Squid + HAVP
-
/var/log/havp
-
it looks like both files were modified on 12/24/09 and are empty I have attached a print screen.
 -
that is weird. only thing i can think of: uninstall havp, then go through the filesystem on the pfsense and delete anything to do with havp and/or clam*.
-
Yeah I thought that was pretty weird also. What directories of clamv and havp do you recommend me to delete. Were is the root directory for these programs in /var or /etc ?
-
As I recall, there are several in /var, /maybe /usr/local. I would just do something like:
find / -name 'havp*' -print
find / -name 'clam*' -printand see what you see…
also once you are done, look at /conf/config.xml and make sure all vestiges are gone. If need be, edit the file and delete them, then reboot and try again. And make sure you back up first :)
-
Receiving same results removed files manually and reinstalled looked at the config.xml and searched for havp and keywords found a few havp did not remove them I guess I will remove them next time and try again. I have copied and pasted the system log and pasted below Also I have attached a print screen of the proxy server and custom options does everything look ok their?
Dec 30 17:36:40 kernel: miibus3: <mii bus="">on xl0
Dec 30 17:36:40 kernel: ukphy0: <generic ieee="" 802.3u="" media="" interface="">PHY 24 on miibus3
Dec 30 17:36:40 kernel: ukphy0: 10baseT, 10baseT-FDX, 100baseTX, 100baseTX-FDX, auto
Dec 30 17:36:40 kernel: xl0: Ethernet address:
Dec 30 17:36:40 kernel: xl0: [ITHREAD]
Dec 30 17:36:40 kernel: isab0: <pci-isa bridge="">at device 31.0 on pci0
Dec 30 17:36:40 kernel: isa0: <isa bus="">on isab0
Dec 30 17:36:40 kernel: atapci0: <intel ich2="" udma100="" controller="">port 0x1f0-0x1f7,0x3f6,0x170-0x177,0x376,0xffa0-0xffaf at device 31.1 on pci0
Dec 30 17:36:40 kernel: ata0: <ata 0="" channel="">on atapci0
Dec 30 17:36:40 kernel: ata0: [ITHREAD]
Dec 30 17:36:40 kernel: ata1: <ata 1="" channel="">on atapci0
Dec 30 17:36:40 kernel: ata1: [ITHREAD]
Dec 30 17:36:40 kernel: uhci0: <intel 82801ba="" bam="" (ich2)="" usb="" controller="" usb-a="">port 0xff80-0xff9f irq 19 at device 31.2 on pci0
Dec 30 17:36:40 kernel: uhci0: [GIANT-LOCKED]
Dec 30 17:36:40 kernel: uhci0: [ITHREAD]
Dec 30 17:36:40 kernel: usb0: <intel 82801ba="" bam="" (ich2)="" usb="" controller="" usb-a="">on uhci0
Dec 30 17:36:40 kernel: usb0: USB revision 1.0
Dec 30 17:36:40 kernel: uhub0: <intel 1="" 9="" uhci="" root="" hub,="" class="" 0,="" rev="" 1.00="" 1.00,="" addr="">on usb0
Dec 30 17:36:40 kernel: uhub0: 2 ports with 2 removable, self powered
Dec 30 17:36:40 kernel: pci0: <serial bus,="" smbus="">at device 31.3 (no driver attached)
