HTTP Anti-Virus Proxy

Hi all,

I want to use ClamD instead of the library version. As far as I see, I configured as described here in the forum. But it do not work (see log below). When I configure using the lib version, it work. What's wrong?

Regards Josef

10/02/2008 10:10:10 === Starting HAVP Version: 0.87
10/02/2008 10:10:10 Running as user: havp, group: havp
10/02/2008 10:10:10 Use parent proxy: 10.0.0.254:8118
10/02/2008 10:10:10 --- Initializing Clamd Socket Scanner
10/02/2008 10:10:10 ERROR: Clamd Socket Scanner failed EICAR virus test! (Access denied.)
10/02/2008 10:11:15 === Starting HAVP Version: 0.87
10/02/2008 10:11:15 Running as user: havp, group: havp
10/02/2008 10:11:15 Use parent proxy: 10.0.0.254:8118
10/02/2008 10:11:15 --- Initializing ClamAV Library Scanner
10/02/2008 10:11:15 ClamAV: Using database directory: /var/lib/clamav
10/02/2008 10:11:27 ClamAV: Loaded 372912 signatures (engine 0.92)
10/02/2008 10:11:27 ClamAV Library Scanner passed EICAR virus test (Eicar-Test-Signature)
10/02/2008 10:11:27 --- All scanners initialized
10/02/2008 10:11:27 Process ID: 2624

viewtopic.php?t=5

"you need to enable AllowSupplementaryGroups in clamd.conf,
and add clamav user to havp group"

Have you done this?

Yes, as far as I see, I did:

My clamav user (vscan) is member of the havp group and in clamd.conf I set "AllowSupplementaryGroups yes".

Now I made two tests:

When I configure using the socket => it does not work
When I configure using TCP => it works (see below)

What's goes wrong when using a socket?

Part of havp.conf
"
:
ENABLECLAMD true

# Path to clamd socket
#
# Default:
# CLAMDSOCKET /tmp/clamd

# CLAMDSOCKET /var/lib/clamav/clamd-socket

# ..OR if you use clamd TCP socket, uncomment to enable use
#
# Clamd daemon needs to run on the same server as HAVP
#
# Default: NONE
CLAMDSERVER 127.0.0.1
CLAMDPORT 3310
:
"

Havp user must have write access to the socket. You need to see that all the directories up to the socket and socket itself allow this.

Hi,

granting write access on the directory solved the problem.

Lot of thanks!!!

Josef