search

tjgrey / clamtk

Automatically exported from code.google.com/p/clamtk
Other
0 stars 0 forks source link

Clamtk refuses to fetch VD updates over HTTP proxy #20

Closed GoogleCodeExporter closed 8 years ago

GoogleCodeExporter commented 8 years ago 
What steps will reproduce the problem?
1. Configure clamtk Network, setting http proxy host and port (no user auth 
required)
2. Follow the (unnecessarily verbose) Update procedure to get the virus 
database updated
3. Receive nothing

What is the expected output? What do you see instead?

Expect: successful VD update, and a message stating that the update succeeded.
Got: nothing, but an error message (see below).

What version of the product are you using? On what operating system?

Clamtk 5.06 (so much vorse than the good old clamtk-4! I wish I could get it 
back instead).
Ubuntu 14.04 LTS

Please provide any additional information below.

~$ clamtk
LibClamAV Warning: **************************************************
LibClamAV Warning: ***  The virus database is older than 7 days!  ***
LibClamAV Warning: ***   Please update it as soon as possible.    ***
LibClamAV Warning: **************************************************
LibClamAV Warning: **************************************************
LibClamAV Warning: ***  The virus database is older than 7 days!  ***
LibClamAV Warning: ***   Please update it as soon as possible.    ***
LibClamAV Warning: **************************************************
problems getting remote AV: 500 Can't connect to www.clamav.net:80 (timeout)
LibClamAV Warning: **************************************************
LibClamAV Warning: ***  The virus database is older than 7 days!  ***
LibClamAV Warning: ***   Please update it as soon as possible.    ***
LibClamAV Warning: **************************************************
LibClamAV Warning: **************************************************
LibClamAV Warning: ***  The virus database is older than 7 days!  ***
LibClamAV Warning: ***   Please update it as soon as possible.    ***
LibClamAV Warning: **************************************************
problems getting remote AV: 500 Can't connect to www.clamav.net:80 (timeout)

Original issue reported on code.google.com by mouse...@gmail.com on 30 Jun 2014 at 4:35

GoogleCodeExporter commented 8 years ago 
Hi,

That does seem like a network issue.  Can you try to ping clamav.net from the 
commandline to ensure you can reach it?

Thanks,
Dave M

Original comment by dave.n...@gmail.com on 1 Jul 2014 at 10:50

GoogleCodeExporter commented 8 years ago 
Dave, it certainly is network-related, but the problem resides with clamtk (or 
the underlying Perl library libClamAV?), rather than with the network itself.

As I said, this is from behind the firewall - so trying to ping clamav.net 
directly is guaranteed to fail (after all, that's what firewalls do - block 
traffic :).

clamtk developers seemed to realize the need to update VD from behind a 
firewall". They added the option to configure network proxy. The problem is - 
the code that implements it doesn't work properly.

freshclam (that also allows HTTP proxy configuration) can reach the necessary 
sites and download updates just fine, as you can see below. My problem is that 
the only Linux GUI for clamav is unable to do so.

P.S. I know that my version of clamav is old - Ubuntu should be thanked for it, 
as that distribution stays on 0.98.1.

~$ sudo freshclam
[sudo] password for uri: 
ClamAV update process started at Tue Jul  1 13:59:19 2014
WARNING: Your ClamAV installation is OUTDATED!
WARNING: Local version: 0.98.1 Recommended version: 0.98.4
DON'T PANIC! Read http://www.clamav.net/support/faq
Connecting via llproxy.llan.ll.mit.edu
main.cvd is up to date (version: 55, sigs: 2424225, f-level: 60, builder: neo)
Connecting via llproxy.llan.ll.mit.edu
daily.cld is up to date (version: 19150, sigs: 1073693, f-level: 63, builder: 
neo)
Connecting via llproxy.llan.ll.mit.edu
bytecode.cld is up to date (version: 242, sigs: 46, f-level: 63, builder: 
dgoddard)
~$

Original comment by mouse...@gmail.com on 1 Jul 2014 at 6:11

GoogleCodeExporter commented 8 years ago 
1. Freshclam respects its configuration settings and successfully reaches 
across the firewall using HTTP proxy. clamtk does not respect its configuration 
settings, and fails to access HTTP proxy - thus its traffic is blocked by the 
firewall.

2. I'm already on clamtk 5.07, with exactly the same bad results.

Original comment by mouse...@gmail.com on 1 Jul 2014 at 6:13

GoogleCodeExporter commented 8 years ago 
Ok, give me a little time to test it and see what's going on - and I'll report 
back.

Thanks,
Dave M

Original comment by dave.n...@gmail.com on 1 Jul 2014 at 6:54

GoogleCodeExporter commented 8 years ago 
Hmmm.... initial checks show you are more than likely correct about this.  I'll 
keep working it - it does appear to be ignoring the proxy settings.

Thanks,
Dave M

Original comment by dave.n...@gmail.com on 2 Jul 2014 at 11:34

GoogleCodeExporter commented 8 years ago 
Usually I am more than likely to be correct, yes. :-) :-)

Thanks for pursuing this.

Original comment by mouse...@gmail.com on 2 Jul 2014 at 1:20

GoogleCodeExporter commented 8 years ago 
Hi,

Are you interested in testing?  I think I have the http stuff working over the 
proxies as intended.  The problem is with the https stuff - checking latest GUI 
version and submitting files for analysis.

If so, send me an email address and we'll try to knock this out.

Thanks,
Dave M

Original comment by dave.n...@gmail.com on 4 Jul 2014 at 2:00

GoogleCodeExporter commented 8 years ago 
Yes I certainly will be happy to test it for you.  Will send my email shortly. 
Thanks!

Original comment by mouse...@gmail.com on 6 Jul 2014 at 3:14

GoogleCodeExporter commented 8 years ago 
Dave, how do we exchange emails, short of posting it here?

And perhaps you want to just put a beta version on this site, so anybody could 
download it and try?

Original comment by mouse...@gmail.com on 7 Jul 2014 at 8:40

GoogleCodeExporter commented 8 years ago 
Dave...?

Original comment by mouse...@gmail.com on 9 Jul 2014 at 5:17

GoogleCodeExporter commented 8 years ago 
Dave...? 

Could I ask when would the fixed version be released?

Original comment by mouse...@gmail.com on 29 Jul 2014 at 3:19

GoogleCodeExporter commented 8 years ago 
Dave, the latest test version that I've tried successfully updated virus 
definitions (signatures) across the web proxy. But it failed to determine 
whether a GUI update is available.

Original comment by mouse...@gmail.com on 30 Jul 2014 at 10:38

GoogleCodeExporter commented 8 years ago 
Should be fixed in 5.08. Closing for now - thanks for all the testing support!

Original comment by dave.n...@gmail.com on 24 Aug 2014 at 11:37

GoogleCodeExporter commented 8 years ago 
My pleasure! :-)

Original comment by mouse...@gmail.com on 24 Aug 2014 at 6:03