Netgate Discussion Forum
    • Categories
    • Recent
    • Tags
    • Popular
    • Users
    • Search
    • Register
    • Login

    Dansguardian package for 2.0

    Scheduled Pinned Locked Moved pfSense Packages
    492 Posts 51 Posters 472.8k Views
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • L
      LokisMischief
      last edited by

      Firstly I would like to thank Marcello for this great package, saved me so much time!

      I have a suggestion, I guess you could call it a feature request.

      On the ACL's when creating new site lists, phrase lists, etc. A button to create a new list based on the default would be handy, similar to that for firewall rules, it would just make life simpler!
      Oh and separate html templates for the denied page… falls under the htmltemplate= variable in the dansguardianfx.conf

      How dificult would it be to run two copies of dansguardian on the same server? (listening to different ports of course!) I'm wanting some traffic from one vlan transparently filtered and another explicitly.

      1 Reply Last reply Reply Quote 0
      • R
        rjcrowder
        last edited by

        So… I was still having problems with the lines in /usr/local/etc/rc.d/clamav-clamd being duplicated. Unless I'm missing something, I think the fix is to change /usr/local/pkg/dansguardian.inc lines 1150-51 as follows:

        
        $new_script_line=preg_replace("/NO/","YES",$script_line);
        $new_clamav_startup.=preg_replace("@/usr/local@",DANSGUARDIAN_DIR,$new_script_line);
        
        

        in other words… the old code did to "preg_replace" in a row appending the same script line... it was causing duplicate lines.

        @marcelloc:

        I'll take a look on clamav startup script.

        1 Reply Last reply Reply Quote 0
        • marcellocM
          marcelloc
          last edited by

          @rjcrowder:

          in other words… the old code did to "preg_replace" in a row appending the same script line... it was causing duplicate lines.

          I've fixed the code today.

          I'm including new sync options to push noew package version to github.

          Treinamentos de Elite: http://sys-squad.com

          Help a community developer! ;D

          1 Reply Last reply Reply Quote 0
          • M
            mschiek01
            last edited by

            @marcelloc:

            @rjcrowder:

            in other words… the old code did to "preg_replace" in a row appending the same script line... it was causing duplicate lines.

            I've fixed the code today.

            I'm including new sync options to push noew package version to github.

            Did you include the "web upload error fix"?

            1 Reply Last reply Reply Quote 0
            • marcellocM
              marcelloc
              last edited by

              @mschiek01:

              Did you include the "web upload error fix"?

              web upload fix It's a binary update, I'm pushing gui fix.

              I'll need to update freebsd ports before asking a new package build by core team.

              Treinamentos de Elite: http://sys-squad.com

              Help a community developer! ;D

              1 Reply Last reply Reply Quote 0
              • marcellocM
                marcelloc
                last edited by

                new gui version 0.1.8 is out with:

                • New sync style that can use default system sync settings

                • Fix to clamav-clamd startup manipulation
                  **Note1:**If you have a messed up startup script, you can download default script with this cmd on 2.0.x pfsense version:
                  fetch -o /usr/local/etc/rc.d/clamav-clamd http://e-sac.siteseguro.ws/packages/dansguardian/clamav-clamd
                  **Note2:**Memory issues was direct related to this bug, I suggest a remove/fix of this old file before package reinstall.

                • Fix missing ip-acls array on package sync to remote host

                I'll try to push on next release current dansguardian patches to freebsd ports and get an official "web upload error free" dansguardian version.

                Treinamentos de Elite: http://sys-squad.com

                Help a community developer! ;D

                1 Reply Last reply Reply Quote 0
                • R
                  rjcrowder
                  last edited by

                  @marcelloc:

                  new gui version 0.1.8 is out with:

                  • New sync style that can use default system sync settings

                  • Fix to clamav-clamd startup manipulation
                    Note:If you have a messed up startup script, you can download default script with this cmd on 2.0.x pfsense version:
                    fetch -o /usr/local/etc/rc.d/clamav-clamd http://e-sac.siteseguro.ws/packages/dansguardian/clamav-clamd

                  • Fix missing ip-acls array on package sync to remote host

                  I'll try to push on next release current dansguardian patches to freebsd ports and get an official "web upload error free" dansguardian version.

                  Slight error in new version…

                  When creating the clamav-clamd file you need clamd.conf to be in "/usr/local/etc" rather than "/etc" and the path to clamdscan is "/usr/local/bin" rather than "/bin".

