Topic: HTTP uploads w/ Dan's Guardian/ClamAV Problem

[RedBeard]

HELP
I need to get this issue resolved. I have had this problem since the end of November and the natives are getting restless and so am I. We use Yahoo mail to send out information several times a week.  I have posted to the DG mailing list and haven't received any help.  Google search hasn't found anything.

I am having a problem with Yahoo Mail, Hotmail … file attachments (HTTP post). When I try to attach a file to an email that is greater than about 320 kb it looks like it times out and does not complete the attachment.  Turning off DG allows the upload.

We are currently running DansGuardian-2.8.0.3-1av636.i386 web filter with ClamAV-0.80 on SME Server. DG is using a transparent proxy on port 8080.

This is thread I where I thought I had resolved the problem: http://forums.contribs.org/index.php?topic=25027.0

After some testing I found a problem with Squid that would not allow attachments (HTTP uploads) of greater than 1 MB. I fixed this problem and based on testing of my test system thought that was it. However,when I tried this on my test system I did not realize that I was bypassing DG.

A little more testing reveals that if DG is stopped, the uploads are fine, so this is a problem with DG and/or ClamAV and not squid.

Allowing the computer to bypass DG by IP address (exceptioniplist) does NOT allow the file to be sent. In order to upload the file DG MUST BE DISABLED!

Any ideals?????

HELP!  

Here is my DG.conf:

reportinglevel = 0
loglevel = 3
logfileformat = 1
filterport = 8080
accessdeniedaddress = 'http://www.yyyy.com/cgi-bin/dansguardian.pl'

maxuploadsize = -1
filtergroups = 1
filtergroupslist = '/etc/dansguardian/filtergroupslist'
languagedir = '/etc/dansguardian/languages'
language = 'ukenglish'
logexceptionhits = on

filterip =
proxyip = 127.0.0.1
proxyport = 3128

nonstandarddelimiter = on
usecustombannedimage = 1
custombannedimagefile = '/etc/dansguardian/transparent1x1.gif'

bannediplist = '/etc/dansguardian/bannediplist'
exceptioniplist = '/etc/dansguardian/exceptioniplist'
banneduserlist = '/etc/dansguardian/banneduserlist'
exceptionuserlist = '/etc/dansguardian/exceptionuserlist'
showweightedfound = on
weightedphrasemode = 2
urlcachenumber = 1000
urlcacheage = 900
phrasefiltermode = 1
preservecase = 0
hexdecodecontent = 0
forcequicksearch = 0
reverseaddresslookups = off
reverseclientiplookups = off
createlistcachefiles = on
maxcontentfiltersize = 256
usernameidmethodproxyauth = on
usernameidmethodntlm = off # **NOT IMPLEMENTED**
usernameidmethodident = on
preemptivebanning = on

# Misc settings
forwardedfor = off
usexforwardedfor = off
logconnectionhandlingerrors = on

# Fork pool options
maxchildren = 120
minchildren = 8
minsparechildren = 4
preforkchildren = 6
maxsparechildren = 32
maxagechildren = 500

# IPC filename
ipcfilename = '/tmp/.dguardianipc'

# URL list IPC filename
urlipcfilename = '/tmp/.dguardianurlipc'

nodaemon = off
nologger = off
softrestart = off

virusscan = on
virusengine = 'clamav'
tricklelength = -1
firsttrickledelay = 30
followingtrickledelay = 60
maxcontentscansize = 0
exceptionvirusmimetypelist =
'/etc/dansguardian/exceptionvirusmimetypelist'
exceptionvirusextensionlist =
'/etc/dansguardian/exceptionvirusextensionlist'
downloaddir = '/etc/dansguardian/dgvirus'
virusscanexceptions = on
urlcachecleanonly = off
virusscannertimeout = 60
notify = 3
emaildomain = 'yyyy.com'
postmaster = 'postmaster@y...'
emailserver = '127.0.0.1:25'
maxfiles = 1500
maxreclevel = 3
maxfilesize = 10485760

[gregswallow]

I don't think you'll find much help because you'll first have to help people to recreate your setup.  Maybe put together a quick howto on installing Dansguardian 2.8.  I think you are in the extreme minority to have Dansguardian 2.8 installed on SME.  There is probably some interest in it though.  Then, when you have a few people working towards the goal of getting it to work, I am sure you find the answers.

[CKConsulting]

I'm running DG on SME 6.0.1-01 but I haven't seen this issue.  I installed DG from Dungog's script.  You may want to take a look at it www.dungog.net.  You have to pay for it but for me it was worth it.  They also have a great response time on support questions.

Rick

[CKConsulting]

Just another thought, maybe this is stupid but do you have the bandwidth limiting piece installed?  It's turned off by default on the Dungog scripts but I'm not sure how you installed it.  I'm also not sure how to cofigure it I've just used the GUI in the control panel.

Good Luck,
Rick

[RedBeard]

Well I have been to busy to do much on this.  I too installed using Dungog rpms, I didn’t use a script.  I upgraded to the latest versions, DansGuardian-2.8.0.3-1av636.i386 and ClamAV-0.80 a while ago.  I think the previous version had the same problem, but I am not sure.

The bandwidth limiting was installed but it is turned off.  Turning off the transparent proxy does not help.  I think it may be time to remove DG and Clam and try to reinstall it.    I am not too hopeful about this as my test server has the same problem.  Both had the same upgrade path though, so maybe I just got “lucky” with my particular method of doing the upgrade.

Any other suggestion?

Thanks