Netgate Discussion Forum
    • Categories
    • Recent
    • Tags
    • Popular
    • Users
    • Search
    • Register
    • Login

    Dansguardian package for 2.0

    Scheduled Pinned Locked Moved pfSense Packages
    492 Posts 51 Posters 472.7k Views
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • marcellocM
      marcelloc
      last edited by

      /usr/local/etc/rc.d/clamav-clamd start

      Treinamentos de Elite: http://sys-squad.com

      Help a community developer! ;D

      1 Reply Last reply Reply Quote 0
      • M
        Macom2007
        last edited by

        @marcelloc:

        /usr/local/etc/rc.d/clamav-clamd start

        
        /usr/local/etc/rc.d/clamav-clamd start 
        Starting clamav_clamd.
        WARNING: Ignoring deprecated option MailFollowURLs at line 50
        
        

        clamd is running but as root now …

        1 Reply Last reply Reply Quote 0
        • M
          Macom2007
          last edited by

          @Macom2007:

          clamd is running but as root now …

          i changed the user in clamd.conf to clamav. If i try to start it now i get this error :

          
          /usr/local/etc/rc.d/clamav-clamd start 
          Starting clamav_clamd.
          WARNING: Ignoring deprecated option MailFollowURLs at line 50
          ERROR: LOCAL: Socket file /var/run/clamd.sock could not be bound: Permission denied
          ERROR: Can't unlink the socket file /var/run/clamd.sock
          /usr/local/etc/rc.d/clamav-clamd: WARNING: failed to start clamav_clamd
          
          
          1 Reply Last reply Reply Quote 0
          • marcellocM
            marcelloc
            last edited by

            stop clamav and remove the file /var/run/clamd.sock by hand.

            Treinamentos de Elite: http://sys-squad.com

            Help a community developer! ;D

            1 Reply Last reply Reply Quote 0
            • M
              Macom2007
              last edited by

              @marcelloc:

              stop clamav and remove the file /var/run/clamd.sock by hand.

              That works. Thanks for your great support.

              1 Reply Last reply Reply Quote 0
              • S
                samham
                last edited by

                I'm still having the issue of duplicate line of "/usr/local/bin/php /usr/local/www/dansguardian.php fetch_blacklist " every time a change is made to Dansguardian in the GUI

                1 Reply Last reply Reply Quote 0
                • marcellocM
                  marcelloc
                  last edited by

                  @samham:

                  I'm still having the issue of duplicate line of "/usr/local/bin/php /usr/local/www/dansguardian.php fetch_blacklist " every time a change is made to Dansguardian in the GUI

                  You mean update fetch blacklist? what option do you have configured? download and update now?

                  Treinamentos de Elite: http://sys-squad.com

                  Help a community developer! ;D

                  1 Reply Last reply Reply Quote 0
                  • R
                    rjcrowder
                    last edited by

                    @marcelloc:

                    @samham:

                    I'm still having the issue of duplicate line of "/usr/local/bin/php /usr/local/www/dansguardian.php fetch_blacklist " every time a change is made to Dansguardian in the GUI

                    You mean update fetch blacklist? what option do you have configured? download and update now?

                    Marcello - Just curious… did you push a change to the dansguardian package today but keep the version number the same? I did a fresh install on a new machine and ran into another problem with the code in /usr/local/pkg/dansguardian.inc. In the version that was installed, it looks like you changed the variable for the clamav-clamd script to "$clamav_script"... however, you missed a couple of spots - where the script was starting/stopping it was using the "$script" variable. End result is that the clamd daemon was not starting...

                    1 Reply Last reply Reply Quote 0
                    • R
                      rjcrowder
                      last edited by

                      @rjcrowder:

                      @marcelloc:

                      @samham:

                      I'm still having the issue of duplicate line of "/usr/local/bin/php /usr/local/www/dansguardian.php fetch_blacklist " every time a change is made to Dansguardian in the GUI

                      You mean update fetch blacklist? what option do you have configured? download and update now?

                      Marcello - Just curious… did you push a change to the dansguardian package today but keep the version number the same? I did a fresh install on a new machine and ran into another problem with the code in /usr/local/pkg/dansguardian.inc. In the version that was installed, it looks like you changed the variable for the clamav-clamd script to "$clamav_script"... however, you missed a couple of spots - where the script was starting/stopping it was using the "$script" variable. End result is that the clamd daemon was not starting...

                      In addition, the fetch_blacklist function (in /usr/local/www/dansguardian.php) seems to be broken. When you try to fetch, it does nothing. Believe it is because of the if statement you added at the top. If it executes the "else", the url is never set…

                      1 Reply Last reply Reply Quote 0
                      • marcellocM
                        marcelloc
                        last edited by

                        I'll check it this weekend.

                        Treinamentos de Elite: http://sys-squad.com

                        Help a community developer! ;D

                        1 Reply Last reply Reply Quote 0
                        • R
                          rjcrowder
                          last edited by

                          @marcelloc:

                          I'll check it this weekend.

                          OK… believe your if statement had a misplaced closing paren...  Should be...
                          if (is_array($config['installedpackages']['dansguardianblacklist']) && is_array($config['installedpackages']['dansguardianbl
                          acklist']['config'])){

                          BTW… the other thing that is strange (but maybe I just never noticed before) is that directory owners seem strange. A lot of stuff under /usr/local/etc/dansguardian/lists is now owned by "clamav"? also, it seems that stuff under the blacklists directory has an owner of "1000" and group of "squid"?

