Cisco Umbrella update 2.2.580

JoaoSilva31766 · ‎03-16-2021

Hello all,

I'm facing some issues after Umbrella update.

After the automatically update to 2.2.580, the old version (2.2.356) tried to install over 2.2.580, and some workstations stopped to connect correctly to Umbrella.

The status of this workstations passed from "protect" (green) to "unprotected" (red) and "waiting" (blue).

Already tried uninstall all versions and install the 2.2580 but still the same thing...

In OpenDNS_ERC_Service.log of one machine I got this:

2021-03-16 09:38:33 [5724] [ERROR] < 21> Dns Protection IPv4 State Machine: Dns Protection IPv4 State Machine work thread: Exception while executing Action: 'System.Net.Sockets.SocketException (0x80004005): An existing connection was forcibly closed by the remote host
at System.Net.Sockets.Socket.EndReceiveFrom(IAsyncResult asyncResult, EndPoint& endPoint)
at System.Net.Sockets.UdpClient.EndReceive(IAsyncResult asyncResult, IPEndPoint& remoteEP)
at Core.NetworkProbe.SendParallelQueries(List`1 destinations, UInt16 destPort, String name, Byte type)
at Core.NetworkProbe.CheckSystemResolversHelper(Boolean& o_hasV4Address, Boolean& o_hasV6Address, Boolean& o_hasIPv4Resolvers, Boolean& o_hasIPv6Resolvers, IPAddress& o_ipv4Lan, IPAddress& o_ipv6Lan)
at Core.NetworkProbe.CheckSystemResolvers(Boolean& o_hasIPv4Stack, Boolean& o_hasIPv6Stack, Boolean& o_hasWorkingIPv4Resolvers, Boolean& o_hasWorkingIPv6Resolvers, IPAddress& o_lan4, IPAddress& o_lan6)
at Core.IPv4NetworkChecker.SystemResolversAreResponding(Boolean& o_networkStackExists, Boolean& o_dualStackExists, Boolean& o_dualStackRequired, IPAddress& o_interfaceAddressUsed)
at Core.DnsProtectionStateMachine.ScheduledMonitorSystem(Boolean forceDiscovery, Boolean resetStateMachine, IEnumerable`1 downNics)
at Core.DnsProtectionStateMachine.<MonitorTimerElapsed>b__117_0()
at Core.WorkThread.ThreadProc(Object data)', id: '########', created ts: '3/16/2021 9:38:33 AM'
2021-03-16 09:38:38 [5724] [DEBUG] < 20> Dns Protection: NetworkProbe: refreshing system resolver check cache
2021-03-16 09:38:38 [5724] [DEBUG] < 21> Dns Protection: NetworkProbe: refreshing system resolver check cache
2021-03-16 09:38:38 [5724] [ERROR] < 20> Dns Protection IPv6 State Machine: Dns Protection IPv6 State Machine work thread: Exception while executing Action: 'System.Net.Sockets.SocketException (0x80004005): An existing connection was forcibly closed by the remote host
at System.Net.Sockets.Socket.EndReceiveFrom(IAsyncResult asyncResult, EndPoint& endPoint)
at System.Net.Sockets.UdpClient.EndReceive(IAsyncResult asyncResult, IPEndPoint& remoteEP)
at Core.NetworkProbe.SendParallelQueries(List`1 destinations, UInt16 destPort, String name, Byte type)
at Core.NetworkProbe.CheckSystemResolversHelper(Boolean& o_hasV4Address, Boolean& o_hasV6Address, Boolean& o_hasIPv4Resolvers, Boolean& o_hasIPv6Resolvers, IPAddress& o_ipv4Lan, IPAddress& o_ipv6Lan)
at Core.NetworkProbe.CheckSystemResolvers(Boolean& o_hasIPv4Stack, Boolean& o_hasIPv6Stack, Boolean& o_hasWorkingIPv4Resolvers, Boolean& o_hasWorkingIPv6Resolvers, IPAddress& o_lan4, IPAddress& o_lan6)
at Core.IPv6NetworkChecker.SystemResolversAreResponding(Boolean& o_networkStackExists, Boolean& o_dualStackExists, Boolean& o_dualStackRequired, IPAddress& o_interfaceAddressUsed)
at Core.DnsProtectionStateMachine.ScheduledMonitorSystem(Boolean forceDiscovery, Boolean resetStateMachine, IEnumerable`1 downNics)
at Core.DnsProtectionStateMachine.<MonitorTimerElapsed>b__117_0()
at Core.WorkThread.ThreadProc(Object data)', id: '#####, created ts: '3/16/2021 9:38:38 AM'

