HTTP Anti-Virus Proxy

Official HAVP Support Forum
Registration disabled, I'm tired of spambots. E-mail havp@hege.li if you have questions.
HAVP project is pretty much frozen/abandoned at this time anyway.
It is currently 22 Jun 2014 09:52

All times are UTC + 2 hours [ DST ]




Post new topic Reply to topic  [ 3 posts ] 
Author Message
 Post subject: Two havp problems
PostPosted: 07 Jun 2008 15:06 
Offline

Joined: 07 Jun 2008 14:33
Posts: 1
Yesterday I installed havp in front of my squid system (i.e. users -> squid -> havp -> internet), about 300 users in LAN. Everything was ok during the testing, but as soon as I pushed this configuration into production, two problems emerged:

1. Rapidshare access. After adding havp download from rapidshare doesn't work anymore. When users press "download" button they see Zero size reply error from squid. But when I look into logs I see:

squid's access.log:
1212838104.617 288 10.1.1.111 TCP_MISS/200 6045 POST http://rs315.rapidshare.com/files/12072 ... nd_Ref.pdf - DEFAULT_PARENT/127.0.0.1 text/html

havp's access.log:
7/06/2008 15:38:14 10.1.1.111 POST 200 http://rs269.rapidshare.com/files/12047 ... rdv302.rar 284+9431 OK

Huh? This file is 13mb. Yes, I do understand that rapidshare is a sleazy site that normal people should not visit, but it's close to impossible to explain this to some customers who prefer to share their files this way. It looks like havp did not fetch this file (did not pass referer? or what?) Now how to debug this further?

2. Havp complains about the memory while fetchnig nod32 updates:

07/06/2008 15:41:32 Scanner errors: ClamAV: Unable to allocate memory (lasturl: http://89.202.157.136/nod_eval/update.ver)
07/06/2008 15:41:34 Scanner errors: ClamAV: Unable to allocate memory (lasturl: http://u41.eset.com/nod_eval/update.ver)
07/06/2008 15:41:36 Scanner errors: ClamAV: Unable to allocate memory (lasturl: http://u44.eset.com/nod_eval/update.ver)
07/06/2008 15:41:38 Scanner errors: ClamAV: Unable to allocate memory (lasturl: http://u30.eset.com/nod_eval/update.ver)
07/06/2008 15:41:40 Scanner errors: ClamAV: Unable to allocate memory (lasturl: http://u42.eset.com/nod_eval/update.ver)
07/06/2008 15:41:41 Scanner errors: ClamAV: Unable to allocate memory (lasturl: http://www.nod32.com/nod_upd/update.ver)

Jun 7 15:43:32 xxx kernel: pid 81430 (havp), uid 1021: exited on signal 6
Jun 7 15:43:34 xxx kernel: pid 81520 (havp), uid 1021: exited on signal 6
Jun 7 15:43:37 xxx kernel: pid 81053 (havp), uid 1021: exited on signal 6
Jun 7 15:43:42 xxx kernel: pid 81788 (havp), uid 1021: exited on signal 6
Jun 7 15:43:45 xxx kernel: pid 81747 (havp), uid 1021: exited on signal 6
Jun 7 15:43:49 xxx kernel: pid 81787 (havp), uid 1021: exited on signal 6
Jun 7 15:43:52 xxx kernel: pid 81496 (havp), uid 1021: exited on signal 6

And the user receives receives error based on scanner.html template. Sometimes I see signal 11 instead, but rarely. Operating system is heavily patched freebsd 5.4 (smp), quite stable workhorse that had no problem for years. Usually havp dies on nod32 files, but sometimes other urls like http://pocketz.dl1.vipserver.ru/2006/07 ... g_incl.rar cause it to crash too. Any ideas?


Top
 Profile  
 
 Post subject: Re: Two havp problems
PostPosted: 08 Jun 2008 00:57 
Offline
HAVP Developer

Joined: 27 Feb 2006 18:12
Posts: 687
Location: Finland
Are you running a 64-bit system?

If you download the files without HAVP and run clamscan on them, any errors?


Top
 Profile  
 
 Post subject: Re: Two havp problems
PostPosted: 13 Jun 2008 12:10 
Offline

Joined: 21 Apr 2008 14:21
Posts: 10
Maybe a stupid question, why don't you use "users -> havp -> squid -> internet" instead ?


Top
 Profile  
 
Display posts from previous:  Sort by  
Post new topic Reply to topic  [ 3 posts ] 

All times are UTC + 2 hours [ DST ]


Who is online

Users browsing this forum: Google [Bot] and 2 guests


You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot post attachments in this forum

Search for:
Jump to:  
Powered by phpBB® Forum Software © phpBB Group