[Date Prev][Date Next] [Thread Prev][Thread Next] [Date Index] [Thread Index]

[SOLVED] Re: Squid + Dansguardian + freshclam



Joao Serrachinha said:

Sam Snow wrote:

Joao Serrachinha said:


I'm using Debian Sid full updated, kernel-2.4.27.
I'm using a transparent proxy on port 3128 and dansguardian in 8080.
Since i install dansguardian, i change my netfilter nat rules to
redirect http to 8080.
Everything works fine except freshclam. I don't have any log in
/var/log/dansguardian/access.log related to freshclam, but in
/var/log/clamav/freshclam.log i'm getting:

ClamAV update process started at Tue Sep 14 15:40:32 2004
main.cvd is up to date (version: 26, sigs: 22925, f-level: 2, builder:
tomek)
ERROR: Verification: Broken or not a CVD file
Trying again...
ClamAV update process started at Tue Sep 14 15:41:44 2004
main.cvd is up to date (version: 26, sigs: 22925, f-level: 2, builder:
tomek)
ERROR: Verification: Broken or not a CVD file
Trying again...

I purge the main.cvd and daily.cvd file on the squid box with no
results.
So i try to redirect the http to 3128 again. And freshclam works fine.

What's wrong?

thanks.





My ClamAV box is behind an IPCOP box running squid + DG in transparent
mode. I had this same error until I set freshclam to pull its file
through
an external proxy (via the freshclam.conf). I have had no problems since
then.

Sam




Sam,

Can you please send me your freshclam.conf?

thanks.

Joao




aslan:/home/snowsam# cat /etc/clamav/freshclam.conf
# Automatically created by the clamav-freshclam postinst
# Comments will get lost when you reconfigure the clamav-freshclam package

DatabaseOwner clamav
UpdateLogFile /var/log/clamav/freshclam.log
LogFileMaxSize 0
MaxAttempts 5
DatabaseMirror db.us.clamav.net
DatabaseDirectory /var/lib/clamav/
# Proxy: proxy.xmission.com:8080
HTTPProxyServer proxy.xmission.com
HTTPProxyPort 8080
NotifyClamd

You would have to find a proxy that you could use from your location. In
my case this one is provided by the upstream ISP (upstream of the Squid+DG
transparent proxy).

Sam






Reply to: