Netgate Discussion Forum
    • Categories
    • Recent
    • Tags
    • Popular
    • Users
    • Search
    • Register
    • Login

    Dansguardian package for 2.0

    Scheduled Pinned Locked Moved pfSense Packages
    492 Posts 51 Posters 473.4k Views
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • marcellocM
      marcelloc
      last edited by

      your clamd is not running.

      what you get when you try to start it by hand?

      Treinamentos de Elite: http://sys-squad.com

      Help a community developer! ;D

      1 Reply Last reply Reply Quote 0
      • M
        Macom2007
        last edited by

        @marcelloc:

        your clamd is not running.

        what you get when you try to start it by hand?

        
        /usr/local/sbin(11): clamd
        WARNING: Ignoring deprecated option MailFollowURLs at line 50
        
        
        1 Reply Last reply Reply Quote 0
        • marcellocM
          marcelloc
          last edited by

          /usr/local/etc/rc.d/clamav-clamd start

          Treinamentos de Elite: http://sys-squad.com

          Help a community developer! ;D

          1 Reply Last reply Reply Quote 0
          • M
            Macom2007
            last edited by

            @marcelloc:

            /usr/local/etc/rc.d/clamav-clamd start

            
            /usr/local/etc/rc.d/clamav-clamd start 
            Starting clamav_clamd.
            WARNING: Ignoring deprecated option MailFollowURLs at line 50
            
            

            clamd is running but as root now …

            1 Reply Last reply Reply Quote 0
            • M
              Macom2007
              last edited by

              @Macom2007:

              clamd is running but as root now …

              i changed the user in clamd.conf to clamav. If i try to start it now i get this error :

              
              /usr/local/etc/rc.d/clamav-clamd start 
              Starting clamav_clamd.
              WARNING: Ignoring deprecated option MailFollowURLs at line 50
              ERROR: LOCAL: Socket file /var/run/clamd.sock could not be bound: Permission denied
              ERROR: Can't unlink the socket file /var/run/clamd.sock
              /usr/local/etc/rc.d/clamav-clamd: WARNING: failed to start clamav_clamd
              
              
              1 Reply Last reply Reply Quote 0
              • marcellocM
                marcelloc
                last edited by

                stop clamav and remove the file /var/run/clamd.sock by hand.

                Treinamentos de Elite: http://sys-squad.com

                Help a community developer! ;D

                1 Reply Last reply Reply Quote 0
                • M
                  Macom2007
                  last edited by

                  @marcelloc:

                  stop clamav and remove the file /var/run/clamd.sock by hand.

                  That works. Thanks for your great support.

                  1 Reply Last reply Reply Quote 0
                  • S
                    samham
                    last edited by

                    I'm still having the issue of duplicate line of "/usr/local/bin/php /usr/local/www/dansguardian.php fetch_blacklist " every time a change is made to Dansguardian in the GUI

                    1 Reply Last reply Reply Quote 0
                    • marcellocM
                      marcelloc
                      last edited by

                      @samham:

                      I'm still having the issue of duplicate line of "/usr/local/bin/php /usr/local/www/dansguardian.php fetch_blacklist " every time a change is made to Dansguardian in the GUI

                      You mean update fetch blacklist? what option do you have configured? download and update now?

                      Treinamentos de Elite: http://sys-squad.com

                      Help a community developer! ;D

                      1 Reply Last reply Reply Quote 0
                      • R
                        rjcrowder
                        last edited by

                        @marcelloc:

                        @samham:

                        I'm still having the issue of duplicate line of "/usr/local/bin/php /usr/local/www/dansguardian.php fetch_blacklist " every time a change is made to Dansguardian in the GUI

                        You mean update fetch blacklist? what option do you have configured? download and update now?

                        Marcello - Just curious… did you push a change to the dansguardian package today but keep the version number the same? I did a fresh install on a new machine and ran into another problem with the code in /usr/local/pkg/dansguardian.inc. In the version that was installed, it looks like you changed the variable for the clamav-clamd script to "$clamav_script"... however, you missed a couple of spots - where the script was starting/stopping it was using the "$script" variable. End result is that the clamd daemon was not starting...

                        1 Reply Last reply Reply Quote 0
                        • R
                          rjcrowder
                          last edited by

                          @rjcrowder:

                          @marcelloc:

                          @samham:

                          I'm still having the issue of duplicate line of "/usr/local/bin/php /usr/local/www/dansguardian.php fetch_blacklist " every time a change is made to Dansguardian in the GUI

                          You mean update fetch blacklist? what option do you have configured? download and update now?

                          Marcello - Just curious… did you push a change to the dansguardian package today but keep the version number the same? I did a fresh install on a new machine and ran into another problem with the code in /usr/local/pkg/dansguardian.inc. In the version that was installed, it looks like you changed the variable for the clamav-clamd script to "$clamav_script"... however, you missed a couple of spots - where the script was starting/stopping it was using the "$script" variable. End result is that the clamd daemon was not starting...

                          In addition, the fetch_blacklist function (in /usr/local/www/dansguardian.php) seems to be broken. When you try to fetch, it does nothing. Believe it is because of the if statement you added at the top. If it executes the "else", the url is never set…

                          1 Reply Last reply Reply Quote 0
                          • marcellocM
                            marcelloc
                            last edited by

                            I'll check it this weekend.

