DansGuardian and such ipcop addons

[kerravon99]

Hi all, 
FYI Dansguardian works well on raqcop but if you install the dansguardiangui
you can no longer accss the ipcop webmin you will get the 500 server error.
I have used dansguardian for a few years now and didnt use the gui before so would leave it out anyway.  now looking at havp as copfilter looks for it on startup will keep you informed.  BTW dont download the addons-2.3.CLI archive from source forge as it seems to be corrupt look for it in google and download it from the miror site.

Whwn I workout how to tarball these addons like dansguardian I will pm dave to see if he can add them to the download page.

cheers everyone
kerravon

[kerravon99]

Hi Guys,
           well messed that one up a bit, dansguardiangui cant be uninstalled and it stops you accessing the webmin page so I had to redo the vdisk again phew thanks vmware!!!

Havp wont ./configure unless you use the --disable-clamav option because depite having clamav installed it cant find the path.  I need to look in the config files and also where it lies on the ipcop disk. Apart from that little 10 min setback all is back on track and seems to be goingravon well.
 Have Fun

ker

[kerravon99]

Hi all,
update:  it is down to the paths, if using copfilter you need to change the paths to where copfilter likes to find them. I have  discovered  a set of instructions in german which I am translating if anyone wants a copy let me know.
BTW you also have to set the clamav paths to where copfilter wants them otherwise it complains about it cant find the clamav libaries.  Bit of messing ablout with the good old CLI but its worth it.

I also made a silly mistake on my restore I forgot to enable the secure webmin ports for ipcop webmin in BlockOut Traffic so I couldnt ssh in after. But soon remedied.

have fun
Kerr

[kerravon99]

Hi all,
now have successfully installed havp and running with no errors and clamd is setup in tandem.
if using the copfilter-0-84beta3 or 83beta3 files you need to  edit the installation files as the path is slightly different than the none beta files.

I can supply anyone interest with the instructions of how to setup havp and clamav with copies of the required .conf files if anyone is interested. btw you also need to edit the install.sh for clamav
but can supply a copy of this edited file too.

btw i notice this topic has had qiute a lot of views but no comments, seems me and dave are the only ones posting surely there are more ideas thoughts and such out there!

regards
kerr

[Davesworld]

How well does a raq 4 hold up with that? I know we can use up to 1 gig of ram on these little beauties and I have had no trouble with the low voltage 500 processors clocked at 550. I'm still curious as to how much firewall throughput a typical 450mhz raq 4 can push from red to green even without addons. I can only speculate at maybe 88mbs but no way to prove it. My 3mbs connection is hardly a test at all. I wish I has FiOS or something to really push it.

[Brian Ridgeway]

Please I would like information on this.  The beta version of copfilter seemed to work just fine for me untill 12 midnight the 1st day it was running.  From that point on privoxy was hosed.  Is this related?

I am insterested in your changes / fixes. 

Thanks,

Brian
raqcop.com

[weizen_42]

Slightly OT, but

I'm still curious as to how much firewall throughput a typical 450mhz raq 4 can push from red to green even without addons. I can only speculate at maybe 88mbs but no way to prove it.

If you've got enough HW to play with: configure the raq with red=static and put PCs in green and red. Then run iperf from PC in green to PC in red.
Portforward and testing from red to green should also work.

[kerravon99]

Hi dave,
sorry about late reply, as you can guess been playing around with it again. I am running it on a 10MB connection at the moment and seems to run quite smoothly no hiccups as of yet.
originally when i finished adding those addons, it did start complaining in privoxy i think about having to use swap heavily so increase memory. i dropped in another 256mb chip and error was gone all is running fine. the only reason I dropped a 256 in was thats all i had and a few 512's.


As to your other suggestion yes I will give that a go, i have no problem with hardware I have inherited about 20 of these things on top of the two I already owned. so I can build loads of test boxes.

brian  if you mean the copfilter-0.84beta3, i would remove it or edit the installation file so it installs in the same directory structure as the non beta releases as it creates a directory call 84beta3 which is unkown to your other plugins.  beter to insta stable release 82 and upgrade clamav_copfilter and havp 0.88 by hand you will find it works much better.

anything else feel free to ask and I will try my best to answer.

regards
kerravon
wiezen  not sure what you mean by OT , ive only just started to play.

[kerravon99]

had a go at attching modified files but its 17mb so no can do, could possibly email to those who want them

[weizen_42]

wiezen  not sure what you mean by OT , ive only just started to play.

OT = Off Topic

[kerravon99]

ha, OT in the uk means Overr the Top (too much)

[Davesworld]

Slightly OT, but

I'm still curious as to how much firewall throughput a typical 450mhz raq 4 can push from red to green even without addons. I can only speculate at maybe 88mbs but no way to prove it.

If you've got enough HW to play with: configure the raq with red=static and put PCs in green and red. Then run iperf from PC in green to PC in red.
Portforward and testing from red to green should also work.

That would work definitely. I will do that. Luckily I still have an unmodded Raq4 here. Thanks weizen_42!

PS: Not much of a beer drinker but I heard that the beer over there is second to none.

[weizen_42]

Been a while, but I think that people are still interested ...

Anyways, I've done a Q&D speedtest using a RaQ4 and 2 linux boxes. Setup is basically: Box 1 <-> RaQCop Red - RaQCop Green <-> Box 2.

Running iperf (with -t 60) thru RaQCop gives me 93.8 - 94.1 Mbits/sec. This is identical to the speed I measure when doing a direct Box 1 <-> Box 2 test.
Pulling a 100 MByte file via http from Box 1 using wget on Box 2 gives me 9.88 MByte/s.
CPU usage climbs to 70% when running a longer (15 minutes) traffic test.

So I guess it is fair to say that RaQ4 is capable to handle traffic, unless your internet is > 100 MBit/s (for obvious reasons).

[Davesworld]

That's awesome! I suspected it would be around there somewhere.

[Davesworld]

Weizen_42 I know you do not like bogging down your systems with a bunch of stuff. Just out of curiosity, what config were you running such as snort and proxy etc? It would appear that you achieved close to line speed.

The only filter addon I like is urlfilter, it seems to be friendly to flash installs except the blacklist update that thrashes the drive for twenty minutes. I started installing urlfilter and doing the blacklist update BEFORE I use mkflash to create the flash image on my test builds. As soon as I install urlfilter, I delete the entire blacklist directory and update using the shalla version, it makes a cleaner choice of radio buttons, adv and so forth.