HAVP not found, fail clamd
-
Hi, I have installed HAVP proxy antivirus http. When I start the havp:
22/01/2014 13:02:51 Running as user: havp, group: havp
22/01/2014 13:02:51 Use transparent proxy mode
22/01/2014 13:02:51 –- Initializing Clamd Socket Scanner
22/01/2014 13:03:20 === Starting HAVP Version: 0.91
22/01/2014 13:03:20 === Mandatory locking disabled! KEEPBACK settings not used!
22/01/2014 13:03:20 Running as user: havp, group: havp
22/01/2014 13:03:20 Use transparent proxy mode
22/01/2014 13:03:20 --- Initializing Clamd Socket Scanner
22/01/2014 13:04:20 Clamd: Could not connect to scanner! Scanner down?
22/01/2014 13:04:20 ERROR: Clamd Socket Scanner failed EICAR virus test! (Could not connect to scanner socket)Clamd fails... I need the squid install?? or not necesary?
Thanks in advanced.
-
If you wait a little bit, I think it will download the latest virus database and start on its own.
-
Actually, this happens because the HAVP config expects to find the following files at /var/run/clamav:
-
clamd.sock
-
clamd.pid
The thing is, in pfSense those files are found in /var/run, which is why the package can't find them. Moreover, there seems to be no way to change the path in the config file (and I read somewhere this was hardcoded into the scanner). The current workaround for this is creating this directory and linking the files together.
mkdir /var/run/clamav ln -s /var/run/clamd.sock /var/run/clamav/clamd.sock && ln -s /var/run/clamd.pid /var/run/clamav/clamd.pidThe problem is that these files get lost on every reboot. I've tried modifying the service startup script to check for this automatically, but have had no luck so far.
Hope this helps
-