                            Treinamentos de Elite: http://sys-squad.com

                            Help a community developer! ;D

                            1 Reply Last reply Reply Quote 0
                            • R
                              rjcrowder
                              last edited by

                              @marcelloc:

                              I'll check it this weekend.

                              OK… believe your if statement had a misplaced closing paren...  Should be...
                              if (is_array($config['installedpackages']['dansguardianblacklist']) && is_array($config['installedpackages']['dansguardianbl
                              acklist']['config'])){

                              BTW… the other thing that is strange (but maybe I just never noticed before) is that directory owners seem strange. A lot of stuff under /usr/local/etc/dansguardian/lists is now owned by "clamav"? also, it seems that stuff under the blacklists directory has an owner of "1000" and group of "squid"?

                              1 Reply Last reply Reply Quote 0
                              • marcellocM
                                marcelloc
                                last edited by

                                @rjcrowder:

                                A lot of stuff under /usr/local/etc/dansguardian/lists is now owned by "clamav"?

                                yes, clamav and dansguardian must be run by the same user.

                                @rjcrowder:

                                also, it seems that stuff under the blacklists directory has an owner of "1000" and group of "squid"?

                                Default file permissions from compressed blacklist download.

                                Treinamentos de Elite: http://sys-squad.com

                                Help a community developer! ;D

                                1 Reply Last reply Reply Quote 0
                                • L
                                  Legion
                                  last edited by

                                  I've made some stupid mistake (maybe when I manually installed clamav a while back and then deleted it again?) and now I can't get clamav to work at all. I've reinstalled DG several times and each time I try to enable clamav via the gui I get:

                                  Fatal error: Allowed memory size of 134217728 bytes exhausted (tried to allocate 35 bytes) in /usr/local/pkg/dansguardian.inc on line 1137

                                  That's a lot of bytes.

                                  The line in particular is:

                                  $script_file=file($clamav_script);

                                  I'm not sure exactly what is going on. Eventually I'll do a fresh 2.1 install and hopefully that'll get rid of it.

                                  1 Reply Last reply Reply Quote 0
                                  • marcellocM
                                    marcelloc
                                    last edited by

                                    @Legion:

                                    Fatal error: Allowed memory size of 134217728 bytes exhausted (tried to allocate 35 bytes) in /usr/local/pkg/dansguardian.inc on line 1137

                                    I'm not sure exactly what is going on. Eventually I'll do a fresh 2.1 install and hopefully that'll get rid of it.

                                    remove /usr/local/etc/rc.d/clamav-clamd script after package remove.

                                    or follow instructions from this post http://forum.pfsense.org/index.php/topic,43786.msg332438.html#msg332438

                                    Treinamentos de Elite: http://sys-squad.com

                                    Help a community developer! ;D

                                    1 Reply Last reply Reply Quote 0
                                    • marcellocM
                                      marcelloc
                                      last edited by

                                      rjcrowder,

                                      take a look(with a package reinstall) if fetch_blacklist and clamav call are fine again. I'll bump version after these small bugs are gone.

                                      att,
                                      Marcello Coutinho

                                      Treinamentos de Elite: http://sys-squad.com

                                      Help a community developer! ;D

                                      1 Reply Last reply Reply Quote 0
                                      • L
                                        LokisMischief
                                        last edited by

                                        I seem to have an issue with DG processes exiting with signal 11's ?? It seems dans is still accepting traffic and filtering but my logs have been filled with

                                        Apr 29 11:28:57	kernel: pid 18872 (dansguardian), uid 106: exited on signal 11
                                        

                                        Not sure where to start looking for this one  :(

                                        Though I don't have the update from this weekend I wouldn't expect any changes to the dansguardian core.

                                        1 Reply Last reply Reply Quote 0
                                        • marcellocM
                                          marcelloc
                                          last edited by

                                          @LokisMischief:

                                          Not sure where to start looking for this one  :(

                                          Did you applied the binary patch fot fix web upload bug? you can try to downgrade binaries via pkg_add too.

                                          Treinamentos de Elite: http://sys-squad.com

                                          Help a community developer! ;D

                                          1 Reply Last reply Reply Quote 0
                                          • R
                                            rjcrowder
                                            last edited by

                                            @marcelloc:

                                            rjcrowder,

                                            take a look(with a package reinstall) if fetch_blacklist and clamav call are fine again. I'll bump version after these small bugs are gone.

                                            att,
                                            Marcello Coutinho

                                            Looks good from what I can tell… manually checked the code plus all the scenarios that I know of where it starts/stops clamd and dans.

                                            There is one other behavior that is a little annoying that might be fixable... just haven't looked at the code to see how yet. If the dansguardian config is setup to use a different blacklist than the default, then a "reinstall" of the package breaks dans until you do a "fetch_blacklist". Basically, dans won't start because the blacklists in the config files don't match the blacklist directories that are created when a "reinstall" is done. One way to fix it would be to automatically do a "fetch_blacklist" at the end of a package reinstall. Not a big deal... just always have to do it manually after package reinstall...

                                            1 Reply Last reply Reply Quote 0
                                            • First post
                                              Last post
                                            Copyright 2025 Rubicon Communications LLC (Netgate). All rights reserved.