HAVP Error - Proxy / Mails do not work when antivirus enabled

[Guest]

[DAF]

Hello,

i get this error (see attachment) when antivirus is enabled

The requested URL could not be retrieved
While trying to retrieve the URL: xxxxxxxxxx



The following error was encountered:

Unable to forward this request at this time.

Sorry, you are not currently allowed to request:
xxxxxxxxxxxx
from this cache until you have authenticated yourself.

This request could not be forwarded to the origin server or to any
parent caches. The most likely cause for this error is that:
The cache administrator does not allow this cache to make direct connections to origin servers, and
All configured parent caches are currently unreachable.


Your cache administrator is webmaster.

[gyp_the_cat]

Hi Daf,

I came in this morning to the exact same error message.  I thought at first something major was wrong since two of the three Endians were down at the same time.

It appears to be something to do with the antivirus, having a look in the HAVP log I see:

Apr 16 09:17:54 proxy-3 havp[5251]: === Starting HAVP Version: 0.89
Apr 16 09:17:54 proxy-3 havp[5251]: Running as user: clamav, group: clamav
Apr 16 09:17:54 proxy-3 havp[5251]: Use parent proxy: 127.0.0.1:8080
Apr 16 09:17:54 proxy-3 havp[5251]: --- Initializing Clamd Socket Scanner
Apr 16 09:17:54 proxy-3 havp[5251]: Clamd: Could not connect to scanner! Scanner down?
Apr 16 09:17:54 proxy-3 havp[5251]: ERROR: Clamd Socket Scanner failed EICAR virus test! (Could not connect to scanner socket)

Very strange in that it only seems to have happened on the Endian 2.2rc3 installs, none of the others, are you on the same version?  Our 2.3.0 version doesn't seem to be affected.

Gyp

[krelo]

HI,

clamav org ->

IMPORTANT ANNOUNCEMENT


On 15 April 2010 all ClamAV installations older than 0.95 will be disabled. See ... for more details.

Endian use older clamav and the Updates are Malformed

regards Jörg

[gyp_the_cat]

Krelo,

Very well spotted, I couldn't get on the ClamAV website when I tried, I think there are quite a few people who are down at the moment then

Are you running 2.2rc3 Krelo?

Gyp

[krelo]

Hi Gyp,

yes, i use 2.2rc3 and disabled the clamav in the proxy settings.
sry for my english

lg Jörg

[gyp_the_cat]

Hi Krelo,

Your English is 100% better than my other languages

2.3.0 doesn't appear to be broken, you may want to upgrade.

Gyp

Update: was trying to be clever and guess the language, probably either Italian or Estonian

[krelo]

Hi gyp,

i'am surprise. The Changelog for 2.3 says

0001312: [Application Level Proxies] Update to HAVP 0.89 & ClamAV 0.94 (peter) - closed.

and 0.94 ist to old for updates from clamav.

lg Jörg

[zreis]

I knew this was going to be a fun weekend........

Same issue here.   2.2rc3.    Hopefully no hardware issues upgrading to 2.3.     Is it possible to import a 2.2rc3 backup into 2.3?

[gyp_the_cat]

(Sorry for not being here this weekend, had a weekend on holiday.)

@Krelo, do you know how I can check what version of ClamAV is running?  Because 2.3 is working great still.

@Zreis, not sure.  I'm assuming you've already upgraded by now?  Did it work?

[skilet]

FIX
(Tags)
1. HAVP Error - Proxy
2. The requested URL could not be retrieved
3. Unable to forward this request at this time.
4. Sorry, you are not currently allowed to request
5. from this cache until you have authenticated yourself.
6. 15 April 2010

.::Here is solution::.

Now follow these 5 steps to keep your Endian Firewall Community up to date:

   1. Enable SSH access on your firewall
   2. Open your favorite SSH terminal and connect to the firewall (On Windows you may use putty)
   3. If your Endian Firewall Community is older than version 2.2 please run

      root@efw-2:~ #

Code:

rpm -ivh h t t p://updates.endian.org/upgrade.rpm

  4. Run the efw-upgrade script

      root@efw-2:~ #

Code:

efw-upgrade

     Please choose the appropriate channel for your environment and hit [ENTER]:
      1) Production (stable releases)
      2) Development (bleeding edge)
      1
      Please enter your username and hit [ENTER]: (mail)
     IMPORTANT:YOU NEED REGISTER USER IN (h t t p://w w w .endian.com/es/community/efw-updates/)



ERRORS:

1. if you get this error
Updating cache... ################################################################ [100%]
Fetching information for 'efw-community'... -> h t t p://YOURUSERNAME(MAIL):*@updates.endian.org/stable/repodata/repomd.xml  repomd.xml [ 0%]
error: Failed acquiring release file for 'efw-community':
error: h t t p://YOURUSERNAME(MAIL):community@.../stable/repodata/repomd.xml: The requested URL returned error: 401 Updating cache... ################################################################ [100%]

Change User Agian, Use this Command:

Code:

efw-upgrade -s

[lschafroth]

The problem with the upgrade is that it upgrades you to EFW 2.4 which has a serious bug.  When you change anything in the proxy and auth settings it says Writing squid configuration...

It says that forever. Reboots dont stop it.  The only solution is to reinstall 2.3.

Lannie

[hilux]

Where can I download the 2.3 Version of Endian Firewall?