Dec 30 17:36:40 kernel: uhci1: <intel 82801ba="" bam="" (ich2)="" usb="" controller="" usb-b="">port 0xff60-0xff7f irq 23 at device 31.4 on pci0
Dec 30 17:36:40 kernel: uhci1: [GIANT-LOCKED]
Dec 30 17:36:40 kernel: uhci1: [ITHREAD]
Dec 30 17:36:40 kernel: usb1: <intel 82801ba="" bam="" (ich2)="" usb="" controller="" usb-b="">on uhci1
Dec 30 17:36:40 kernel: usb1: USB revision 1.0
Dec 30 17:36:40 kernel: uhub1: <intel 1="" 9="" uhci="" root="" hub,="" class="" 0,="" rev="" 1.00="" 1.00,="" addr="">on usb1
Dec 30 17:36:40 kernel: uhub1: 2 ports with 2 removable, self powered
Dec 30 17:36:40 kernel: pci0: <multimedia, audio="">at device 31.5 (no driver attached)
Dec 30 17:36:40 kernel: speaker0: <pc speaker="">port 0x61 on acpi0
Dec 30 17:36:40 kernel: fdc0: <floppy drive="" controller="">port 0x3f0-0x3f5,0x3f7 irq 6 drq 2 on acpi0
Dec 30 17:36:40 kernel: fdc0: [FILTER]
Dec 30 17:36:40 kernel: fd0: <1440-KB 3.5" drive> on fdc0 drive 0
Dec 30 17:36:40 kernel: sio0: <16550A-compatible COM port> port 0x3f8-0x3ff irq 4 flags 0x10 on acpi0
Dec 30 17:36:40 kernel: sio0: type 16550A
Dec 30 17:36:40 kernel: sio0: [FILTER]
Dec 30 17:36:40 kernel: sio1: <16550A-compatible COM port> port 0x2f8-0x2ff irq 3 on acpi0
Dec 30 17:36:40 kernel: sio1: type 16550A
Dec 30 17:36:40 kernel: sio1: [FILTER]
Dec 30 17:36:40 kernel: cpu0: <acpi cpu="">on acpi0
Dec 30 17:36:40 kernel: p4tcc0: <cpu frequency="" thermal="" control="">on cpu0
Dec 30 17:36:40 kernel: pmtimer0 on isa0
Dec 30 17:36:40 kernel: orm0: <isa option="" rom="">at iomem 0xc0000-0xc7fff pnpid ORM0000 on isa0
Dec 30 17:36:40 kernel: atkbdc0: <keyboard controller="" (i8042)="">at port 0x60,0x64 on isa0
Dec 30 17:36:40 kernel: atkbd0: <at keyboard="">irq 1 on atkbdc0
Dec 30 17:36:40 kernel: kbd0 at atkbd0
Dec 30 17:36:40 kernel: atkbd0: [GIANT-LOCKED]
Dec 30 17:36:40 kernel: atkbd0: [ITHREAD]
Dec 30 17:36:40 kernel: sc0: <system console="">at flags 0x100 on isa0
Dec 30 17:36:40 kernel: sc0: VGA <16 virtual consoles, flags=0x300>
Dec 30 17:36:40 kernel: vga0: <generic isa="" vga="">at port 0x3c0-0x3df iomem 0xa0000-0xbffff on isa0
Dec 30 17:36:40 kernel: Timecounter "TSC" frequency 1694509096 Hz quality 800
Dec 30 17:36:40 kernel: Timecounters tick every 1.000 msec
Dec 30 17:36:40 kernel: IPsec: Initialized Security Association Processing.
Dec 30 17:36:40 kernel: ad0: 152627MB <seagate st3160023a="" 8.01="">at ata0-master UDMA100
Dec 30 17:36:40 kernel: acd0: CDRW <hl-dt-st rw="" dvd="" gcc-4480b="" 1.03="">at ata1-master UDMA33
Dec 30 17:36:40 kernel: Trying to mount root from ufs:/dev/ad0s1a
Dec 30 17:36:41 kernel: pflog0: promiscuous mode enabled
Dec 30 17:36:50 php: : SQUID is installed but not started. Not installing redirect rules.
Dec 30 17:36:50 php: : SQUID is installed but not started. Not installing redirect rules.
