HTTP Anti-Virus Proxy
http://havp.hege.li/forum/

DrWeb + HAVP
http://havp.hege.li/forum/viewtopic.php?f=4&t=295		 Page 1 of 1
Author:  Roman [ 29 Sep 2007 10:02 ]
Post subject:  DrWeb + HAVP
Is there any solution to use HAVP with DrWeb (http://www.drweb.com/?lng=en) for Linux scanner? Don't you plan to add support for this scanner?

Thank you
Author:  hege [ 29 Sep 2007 13:18 ]
Post subject: 
I'll see if I can test it with demo license.
Author:  hege [ 04 Oct 2007 12:32 ]
Post subject: 
DrWeb support now in testing..

http://havp.hege.li/download/havp-0.87pre.tar.gz
Author:  butz [ 09 Oct 2007 05:29 ]
Post subject: 
it is failed for me, does anybody success to take it working?

09/10/2007 09:46:08 --- Initializing Drweb Socket Scanner
09/10/2007 09:46:08 ERROR: Drweb Socket Scanner failed EICAR virus test! (Daemon error (1048577))
Author:  hege [ 09 Oct 2007 10:47 ]
Post subject: 
It seems DR_READ_ERR, so it's most likely that the daemon doesn't have permissions to read HAVP tempfile. You need to set user/groups correctly.. add havp group to drweb user.
Author:  butz [ 09 Oct 2007 11:41 ]
Post subject: 
I try to add drweb to havp group , but no luck

Any other hint?
Author:  hege [ 09 Oct 2007 12:20 ]
Post subject: 
Change drweb user to havp in drweb32.ini. Or GroupID to the havp numeric group id.
Author:  butz [ 09 Oct 2007 13:08 ]
Post subject: 
it is working. Thanks.
Author:  butz [ 09 Oct 2007 17:10 ]
Post subject: 
Error from havp.log,

Drweb: Could not read scanner response

Nothing special in drwebd.log
Author:  hege [ 09 Oct 2007 17:33 ]
Post subject: 
Does that happen often?
Author:  butz [ 10 Oct 2007 03:34 ]
Post subject: 
total 3 times until now.

Does it causes by scanner busy or timeout ?

I try to prefork double daemones to see what happened.

If any hint will be appericate.
Author:  butz [ 10 Oct 2007 15:43 ]
Post subject: 
butz wrote:
total 3 times until now.

I try to prefork double daemones to see what happened.

If any hint will be appericate.


No luck , more error found
Author:  hege [ 10 Oct 2007 15:46 ]
Post subject: 
Can't think anything right now that could do it. My code does that same things as exiscan for example.

I'll modify so it retries in case of such error..
Author:  hege [ 10 Oct 2007 16:24 ]
Post subject: 
I have added some debugging info, can you try it..

http://havp.hege.li/download/havp-0.87pre.tar.gz
Author:  Roman [ 12 Oct 2007 11:24 ]
Post subject: 
Thanks,

This works good (at least with one user :wink:). Below is a small howto when you decide to use HAVP+Dr.Web. I have in mind that drwebd works as "drweb" user and HAVP works as "havp"

1. Make sure that user havp have read/write privileges to "/var/drweb/run/.daemon" and read privileges to "/var/drweb/run". It's enought to do "chmod 755 /var/drweb/run".

2. Make sure that user drweb have read privileges to "/var/spool/havp/". It's enought to add user "drweb" in group "havp" and then restart drwebd.

3. Set ENABLEDRWEB in "true" then start havp.

4. Make sure that drweb scanner were initialized well. Check /var/log/havp/error.log and find in it smth like:
Code:
=== Starting HAVP Version: 0.87
Running as user: havp, group: havp
--- Initializing Drweb Socket Scanner
Drweb Socket Scanner passed EICAR virus test (EICAR Test File (NOT a Virus!))
--- All scanners initialized


I hope this helps someone.
Page 1 of 1 All times are UTC + 2 hours [ DST ]
Powered by phpBB® Forum Software © phpBB Group
https://www.phpbb.com/