                          1 Reply Last reply Reply Quote 0
                          • marcellocM
                            marcelloc
                            last edited by

                            @rjcrowder:

                            A lot of stuff under /usr/local/etc/dansguardian/lists is now owned by "clamav"?

                            yes, clamav and dansguardian must be run by the same user.

                            @rjcrowder:

                            also, it seems that stuff under the blacklists directory has an owner of "1000" and group of "squid"?

                            Default file permissions from compressed blacklist download.

                            Treinamentos de Elite: http://sys-squad.com

                            Help a community developer! ;D

                            1 Reply Last reply Reply Quote 0
                            • L
                              Legion
                              last edited by

                              I've made some stupid mistake (maybe when I manually installed clamav a while back and then deleted it again?) and now I can't get clamav to work at all. I've reinstalled DG several times and each time I try to enable clamav via the gui I get:

                              Fatal error: Allowed memory size of 134217728 bytes exhausted (tried to allocate 35 bytes) in /usr/local/pkg/dansguardian.inc on line 1137

                              That's a lot of bytes.

                              The line in particular is:

                              $script_file=file($clamav_script);

                              I'm not sure exactly what is going on. Eventually I'll do a fresh 2.1 install and hopefully that'll get rid of it.

                              1 Reply Last reply Reply Quote 0
                              • marcellocM
                                marcelloc
                                last edited by

                                @Legion:

                                Fatal error: Allowed memory size of 134217728 bytes exhausted (tried to allocate 35 bytes) in /usr/local/pkg/dansguardian.inc on line 1137

                                I'm not sure exactly what is going on. Eventually I'll do a fresh 2.1 install and hopefully that'll get rid of it.

                                remove /usr/local/etc/rc.d/clamav-clamd script after package remove.

                                or follow instructions from this post http://forum.pfsense.org/index.php/topic,43786.msg332438.html#msg332438

                                Treinamentos de Elite: http://sys-squad.com

                                Help a community developer! ;D

                                1 Reply Last reply Reply Quote 0
                                • marcellocM
                                  marcelloc
                                  last edited by

                                  rjcrowder,

                                  take a look(with a package reinstall) if fetch_blacklist and clamav call are fine again. I'll bump version after these small bugs are gone.

                                  att,
                                  Marcello Coutinho

                                  Treinamentos de Elite: http://sys-squad.com

                                  Help a community developer! ;D

                                  1 Reply Last reply Reply Quote 0
                                  • L
                                    LokisMischief
                                    last edited by

                                    I seem to have an issue with DG processes exiting with signal 11's ?? It seems dans is still accepting traffic and filtering but my logs have been filled with

                                    Apr 29 11:28:57	kernel: pid 18872 (dansguardian), uid 106: exited on signal 11
                                    

                                    Not sure where to start looking for this one  :(

                                    Though I don't have the update from this weekend I wouldn't expect any changes to the dansguardian core.

                                    1 Reply Last reply Reply Quote 0
                                    • marcellocM
                                      marcelloc
                                      last edited by

                                      @LokisMischief:

                                      Not sure where to start looking for this one  :(

                                      Did you applied the binary patch fot fix web upload bug? you can try to downgrade binaries via pkg_add too.

                                      Treinamentos de Elite: http://sys-squad.com

                                      Help a community developer! ;D

                                      1 Reply Last reply Reply Quote 0
                                      • R
                                        rjcrowder
                                        last edited by

                                        @marcelloc:

                                        rjcrowder,

                                        take a look(with a package reinstall) if fetch_blacklist and clamav call are fine again. I'll bump version after these small bugs are gone.

                                        att,
                                        Marcello Coutinho

                                        Looks good from what I can tell… manually checked the code plus all the scenarios that I know of where it starts/stops clamd and dans.

                                        There is one other behavior that is a little annoying that might be fixable... just haven't looked at the code to see how yet. If the dansguardian config is setup to use a different blacklist than the default, then a "reinstall" of the package breaks dans until you do a "fetch_blacklist". Basically, dans won't start because the blacklists in the config files don't match the blacklist directories that are created when a "reinstall" is done. One way to fix it would be to automatically do a "fetch_blacklist" at the end of a package reinstall. Not a big deal... just always have to do it manually after package reinstall...

                                        1 Reply Last reply Reply Quote 0
                                        • marcellocM
                                          marcelloc
                                          last edited by

                                          @rjcrowder:

                                          Basically, dans won't start because the blacklists in the config files don't match the blacklist directories that are created when a "reinstall" is done.

                                          The install/reinstall code does check backlist during process install and apply it. I'll take a last look on it before version bump.

                                          Treinamentos de Elite: http://sys-squad.com

                                          Help a community developer! ;D

                                          1 Reply Last reply Reply Quote 0
                                          • L
                                            LokisMischief
                                            last edited by

                                            @marcelloc:

                                            @LokisMischief:

                                            Not sure where to start looking for this one  :(

                                            Did you applied the binary patch fot fix web upload bug? you can try to downgrade binaries via pkg_add too.

                                            Well, I have updated to your latest package, still had the same issue, child processes dropping out with sig 11's, applied your upload patch (incidentally I didn't have any web upload issues) but still the same sig 11's

                                            Edit:

                                            For more information on this issue, read here: http://forum.pfsense.org/index.php/topic,61811.0.html

                                            1 Reply Last reply Reply Quote 0
                                            • First post
                                              Last post
                                            Copyright 2025 Rubicon Communications LLC (Netgate). All rights reserved.