HTTP Anti-Virus Proxy

Official HAVP Support Forum
Registration disabled, I'm tired of spambots. E-mail havp@hege.li if you have questions.
HAVP project is pretty much frozen/abandoned at this time anyway.
It is currently 22 Jun 2014 09:52

All times are UTC + 2 hours [ DST ]




Post new topic Reply to topic  [ 17 posts ]  Go to page 1, 2  Next
Author Message
 Post subject: ClamAV 0.93RC1
PostPosted: 08 Mar 2008 00:09 
Offline

Joined: 02 Feb 2008 22:24
Posts: 28
Hi,

it seems clamav 0.93 will cause some issues with havp while compiling. Are there any experiencies about?

Regards Severus


Top
 Profile  
 
 Post subject:
PostPosted: 14 Mar 2008 16:21 
Offline
HAVP Developer

Joined: 27 Feb 2006 18:12
Posts: 687
Location: Finland
Support added, have a try:

http://havp.hege.li/download/havp-0.88pre.tar.gz

Also new option CLAMMAXSCANSIZE


Top
 Profile  
 
 Post subject:
PostPosted: 14 Mar 2008 20:57 
Offline

Joined: 02 Feb 2008 22:24
Posts: 28
Hi hege,
thnx, I'll do :lol:
Regards Severus


Top
 Profile  
 
 Post subject:
PostPosted: 27 Mar 2008 01:15 
Offline
HAVP Developer

Joined: 27 Feb 2006 18:12
Posts: 687
Location: Finland
I just noticed that 0.93rc1 and mandatory locking does not work together.

ClamAV has silently added requirement for mmap-function on zip files, so they will not work. You get an "Unable to allocate memory" error.

I'll enter a bug report there and we'll see how it goes.

Until then, for full functionality, use 0.92.1.


Top
 Profile  
 
 Post subject:
PostPosted: 27 Mar 2008 05:28 
Offline

Joined: 27 Mar 2008 04:09
Posts: 3
Hi,
this is aCaB from ClamAV.

hege wrote:
I just noticed that 0.93rc1 and mandatory locking does not work together.

ClamAV has silently added requirement for mmap-function on zip files, so they will not work. You get an "Unable to allocate memory" error.


Precisation #1: ClamAV is open source. The codebase is available to everyone via svn, nothing is hidden and no commit is "silent". Additionally several requests for testing have been posted on out MLs before the 0.93 branching and the rc1 release.
Precisation #2: The unzip module is not the only piece of code affected. Many others are and have been for a long time.

hege wrote:
I'll enter a bug report there and we'll see how it goes.

Until then, for full functionality, use 0.92.1.


For everyone's reference here's the bug report.

That said, I like HAVP and I'd like to get this problem solved or worked around. Feel free to mail me - acab.at.clamav.point.net


Top
 Profile  
 
 Post subject:
PostPosted: 27 Mar 2008 11:20 
Offline
HAVP Developer

Joined: 27 Feb 2006 18:12
Posts: 687
Location: Finland
aCaB wrote:
Precisation #1: ClamAV is open source. The codebase is available to everyone via svn, nothing is hidden and no commit is "silent". Additionally several requests for testing have been posted on out MLs before the 0.93 branching and the rc1 release.


Silent as in no mention in ChangeLog (except of "improved" unzip), which would have been nice. :) Not to blame anyone, maybe you just understand our situation.

Quote:
Precisation #2: The unzip module is not the only piece of code affected. Many others are and have been for a long time.


Thus there has been a workaround for PDF and BinHex since Oct/2006, to disable partial locking for those formats. I can do the same for zip+0.93, at the expense of increasing scanning time for that format also.


Top
 Profile  
 
 Post subject:
PostPosted: 27 Mar 2008 12:55 
Offline

Joined: 27 Mar 2008 04:09
Posts: 3
hege wrote:
Thus there has been a workaround for PDF and BinHex since Oct/2006, to disable partial locking for those formats. I can do the same for zip+0.93, at the expense of increasing scanning time for that format also.


Well, not really...
The zip format is detected via the first 4 bytes in the file. Sure these are available after the first chunck of data is received from the remote peer (or next proxy in chain).
Then the code needs to lseek to EOF and search backwards for the "central zip header". We could discuss and probably agree about how braindead the zip file format is... but that's it.
The point is that ,if the zipfile is mandlocked, when lseek'ing to EOF, read() would still block untill the whole file is received.


