Dansguardian package for 2.0

Macom2007

ok, now try to start dansguardian from console too.
/usr/local/etc/rc.d/dansguardian.sh start

This is my output :


/usr/local/etc/rc.d/dansguardian.sh start
kern.ipc.somaxconn: 16384 -> 16384
kern.maxfiles: 131072 -> 131072
kern.maxfilesperproc: 104856 -> 104856
kern.threads.max_threads_per_proc: 4096 -> 4096
Starting dansguardian.

@marcelloc:

and then check if clamd is running
ps ax | grep -i clamd

This is my output :

30435  ??  Is     1:16.02 clamd
52395   0  S+     0:00.00 grep -i clamd

marcelloc

your clamd is running ???

check what user is running dansguardian and clamav

ps aux | grep "dansguardian|clamd"

Macom2007

@marcelloc:

your clamd is running ???

check what user is running dansguardian and clamav

ps aux | grep "dansguardian|clamd"


ps aux | grep "dansguardian\|clamd"
clamav 46857 25.5  0.3  9680  5992  ??  S     3:49PM   0:00.00 /usr/local/sbin/dansguardian -Q
clamav 47164 25.5  0.3 10704  6000  ??  S     3:49PM   0:00.00 /usr/local/sbin/dansguardian -Q
clamav 47418 25.5  0.4 11728  7816  ??  S     3:49PM   0:00.00 /usr/local/sbin/dansguardian -Q
clamav 47487 25.5  0.4 11728  7820  ??  S     3:49PM   0:00.00 /usr/local/sbin/dansguardian -Q
clamav 47625 25.5  0.4 11728  7820  ??  S     3:49PM   0:00.00 /usr/local/sbin/dansguardian -Q
clamav 47643 25.5  0.4 11728  7824  ??  S     3:49PM   0:00.00 /usr/local/sbin/dansguardian -Q
clamav 47717 25.5  0.4 11728  7824  ??  S     3:49PM   0:00.00 /usr/local/sbin/dansguardian -Q
clamav 48011 25.5  0.4 11728  7824  ??  S     3:49PM   0:00.00 /usr/local/sbin/dansguardian -Q
clamav 48045 25.5  0.4 11728  7828  ??  S     3:49PM   0:00.00 /usr/local/sbin/dansguardian -Q
clamav 48336 25.5  0.4 11728  7828  ??  S     3:49PM   0:00.00 /usr/local/sbin/dansguardian -Q
clamav 46714 25.4  0.4 11728  7872  ??  Ss    3:49PM   0:00.01 /usr/local/sbin/dansguardian -Q
root   62146  0.0  0.1  3468  1252   0  S+    3:49PM   0:00.00 grep dansguardian\\|clamd

marcelloc

your clamd is not running.

what you get when you try to start it by hand?

Macom2007

@marcelloc:

your clamd is not running.

what you get when you try to start it by hand?


/usr/local/sbin(11): clamd
WARNING: Ignoring deprecated option MailFollowURLs at line 50

marcelloc

/usr/local/etc/rc.d/clamav-clamd start

Macom2007

@marcelloc:

/usr/local/etc/rc.d/clamav-clamd start


/usr/local/etc/rc.d/clamav-clamd start 
Starting clamav_clamd.
WARNING: Ignoring deprecated option MailFollowURLs at line 50

clamd is running but as root now …

Macom2007

@Macom2007:

clamd is running but as root now …

i changed the user in clamd.conf to clamav. If i try to start it now i get this error :


/usr/local/etc/rc.d/clamav-clamd start 
Starting clamav_clamd.
WARNING: Ignoring deprecated option MailFollowURLs at line 50
ERROR: LOCAL: Socket file /var/run/clamd.sock could not be bound: Permission denied
ERROR: Can't unlink the socket file /var/run/clamd.sock
/usr/local/etc/rc.d/clamav-clamd: WARNING: failed to start clamav_clamd

marcelloc

stop clamav and remove the file /var/run/clamd.sock by hand.

Macom2007

@marcelloc:

stop clamav and remove the file /var/run/clamd.sock by hand.