Dec 30 17:36:52 pftpx[604]: listening on 127.0.0.1 port 8021
Dec 30 17:36:52 pftpx[604]: listening on 127.0.0.1 port 8021
Dec 30 17:36:52 pftpx[628]: listening on 127.0.0.1 port 8022
Dec 30 17:36:52 pftpx[628]: listening on 127.0.0.1 port 8022
Dec 30 17:36:54 dnsmasq[726]: started, version 2.45 cachesize 150
Dec 30 17:36:54 dnsmasq[726]: compile time options: IPv6 GNU-getopt BSD-bridge ISC-leasefile no-DBus no-I18N TFTP
Dec 30 17:36:54 dnsmasq[726]: reading /etc/resolv.conf
Dec 30 17:36:54 dnsmasq[726]: using nameserver #53
Dec 30 17:36:54 dnsmasq[726]: using nameserver #53
Dec 30 17:36:54 dnsmasq[726]: read /etc/hosts - 2 addresses
Dec 30 17:36:54 php: : DynDns: Running updatedns()
Dec 30 17:36:54 php: : DynDns: updatedns() starting
Dec 30 17:36:54 php: : DynDns: _detectChange() starting.
Dec 30 17:36:54 php: : DynDns: Current WAN IP:
Dec 30 17:36:55 php: : DynDns: Cached IP:
Dec 30 17:36:55 php: : phpDynDNS: No Change In My IP Address and/or 25 Days Has Not Past. Not Updating Dynamic DNS Entry.
Dec 30 17:36:57 php: : SQUID is installed but not started. Not installing redirect rules.
Dec 30 17:36:57 php: : SQUID is installed but not started. Not installing redirect rules.
Dec 30 17:37:01 php: : Creating rrd update script
Dec 30 17:37:03 php: : Resyncing configuration for all packages.
Dec 30 17:37:04 php: : Reloading Squid for configuration sync
Dec 30 17:37:07 last message repeated 5 times
Dec 30 17:37:08 php: : Starting Squid
Dec 30 17:37:08 php: : The OpenVPN-Enhancements package is missing required dependencies and must be reinstalled.
Dec 30 17:37:08 last message repeated 3 times
Dec 30 17:37:08 squid[1311]: Squid Parent: child process 1313 started
Dec 30 17:37:08 php: : The OpenVPN-Enhancements package is missing required dependencies and must be reinstalled.
Dec 30 17:37:08 php: : Could not locate /usr/local/pkg/ovpnenhance.inc.
Dec 30 17:37:09 php: : Beginning package installation for OpenVPN-Enhancements.
Dec 30 17:37:17 check_reload_status: check_reload_status is starting
Dec 30 17:37:17 check_reload_status: rc.newwanip starting
Dec 30 17:37:17 clamd[1396]: Not supported data format
Dec 30 17:37:17 havp[1413]: === Starting HAVP Version: 0.88
Dec 30 17:37:17 havp[1413]: === Mandatory locking disabled! KEEPBACK settings not used!
Dec 30 17:37:17 havp[1413]: Running as user: havp, group: havp
Dec 30 17:37:17 havp[1413]: –- Initializing Clamd Socket Scanner
Dec 30 17:37:18 php: : Informational: rc.newwanip is starting dc0.
Dec 30 17:37:18 php: : rc.newwanip working with (IP address:) (interface: wan) (interface real: dc0).
Dec 30 17:37:20 login: login on ttyv0 as root
Dec 30 17:38:17 havp[1413]: Clamd: Could not connect to scanner! Scanner down?
Dec 30 17:38:17 havp[1413]: ERROR: Clamd Socket Scanner failed EICAR virus test! (Could not connect to scanner socket)
</hl-dt-st></seagate></generic></system></at></keyboard></isa></cpu></acpi></floppy></pc></multimedia,></intel></intel></intel></serial></intel></intel></intel></ata></ata></intel></isa></pci-isa></generic></mii>
-
Yuck, looks like there are other things messed up. Might want to bite the bullet and reinstall?
-
anything you see in the log or print screen I sent to you looks really bad? I am just curious what caused it I have only had pfsense running for about 7 days.
-
Just some of the messages about squid and dependencies being wrong and such. If those are wrong, who knows what else?
-
well i reinstalled pfsense and it worked i install squid, squidguard and then havp. The first time i installed havp and installed squid and then uninstalled and installed it a few times. But now the service is running thx for your help.
-
good to hear!