No update for f-prot and C-ICAP/Blacklist (SOLVED)

This forum is for all copfilter version 2 support related questions in English. (IPCop version 2)
ShelbyGT500
Posts: 846
Joined: 13 May 2010 22:37
Location: FRANCE

No update for f-prot and C-ICAP/Blacklist (SOLVED)

Post by ShelbyGT500 » 27 Feb 2012 23:57

Hi,

I'm sorry, i've a new issue :? ...... I believe that I can not use copfilter! :( :(

On my test machine with Copfilter 2.0.91beta3, there is no automatic update update for f-prot .
I unistalled and reinstalled copfilter to confirm theses issues (on a new installation of Ipcop)
The time until next F-Prot update is always the same (60 minutes).
Manual update work fine.

I test each solution present in this forum, without result (for f-prot).

I noticed this in copfilter_cron.log:
either C-ICAP is not periodic or icap_counter doesn't exist
either C-ICAP is not periodic or icap_counter doesn't exist
either C-ICAP is not periodic or icap_counter doesn't exist


EDIT 1:
I don't understand, the automatic update for C-ICAP/blacklist started 1 hour after it was planned. Perhaps a problem of time server ? :?:
Now, update for C-ICAP Blacklist works fine.

Regards.
Last edited by ShelbyGT500 on 16 Mar 2012 21:41, edited 2 times in total.

karesmakro
Site Admin
Posts: 1280
Joined: 09 Dec 2009 21:17

Re: No update for f-prot and C-ICAP/Blacklist

Post by karesmakro » 28 Feb 2012 00:53

I can say something to your Edit 1 now and for fprot, I have to search.

There was a discussion with FischerM on weekend, about c-icap update issue and I explained to him, that it's just a new feature, which takes into account the daylight saving time :D
and we've talked about how long it probably will until the first note
Just a joke... we noticed and it will be fixed next time

thanks for your report

regards

ShelbyGT500
Posts: 846
Joined: 13 May 2010 22:37
Location: FRANCE

Re: No update for f-prot and C-ICAP/Blacklist

Post by ShelbyGT500 » 05 Mar 2012 21:42

Hi,

The problem for C-ICAP periodic update time with one hour to late is fixed (I change the the value on /usr/local/bin/copfilter_cron at line ~116 from "-gt 5" to "-gt 0") (thanks to IT-Connect ;) ).

But I still have a problem of update for f-prot. The time until next F-Prot update is always the same (60 minutes).Manual update works fine.

Thanks in advance for all & any help.

Regards.

Shelby.

Severus
Site Admin
Posts: 457
Joined: 10 Dec 2009 07:01
Location: Nürnberg - Germany

Re: No update for f-prot and C-ICAP/Blacklist

Post by Severus » 05 Mar 2012 23:02

Hi,
please check:

First: is there a file
/var/log/copfilter/default/etc/fprotd_enable
if not please create one by touch command.

Second:
Check /var/log/copfilter/default/etc/global_settings file for

Code: Select all

FPROT_ENABLE=on
FPROT_INSTALLED=yes
FPROT_UPDATE_METHOD=periodically
FPROT_UPDATE_PERIOD=e.g minutely, hourly, daily, monthly
FPROT_UPDATE_VALUE=any numeric value
FPROT_VALID=yes
if not please set the values by GUI again or edit the global_settings file manually.
Severus

ShelbyGT500
Posts: 846
Joined: 13 May 2010 22:37
Location: FRANCE

Re: No update for f-prot and C-ICAP/Blacklist

Post by ShelbyGT500 » 05 Mar 2012 23:25

Hi Severus,

Thank you for the answer.
Severus wrote:First: is there a file /var/log/copfilter/default/etc/fprotd_enable
This file is present, it's OK.
Severus wrote:Second:Check /var/log/copfilter/default/etc/global_settings file for

Code: Select all

FPROT_ENABLE=on
FPROT_INSTALLED=yes
FPROT_UPDATE_METHOD=periodically
FPROT_UPDATE_PERIOD=e.g minutely, hourly, daily, monthly
FPROT_UPDATE_VALUE=any numeric value
FPROT_VALID=yes
The values are OK. Here is the result:
FPROT=$BASEDIR/opt/f-prot/default/fpscan
FPROT_ENABLE=on
FPROT_INSTALLED=yes
FPROT_SETDAY=08
FPROT_SETHOUR=15
FPROT_SETMINUTES=12
FPROT_SETMONTH=05
FPROT_SETYEAR=2004
FPROT_UPDATE_METHOD=periodically
FPROT_UPDATE_PERIOD=hourly
FPROT_UPDATE_VALUE=1
FPROT_VALID=yes


All seems OK. :?:

Regards.

