does not allow incoming ssh connections, even though "remote login" is enabled in the "Sharing" preferences pane, and the firewall config page under "Security & Privacy" shows that "Remote Login (SSH)" is set to "Allow incoming connections". I do this all the time, and the behavior definitely changed with yesterday's update.
To be clear, with the firewall turned off, I am able to ssh into the machine from another machine on the local network. When I turn the firewall on, despite the options set as described above, I am unable to make an ssh connection. This worked before yesterday's update. I think that Apple broke something with the update.

Okay, I just found out you have to query anchor rules with a special switch (-a).
I just found out there is no entry for SSH which should read something like
"pass in on inet proto tcp from any to any port ssh keep state"
euler:~ dr$ sudo pfctl -a "com.apple/100.InternetSharing" -vvvsr
No ALTQ support in kernel
ALTQ related functions disabled
euler:~ dr$ sudo pfctl -a "com.apple/250.ApplicationFirewall" -vvvsr
No ALTQ support in kernel
ALTQ related functions disabled
@0 block drop in inet proto icmp all icmp-type echoreq
[ Evaluations: 306 Packets: 0 Bytes: 0 States: 0 ]
[ Inserted: uid 0 pid 33285 ]
@1 block drop in inet6 proto ipv6-icmp all icmp6-type echoreq
[ Evaluations: 228 Packets: 0 Bytes: 0 States: 0 ]
[ Inserted: uid 0 pid 33285 ]

Sophos Firewall blocking local debugging on VS 2013

Similar Messages

Maybe you are looking for