HTTP Anti-Virus Proxy
http://havp.hege.li/forum/

yum update:"Header is not complete"
http://havp.hege.li/forum/viewtopic.php?f=3&t=215
Page 1 of 1

Author:  lucarasp [ 06 Mar 2007 18:01 ]
Post subject:  yum update:"Header is not complete"

I'm currently running Havp 0.84 as parent to squid cache: we have about 30 machines sharing the same proxy server and internet browsing is OK .

But when I try to update with yum a machine on the network I got many errors similar to the following:
Code:
 Downloading header for clamav to pack into transaction set.
 clamav-0.90.1-26.fc6.at.i 100% |=========================| 9.5 MB    01:06     
 http://dl.atrpms.net/fc6-i386/atrpms/stable/clamav-0.90.1-26.fc6.at.i386.rpm: [Errno -1]   Header is not complete.
 Trying other mirror.
 Error: failure: clamav-0.90.1-26.fc6.at.i386.rpm from atrpms: [Errno 256] No more mirrors to try.


after disabling havp (but still using squid caching) I got (same package):

Code:
---> Downloading header for clamav to pack into transaction set.
clamav-0.90.1-26.fc6.at.i 100% |=========================|  11 kB    00:00     
---> Package clamav.i386 0:0.90.1-26.fc6.at set to be updated


note the difference between download size.

This seem related to the http://havp.hege.li/forum/viewtopic.php?t=157 issue

How can I fix this?

thanks

Author:  hege [ 06 Mar 2007 20:35 ]
Post subject: 

It wanting to download a header piece (11kB vs 9.5MB), I would guess it uses HTTP RANGE request and doesn't know what to do when it's not supported.

Does setting RANGE to true fix it? Whitelisting also allows RANGE.

Frankly, I would not bother scanning any linux packages, since it's so remote chance that any malware could exist there. It could not be even found since ClamAV doesn't unpack rpm :) You should whitelist it at Squid.

Cheers,
Henrik

Author:  lucarasp [ 16 Mar 2007 19:08 ]
Post subject:  yum update:"Header is not complete"

dear Henrik, thanks for your soon reply.

I did some testing:

hege wrote:
Does setting RANGE to true fix it? Whitelisting also allows RANGE.


RANGE=true was commented out but defaulted to true (isn't it?)

after uncommenting nothing changed, except a new error message from yum:

"Requested Range Not Satisfiable"

hege wrote:

Frankly, I would not bother scanning any linux packages, since it's so remote chance that any malware could exist there. It could not be even found since ClamAV doesn't unpack rpm :) You should whitelist it at Squid.


I agree, since web browsing works fine as well as downloading of big files....

hege wrote:

Cheers,
Henrik



Great job, thanks again.

Luca

Page 1 of 1 All times are UTC + 2 hours [ DST ]
Powered by phpBB® Forum Software © phpBB Group
https://www.phpbb.com/