Topic: Dansguardian: WARNING: Could not perform virus scan!

[kevinb]

I am not sure when this started. I have all the updates installed.

When I go to all most any website it is blocked with "WARNING: Could not perform virus scan! "

The DG log shows that ident is working. Any ideas?

I opened a bug http://bugs.contribs.org/show_bug.cgi?id=4797

Thank you in advance for your help.

Kevin


Messages log:

Nov 25 20:45:22 email dansguardian[12829]: Auth plugin returned error code: -2
Nov 25 20:47:56 email dansguardian[12831]: Auth plugin returned error code: -2
Nov 25 20:48:54 email dhcpd: DHCPINFORM from 192.168.1.4 via eth0
Nov 25 20:48:54 email dhcpd: DHCPACK to 192.168.1.4
Nov 25 20:59:01 email sshd(pam_unix)[16943]: session opened for user root by
(uid=0)
Nov 25 21:05:01 email dansguardian[13577]: Error connecting to ClamD socket
Nov 25 21:05:01 email dansguardian[13577]: scanFile/Memory returned error: -1
Nov 25 21:05:10 email dansguardian[13578]: Error connecting to ClamD socket
Nov 25 21:05:10 email dansguardian[13578]: scanFile/Memory returned error: -1


Dansguardian log:

Tue Nov 25 21:05:00 2008    444 192.168.1.4 TCP_DENIED/403 0 GET
http://securite-informatique.info/virus/eicar/download/eicar.zip kevinb
DEFAULT_PARENT/127.0.0.1 application/zip
Tue Nov 25 21:05:00 2008    477 192.168.1.4 TCP_MISS/302 214 GET
http://securite-informatique.info/favicon.ico kevinb DEFAULT_PARENT/127.0.0.1 -
Tue Nov 25 21:05:01 2008    454 192.168.1.4 TCP_DENIED/403 924 GET
http://securite-informatique.info kevinb DEFAULT_PARENT/127.0.0.1 text/html
Tue Nov 25 21:05:10 2008      4 192.168.1.4 TCP_DENIED/403 271 GET
http://securite-informatique.info/virus/eicar/download/eicar.zip kevinb
DEFAULT_PARENT/127.0.0.1 -


Clamd log:

2008-11-25 20:50:09.199017500 SelfCheck: Database status OK.
2008-11-25 20:57:43.098296500 LibClamAV Error: cli_pdf: mmap() failed
2008-11-25 20:57:44.331676500 LibClamAV Error: cli_pdf: mmap() failed
2008-11-25 20:58:12.571267500 LibClamAV Error: cli_pdf: mmap() failed
2008-11-25 20:58:12.593342500 LibClamAV Error: cli_pdf: mmap() failed
2008-11-25 20:58:12.684582500 LibClamAV Error: cli_pdf: mmap() failed
2008-11-25 20:58:40.247774500 LibClamAV Error: cli_pdf: mmap() failed
2008-11-25 20:58:40.279863500 LibClamAV Error: cli_pdf: mmap() failed
2008-11-25 20:58:40.331215500 LibClamAV Error: cli_pdf: mmap() failed



Settings:

config show squid
squid=service
    EnforceSafePorts=no
    RequireAuth=ident
    SafePorts=21,70,80,81,119,210,443,563,980,1024-65535
    TCPPort=3128
    TCPProxyPort=80:3128
    Transparent=no
    TransparentPort=8080
    access=private
    status=enabled

config show dansguardian
dansguardian=service
    portblocking=yes
    status=enabled

edit /etc/dansguardian/dansguardian.conf
contentscanner = '/etc/dansguardian/contentscanners/clamdscan.conf'
virusscanexceptions = on

edit /etc/dansguardian/contentscanners/clamdscan.conf
clamdudsfile = '/var/clamav/clamd.socket'

[Franco]

I had this problem before and ended it up upgrading Dansguardian.
What version do you have it running?

You can disable the scanning by commenting
#contentscanner = '/etc/dansguardian/contentscanners/clamdscan.conf'
and restart Dans, this is just to get you going until a fix comes up.

[kevinb]

So I got this figured out:

In the wiki it states

also edit /etc/dansguardian/contentscanners/clamdscan.conf and uncomment

clamdudsfile = '/var/clamav/clamd.socket'

Well, in the clamdscan.conf file it had:

clamdudsfile = '/var/run/clamav/clamd.socket'

All is well now.