pfSense » pfSense Packages

NA NA wrote:

Line 562 corresponds to

<rrd>
<enable/>
</rrd>

Look at /cf/conf/config.xml.bad instead.

Thanks, was stupid of me looking at the working thing
Here is the portion from config.xml.bad

501 <cron>
502 <item>
503 <minute>1,31</minute>
504 <hour>0-5</hour>
505 <mday>*</mday>
506 <month>*</month>
507 <wday>*</wday>
508 <who>root</who>
509 <command>/usr/bin/nice -n20 adjkerntz -a</command>
510 </item>
511 <item>
512 <minute>1</minute>
513 <hour>3</hour>
514 <mday>1</mday>
515 <month>*</month>
516 <wday>*</wday>
517 <who>root</who>
518 <command>/usr/bin/nice -n20 /etc/rc.update_bogons.sh</command>
519 </item>
520 <item>
521 <minute>*/60</minute>
522 <hour>*</hour>
523 <mday>*</mday>
524 <month>*</month>
525 <wday>*</wday>
526 <who>root</who>
527 <command>/usr/bin/nice -n20 /usr/local/sbin/expiretable -v -t 3600 sshlockout</command>
528 </item>
529 <item>
530 <minute>*/60</minute>
531 <hour>*</hour>
532 <mday>*</mday>
533 <month>*</month>
534 <wday>*</wday>
535 <who>root</who>
536 <command>/usr/bin/nice -n20 /usr/local/sbin/expiretable -v -t 3600 webConfiguratorlockout</command>
537 </item>
538 <item>
539 <minute>1</minute>
540 <hour>1</hour>
541 <mday>*</mday>
542 <month>*</month>
543 <wday>*</wday>
544 <who>root</who>
545 <command>/usr/bin/nice -n20 /etc/rc.dyndns.update</command>
546 </item>
547 <item>
548 <minute>*/60</minute>
549 <hour>*</hour>
550 <mday>*</mday>
551 <month>*</month>
552 <wday>*</wday>
553 <who>root</who>
554 <command>/usr/bin/nice -n20 /usr/local/sbin/expiretable -v -t 3600 virusprot</command>
555 </item>
556 <item>
557 <minute>30</minute>
558 <hour>12</hour>
559 <mday>*</mday>
560 <month>*</month>
561 <wday>*</wday>
562 <who>root</who>
563 <command>/usr/bin/nice -n20 /etc/rc.update_urltables</command>
564 </item>
565 <item>
566 <minute>
567 <0>0</0>
568 <1></1>
569 <2>*</2>
570 <3>*</3>
571 <4>*</4>
572 <5>root</5>
573 </minute>
574 <hour>*</hour>
575 <mday>*</mday>
576 <month>*</month>
577 <wday>*</wday>
578 <who>root</who>
579 <command>/usr/bin/nice -n20 /usr/local/etc/rc.d/havp_avupdate</command>
580 </item>
581 </cron>
582 <wol/>

NA NA wrote:

Thanks, was stupid of me looking at the working thing
Here is the portion from config.xml.bad

501 <cron>
502 <item>
503 <minute>1,31</minute>
504 <hour>0-5</hour>
505 <mday>*</mday>
506 <month>*</month>
507 <wday>*</wday>
508 <who>root</who>
509 <command>/usr/bin/nice -n20 adjkerntz -a</command>
510 </item>
511 <item>
512 <minute>1</minute>
513 <hour>3</hour>
514 <mday>1</mday>
515 <month>*</month>
516 <wday>*</wday>
517 <who>root</who>
518 <command>/usr/bin/nice -n20 /etc/rc.update_bogons.sh</command>
519 </item>
520 <item>
521 <minute>*/60</minute>
522 <hour>*</hour>
523 <mday>*</mday>
524 <month>*</month>
525 <wday>*</wday>
526 <who>root</who>
527 <command>/usr/bin/nice -n20 /usr/local/sbin/expiretable -v -t 3600 sshlockout</command>
528 </item>
529 <item>
530 <minute>*/60</minute>
531 <hour>*</hour>
532 <mday>*</mday>
533 <month>*</month>
534 <wday>*</wday>
535 <who>root</who>
536 <command>/usr/bin/nice -n20 /usr/local/sbin/expiretable -v -t 3600 webConfiguratorlockout</command>
537 </item>
538 <item>
539 <minute>1</minute>
540 <hour>1</hour>
541 <mday>*</mday>
542 <month>*</month>
543 <wday>*</wday>
544 <who>root</who>
545 <command>/usr/bin/nice -n20 /etc/rc.dyndns.update</command>
546 </item>
547 <item>
548 <minute>*/60</minute>
549 <hour>*</hour>
550 <mday>*</mday>
551 <month>*</month>
552 <wday>*</wday>
553 <who>root</who>
554 <command>/usr/bin/nice -n20 /usr/local/sbin/expiretable -v -t 3600 virusprot</command>
555 </item>
556 <item>
557 <minute>30</minute>
558 <hour>12</hour>
559 <mday>*</mday>
560 <month>*</month>
561 <wday>*</wday>
562 <who>root</who>
563 <command>/usr/bin/nice -n20 /etc/rc.update_urltables</command>
564 </item>
565 <item>
566 <minute>
567 <0>0</0>
568 <1></1>
569 <2>*</2>
570 <3>*</3>
571 <4>*</4>
572 <5>root</5>
573 </minute>
574 <hour>*</hour>
575 <mday>*</mday>
576 <month>*</month>
577 <wday>*</wday>
578 <who>root</who>
579 <command>/usr/bin/nice -n20 /usr/local/etc/rc.d/havp_avupdate</command>
580 </item>
581 </cron>
582 <wol/>

Syslog throws warning about line 567

Much better. Please, test this:

cd /usr/local/pkg/
mv havp.inc havp.inc.orig
fetch https://raw.githubusercontent.com/doktornotor/pfsense-packages/f71e299b474c5fbc6879bd00ab59d83aea2f7ef7/config/havp/havp.inc

and try some HAVP config changes.

seems like the services are up now.
However when I click settings in HAVP, I get the following

Warning: Invalid argument supplied for foreach() in /usr/local/www/pkg_edit.php on line 447

Thanks

Afraid that message is just useless. Regarding the cron handling, it's still wrong in the link above due to strong typing, correct patch here:

https://raw.githubusercontent.com/doktornotor/pfsense-packages/f71e299b474c5fbc6879bd00ab59d83aea2f7ef7/config/havp/havp.inc

Pull Request: https://github.com/pfsense/pfsense-packages/pull/1057

Ugh. Proper link: https://raw.githubusercontent.com/doktornotor/pfsense-packages/8cbe072937b145e384f6278e9856c5fc92ee90bf/config/havp/havp.inc

NA NA wrote:

However when I click settings in HAVP, I get the following
Warning: Invalid argument supplied for foreach() in /usr/local/www/pkg_edit.php on line 447

OK, I guess I figured it out ;)

https://raw.githubusercontent.com/doktornotor/pfsense-packages/2587e3661c973b0aac3b089806e0d1ed1e253c1f/config/havp/havp_avset.xml

thanks, that brought the settings page.
However AV service is not starting now. Cant see any relevant logs in syslog.
Also the log tabs near settings show 404 errors. Looks like we are trying to ductape a completely broken thing :/
Any suggestions?

Sep 11 04:16:40 迿^D⁹⁶⁹⁷⁷: Running as user: havp, group: havp
Sep 11 04:16:40 !A)M-^D쿿^Q⁹⁶⁹⁷⁷: --- Initializing Clamd Socket Scanner
Sep 11 04:17:40 !A)M-^D쿿^Q⁹⁶⁹⁷⁷: Clamd: Could not connect to scanner! Scanner down?

Antivirus server says started in paranthesis but status image shows stopped
av proxy starts, then stops in 5 minutes or so
Shall I reinstall maybe?

Yeah. Maybe. Or just use Squid3 + C-ICAP, it at least is not dead as a coffin nail upstream.

(BTW - the reinstall will undo both of the fixes above of course.)

Reinstalled, followed your workaround with the following files
https://raw.githubusercontent.com/doktornotor/pfsense-packages/f71e299b474c5fbc6879bd00ab59d83aea2f7ef7/config/havp/havp.inc
https://raw.githubusercontent.com/doktornotor/pfsense-packages/2587e3661c973b0aac3b089806e0d1ed1e253c1f/config/havp/havp_avset.xml

I played around and finally everything worked when I set the ClamAV Mode to Library and disabled RAMdisk
Setup is Squid3+HAVP

And I am truly afraid of restarting the pfsense box, I have the gut feeling that things wont work once it is up :)

Hmmm, this HAVP thing is seriously redundant with Squid3. On that note, for Squid3, you need this ATM, otherwise any config changes there require reboot due to my screw-up... https://raw.githubusercontent.com/doktornotor/pfsense-packages/patch-5/config/squid3/34/squid.inc

Thanks, much appreciated!

Just saw that you have commited 1.08.
I uninstalled and installed 1.08 and it looks good, service does not stop when I enable ramdisk
One thing though, I can not find the HAVP error pages to modify in /usr/local/share/examples/havp/ (templates folder missing only templates_ex is there and empty)

Kill Bill wrote:

Hmmm, this HAVP thing is seriously redundant with Squid3. On that note, for Squid3, you need this ATM, otherwise any config changes there require reboot due to my screw-up... https://raw.githubusercontent.com/doktornotor/pfsense-packages/patch-5/config/squid3/34/squid.inc

Well I saw that pfsense has additional HAVP packages for status monitoring/dashboard etc. Does there exist similar stuff for squid integrated AV?

The templates could have never worked, the paths are incorrect, no idea what the package was trying to do.

https://github.com/pfsense/pfsense-packages/pull/1062

Thanks to reading your commit, I changed the files in /usr/pbi/havp-i386/local/share/examples/havp/templates/en and all good!
Btw is there a way for me to fetch your commit, maybe recombile and install in pfsense? Or shall I wait for version approval for your commits and reinstall?

Eh...

1/ Just wait till it gets merged.
2/ Use Filer package or something similar to keep track of the files, otherwise your customizations will be gone after package reinstall.
3/ With the fixes in the PR, those files should go to /usr/pbi/havp-$arch/local/share/examples/havp/templates_ex/$lang directory (needs to be one of the $lang values that can be selected in the GUI), better than overwriting the shipped ones.

thanks!

Fixed.