and in another I got this:

2021-03-15 14:27:06 [2832] [DEBUG] < 23> Dns Protection: NetworkProbe: system resolver check results will be cached for 300,00 seconds
2021-03-15 14:27:06 [2832] [DEBUG] < 23> Dns Protection: NetworkProbe: evaluated system resolver check data: (has IPv4 stack: True, has IPv6 stack: False, has working IPv4 resolvers: True, has working IPv6 resolvers: False, IPv4 LAN address: 10.14.150.67, IPv6 LAN address: <none>)
2021-03-15 14:27:07 [2832] [DEBUG] < 23> Dns Protection IPv4 State Machine: dnscrypt-proxy.exe will restart; dnscrypt-proxy.exe is not running
2021-03-15 14:27:07 [2832] [INFO ] < 23> DnsCryptProxy IPv4: Launching C:\Program Files (x86)\OpenDNS\Umbrella Roaming Client\dnscrypt-proxy.exe --local-address=127.0.0.1 --resolver-address=208.67.222.222:443 --plugin="C:\Program Files (x86)\OpenDNS\Umbrella Roaming Client\libdcplugin_erc.dll,-u,20a8e57269b5986550f25aaef6e1fddc,-i,10.14.150.67,-o,3119788,-d,01013A93021B889B,-n,-w,C:\ProgramData\OpenDNS\ERC\proxy_whitelist4.txt,C:\ProgramData\OpenDNS\ERC\ResolverV4-1-6A3099B118DC40F4B94EABA1088BFE7C-resolv.conf,C:\ProgramData\OpenDNS\ERC\ResolverV4-2-EC150410C0254FA49A8F9DAD52710CE6-resolv.conf"
2021-03-15 14:27:07 [2832] [DEBUG] < 23> Dns Protection IPv4 State Machine: restarting dnscrypt-proxy.exe; changed state: [FailOpen] => [Reserved]
2021-03-15 14:27:08 [2832] [DEBUG] < 51> DnsCryptProxy IPv4: [1152]: [INFO] Loading plugin [C:\Program Files (x86)\OpenDNS\Umbrella Roaming Client\libdcplugin_erc.dll]

2021-03-15 14:27:08 [2832] [DEBUG] < 51> DnsCryptProxy IPv4: [1152]: [INFO] erc: org id is 3119788
[INFO] erc: using device id '01013A93021B889B'
[INFO] erc: forwardnx: 1

2021-03-15 14:27:08 [2832] [DEBUG] < 51> DnsCryptProxy IPv4: [1152]: [INFO] erc: whitelist loaded from C:\ProgramData\OpenDNS\ERC\proxy_whitelist4.txt

2021-03-15 14:27:08 [2832] [DEBUG] < 51> DnsCryptProxy IPv4: [1152]: [INFO] erc: loaded resolv_conf file C:\ProgramData\OpenDNS\ERC\ResolverV4-1-6A3099B118DC40F4B94EABA1088BFE7C-resolv.conf

2021-03-15 14:27:08 [2832] [DEBUG] < 51> DnsCryptProxy IPv4: [1152]: [INFO] erc: Using nameserver 10.14.20.103:53 from C:\ProgramData\OpenDNS\ERC\ResolverV4-1-6A3099B118DC40F4B94EABA1088BFE7C-resolv.conf

