Recent clamd needed

XIII

dvserg- yes, I got it working on two 1.2.3 systems
using this command:

pkg_add -r havp ftp://ftp.freebsd.org/pub/FreeBSD/ports/i386/packages-7.2-release/All/havp-0.90.tbz

XIII

I get these errors now:

clamd[9028]: Can't unlink the socket file /var/run/clamav/clamd.sock
clamd[9028]: LOCAL: Socket file /var/run/clamav/clamd.sock could not be bound: No such file or directory

not sure if its related, have only seen it on 1 system so far (will check others later today)

also thanks to whoever fixed the code so that it stopped adding http:// to the front

XIII

update:

reinstalled HAVP and it fixed the problem

thanks to those who got on this and got it fixed

Cino

@XIII:

I get these errors now:

clamd[9028]: Can't unlink the socket file /var/run/clamav/clamd.sock
clamd[9028]: LOCAL: Socket file /var/run/clamav/clamd.sock could not be bound: No such file or directory

not sure if its related, have only seen it on 1 system so far (will check others later today)

also thanks to whoever fixed the code so that it stopped adding http:// to the front

I have the same issue.. If i reinstall the package, it works until I reboot the box. Once rebooted, the problem comes back

XIII

will reboot mine when i can later today and see if i have a problem

XIII

it works after reboot.

but these errors are in the sys logs:
clamd[2576]: Can't unlink the socket file /var/run/clamav/clamd.sock
clamd[2576]: LOCAL: Socket file /var/run/clamav/clamd.sock could not be bound: No such file or directory

so i dont know if its broken or what, but did a test with eicar and it blocked it and Internet loads fine

edit: i get this message as well:
clamd[4346]: MaxThreads * MaxRecursion is too high: 25500, open file descriptor limit is: 11095

Cino

think mine has a mind of its own.. If i do a reboot… I have re-install the package, see below for my log.. I lost power yesterday and the battery drained... Box came up and all my services where started.

pfsense system Info havp[7795] "ERROR: Clamd Socket Scanner failed EICAR virus test! (Could not connect to scanner socket)"
pfsense system Info havp[7795] "Clamd: Could not connect to scanner! Scanner down?"
pfsense system Info havp[7795] "–- Initializing Clamd Socket Scanner"
pfsense system Info havp[7795] "Running as user: havp, group: havp"
pfsense system Info havp[7795] "=== Mandatory locking disabled! KEEPBACK settings not used!"
pfsense system Info havp[7795] "=== Starting HAVP Version: 0.90"
pfsense local 6 Info clamd[7664] "TCP: Setting connection queue length to 30"
pfsense local 6 Info clamd[7664] "TCP: Bound to address 127.0.0.1 on port 3310"
pfsense local 6 Info clamd[7664] "Loaded 1382039 signatures."
pfsense local 6 Error clamd[7664] "Can't unlink the socket file /var/run/clamav/clamd.sock"
pfsense local 6 Error clamd[7664] "LOCAL: Socket file /var/run/clamav/clamd.sock could not be bound: No such file or directory"
pfsense local 6 Info clamd[7664] "Not loading PUA signatures."
pfsense local 6 Info clamd[7664] "Reading databases from /var/db/clamav"
pfsense local 6 Info clamd[7664] "Log file size limited to 2097152 bytes."
pfsense local 6 Info clamd[7664] "Running as user root (UID 0, GID 0)"
pfsense local 6 Info clamd[7664] "clamd daemon 0.95.1 (OS: freebsd7.2, ARCH: i386, CPU: i386)"

mshundal

apologies for bringing this thread back from the dead but wondering if the process discussed in this thread is a valid one for upgrading the havp package to the latest as once again no updated package is available and clam is complaining (not to the point of not working but still…)


Aug 9 09:23:45 	freshclam[14749]: Your ClamAV installation is OUTDATED!
Aug 9 09:23:45 	freshclam[14749]: Local version: 0.95.1 Recommended version: 0.96.1
Aug 9 09:23:46 	freshclam[14749]: Your ClamAV installation is OUTDATED!
Aug 9 09:23:46 	freshclam[14749]: Current functionality level = 42, recommended = 53
Aug 9 09:23:48 	freshclam[14749]: getfile: safebrowsing-22854.cdiff not found on remote server (IP: 24.215.0.24)
Aug 9 09:23:48 	freshclam[14749]: getpatch: Can't download safebrowsing-22854.cdiff from clamav.mirror.rafal.ca
Aug 9 09:23:48 	last message repeated 2 times

dvserg

The message is not critical for havp work.
Developers make all changes in their free time.

jimp

@dvserg:

The message is not critical for havp work.
Developers make all changes in their free time.

If you use the stock FreeBSD package for HAVP, you might just be able to use the 7-stable version instead of the 7.2-release version. Many of the 7-stable packages work ok. Try this one:

http://ftp.freebsd.org/pub/FreeBSD/ports/i386/packages-7-stable/All/havp-0.91_1.tbz

If that works (I don't use HAVP anywhere to test it) it should be easy to update the package xml to point at that instead, which should also pull in updated dependencies. It looks like clamav-0.96.1 should be used if that's installed.

If someone can confirm that works as-is, I'll update the package definition to install that instead.

ToxIcon

Confirm it works installed from the http://ftp.freebsd.org/pub/FreeBSD/ports/i386/packages-7-stable/All/havp-0.91_1.tbz
all service started about 10 hours no iussue as of yet.

jimp

@ToxIcon:

Confirm it works installed from the http://ftp.freebsd.org/pub/FreeBSD/ports/i386/packages-7-stable/All/havp-0.91_1.tbz
all service started about 10 hours no iussue as of yet.

Did that also pull in the newer version of clamd?

ToxIcon

yes it pull in the newer version of ClamAV 0.96.1

jimp

I updated the package to pull the new version. It should be up in about 5 minutes.