That works. Thanks for your great support.

samham

I'm still having the issue of duplicate line of "/usr/local/bin/php /usr/local/www/dansguardian.php fetch_blacklist " every time a change is made to Dansguardian in the GUI

marcelloc

@samham:

I'm still having the issue of duplicate line of "/usr/local/bin/php /usr/local/www/dansguardian.php fetch_blacklist " every time a change is made to Dansguardian in the GUI

You mean update fetch blacklist? what option do you have configured? download and update now?

rjcrowder

@marcelloc:

@samham:

I'm still having the issue of duplicate line of "/usr/local/bin/php /usr/local/www/dansguardian.php fetch_blacklist " every time a change is made to Dansguardian in the GUI

You mean update fetch blacklist? what option do you have configured? download and update now?

Marcello - Just curious… did you push a change to the dansguardian package today but keep the version number the same? I did a fresh install on a new machine and ran into another problem with the code in /usr/local/pkg/dansguardian.inc. In the version that was installed, it looks like you changed the variable for the clamav-clamd script to "$clamav_script"... however, you missed a couple of spots - where the script was starting/stopping it was using the "$script" variable. End result is that the clamd daemon was not starting...

rjcrowder

@rjcrowder:

@marcelloc:

@samham:

I'm still having the issue of duplicate line of "/usr/local/bin/php /usr/local/www/dansguardian.php fetch_blacklist " every time a change is made to Dansguardian in the GUI

You mean update fetch blacklist? what option do you have configured? download and update now?

Marcello - Just curious… did you push a change to the dansguardian package today but keep the version number the same? I did a fresh install on a new machine and ran into another problem with the code in /usr/local/pkg/dansguardian.inc. In the version that was installed, it looks like you changed the variable for the clamav-clamd script to "$clamav_script"... however, you missed a couple of spots - where the script was starting/stopping it was using the "$script" variable. End result is that the clamd daemon was not starting...

In addition, the fetch_blacklist function (in /usr/local/www/dansguardian.php) seems to be broken. When you try to fetch, it does nothing. Believe it is because of the if statement you added at the top. If it executes the "else", the url is never set…

marcelloc

I'll check it this weekend.

rjcrowder

@marcelloc:

I'll check it this weekend.

OK… believe your if statement had a misplaced closing paren... Should be...
if (is_array($config['installedpackages']['dansguardianblacklist']) && is_array($config['installedpackages']['dansguardianbl
acklist']['config'])){

BTW… the other thing that is strange (but maybe I just never noticed before) is that directory owners seem strange. A lot of stuff under /usr/local/etc/dansguardian/lists is now owned by "clamav"? also, it seems that stuff under the blacklists directory has an owner of "1000" and group of "squid"?

marcelloc

@rjcrowder:

A lot of stuff under /usr/local/etc/dansguardian/lists is now owned by "clamav"?

yes, clamav and dansguardian must be run by the same user.

@rjcrowder:

also, it seems that stuff under the blacklists directory has an owner of "1000" and group of "squid"?

Default file permissions from compressed blacklist download.

Legion

I've made some stupid mistake (maybe when I manually installed clamav a while back and then deleted it again?) and now I can't get clamav to work at all. I've reinstalled DG several times and each time I try to enable clamav via the gui I get:

Fatal error: Allowed memory size of 134217728 bytes exhausted (tried to allocate 35 bytes) in /usr/local/pkg/dansguardian.inc on line 1137

That's a lot of bytes.

The line in particular is:

$script_file=file($clamav_script);

I'm not sure exactly what is going on. Eventually I'll do a fresh 2.1 install and hopefully that'll get rid of it.

marcelloc

@Legion:

Fatal error: Allowed memory size of 134217728 bytes exhausted (tried to allocate 35 bytes) in /usr/local/pkg/dansguardian.inc on line 1137

I'm not sure exactly what is going on. Eventually I'll do a fresh 2.1 install and hopefully that'll get rid of it.

remove /usr/local/etc/rc.d/clamav-clamd script after package remove.

or follow instructions from this post http://forum.pfsense.org/index.php/topic,43786.msg332438.html#msg332438

marcelloc

rjcrowder,

take a look(with a package reinstall) if fetch_blacklist and clamav call are fine again. I'll bump version after these small bugs are gone.

att,
Marcello Coutinho