Copfilter 2.0.91beta1

[karesmakro]

Released Copfilter 2.0.91beta1


Copfilter 2.0.91beta1 comes with some new improvements, new addons, a revised gui, revised shell output
and in additional some bugs has been fixed.

The most important change is the new integrated C-ICAP filter, which comes with a virus filter and an urlfilter for HTTP traffic.
Note: The C-ICAP URL-Filter is no replacement for the SquidGuard based URL-Filter,integrated in future IPCop versions!
It is recommended, to read the C-ICAP URL Filter HowTo on the footer in C-ICAP gui settings, which also contains an illustrated description.
Spamassassin now use the shortcircuit function for black- and whitlist handling

In additional, the most popular 3rd Party sigs from Severus has been integrated.

If you plan an update from previous copfilter release, please deactivate monit before uninstall previous Copfilter release!
After new Copfilter install, reboot your IPCop machine for taking changes in effect (this is especially needed for Imspector users)!

ClamAV Antivirus databases are downloaded during the installation.

The disabling of the local anti-virus scanner is no longer necessary because the test virus is now encrypted!

For download and detailed Changlog, view http://www.copfilter.org/pg64

Here you'll find a short FAQ, which is kept up to date http://www.copfilter.org/copfilter-v2_d ... -docs.html

Thanks to all users, who supported the Copfilter testline!

Please note: There was found a permission problem on Copfilter 2.0.91beta1 with using the Copfilter Whitelist-Manager!
Execute following steps, to correct the error (thanks to Moshari_3 for reporting)

Code: Select all

chmod 755 /var/log/copfilter/default/etc/cp_spam_whitelist
chmod 666 /var/log/copfilter/default/etc/cp_spam_whitelist/local_webgui.cf

Regards

[ShelbyGT500]

Hi Kare,

I've installed this new version.
It seems OK !

Two reports for next update, but only for gui settings:
- The status is not green in the differents guis settings (there is nothing, but it's in grey if not actived or red if stopped).
- There is not the C-ICAP URL Filter HowTo on the footer in C-ICAP gui settings (it's the old footer)

I've noticed there is an option to choose Hour of automatic Blacklist update !

Thank you for your work.

EDIT
C-ICAP doesn't filter for url after it has converted categories, but it's ok after restarting squid.

Regards.

[karesmakro]

It seems OK !

very good

The status is not green in the differents guis settings (there is nothing, but it's in grey if not actived).

Sorry, I do not really understand, what you mean! There are 3 states: Running, Stopped and Not Activated

There is not the C-ICAP URL Filter HowTo on the footer in C-ICAP gui settings (it's the old footer)

Oh, you are right! But fortunately, I've added the illustraded description, which describes the process a little better

I've noticed there is an option to choose Hour of automatic Blacklist update !

I thought, this is a must have

regards

[ShelbyGT500]

Hi,

Sorry, I do not really understand, what you mean! There are 3 states: Running, Stopped and Not Activated

For example, C-ICAP status is not indicated when it is running. But it is indicated when stopped or not activated. This is the case for all services.

I've added the illustraded description, which describes the process a little better