Top
 Profile  
 
 Post subject:
PostPosted: 27 Mar 2008 12:59 
Offline
HAVP Developer

Joined: 27 Feb 2006 18:12
Posts: 687
Location: Finland
aCaB wrote:
The point is that ,if the zipfile is mandlocked, when lseek'ing to EOF, read() would still block untill the whole file is received.


It doesn't block. HAVP blindly gets last 131072 bytes of a big zip file first (using Range: request), writes it to tempfile, then unlocks that last 131072 bytes.

ClamAV can then read the header and scan on the fly as the body is received from network and unlocked gradually.


Top
 Profile  
 
 Post subject: Re: ClamAV 0.93RC1
PostPosted: 15 Apr 2008 10:27 
Offline
HAVP Developer

Joined: 27 Feb 2006 18:12
Posts: 687
Location: Finland
HAVP 0.88 released with workaround (DISABLELOCKINGFOR option).


Top
 Profile  
 
 Post subject: Re: ClamAV 0.93RC1
PostPosted: 11 Mar 2010 03:53 
Offline

Joined: 27 Mar 2008 04:09
Posts: 3
Sorry for resurrecting a dead thread.
It is just to report that ClamAV 0.96-rc1 has been released today.

It took some time but we eventually moved away from file based mmap. Most of the code now makes use of pread().


Top
 Profile  
 
 Post subject: Re: ClamAV 0.93RC1
PostPosted: 12 Mar 2010 13:16 
Offline
HAVP Developer

Joined: 27 Feb 2006 18:12
Posts: 687
Location: Finland
Seems to work ok so far and no changes in API that I see..

I'll release new HAVP when official version arrives with ClamAV removed from DISABLELOCKINGFOR defaults.


Top
 Profile  
 
 Post subject: Re: ClamAV 0.93RC1
PostPosted: 01 Apr 2010 09:00 
Offline

Joined: 23 Apr 2008 09:36
Posts: 101
Hello,
clamav 0.96 is out now. My question is, it is planned now to publish a new version of havp?

At this moment, havp is running as well with new clamav release. :)

regards


Top
 Profile  
 
 Post subject: Re: ClamAV 0.93RC1
PostPosted: 01 Apr 2010 12:14 
Offline
HAVP Developer

Joined: 27 Feb 2006 18:12
Posts: 687
Location: Finland
Please try out http://havp.hege.li/download/havp-0.92pre1.tar.gz

And all the new options if possible. ;-)

- Add SCANMIME and SKIPMIME options
- Add TIMEFORMAT option
- Add VIRUSLOG option
- Add PARENTUSER/PARENTPASSWORD (thanks to James Brotchie)
- DISABLELOCKINGFOR default has changed in favor of ClamAV 0.96,
it only contains AVG:ALL now


Top
 Profile  
 
 Post subject: Re: ClamAV 0.93RC1
PostPosted: 01 Apr 2010 15:02 
Offline

Joined: 23 Apr 2008 09:36
Posts: 101
Hi!
My compliment, really fast reaction :D
Your version is running well on a standard system (Debian Lenny)
I have 8 different environments for testing, but only on evening time, to try.

A second system I tried (copfilter), I have a problem to start havp, because havp is ignoring logging path from config file havp.config.
I had to create a standard entry on /var/log/havp, to get havp working!! Otherwise I get an error, like wrong permissions to my configured log path.
This is the only issue, I can find now.

New results on evening!

regards

one update: thank you for supporting now mime types and proxy authentication! This are really important features and I'm pleasured!


Top
 Profile  
 
 Post subject: Re: ClamAV 0.93RC1
PostPosted: 01 Apr 2010 22:07 
Offline

Joined: 23 Apr 2008 09:36
Posts: 101
Update!
I detected, what was my issue! I forgot to set the VIRUSLOG path.
I set this option and all went o.k. :wink:

Running stable and without any problems! (on 6 differnt systems now)

good and nice work!

regards


Top
 Profile  
 
Display posts from previous:  Sort by  
Post new topic Reply to topic  [ 17 posts ]  Go to page 1, 2  Next

All times are UTC + 2 hours [ DST ]


Who is online

Users browsing this forum: Google [Bot] and 1 guest


You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot post attachments in this forum

Search for:
Jump to:  
Powered by phpBB® Forum Software © phpBB Group