hi, i don't know if you already had this problem with pfSense 1.2.3 but my havp or better said, clamd quits sometimes unexpectly. I searched the internet for some solutions but i couldn't find any. Some people were reporting that they had a hardware problem and that the freezing was solved after replacing e.g. the hard drive. Well, because i'm using a relatively new drive (or new compact flash as a drive), i wasn't too satisfied with this and wrote my own script to test the clamd socket and restart havp if needed.<\/p>\n
My logs showed some of the following errors:<\/p>\n
\/var\/log\/havp\/access.log:
\n\t{DATE} {IP} GET 200 {URL} 331+951 SCANERROR Detected dead scanner<\/p>\n
\/var\/log\/havp\/havp.log:
\n\t{DATE} Scanner errors: Clamd: Could not read from scanner socket (lasturl: {URL})<\/p>\n
So here is my script:<\/p>\n
#! \/usr\/local\/bin\/php -qC
\n\t<?php
\n\t# open clamd socket
\n\t$socket = @fsockopen("localhost", 3310, $errno, $errstr, 1);
\n\t# if socket connection fails, restart clamd and havp
\n\tif (!$socket) {
\n\t print "Unable to connect to CLAMD… socket down?\\n";
\n\t print "Stopping HAVP…\\n";
\n\t system("\/usr\/local\/etc\/rc.d\/havp stop");
\n\t print "Restarting CLAMD…\\n";
\n\t system("\/usr\/local\/etc\/rc.d\/clamd stop");
\n\t system("\/usr\/local\/etc\/rc.d\/clamd start");
\n\t print "Starting HAVP…\\n";
\n\t system("\/usr\/local\/etc\/rc.d\/havp start");
\n\t}
\n\t# close socket
\n\telse fclose($socket);
\n\t?><\/p>\n
Save this to a file on the pfSense filesystem, set executable permissions on that file (chmod 755 <script>), add following lines to \/etc\/crontab and replace the <path_to_file> with your path and scriptname:<\/p>\n
# check for havp every minute
\n\t*\/1 * * * * root <path_to_file><\/p>\n
From then on, my pfSense box ran smoothly again.<\/p>\n","protected":false},"excerpt":{"rendered":"
hi, i don't know if you already had this problem with pfSense 1.2.3 but my havp or better said, clamd quits sometimes unexpectly. I searched the internet for some solutions but i couldn't find any. Some people were reporting that they had a hardware problem and that the freezing was solved after replacing e.g. the […]<\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"closed","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[11,7],"tags":[],"class_list":["post-213","post","type-post","status-publish","format-standard","hentry","category-linuxunix","category-servers"],"_links":{"self":[{"href":"https:\/\/ndk.sytes.net\/wordpress\/index.php?rest_route=\/wp\/v2\/posts\/213","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/ndk.sytes.net\/wordpress\/index.php?rest_route=\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/ndk.sytes.net\/wordpress\/index.php?rest_route=\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/ndk.sytes.net\/wordpress\/index.php?rest_route=\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/ndk.sytes.net\/wordpress\/index.php?rest_route=%2Fwp%2Fv2%2Fcomments&post=213"}],"version-history":[{"count":0,"href":"https:\/\/ndk.sytes.net\/wordpress\/index.php?rest_route=\/wp\/v2\/posts\/213\/revisions"}],"wp:attachment":[{"href":"https:\/\/ndk.sytes.net\/wordpress\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=213"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/ndk.sytes.net\/wordpress\/index.php?rest_route=%2Fwp%2Fv2%2Fcategories&post=213"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/ndk.sytes.net\/wordpress\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=213"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}