ModuleRefererValidate blocks stream because of IP conflict

Hi,

I recently enabled ModuleRefererValidate on Wowza and it works fine most of the time. However I have noticed that it fails with the following in the log. It looks like there is some sort of IP address conflict between what is in the session and what is in the connection request. Has anyone seen this error before? The logs are pasted below (the line highlighted in red is where I belive the error is):


2015-12-29 16:49:10 UTC connect-pending session INFO 100 122.167.12.178 - defaultVHost vod definst 0.093 [any] 80 rtmp://video.codekraft.in:80/vod/ 122.167.12.178 rtmp https://www.codekraft.in/jwplayer-7.1.0/jwplayer.flash.swf LNX 11,2,202,466 932051840 3442 3073 - - - - - - - - rtmp://video.codekraft.in:80/vod/ -

2015-12-29 16:49:10 UTC comment server INFO 200 - ModuleCoreSecurity.onConnect[vod/definst/]: isPublisher:false FlashVer: LNX 11,2,202,466 defaultVHost vod definst 14809.998 - - - - - - - - - - - - - - - - - - - - - - - -

2015-12-29 16:49:10 UTC comment server INFO 200 - ModuleCoreSecurity.onConnect[vod/definst/]: Check Maximum Connections: count:1 maxConnections:500 defaultVHost vod_definst_ 14809.999 - - - - - - - - - - - - - - - - - - - - - - -

2015-12-29 16:49:10 UTC comment server INFO 200 - ModuleCoreSecurity.onConnect[vod/definst/]: Initiate SecureToken Authorization. defaultVHost vod definst 14809.999 - - - - - - - - - - - - - - - - - - - - - - - - -

2015-12-29 16:49:10 UTC comment server INFO 200 - ModuleCoreSecurity.onConnect[vod/definst/]: All security checks passed. defaultVHost vod definst 14809.999 - - - - - - - - - - - - - - - - - - - - - - - - -

2015-12-29 16:49:10 UTC comment application INFO 200 - ModuleRefererValidate.checkSession [122.167.12.178: null] defaultVHost vod definst 1987.045 -

2015-12-29 16:49:10 UTC comment server INFO 200 - ModuleRefererValidate.checkSession size of valid sessions is [3] defaultVHost vod definst 14809.999 -

2015-12-29 16:49:10 UTC comment application INFO 200 - ModuleRefererValidate.checkSession : session info IPAddress [117.214.39.86] defaultVHost vod definst 1987.045 - - - - - - - - - - - - - - - - - - - - - - - - -

2015-12-29 16:49:10 UTC comment application INFO 200 - ModuleRefererValidate.checkSession : session info Referer [www.codekraft.in] defaultVHost vod definst 1987.045 - - - - - - - - - - - - - - - - - - - - - - - - -

2015-12-29 16:49:10 UTC comment application INFO 200 - ModuleRefererValidate.checkSession : session info QueryStr [] defaultVHost vod definst 1987.045 -

2015-12-29 16:49:10 UTC comment application INFO 200 - ModuleRefererValidate.checkSession : session info ExpireTime [1451407764384] defaultVHost vod definst 1987.045 - - - - - - - - - - - - - - - - - - - - - - - - -

2015-12-29 16:49:10 UTC comment application INFO 200 - ModuleRefererValidate.checkSession : session info StreamName [python-sample-class.mp4] defaultVHost vod definst 1987.045 - - - - - - - - - - - - - - - - - - - - - - - -

2015-12-29 16:49:10 UTC comment application INFO 200 - ModuleRefererValidate.checkSession : session info AppInstance [definst] defaultVHost vod definst 1987.046 - - - - - - - - - - - - - - - - - - - - - - - - -

2015-12-29 16:49:10 UTC comment application INFO 200 - ModuleRefererValidate.checkSession : session info AppName [vod] defaultVHost vod definst 1987.046 -

2015-12-29 16:49:10 UTC comment application INFO 200 - ModuleRefererValidate.checkSession [session: appName: vod, appInstName: definst, streamName: python-sample-class.mp4, ipAddress: 117.214.39.86, queryStr: ] [ running appInstance: ‘definst’] [ running appName: ‘vod’] [ session appInstance: ‘definst’] [ session appName: ‘vod’] defaultVHost vod definst 1987.046 - - - - - - - - - - - - - - - - - - - - - - - - -

2015-12-29 16:49:10 UTC comment application INFO 200 - ModuleRefererValidate.checkSession [session: appName: vod, appInstName: definst, streamName: python-sample-class.mp4, ipAddress: 117.214.39.86, queryStr: ] defaultVHost vod definst 1987.046 - - - - - - - - - - - - - -

2015-12-29 16:49:10 UTC comment application INFO 200 - ModuleRefererValidate.checkSession [session: appName: vod, appInstName: definst, streamName: python-sample-class.mp4, ipAddress: 117.214.39.86, queryStr: ] [ running ipAddress: ‘122.167.12.178’ ] [ session ipAddress: ‘117.214.39.86’ ] defaultVHost vod definst 1987.046 - - - -

2015-12-29 16:49:10 UTC comment application INFO 200 - ModuleRefererValidate.checkSession [session: appName: vod, appInstName: definst, streamName: python-sample-class.mp4, ipAddress: 117.214.39.86, queryStr: ] [ passFlag: false] defaultVHost vod definst 1987.046 - - - - - - - - - - - -

2015-12-29 16:49:10 UTC comment application INFO 200 - ModuleRefererValidate.checkSession [session: appName: vod, appInstName: definst, streamName: python-sample-class.mp4, ipAddress: 117.214.39.86, queryStr: ] [ running streamName: ‘null’] [ session streamName: ‘python-sample-class.mp4’] defaultVHost vod definst 1987.046 - - - -

2015-12-29 16:49:10 UTC comment application INFO 200 - ModuleRefererValidate.checkSession [ipAddress passed. streamName passed. session: appName: vod, appInstName: definst, streamName: python-sample-class.mp4, ipAddress: 117.214.39.86, queryStr: ] defaultVHost vod definst 1987.046 - - - - - - - - - -

2015-12-29 16:49:10 UTC comment application INFO 200 - ModuleRefererValidate.checkSession end [ passFlag: false] defaultVHost vod definst 1987.046 -

2015-12-29 16:49:10 UTC comment application INFO 200 - ModuleRefererValidate: Client connection rejected. 122.167.12.178 defaultVHost vod definst 1987.046 - - - - - - - - - - - - - - - - - - - - - - - - -


What can be the potential cause of IP address difference between session and running - which i take refers to the fact that different IP addresses were reported by image.gif and the Flash player connection.

-Avneesh

Hi,

I think this would be easier to diagnose if you raised it as a support ticket. Please include a zip of your /conf and /logs as well as any supporting material such as your web pages etc. If you haven’t already, also enable debugging for the module as shown here and perform a few more tests before including the latest logs.

Thanks,

Paul