Netgate Discussion Forum
    • Categories
    • Recent
    • Tags
    • Popular
    • Users
    • Search
    • Register
    • Login

    HAVP broken in 2.0?

    Scheduled Pinned Locked Moved pfSense Packages
    28 Posts 3 Posters 11.8k Views
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • D
      danswartz
      last edited by

      Well, I spoke too soon :(  Althought everything seemed up and running, an eicar test failed.  I could see squid was not actually talking to havp, so I tried removing havp and giving up.  Net result: no squid either.  Then I tried uninstalling squid and that left things totally borked.  I ended up having to reinstall from scratch and reload the config file.  I've not had good results with packages that depend on other packages, so I think I'm going to look for another solution (maybe run squid/lightsquid/havp on my main freebsd server and set up an rdr to that - dunno…)

      1 Reply Last reply Reply Quote 0
      • D
        dvserg
        last edited by

        After instalaltion HAVP need update AV bases (last tab GUI). This is process take 10-15 min for the new installation. Now i change this for automatic update on installation. Also need modify package for full compability with 2.0

        ps
        I have had several unsuccessful attempts to upgrade from 1.2.3 to 2.0. So now all I do on a fresh 2.0

        SquidGuardDoc EN  RU Tutorial
        Localization ru_PFSense

        1 Reply Last reply Reply Quote 0
        • D
          danswartz
          last edited by

          Let me clarify: this might or might not have worked, if I had waited as you say (I wasn't aware of that.)  What got me to give up on this was the apparent fragility of some packages that are linked to others.  I have never had very good luck when it comes to restoring a config, where it has to reinstall the packages.  In this case, uninstalling got things totally borked, so I gave up.  It may not even have been havp, but maybe squid or lightsquid, I don't know.

          1 Reply Last reply Reply Quote 0
          • D
            dvserg
            last edited by

            Syslog; /var/log/clamd/clamd.log; /var/log/clamd/freshclam.log; /var/log/havp/havp.log; exists?
            Please email me.

            SquidGuardDoc EN  RU Tutorial
            Localization ru_PFSense

            1 Reply Last reply Reply Quote 0
            • D
              danswartz
              last edited by

              Sorry, I appreciate the help, but it is off the firewall now, as is squid and lightsquid.  After having to spend an hour re-installing from scratch, I don't want to bork this again :(

              1 Reply Last reply Reply Quote 0
              • D
                danswartz
                last edited by

                Okay, I think I found out one of the issues.  Squid uses the ldap client, but even after deleting squid, something still had a reference to it (a php file somewhere).  I had squid/lightsquid working fine, so I am re-installing those.  I already have a full clamav install on my main freebsd mail/file/web server, and it always seemed silly to be doing this twice, so I got the havp port working there too.  My atom mini has two spare gigabit ports, and the main server has a spare gigabit port, so I am going to connect those using a dedicated subnet and have pfsense/squid talk to havp running on the main server over that link.

                1 Reply Last reply Reply Quote 0
                • K
                  killervette
                  last edited by

                  I tried installing havp on nanobsd 2 beta.  I get a bunch of warnings and errors when trying to save settings.  Basically saying the it cannot open stream for writing.  It was the first package i installed on 2.0 beta.  Any ideas?

                  1 Reply Last reply Reply Quote 0
                  • D
                    dvserg
                    last edited by

                    Post error message text pls.

                    SquidGuardDoc EN  RU Tutorial
                    Localization ru_PFSense

                    1 Reply Last reply Reply Quote 0
                    • K
                      killervette
                      last edited by

                      Warning: file_put_contents(/usr/local/etc/havp/havp_conf.xml): failed to open stream: Read-only file system in /usr/local/pkg/havp.inc on line 560

                      This displays when going to the Services/Antivirus tab.  I get a lot more errors when updating the settings:

                      Warning: file_put_contents(/usr/local/etc/havp/havp_conf.xml): failed to open stream: Read-only file system in /usr/local/pkg/havp.inc on line 560 Warning: file_put_contents(/usr/local/etc/havp/havp_conf.xml): failed to open stream: Read-only file system in /usr/local/pkg/havp.inc on line 560 Warning: file_put_contents(/usr/local/etc/rc.d/havp_avupdate): failed to open stream: Read-only file system in /usr/local/pkg/havp.inc on line 413 Warning: fopen(/usr/local/etc/rc.d/havp.sh): failed to open stream: Read-only file system in /etc/inc/service-utils.inc on line 60 Warning: fwrite(): supplied argument is not a valid stream resource in /etc/inc/service-utils.inc on line 61 Warning: fclose(): supplied argument is not a valid stream resource in /etc/inc/service-utils.inc on line 62 Warning: chmod(): Read-only file system in /etc/inc/service-utils.inc on line 63 Warning: fopen(/usr/local/etc/rc.d/clamd): failed to open stream: Read-only file system in /etc/inc/service-utils.inc on line 60 Warning: fwrite(): supplied argument is not a valid stream resource in /etc/inc/service-utils.inc on line 61 Warning: fclose(): supplied argument is not a valid stream resource in /etc/inc/service-utils.inc on line 62 Warning: chmod(): Read-only file system in /etc/inc/service-utils.inc on line 63 Warning: file_put_contents(/usr/local/etc/havp/whitelist): failed to open stream: Read-only file system in /usr/local/pkg/havp.inc on line 314 Warning: file_put_contents(/usr/local/etc/havp/blacklist): failed to open stream: Read-only file system in /usr/local/pkg/havp.inc on line 315 Warning: file_put_contents(/usr/local/etc/clamd.conf): failed to open stream: Read-only file system in /usr/local/pkg/havp.inc on line 443 Warning: file_put_contents(/usr/local/etc/havp/havp.config): failed to open stream: Read-only file system in /usr/local/pkg/havp.inc on line 321 Warning: file_put_contents(/usr/local/etc/freshclam.conf): failed to open stream: Read-only file system in /usr/local/pkg/havp.inc on line 450 Warning: Cannot modify header information - headers already sent by (output started at /usr/local/pkg/havp.inc:560) in /usr/local/www/pkg_edit.php on line 50

                      I am running 2.0-BETA2
                      built on Fri Jun 4 18:07:10 EDT 2010
                      FreeBSD 8.1-PRERELEASE

                      1 Reply Last reply Reply Quote 0
                      • D
                        dvserg
                        last edited by

                        failed to open stream: Read-only file system 
                        

                        I'm not sure that is the problem of the package. The report says about the impossibility of writing.
                        Check your file system on the possibility of recording /usr/local/etc/havp.

                        SquidGuardDoc EN  RU Tutorial
                        Localization ru_PFSense

                        1 Reply Last reply Reply Quote 0
                        • K
                          killervette
                          last edited by

                          Sorry, i am very new to pfsense.  What do you want me to do?  I do understand that when running nanobsd, the package has to set the compact flash card in a read/write mode when writing data, then resetting it to read only when finished.

                          1 Reply Last reply Reply Quote 0
                          • D
                            dvserg
                            last edited by

                            Hm.. this package not for nano-BSD.

                            SquidGuardDoc EN  RU Tutorial
                            Localization ru_PFSense

                            1 Reply Last reply Reply Quote 0
                            • K
                              killervette
                              last edited by

                              crap!  will it eventually be made for it?

                              1 Reply Last reply Reply Quote 0
                              • D
                                dvserg
                                last edited by

                                @killervette:

                                crap!  will it eventually be made for it?

                                No. CF card has a limited resource read-write.

                                SquidGuardDoc EN  RU Tutorial
                                Localization ru_PFSense

                                1 Reply Last reply Reply Quote 0
                                • K
                                  killervette
                                  last edited by

                                  So i am now running pfsense on a hard drive. I am running 2.0 beta.  I installed havp but am having trouble.  If i set standard for the proxy, set the port to 8080, and then set firefox to use proxy 192.168.1.1:8080, the connections fail.  What am i doing wrong?

                                  1 Reply Last reply Reply Quote 0
                                  • K
                                    killervette
                                    last edited by

                                    now trying 1.2.3 and still doesnt work

                                    1 Reply Last reply Reply Quote 0
                                    • First post
                                      Last post
                                    Copyright 2025 Rubicon Communications LLC (Netgate). All rights reserved.