Severus
Site Admin
Posts: 457
Joined: 10 Dec 2009 07:01
Location: Nürnberg - Germany

Re: No update for f-prot and C-ICAP/Blacklist

Post by Severus » 06 Mar 2012 00:10

Another hint,
pleas check owner and rights of the
/var/log/copfilter/default/etc/clamd_counter
/var/log/copfilter/default/etc/clamd_counter.conf
files.
Should be 0644 and nobody.nobody
Furthermore I can't see any culprit, yet.
Severus

ShelbyGT500
Posts: 846
Joined: 13 May 2010 22:37
Location: FRANCE

Re: No update for f-prot and C-ICAP/Blacklist

Post by ShelbyGT500 » 06 Mar 2012 00:46

Hi,

here is the result :
root@ipcop:~ # ls -l /var/log/copfilter/default/etc/clamd_counter
-rw-rw-rw- 1 nobody nobody 3 Mar 5 23:40 /var/log/copfilter/default/etc/clamd_counter
root@ipcop:~ # ls -l /var/log/copfilter/default/etc/clamd_counter.conf
-rw-rw-rw- 1 nobody nobody 3 Mar 4 19:26 /var/log/copfilter/default/etc/clamd_counter.conf


Regards.

Severus
Site Admin
Posts: 457
Joined: 10 Dec 2009 07:01
Location: Nürnberg - Germany

Re: No update for f-prot and C-ICAP/Blacklist

Post by Severus » 06 Mar 2012 01:12

Strange!
ShelbyGT500 wrote:-rw-rw-rw- 1 nobody nobody 3 Mar 5 23:40 /var/log/copfilter/default/etc/clamd_counter
prooves that the file was changed today at 23:40.
Though it seems to be changed correctly you always get 60 minutes to the next update.
What date is shown for the current database? The latest version seems to be 2012-03-05-16:34
If this is correct it seems to be a display problem of antivirus GUI.
If there is no reason to avoid this try to update with the current 0.55.3.4 version of the 3rd_party_sigs. Maybe it solves the problem.
Please check your copfiltercron.log for entries like

Code: Select all

Debug: User agent "FPAV_Updater/6.0.2 (UNIX; Linux; 2.4.36; ; i686)"
Update server - Valid license-key
Debug: Server files.amazonupdates.f-prot.net (weight 10)
Debug: Server srv3.directupdates.f-prot.net (weight 3)
Debug: Server index 3
Debug: Using server files.amazonupdates.f-prot.net
Attempting to retrieve the latest antivir.def update from update server
Debug: User agent "FPAV_Updater/6.0.2 (UNIX; Linux; 2.4.36; ; i686)"
Updating antivir.def completed successfully
Signature file /var/log/copfilter/0.85/opt/f-prot/6.3.3.5015/antivir.def

Severus

ShelbyGT500
Posts: 846
Joined: 13 May 2010 22:37
Location: FRANCE

Re: No update for f-prot and C-ICAP/Blacklist

Post by ShelbyGT500 » 06 Mar 2012 20:16

Hi Severus,
Severus wrote:prooves that the file was changed today at 23:40.
I updated the f-prot database manually yesterday.
Severus wrote:What date is shown for the current database? The latest version seems to be 2012-03-05-16:34
F-PROT Antivirus CLS version 6.5.1. - Engine 4.6.2.117 Virus Datenbank vom Mar 5 21:37
Severus wrote:Please check your copfiltercron.log for entries
I've only one entry.
(I started IPCOP V2 at 18:30)
no internet connection available, so no updates will be downloaded
Severus wrote:If there is no reason to avoid this try to update with the current 0.55.3.4 version of the 3rd_party_sigs. Maybe it solves the problem.
I installed new version 0.55.3.5beta1.
I will do a report in a few minutes.
EDIT: it did not solve the problem.I've always "...60 minutes until next update..."

Thanks for your help. ;)

regards.

karesmakro
Site Admin
Posts: 1280
Joined: 09 Dec 2009 21:17

Re: No update for f-prot

Post by karesmakro » 06 Mar 2012 21:54

Can you check please, wether fprot counter file is working correctly
You'll find the counter file in /var/log/copfilter/default/etc/fprot_counter
Every time you start the copfilter_cron in /usr/local/bin should decrease the number of fprot_counter by 5

Code: Select all

/usr/local/bin/copfilter_cron

Post Reply