Dansguardian issues on 2.1 (service status and others)

rcfa

Someone might have hit the reason of this problem:

http://forum.pfsense.org/index.php/topic,50688.msg271304.html#msg271304

Incompatible pcre versions required by snort vs. dansguardian.

Cino

Someone might have hit the reason of this problem:

http://forum.pfsense.org/index.php/topic,50688.msg271304.html#msg271304

Incompatible pcre versions required by snort vs. dansguardian.

I have them both running on my 2.1 box.. Snort was re-installed last

found the issue with clamav…
directories and permissions are not setup when the package is install

when manually running freshclam


ERROR: Can't open /var/log/clamav/freshclam.log in append mode (check permissions!).
ERROR: Problem with internal logger (UpdateLogFile = /var/log/clamav/freshclam.log).
ERROR: Can't change dir to /var/db/clamav

I manually added the folders and started dansguardian.. its in the process of running freshclam right now.. For now I gave the folders 777 permission root/wheel.. Think it needs to be user/group clamav but figured you can't go wrong with 777.

another issue is the linking of files between /usr/local/etc/dansguardian and /usr/pbi/dansguardian-i386/etc/dansguardian

Also have to create folder /var/run/clamav but the package isn't starting clamd. I am able to manually start it via command line tho

jimp

for the service status, what does this show:

ps uxawww | grep -i dansguardian

rcfa

@jimp:

for the service status, what does this show:

ps uxawww | grep -i dansguardian

At this point, here, nothing, because it's not running…
...I guess something must try to launch it once or multiple times after a reboot or settings change => the messages
...but then I guess it dies and/or gives up, because there's no running process later on.

Cino

@rcfa:

@jimp:

for the service status, what does this show:

ps uxawww | grep -i dansguardian

At this point, here, nothing, because it's not running…
...I guess something must try to launch it once or multiple times after a reboot or settings change => the messages
...but then I guess it dies and/or gives up, because there's no running process later on.

anything in your log? A while back on 2.0.1, it would die because squid wasn't running or was slow to start.. But that was corrected

rcfa

@Cino:

anything in your log? A while back on 2.0.1, it would die because squid wasn't running or was slow to start.. But that was corrected

Nothing beyond what I had posted before below:
@rcfa:

The syslog shows these:

Jun 25 17:26:38 dansguardian[12003]: Error parsing the dansguardian.conf file or other DansGuardian configuration files
Jun 25 17:26:23 dansguardian[29500]: Error parsing the dansguardian.conf file or other DansGuardian configuration files
Jun 25 17:26:22 php: /pkg_edit.php: Starting Dansguardian

Does this ring a bell?

Macom2007

Dansguardian does not start because a problem with the log file path (dansguardian missing in that path name). See console output :

Error opening/creating log file. (check ownership and access rights).
I am running as nobody and I am trying to open /var/log//access.log

Any ideas ?

marcelloc

@Macom2007:

I am running as nobody and I am trying to open /var/log//access.log

check and save all package gui tabs, this error shows a missing dansguardian dir on log file

/var/log//access.log should be /var/log/dansguardian/access.log

Macom2007

Thx for your reply.

I saved every gui tab. No luck so var. Why is DG trying to write to /var/log//access.log. I my dansguardian.conf the log path is /var/log/dansguardian/ ?

marcelloc

@Macom2007:

Why is DG trying to write to /var/log//access.log?

Not sure. I have dansguardian working on 2.1 but I'll check it this week (If I have time :))

Macom2007

@Macom2007:

Dansguardian does not start because a problem with the log file path (dansguardian missing in that path name). See console output :

Error opening/creating log file. (check ownership and access rights).
I am running as nobody and I am trying to open /var/log//access.log

Any ideas ?

Any news on this ?

marcelloc

Current package version has 2.1 folder check but pbi package was built with pcre8.3.

This pcre version breaks dansguardian.

You can try on your install, but I'm not sure if it will work.

/usr/local/etc/rc.d/dansguardian.sh start

kern.ipc.somaxconn: 16384 -> 16384
kern.maxfiles: 131072 -> 131072
kern.maxfilesperproc: 104856 -> 104856
kern.threads.max_threads_per_proc: 4096 -> 4096
Starting dansguardian.
std::bad_alloc <= Pcre issue
Error parsing the dansguardian.conf file or other DansGuardian configuration files

Macom2007

Thx for your response. Your suggestion does not work. See output :

/usr/local/etc/rc.d/dansguardian.sh start

kern.ipc.somaxconn: 16384 -> 16384
kern.maxfiles: 131072 -> 131072
kern.maxfilesperproc: 104856 -> 104856
kern.threads.max_threads_per_proc: 4096 -> 4096
Starting dansguardian.
Error opening/creating log file. (check ownership and access rights).
I am running as nobody and I am trying to open /var/log/dansguardian/access.log

marcelloc

did you saved dansguardian config on gui after package reinstall?

Macom2007

@marcelloc:

did you saved dansguardian config on gui after package reinstall?

Yes, I did. The error stays :-(

marcelloc

Uninstall and reinstall too? my setup went fine(except for pcre) with 2.1 package install.

Macom2007

@marcelloc:

Uninstall and reinstall too? my setup went fine(except for pcre) with 2.1 package install.

I uninstalled, installed dansguardian and than i did this :

chown nobody:nobody /var/log

Now it is running, but i am not sure if this affects other packages ?

Legion

I have a similar issue. I just installed Dansguardian today to try and get it up and running. The service won't start. E.g.:

@marcelloc:

check and save all package gui tabs, this error shows a missing dansguardian dir on log file

/var/log//access.log should be /var/log/dansguardian/access.log

I checked and saved all package gui tabs and get this:

and similar directory path errors when pfSense is booting up.

On the Dansguardian General tab, the SSL section looks like this:

I set up certs for when I opened OpenVPN access to my box, so I can remotely admin it using a tablet. But nothing is set on Dansguardian. I'm pretty much trying default settings. E.g., here is my Groups setting:

Nothing about SSL filtering. Or am I looking in the wrong spot?

Also, as I save each Dansguardian tab starting from the left, the system log looks like this:

Until I get to the Access Control List and get the error in the second image that made me investigate further and prompted me to post this thread reply.

BTW, I have Dansguardian's built-in antivirus setting disabled since I already had Havp installed and running.

Any advice on how to get this working? It's not a showstopper for me - I can go back to SquidGuard/Squid/Havp but I wanted to try Squid/Dansguardian to see how it compared.

marcelloc

try to force file permissions alerted in logs and see if cert dir exists.