EDIT
I've a problem with P3scan which stopped twice. Here is the log

Jan 7 23:12:50 ipcop p3scan[2922]: P3Scan Version 2.3.2
Jan 7 23:12:50 ipcop p3scan[2922]: Selected scannertype: bash (Bash file invocation scanner)
Jan 7 23:12:50 ipcop p3scan[2922]: Listen now on 0.0.0.0:8110
Jan 7 23:12:51 ipcop p3scan[2923]: Changing uid (we are root)
Jan 7 23:12:51 ipcop p3scan[2923]: Running as user: spam
Jan 7 23:20:26 ipcop p3scan[1224]: ERR: PID file /var/log/copfilter/default/opt/p3scan/var/run/p3scan.pid exists! Aborting!
Jan 7 23:20:26 ipcop p3scan[1224]: ERR: Exiting now...#012
Jan 8 00:03:25 ipcop p3scan[8542]: ERR: PID file /var/log/copfilter/default/opt/p3scan/var/run/p3scan.pid exists! Aborting!
Jan 8 00:03:25 ipcop p3scan[8542]: ERR: Exiting now...#012
Jan 8 00:03:51 ipcop p3scan[8693]: P3Scan Version 2.3.2
Jan 8 00:03:51 ipcop p3scan[8693]: Selected scannertype: bash (Bash file invocation scanner)
Jan 8 00:03:51 ipcop p3scan[8693]: Listen now on 0.0.0.0:8110
Jan 8 00:03:51 ipcop p3scan[8694]: Changing uid (we are root)
Jan 8 00:03:51 ipcop p3scan[8694]: Running as user: spam
Jan 8 00:04:44 ipcop p3scan[8694]: P3Scan terminates now
Jan 8 00:25:56 ipcop p3scan[12687]: P3Scan Version 2.3.2
Jan 8 00:25:56 ipcop p3scan[12687]: Selected scannertype: bash (Bash file invocation scanner)
Jan 8 00:25:56 ipcop p3scan[12687]: Listen now on 0.0.0.0:8110
Jan 8 00:25:56 ipcop p3scan[12688]: Changing uid (we are root)
Jan 8 00:25:56 ipcop p3scan[12688]: Running as user: spam
Jan 8 00:26:17 ipcop p3scan[12815]: POP3 Connection from 192.168.4.77:51652
Jan 8 00:26:17 ipcop p3scan[12815]: Real-server address is 93.17.128.17:110
Jan 8 00:26:17 ipcop p3scan[12815]: USER ' I've changed it'
Jan 8 00:26:49 ipcop p3scan[12815]: Session done (Clean Exit). Mails: 2 Bytes: 8269
Jan 8 00:27:58 ipcop p3scan[13304]: POP3 Connection from 192.168.4.77:51746
Jan 8 00:27:58 ipcop p3scan[13304]: Real-server address is 93.17.128.17:110
Jan 8 00:27:58 ipcop p3scan[13304]: USER ' I've changed it''
Jan 8 00:27:59 ipcop p3scan[13304]: Session done (Clean Exit). Mails: 0 Bytes: 0

It seems when icap or copfilter send or received a message.


regards

[karesmakro]

This should work on all services, which have a daemon!
http://www.it-connect-unix.de/cache/max ... ime-en.png

Which browser are you using and can you check your htpd_error.log?

Ah, I saw, it is not displayed in french

[ShelbyGT500]

Hi,

Which browser are you using and can you check your htpd_error.log?

Internet explorer for ICOP, or firefox to access internet.

[Sun Jan 08 00:00:02 2012] [notice] Apache/2.2.21 (Unix) mod_ssl/2.2.21 OpenSSL/1.0.0e configured -- resuming normal operations

Regards

[karesmakro]

you noticed my updated post?
I saw, it is not displayed in french

[ShelbyGT500]

Hi,

I saw, it is not displayed in french

If you can specify the file path , i will translate it.

Have you seen my updated post: posting.php?mode=reply&f=9&t=674#pr3305
I had a probleme with P3scan.

Regards.

[karesmakro]

Did you have restarted the IPCop after installation?

Please remove manually the pidfile, by typing:

Code: Select all

rm /var/log/copfilter/default/opt/p3scan/var/run/p3scan.pid

and restart p3scan

Code: Select all

/etc/rc.d/init.d/copfilter_p3scan restart

[ShelbyGT500]

Hi,

Did you have restarted the IPCop after installation?

Yes.

Code: Select all

rm /var/log/copfilter/default/opt/p3scan/var/run/p3scan.pid

and restart p3scan

Code: Select all

/etc/rc.d/init.d/copfilter_p3scan restart

Done.
root@ipcop:~ # rm /var/log/copfilter/default/opt/p3scan/var/run/p3scan.pid
root@ipcop:~ # /etc/rc.d/init.d/copfilter_p3scan restart
POP3 Filtrage du trafic activé sur GREEN: lan-1

p3scan tué Done
démarrage p3scan POP3 Filtrage du trafic activé sur GREEN: lan-1
p3scan en fonction avec le PID 16619
Règles Iptables actives:
Table: nat Chain: PREROUTING 0 0 REDIRECT tcp -- lan-1 * 0.0.0.0/0 0.0.0.0/0 tcp dpt:110 redir ports 8110
Table: nat Chain: PREROUTING 0 0 REDIRECT tcp -- lan-1 * 0.0.0.0/0 0.0.0.0/0 tcp dpt:995 redir ports 8110
Done
root@ipcop:~ #

I will look tomorrow if everything is fine.

Bye-bye.