2021-03-15 14:27:08 [2832] [DEBUG] < 51> DnsCryptProxy IPv4: [1152]: [INFO] erc: Using nameserver 10.14.20.102:53 from C:\ProgramData\OpenDNS\ERC\ResolverV4-1-6A3099B118DC40F4B94EABA1088BFE7C-resolv.conf

2021-03-15 14:27:08 [2832] [DEBUG] < 51> DnsCryptProxy IPv4: [1152]: [INFO] erc: loaded resolv_conf file C:\ProgramData\OpenDNS\ERC\ResolverV4-2-EC150410C0254FA49A8F9DAD52710CE6-resolv.conf

2021-03-15 14:27:08 [2832] [DEBUG] < 51> DnsCryptProxy IPv4: [1152]: [INFO] erc: Using nameserver 192.168.22.11:53 from C:\ProgramData\OpenDNS\ERC\ResolverV4-2-EC150410C0254FA49A8F9DAD52710CE6-resolv.conf
[INFO] erc: Using nameserver 192.168.22.12:53 from C:\ProgramData\OpenDNS\ERC\ResolverV4-2-EC150410C0254FA49A8F9DAD52710CE6-resolv.conf
[INFO] Loaded plugin: [Perform deviceid, clientip, whitelist and forwardernx services]
[INFO] Generating a new key pair

2021-03-15 14:27:08 [2832] [DEBUG] < 51> DnsCryptProxy IPv4: [1152]: [INFO] Done

2021-03-15 14:27:08 [2832] [DEBUG] < 51> DnsCryptProxy IPv4: [1152]: [ERROR] Unable to bind (UDP) [Permission denied [WSAEACCES ]]

2021-03-15 14:27:08 [2832] [DEBUG] < 51> DnsCryptProxy IPv4: [1152]: [INFO] erc: local address is ##.##.##.##

2021-03-15 14:27:08 [2832] [DEBUG] < 51> DnsCryptProxy IPv4: [1152]: [INFO] erc: user id is ########

2021-03-15 14:27:08 [2832] [INFO ] < 48> DnsCryptProxy IPv4: dnscrypt-proxy.exe with (pid 1152) did not exit gracefully (fail count 7); restarting...
2021-03-15 14:27:08 [2832] [INFO ] < 48> DnsCryptProxy IPv4: dnscrypt-proxy.exe will be prevented from launching for 5 minutes
2021-03-15 14:27:18 [2832] [INFO ] < 23> Dns Protection IPv4 State Machine: dnscrypt-proxy.exe is not running; can not probe through it
2021-03-15 14:27:18 [2832] [DEBUG] < 23> Dns Protection IPv4 State Machine: state machine indicates that nics should use their default dns settings currentState='Reserved and targetState=FailOpen
2021-03-15 14:27:18 [2832] [INFO ] < 23> Dns Protection IPv4 State Machine: state changed: [Reserved] => [FailOpen]
2021-03-15 14:27:22 [2832] [DEBUG] < 23> Dns Protection IPv4 State Machine: dnscrypt-proxy.exe will restart; dnscrypt-proxy.exe is not running
2021-03-15 14:27:22 [2832] [DEBUG] < 23> Dns Protection IPv4 State Machine: restarting dnscrypt-proxy.exe; changed state: [FailOpen] => [Reserved]
2021-03-15 14:27:22 [2832] [DEBUG] < 23> Dns Protection IPv4 State Machine: failed to launch dnscrypt-proxy.exe
2021-03-15 14:27:32 [2832] [INFO ] < 23> Dns Protection IPv4 State Machine: dnscrypt-proxy.exe is not running; can not probe through it
2021-03-15 14:27:32 [2832] [INFO ] < 23> Dns Protection IPv4 State Machine: state changed: [Reserved] => [FailOpen]

Can you please help me?