                  1 Reply Last reply Reply Quote 0
                  • R
                    rjcrowder
                    last edited by

                    @rjcrowder:

                    @marcelloc:

                    new gui version 0.1.8 is out with:

                    • New sync style that can use default system sync settings

                    • Fix to clamav-clamd startup manipulation
                      Note:If you have a messed up startup script, you can download default script with this cmd on 2.0.x pfsense version:
                      fetch -o /usr/local/etc/rc.d/clamav-clamd http://e-sac.siteseguro.ws/packages/dansguardian/clamav-clamd

                    • Fix missing ip-acls array on package sync to remote host

                    I'll try to push on next release current dansguardian patches to freebsd ports and get an official "web upload error free" dansguardian version.

                    Slight error in new version…

                    When creating the clamav-clamd file you need clamd.conf to be in "/usr/local/etc" rather than "/etc" and the path to clamdscan is "/usr/local/bin" rather than "/bin".

                    There is a typo in line 1160. cpreg_p should be cpreg_r

                    1 Reply Last reply Reply Quote 0
                    • marcellocM
                      marcelloc
                      last edited by

                      @rjcrowder:

                      When creating the clamav-clamd file you need clamd.conf to be in "/usr/local/etc" rather than "/etc" and the path to clamdscan is "/usr/local/bin" rather than "/bin".

                      Where did you found on code that it's not saved on /usr/local?

                      @rjcrowder:

                      There is a typo in line 1160. cpreg_p should be cpreg_r

                      Found (and fixed), thanks.  :)

                      Treinamentos de Elite: http://sys-squad.com

                      Help a community developer! ;D

                      1 Reply Last reply Reply Quote 0
                      • M
                        Macom2007
                        last edited by

                        I keep getting "Error connecting to the clamd socket" when trying to access through DG. DG and Squid are running.

                        1 Reply Last reply Reply Quote 0
                        • marcellocM
                          marcelloc
                          last edited by

                          @Macom2007:

                          I keep getting "Error connecting to the clamd socket" when trying to access through DG. DG and Squid are running.

                          Check your /usr/local/etc/rc.d/clamd-clamav file. If it has a lot of duplicated files, try to remove it and fetch original file from my previous post.
                          @marcelloc:

                          Note1:If you have a messed up startup script, you can download default script with this cmd on 2.0.x pfsense version:
                          fetch -o /usr/local/etc/rc.d/clamav-clamd http://e-sac.siteseguro.ws/packages/dansguardian/clamav-clamd

                          Try to run freshclam on console too.

                          Treinamentos de Elite: http://sys-squad.com

                          Help a community developer! ;D

                          1 Reply Last reply Reply Quote 0
                          • M
                            Macom2007
                            last edited by

                            @marcelloc:

                            @Macom2007:

                            I keep getting "Error connecting to the clamd socket" when trying to access through DG. DG and Squid are running.

                            Check your /usr/local/etc/rc.d/clamd-clamav file. If it has a lot of duplicated files, try to remove it and fetch original file from my previous post.
                            @marcelloc:

                            Note1:If you have a messed up startup script, you can download default script with this cmd on 2.0.x pfsense version:
                            fetch -o /usr/local/etc/rc.d/clamav-clamd http://e-sac.siteseguro.ws/packages/dansguardian/clamav-clamd

                            Try to run freshclam on console too.

                            I replaced the clamd-clamav file with yours and did run freshclam on the console with success. I also did a reboot. But the error is still there if i try to access websites through DG.

                            1 Reply Last reply Reply Quote 0
                            • marcellocM
                              marcelloc
                              last edited by

                              @Macom2007:

                              I replaced the clamd-clamav file with yours and did run freshclam on the console with success. I also did a reboot. But the error is still there if i try to access websites through DG.

                              What you got running freshclam on console?

                              Treinamentos de Elite: http://sys-squad.com

                              Help a community developer! ;D

                              1 Reply Last reply Reply Quote 0
                              • M
                                Macom2007
                                last edited by

                                @marcelloc:

                                What you got running freshclam on console?

                                ClamAV update process started at Fri Apr 26 15:26:53 2013
                                WARNING: Your ClamAV installation is OUTDATED!
                                WARNING: Local version: 0.97.6 Recommended version: 0.97.8
                                DON'T PANIC! Read http://www.clamav.net/support/faq
                                main.cvd is up to date (version: 54, sigs: 1044387, f-level: 60, builder: sven)
                                daily.cvd is up to date (version: 17096, sigs: 1164088, f-level: 63, builder: neo)
                                safebrowsing.cvd is up to date (version: 40506, sigs: 1254288, f-level: 63, builder: google)
                                bytecode.cvd is up to date (version: 214, sigs: 41, f-level: 63, builder: neo)

                                1 Reply Last reply Reply Quote 0
                                • marcellocM
                                  marcelloc
                                  last edited by

                                  ok, now try to start dansguardian from console too.

                                  /usr/local/etc/rc.d/dansguardian.sh start

                                  kern.ipc.somaxconn: 16384 -> 16384
                                  kern.maxfiles: 131072 -> 131072
                                  kern.maxfilesperproc: 104856 -> 104856
                                  kern.threads.max_threads_per_proc: 4096 -> 4096
                                  Starting dansguardian.
                                  
