I saw some old posting about this with no solutions, so i start a new topic.
XP SP2 latest WU, no other issues at all, latest Kerio/Sunbelt Free FW, latest Avast Home.
A few months ago i started having random issues browsing: IE6, IE7 or FF, all of them can browse OK for some time on any kind of web sites, but all of a sudden the “Waiting for… reply” appears in status bar and pages freeze/stall. Sometimes F5/refreshing works, sometimes Shift+F5 works, sometimes refreshing can work after a lot of times or after a complete cache emptying and browser close, sometimes it’s dead until next reboot.
I also have a Vista inst. (dual boot) with Avast and Windows Vista firewall and it has no problems. But it’s not Kerio, read down.
Downloads do work as expected, FTP works as expected: it seems to affect HTTP/Browsing only. Terminating Kerio doesn’t help.
I had no ideas left after months of this crazy/random behaviour, but today i terminated (not paused!) Web Shield: the web page immediately starts to download, without having to do anything. Even previewing this post was frozen until i killed Web Shield!
Disable the privacy options of Kerio (if you’re on the trial period of it). Test.
Sorry the silly question, but is ashWebSv.exe allowed to connect (inbound) into Kerio settings? If so, can you delete this entry and wait for Kerio to ask again when you’re browsing to allow the WebShield program to connect, allowing it. Will it help?
Is there any other security program that could interfere?
i have no rule for ashWebSv.exe in Kerio, and i have “Any other application: Internet: In=deny, Out=permit” in Kerio’s Network Security - Applications screen: are you suggesting me to create a rule for ashWebSv.exe, incoming, permit all local ports/remote ports/protocols?
Yes. ashWebSv.exe works like a local proxy that needs inbound connection: Internet > Kerio > WebShield > Browser.
If you don’t allow it, you won’t connect, i.e., it won’t be allowed to scan the http traffic.
even after creating the Kerio rule for ashWebSv.exe IN/ALL/ALL (or disabling Kerio) i have the same jerky browsing experience (or non-experience i should say…). And once more, no matter what settings i use for Kerio, disabling the Web Shield makes things go rolling again.
I would need some further help to troubleshoot… What i did is to enable logging but to my eyes it doesn’t show clear issues.
Yes Kerio in free mode, with all AD Blocking and Privacy tick boxes unticked (it should not matter since it is already in free mode, but you’ll never know…).
However:
Kerio + Web Shield running: browsing ok
All of a sudden (random): page locked/stalled
Exiting Kerio: no change
Stopping Web Shield: immediate page download without a refresh.
Or:
Kerio + Web Shield running: browsing ok
All of a sudden (random): page locked/stalled
Stopping Web Shield: immediate page download without a refresh.
This looks to me an Avast issue, but if you think it’s necessary i’ll export Kerio configs and remove from the system.
The frustrating thing is the randomness browsing stops and the randomness of F5/Shift+F5 workaround: it can work once and 30secs later stop working completely.
It will create a memory dump of running webshield process (in the file ashwebsv.dmp). Please upload the file to our ftp server (ftp://ftp.avast.com/incoming) and send Lukas a mail about it (rypacek (at) asw.cz).
Maybe activate logging in WebShield:
Edit \data\avast4.ini file
Find the section [WebScanner]
Add the line:
EnableLogging=1
Restart Web Shield in XP (terminate and start again) or whole PC in case of Win98
Browse (trying to access some webpages)
The log file are \data\log\ashwebsv.log and ashwebsv.ws.
They would be accessible when WebShield is terminated again.
Post them here or send by mail to rypacek (at) asw.cz
After that, disable the logging to avoid a big log file.
AshWebSv doesn’t crash, so no post mortem reports like in that thread.
I’ve uploaded a zip with two stall/freeze episodes to your ftp server (schar07 AshWebSv Dumps-Logs 070923.zip) and sent an email to Lukor. 1st episode happened with 1st web site request, Google :-), the 2nd after a good while. Using IE7 latest WU with Kerio Sunbelt Free latest running.
Not much i can see from logs: .ws is always empty, while 1st .log is:
9/23/2007 10:31:53 AM,“http://www.google.com/“,”","GET”,HTTP Status: -1,0,0,0,483,483,0,\Device\HarddiskVolume1\Program Files\Internet Explorer\iexplore.exe,PID: 3620,CON: 127.0.0.1:12080->127.0.0.1:1075 ↔ 192.168.1.2:1076->209.85.129.99:80,SEQ: 1
Hi, I’ve also the same problem.
I have had a similar configuration on a pc based on an athlon Xp+ 1700 / 512meg
(kerio free + avast free) for several years without any problem, also installed the same combination on
other computers and never a problem.
Recently i’ve upgraded to an amd64 x2 (and the same is happening to a friend who also have a similar pc with a amd64x2) and I am experiencing this problem.
The browsing works fine then suddenly new pages are not opened or do not finish to load with the round icon in firefox that doesn’t stop
to roll. Also sometime the page is loaded but is rendered as text and i see the GET message and than the source of the page.
I’ve already tried to:
-disable kerio
-delete and recreate webshield rule for kerio
-disabled the redirect on port 80 and configured the browser to use webshield as a proxy
-enabled / disabled power management
As soon the web shield is stopped (not paused) the browsing works fine.
And what about if you uninstall Kerio? Maybe disable is not enough. And try.
Seems that something could be weird in latests avast and Kerio installations…
not tried to uninstall but disabled the service with ( net.exe stop SPF4 ) and not simply disabled the firewall
with its own disable feature, winxp issued a warning saying “you are without firewall!!” and same thing happens.
I’ll try to uninstall and let you know.
It is more likely to trigger the problem opening a lot of pages (10 - 15 ) simultaneously
As stated before i have other computers with same installation /combination of softwares and everything is fine
Well opening 10-15 pages simultaneously would certainly put some extra load on the web shield, but it shouldn’t last a long time and not cause the freeze/stalling/hanging HTTP/Browsing you mention in the title.
Also since you mention random if this only happened when simultaneously opening 10-15 web pages wouldn’t be random.
Are there any features/plug-ins in Kerio that monitor web pages for say, Content, Active Content or Ads, etc. (mine, Outpost Pro does and they are all disabled) these might get tangled with the web shield depending on how they work.
at last I’ve uninstalled kerio and the browsing is ok.
The strange thing is that i’ve installed the same kerio and the same avast, using the
same installation files, into a virtual machine running on the computer that have problem and
from within this vm the browsing is ok.
It seems that my dump files (sent to Lukas) don’t show any stall in WebShield. Moreover it seems that setting the proxy manually into the internet settings doesn’t help.
However Kerio loads the service kpf4ss.exe and the device driver fwdrv.sys at boot, the latter of which can’t be unloaded simply exiting. When back from a work trip i’ll post the findings of completely removing it (bad for the bunch of rules i’ll have to re-create in Comodo…).
Thanks,
Schar07
PS: I have a C2D E6600, and i think this started back in end-of-may/june: Kerio was the same, Avast was younger but they worked fine together. May this help? But of course also Windows Update patching was younger
