Updated packages, incoming breakage, feedback needed

raj2569 · Jun 6, 2006, 1:51 PM

Hi,

If the clamav package is resonably stable I can test HAVP with it. Are more changes in ClamAV expected?

raj

fernandotcl · Jun 7, 2006, 12:21 PM

Yeah, all those packages are reasonably stable, if you consider that they're not likely that they'll brick your machine (however, read the big fat warnings posted earlier). The problems you should encounter could be related to the installation. If it installs, it's probably working.

I'd like to integrate ClamAV with HAVP (that was the initial plan) and maybe Squid, so that we can get rid of Viralator. Take a look at clamav.inc. It can be configured to add new fields as new packages are installed. I got a bit sidetracked atm, but in a few days I should be trying to integrate HAVP with ClamAV and Squid.

raj2569 · Jun 7, 2006, 12:29 PM

I am bit free now, So I will start working on HAVP and ClamAV. Do drop me a line when you are free so that we can coordinate and avoid working on the same thing.

raj

raj2569 · Jun 8, 2006, 10:20 AM

Tested HAVP and is woking fine. Basically HAVP uses only the ClamAV Libraries for scanning. If some one else has any problems with HAVP or ClamAV pl report.

raj

sullrich · Jun 8, 2006, 8:08 PM

Anyone testing these patches we have MFC'd the trasnparent bits to enable these services to work transparently.

Guest · Jun 8, 2006, 8:31 PM

Under the Metallic theme (and the Metallic theme only) both the ClamAV and HAVP package configuration options appear to the right of the PfSense frame. The settings appear properly, but the whole box is shifted to the right leaving a big empty white box where the configurations should appear.

billm · Jun 10, 2006, 4:31 AM

@submicron:

Under the Metallic theme (and the Metallic theme only) both the ClamAV and HAVP package configuration options appear to the right of the PfSense frame. The settings appear properly, but the whole box is shifted to the right leaving a big empty white box where the configurations should appear.

Heh I've seen that before. Had to do with developing in HEAD and then backporting to RELENG_1. $pgtitle changes I believe. Hopefully that tidbit helps fix this problem :)

–Bill

raj2569 · Jun 13, 2006, 7:23 AM

Updated ClamAV with Transparency support. To get Transparency in RELENG_1 branch (ie released versions) add the following in your /etc/inc/filter.inc

#Add package specific nat rule inside this anchor
$natrules .= "rdr-anchor "rdr-package/*" \n";

After this


if (is_package_installed('clamav') && file_exists('/usr/local/pkg/clamav.inc')) {
                require_once('clamav.inc');
                $natrules .= clamav_generate_rules('nat');
        }

Please execute cvs_sync.sh releng_1 from command shell, before attempting the patch. Reboot after the patch and then install the new HAVP package.

Please report any feedback about this package in this thread.

raj

Sifter · Jun 14, 2006, 4:54 AM

I am trying to get rid of squid so I can reinstall it. I tried through the gui first, it just hangs. So I did it through the pkg_delete command line tool. pkg_info reveals no such package now. But when I go to install packages, it still shows as installed, thus not allowing me to install/reinstall.

hoba · Jun 14, 2006, 7:16 AM

@Sifter:

I am trying to get rid of squid so I can reinstall it. I tried through the gui first, it just hangs. So I did it through the pkg_delete command line tool. pkg_info reveals no such package now. But when I go to install packages, it still shows as installed, thus not allowing me to install/reinstall.

Download the config.xml from diagnostics>backup/restore and check "do not backup package information" and restore the config again. Should solve the problem.

Sifter · Jun 14, 2006, 3:39 PM

ok I did that, the package installed. I went to services to try to start it, and got the following error: "(squid): Failed to verify one of the swap directories, Check cache.log for details. Run 'squid -z' to create swap directories if needed, or if running Squid for the first time".

So I ran squid -z and no longer see that error message, but whenever I hit start through the gui, it just goes back to stopped.

jola · Jun 14, 2006, 3:57 PM

the same about squid at here, i did sync to RELENG_1.
i go to console and do:

netstat -na | grep :3128 (for checking squid is running or not) but not found.
check tmp/rules.debug , but not rule for squid in mode transparent.
Thanks.

raj2569 · Jun 16, 2006, 4:13 PM

More Updates to HAVP Package,

Package now uses latest verison of HAVP
You can exclude certain IPs from transparent proxy
Added 3 more havp options to web interface.
Transparency status is now persistent across reboot.

Give it a whirl, if it works well, this will become beta and then release version.

raj

jola · Jun 17, 2006, 9:33 AM

Thanks raj,
Do you add options for using HAVP Package with squid cache? It will great.
Thanks you.

Doufer · Jun 18, 2006, 3:57 PM

i'm unable to either deinstall or reinstall squid

squid.xml

Warning: delete_package(squid.inc): failed to open stream: No such file or directory in /etc/inc/pkg-utils.inc on line 652 Fatal error: delete_package(): Failed opening required 'squid.inc' (include_path='.:/etc/inc:/usr/local/www:/usr/local/captiveportal:/usr/local/pkg') in /etc/inc/pkg-utils.inc on line 652

Doufer · Jun 18, 2006, 3:58 PM

@Sifter:

I am trying to get rid of squid so I can reinstall it. I tried through the gui first, it just hangs. So I did it through the pkg_delete command line tool. pkg_info reveals no such package now. But when I go to install packages, it still shows as installed, thus not allowing me to install/reinstall.

I exactly have this same problem! Glad to know I'm not the only one.

raj2569 · Jun 19, 2006, 3:51 PM

@jola:

Do you add options for using HAVP Package with squid cache? It will great.

Yes, There is an option to specify parent proxy in thenew version.

raj

trendchiller · Jun 26, 2006, 7:59 PM

Raj

is there any thing i have to look at when using havp ?
does the package autocreate the "transparent-rule" ?
cause it would not work when i tried last time … :'(

mrreload · Jun 30, 2006, 9:07 PM

I am unable to install havp her is what the log states for the package:

Beginning package installation.
Downloading package configuration file…
havp-0.80_5 Array
(
[0] => Requested space: 1172 bytes, free space: 16762202112 bytes in /var/tm
p/instmp.4mBLsp
[1] => tar: Unrecognized archive format: Inappropriate file type or format
[2] => pkg_add: tar extract of /tmp/apkg_havp-0.80_5.tbz failed!
[3] => pkg_add: unable to extract table of contents file from '/tmp/apkg_hav
p-0.80_5.tbz' - not a package?
[4] => pkg_add: 1 package addition(s) failed
)

Package WAS NOT installed properly.

Please help!

raj2569 · Jul 3, 2006, 9:36 AM

Hi,

I was busy with some other stuff and forgot about this forum :)

is there any thing i have to look at when using havp ?

Yes, You have to add an anchor for HAVP.

mrreload: Can you try once more? For some reason the downloaded package is not a package.

raj