HTTP Anti-Virus Proxy

Official HAVP Support Forum
Registration disabled, I'm tired of spambots. E-mail havp@hege.li if you have questions.
HAVP project is pretty much frozen/abandoned at this time anyway.
It is currently 22 Jun 2014 09:52

All times are UTC + 2 hours [ DST ]




Post new topic Reply to topic  [ 15 posts ] 
Author Message
 Post subject: DrWeb + HAVP
PostPosted: 29 Sep 2007 10:02 
Offline

Joined: 28 Sep 2007 10:20
Posts: 2
Is there any solution to use HAVP with DrWeb (http://www.drweb.com/?lng=en) for Linux scanner? Don't you plan to add support for this scanner?

Thank you


Top
 Profile  
 
 Post subject:
PostPosted: 29 Sep 2007 13:18 
Offline
HAVP Developer

Joined: 27 Feb 2006 18:12
Posts: 687
Location: Finland
I'll see if I can test it with demo license.


Top
 Profile  
 
 Post subject:
PostPosted: 04 Oct 2007 12:32 
Offline
HAVP Developer

Joined: 27 Feb 2006 18:12
Posts: 687
Location: Finland
DrWeb support now in testing..

http://havp.hege.li/download/havp-0.87pre.tar.gz


Top
 Profile  
 
 Post subject:
PostPosted: 09 Oct 2007 05:29 
Offline

Joined: 06 Aug 2007 16:29
Posts: 48
it is failed for me, does anybody success to take it working?

09/10/2007 09:46:08 --- Initializing Drweb Socket Scanner
09/10/2007 09:46:08 ERROR: Drweb Socket Scanner failed EICAR virus test! (Daemon error (1048577))


Top
 Profile  
 
 Post subject:
PostPosted: 09 Oct 2007 10:47 
Offline
HAVP Developer

Joined: 27 Feb 2006 18:12
Posts: 687
Location: Finland
It seems DR_READ_ERR, so it's most likely that the daemon doesn't have permissions to read HAVP tempfile. You need to set user/groups correctly.. add havp group to drweb user.


Top
 Profile  
 
 Post subject:
PostPosted: 09 Oct 2007 11:41 
Offline

Joined: 06 Aug 2007 16:29
Posts: 48
I try to add drweb to havp group , but no luck

Any other hint?


Top
 Profile  
 
 Post subject:
PostPosted: 09 Oct 2007 12:20 
Offline
HAVP Developer

Joined: 27 Feb 2006 18:12
Posts: 687
Location: Finland
Change drweb user to havp in drweb32.ini. Or GroupID to the havp numeric group id.


Top
 Profile  
 
 Post subject:
PostPosted: 09 Oct 2007 13:08 
Offline

Joined: 06 Aug 2007 16:29
Posts: 48
it is working. Thanks.


Top
 Profile  
 
 Post subject:
PostPosted: 09 Oct 2007 17:10 
Offline

Joined: 06 Aug 2007 16:29
Posts: 48
Error from havp.log,

Drweb: Could not read scanner response

Nothing special in drwebd.log


Top
 Profile  
 
 Post subject:
PostPosted: 09 Oct 2007 17:33 
Offline
HAVP Developer

Joined: 27 Feb 2006 18:12
Posts: 687
Location: Finland
Does that happen often?


Top
 Profile  
 
 Post subject:
PostPosted: 10 Oct 2007 03:34 
Offline

Joined: 06 Aug 2007 16:29
Posts: 48
total 3 times until now.

Does it causes by scanner busy or timeout ?

I try to prefork double daemones to see what happened.

If any hint will be appericate.


Top
 Profile  
 
 Post subject:
PostPosted: 10 Oct 2007 15:43 
Offline

Joined: 06 Aug 2007 16:29
Posts: 48
butz wrote:
total 3 times until now.

I try to prefork double daemones to see what happened.

If any hint will be appericate.


No luck , more error found


Top
 Profile  
 
 Post subject:
PostPosted: 10 Oct 2007 15:46 
Offline
HAVP Developer

Joined: 27 Feb 2006 18:12
Posts: 687
Location: Finland
Can't think anything right now that could do it. My code does that same things as exiscan for example.

I'll modify so it retries in case of such error..


Top
 Profile  
 
 Post subject:
PostPosted: 10 Oct 2007 16:24 
Offline
HAVP Developer

Joined: 27 Feb 2006 18:12
Posts: 687
Location: Finland
I have added some debugging info, can you try it..

http://havp.hege.li/download/havp-0.87pre.tar.gz


Top
 Profile  
 
 Post subject:
PostPosted: 12 Oct 2007 11:24 
Offline

Joined: 28 Sep 2007 10:20
Posts: 2
Thanks,

This works good (at least with one user :wink:). Below is a small howto when you decide to use HAVP+Dr.Web. I have in mind that drwebd works as "drweb" user and HAVP works as "havp"

1. Make sure that user havp have read/write privileges to "/var/drweb/run/.daemon" and read privileges to "/var/drweb/run". It's enought to do "chmod 755 /var/drweb/run".

2. Make sure that user drweb have read privileges to "/var/spool/havp/". It's enought to add user "drweb" in group "havp" and then restart drwebd.

3. Set ENABLEDRWEB in "true" then start havp.

4. Make sure that drweb scanner were initialized well. Check /var/log/havp/error.log and find in it smth like:
Code:
=== Starting HAVP Version: 0.87
Running as user: havp, group: havp
--- Initializing Drweb Socket Scanner
Drweb Socket Scanner passed EICAR virus test (EICAR Test File (NOT a Virus!))
--- All scanners initialized


I hope this helps someone.


Top
 Profile  
 
Display posts from previous:  Sort by  
Post new topic Reply to topic  [ 15 posts ] 

All times are UTC + 2 hours [ DST ]


Who is online

Users browsing this forum: No registered users and 0 guests


You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot post attachments in this forum

Search for:
Jump to:  
Powered by phpBB® Forum Software © phpBB Group