                                  

                                  and then check if clamd is running
                                  ps ax | grep -i clamd

                                  42895  ??  Is     0:09.65 /usr/local/sbin/clamd
                                  41545   4  S+     0:00.00 grep -i clam
                                  
                                  

                                  Treinamentos de Elite: http://sys-squad.com

                                  Help a community developer! ;D

                                  1 Reply Last reply Reply Quote 0
                                  • M
                                    Macom2007
                                    last edited by

                                    @marcelloc:

                                    ok, now try to start dansguardian from console too.
                                    /usr/local/etc/rc.d/dansguardian.sh start

                                    This is my output :

                                    
                                    /usr/local/etc/rc.d/dansguardian.sh start
                                    kern.ipc.somaxconn: 16384 -> 16384
                                    kern.maxfiles: 131072 -> 131072
                                    kern.maxfilesperproc: 104856 -> 104856
                                    kern.threads.max_threads_per_proc: 4096 -> 4096
                                    Starting dansguardian.
                                    
                                    

                                    @marcelloc:

                                    and then check if clamd is running
                                    ps ax | grep -i clamd

                                    This is my output :

                                    30435  ??  Is     1:16.02 clamd
                                    52395   0  S+     0:00.00 grep -i clamd
                                    
                                    
                                    1 Reply Last reply Reply Quote 0
                                    • marcellocM
                                      marcelloc
                                      last edited by

                                      your clamd is running  ???

                                      check what user is running dansguardian and clamav

                                      ps aux | grep "dansguardian|clamd"

                                      Treinamentos de Elite: http://sys-squad.com

                                      Help a community developer! ;D

                                      1 Reply Last reply Reply Quote 0
                                      • M
                                        Macom2007
                                        last edited by

                                        @marcelloc:

                                        your clamd is running  ???

                                        check what user is running dansguardian and clamav

                                        ps aux | grep "dansguardian|clamd"

                                        
                                        ps aux | grep "dansguardian\|clamd"
                                        clamav 46857 25.5  0.3  9680  5992  ??  S     3:49PM   0:00.00 /usr/local/sbin/dansguardian -Q
                                        clamav 47164 25.5  0.3 10704  6000  ??  S     3:49PM   0:00.00 /usr/local/sbin/dansguardian -Q
                                        clamav 47418 25.5  0.4 11728  7816  ??  S     3:49PM   0:00.00 /usr/local/sbin/dansguardian -Q
                                        clamav 47487 25.5  0.4 11728  7820  ??  S     3:49PM   0:00.00 /usr/local/sbin/dansguardian -Q
                                        clamav 47625 25.5  0.4 11728  7820  ??  S     3:49PM   0:00.00 /usr/local/sbin/dansguardian -Q
                                        clamav 47643 25.5  0.4 11728  7824  ??  S     3:49PM   0:00.00 /usr/local/sbin/dansguardian -Q
                                        clamav 47717 25.5  0.4 11728  7824  ??  S     3:49PM   0:00.00 /usr/local/sbin/dansguardian -Q
                                        clamav 48011 25.5  0.4 11728  7824  ??  S     3:49PM   0:00.00 /usr/local/sbin/dansguardian -Q
                                        clamav 48045 25.5  0.4 11728  7828  ??  S     3:49PM   0:00.00 /usr/local/sbin/dansguardian -Q
                                        clamav 48336 25.5  0.4 11728  7828  ??  S     3:49PM   0:00.00 /usr/local/sbin/dansguardian -Q
                                        clamav 46714 25.4  0.4 11728  7872  ??  Ss    3:49PM   0:00.01 /usr/local/sbin/dansguardian -Q
                                        root   62146  0.0  0.1  3468  1252   0  S+    3:49PM   0:00.00 grep dansguardian\\|clamd
                                        
                                        
                                        1 Reply Last reply Reply Quote 0
                                        • marcellocM
                                          marcelloc
                                          last edited by

                                          your clamd is not running.

                                          what you get when you try to start it by hand?

                                          Treinamentos de Elite: http://sys-squad.com

                                          Help a community developer! ;D

                                          1 Reply Last reply Reply Quote 0
                                          • M
                                            Macom2007
                                            last edited by

                                            @marcelloc:

                                            your clamd is not running.

                                            what you get when you try to start it by hand?

                                            
                                            /usr/local/sbin(11): clamd
                                            WARNING: Ignoring deprecated option MailFollowURLs at line 50
                                            
                                            
                                            1 Reply Last reply Reply Quote 0
                                            • First post
                                              Last post
                                            Copyright 2025 Rubicon Communications LLC (Netgate). All rights reserved.