Recent clamd needed

tc3driver

It dies… now that it is april 15.

<edit>I thought I would be a bit more informative</edit>

/usr/local/sbin/clamd
LibClamAV Warning: ***********************************************************
LibClamAV Warning: *** This version of the ClamAV engine is outdated. ***
LibClamAV Warning: *** DON'T PANIC! Read http://www.clamav.net/support/faq ***
LibClamAV Warning: ***********************************************************
LibClamAV Error: cli_hex2str(): Malformed hexstring: This ClamAV version has reached End of Life! Please upgrade to version 0.95 or later. For more information see www.clamav.net/eol-clamav-094 and www.clamav.net/download (length: 169)
LibClamAV Error: Problem parsing database at line 742
LibClamAV Error: Can't load /var/tmp/clamav-9e5fac8226f395327389a44ee29cc788/daily.ndb: Malformed database
LibClamAV Error: Can't load /var/db/clamav/daily.cvd: Malformed database
ERROR: Malformed database

Since there is no ports tree (that I know of) on pfsense, is there an easy way to upgrade it, or will I have to install the dev version on my freebsd box and build it there?

idelta

Forced to remove - not working :
…
Thu Apr 15 22:01:01 2010 -> SelfCheck: Database status OK.
Fri Apr 16 00:01:01 2010 -> SelfCheck: Database modification detected. Forcing reload.
Fri Apr 16 00:01:01 2010 -> Reading databases from /var/db/clamav
Fri Apr 16 00:01:03 2010 -> ERROR: reload db failed: Malformed database
Fri Apr 16 00:01:03 2010 -> Terminating because of a fatal error.
Fri Apr 16 00:01:03 2010 -> Socket file removed.
Fri Apr 16 00:01:03 2010 -> Pid file removed.
Fri Apr 16 00:01:03 2010 -> --- Stopped at Fri Apr 16 00:01:03 2010
...

Cino

You can do this at your own risk, pkg_delete hvap and clamd, then pkg_add them from the command line. You should end up with clamd .95 and hvap .88.. This worked for me but I had to remove the who package since I can't get it to work with SquidGuard :-(

XIII

when adding havp from the command i get : pkg_add can't stat package file.

now i know why the Internet got real slow yesterday, and today. Had to disable havp.

dvserg

Temporary solution
Type from console and find HAVP and CLAM string:

pkg_info

Delete havp and clamav ports

pkg_delete havp-xVersionNumx
pkg_delete clamav-xVersionNumx
(nothing more to do)

Check you FreeBSD version

uname -a

Take one url for you FreeBSD version (7x or 8x):

ftp://ftp.freebsd.org/pub/FreeBSD/ports/i386/packages-8.0-release/All/havp-0.91.tbz
ftp://ftp.freebsd.org/pub/FreeBSD/ports/i386/packages-7.3-release/All/havp-0.91.tbz
ftp://ftp.freebsd.org/pub/FreeBSD/ports/i386/packages-7.2-release/All/havp-0.90.tbz

Type from console:

pkg_add -r havp-URL

Then, go to HAVP GUI and press SAVE. Open settings tab and update AV database (wait 10-30 min).

That's all.

Alan87i

When I tried the links they would not open (ftp// is in the link twice you need to remove one of them for it to resolve)
That allowed me to download the file but it doesn't work at shell

dvserg

URLs fixed.

coolcat1975

Thank you :)

XIII

thank you for you effort. works perfectly now.

mshundal

hi tried the following and get the same error:

pkg_add -r havp-ftp://ftp.freebsd.org/pub/FreeBSD/ports/i386/packages-7.2-release/All/havp-0.90.tbz
pkg_add -r havp-URL_ftp://ftp.freebsd.org/pub/FreeBSD/ports/i386/packages-7.2-release/All/havp-0.90.tbz

error:
Error: FTP Unable to get ftp://ftp.freebsd.org/pub/FreeBSD/ports/i386/packages-7.2-release/Latest/havp-ftp://ftp.freebsd.org/pub/FreeBSD/ports/i386/packages-7.2-release/All/havp-0.90.tbz: File unavailable (e.g., file not found, no access)
pkg_add: unable to fetch 'ftp://ftp.freebsd.org/pub/FreeBSD/ports/i386/packages-7.2-release/Latest/havp-ftp://ftp.freebsd.org/pub/FreeBSD/ports/i386/packages-7.2-release/All/havp-0.90.tbz' by URL

mshundal

this got a little further:

# pkg_add -r havp ftp://ftp.freebsd.org/pub/FreeBSD/ports/i386/packages-7.2-release/All/havp-0.90.tbz
Fetching ftp://ftp.freebsd.org/pub/FreeBSD/ports/i386/packages-7.2-release/Latest/havp.tbz... Done.
Fetching ftp://ftp.freebsd.org/pub/FreeBSD/ports/i386/packages-7.2-release/All/clamav-0.95.1.tbz... Done.
Fetching ftp://ftp.freebsd.org/pub/FreeBSD/ports/i386/packages-7.2-release/All/havp-0.90.tbz...pkg_add: fatal error during execution: getcwd

but no cigar :(

XIII

ok, use this and it will work:

pkg_add -r havp ftp://ftp.freebsd.org/pub/FreeBSD/ports/i386/packages-7.2-release/All/havp-0.90.tbz

mshundal

nice, thanks for the quick reply.

it did not work but saw where you were going with the syntax and tried the following which worked:

pkg_add -r havp ftp://ftp.freebsd.org/pub/FreeBSD/ports/i386/packages-7.2-release/All/havp-0.90.tbz

ps (dvserg) HTTP// prefix auto added by forum engine :(

XIII

sorry , wrong format

this is the correct command: without http:// for whatever reason it is getting added

pkg_add -r havp ftp://ftp.freebsd.org/pub/FreeBSD/ports/i386/packages-7.2-release/All/havp-0.90.tbz

vito

When i execute the command i get the following error

pkg_add -r havp ftp://ftp.freebsd.org/pub/FreeBSD/ports/i386/packages-7.2-release/All/havp-0.90.tbz

Fetching ftp://ftp.freebsd.org/pub/FreeBSD/ports/i386/packages-7.2-release/Latest/havp.tbz… Done.
Fetching ftp://ftp.freebsd.org/pub/FreeBSD/ports/i386/packages-7.2-release/All/clamav-0.95.1.tbz... Done.
Fetching ftp://ftp.freebsd.org/pub/FreeBSD/ports/i386/packages-7.2-release/All/havp-0.90.tbz...pkg_add: fatal error during execution: getcwd

NOTE: happened on two clean installs of pf 1.2.3

Alan87i

It worked for me But the GUI is not found in PfSense for Havp.
It shows in shell, I restarted the box and it didn't show up in the GUI.

pkg_info

arc-5.21o_1 Create & extract files from DOS .ARC files
arj-3.10.22_1 Open-source ARJ
bandwidthd-2.0.1_1 Tracks bandwidth usage by IP address
clamav-0.95.1 Command line virus scanner written entirely in C
gd-2.0.35,1 A graphics library for fast creation of images
havp-0.90 HTTP Antivirus Proxy
jpeg-6b_4 IJG's jpeg compression utilities
lha-1.14i_6 Archive files using LZSS and Huffman compression (.lzh file
libgmp-4.2.2 A free library for arbitrary precision arithmetic
libiconv-1.11_1 A character set conversion library
lusca-cache-r14632 HTTP Caching Proxy (Squid Derivative) - Stable Release
openldap-client-2.4.16 Open source LDAP client implementation
perl-5.8.9_2 Practical Extraction and Report Language
squid_radius_auth-1.10 RADIUS authenticator for squid proxy 2.5 and later
unzoo-4.4_2 A zoo archive extractor

dvserg

I need statistic. Does the work this HAVP in the pfSense 1.2.1, 1.2.2, 1.2.3 ?

ftp://ftp.freebsd.org/pub/FreeBSD/ports/i386/packages-7.2-release/All/havp-0.90.tbz

vito

@vito:

When i execute the command i get the following error

pkg_add -r havp ftp://ftp.freebsd.org/pub/FreeBSD/ports/i386/packages-7.2-release/All/havp-0.90.tbz

Fetching ftp://ftp.freebsd.org/pub/FreeBSD/ports/i386/packages-7.2-release/Latest/havp.tbz… Done.
Fetching ftp://ftp.freebsd.org/pub/FreeBSD/ports/i386/packages-7.2-release/All/clamav-0.95.1.tbz... Done.
Fetching ftp://ftp.freebsd.org/pub/FreeBSD/ports/i386/packages-7.2-release/All/havp-0.90.tbz...pkg_add: fatal error during execution: getcwd

NOTE: happened on ~~two~~ three clean installs of pf 1.2.3

Mine is PF 1.2.3 full freebsd 7.2 HAVP was the first package i installed after the install.
I just reinstalled again but have not installed HAVP yet. Now on this new install i do have Squid, SG,SNORT installed.

XIII

dvserg- yes, I got it working on two 1.2.3 systems
using this command:

pkg_add -r havp ftp://ftp.freebsd.org/pub/FreeBSD/ports/i386/packages-7.2-release/All/havp-0.90.tbz

XIII

I get these errors now:

clamd[9028]: Can't unlink the socket file /var/run/clamav/clamd.sock
clamd[9028]: LOCAL: Socket file /var/run/clamav/clamd.sock could not be bound: No such file or directory

not sure if its related, have only seen it on 1 system so far (will check others later today)

also thanks to whoever fixed the code so that it stopped adding http:// to the front