HAVP service doesn't start

Guest

Hi
It seems that havp antivirus doesn't work on pfsense 2.0 and 2.1.
I enabled HTTP proxy settings in standard mode. when i click "Start Service" icon , after few seconds, "HTTP Antivirus Proxy ( Starting .. )" changes to "Stopped".
When i start scanner, icon is red but "Antivirus Server ( Started )" is shown.
I had same problems with pfsense 2.0.1.
Is there any alternative to havp in pfsense?
I tried dansguardian, but in Content Scanners (antivirus) section, clamdscan is off.

dvserg

Try to use only one (HAVP or Dansguardian), but not both. Unused package delete. Probably AV scaner have conflict.

Guest

I removed dansguardian …no difference..havp service doesn't start. in boot time this message appears: group havp not found.

dvserg

You made the setting HAVP?

Guest

Yes,
I set standard proxy mode on LAN interface.
in boot time "pw: unknown group havp" message appears.
It seems that when database is updated, service starts.

dvserg

@Amirkabir:

Yes,
I set standard proxy mode on LAN interface.
in boot time "pw: unknown group havp" message appears.
It seems that when database is updated, service starts.

Syslog pls show, about havp/clamd

Guest

there isn't anything about antivirus in status:system logs .
where can i find syslog messages about havp?

dvserg

@Amirkabir:

there isn't anything about antivirus in status:system logs .
where can i find syslog messages about havp?

Try to (1)Save button click on settings page (2)Start service on First page (3)Search syslog for Havp/clamd messages.

Guest

/var/log/havp/havp.log:

=== Starting HAVP Version: 0.91
13/09/2013 22:29:00 === Mandatory locking disabled! KEEPBACK settings not used!
13/09/2013 22:29:00 Running as user: havp, group: havp
13/09/2013 22:29:00 --- Initializing Clamd Socket Scanner
13/09/2013 22:30:00 Clamd: Could not connect to scanner! Scanner down?
13/09/2013 22:30:00 ERROR: Clamd Socket Scanner failed EICAR virus test! (Could not connect to scanner socket)

/var/log/clamav/freshclam.log :

ERROR: Can't create temporary directory /var/db/clamav/clamav-785237799a0f5131f57ad1dcf81fc6d9
Hint: The database directory must be writable for UID 1003 or GID 2000

dvserg

@Amirkabir:

/var/log/clamav/freshclam.log :

ERROR: Can't create temporary directory /var/db/clamav/clamav-785237799a0f5131f57ad1dcf81fc6d9
Hint: The database directory must be writable for UID 1003 or GID 2000

What platform you use (hdd/nanobsd)?

Guest

hdd
right now database updated successfully and havp started.
havp is not stable.

dvserg

@Amirkabir:

hdd
right now database updated successfully and havp started.
havp is not stable.

The first start of HAVP unavailable because AV bases update is occurs. Maybe update take a long time :(

Guest

yes, but my problem is update failure at first time
ERROR: Can't create temporary directory /var/db/clamav/clamav-785237799a0f5131f57ad1dcf81fc6d9

sisko212

Seems to be related to /var/log/ permissions.
I don't known why, but after upgrade to 2.1, i found that my /var/log has permissions "drwxrwxr– 8 root wheel 1024 Dec 5 10:14 log"
It is clear that all process with different uuid and ggid of root and wheel cannot go through /var/log and get access to their logs files.
As partial solution i typed:

chmod a+x /var/log

and now havp process is starting to work... i still have trouble with clamav, but it is another story and i am still investigating

moradweb

Hi,

Hi
It seems that havp antivirus …............................ settings in standard mode…..................

are you tested the "parent for squid" mode ?

Guest

It works now in standard and parent mode. my problem was slow download process at update time.