Netgate Discussion Forum
    • Categories
    • Recent
    • Tags
    • Popular
    • Users
    • Search
    • Register
    • Login

    HAVP

    Scheduled Pinned Locked Moved pfSense Packages
    52 Posts 16 Posters 31.8k Views
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • T Offline
      techmania
      last edited by

      How to install HAVP and CLAMAV on pfsense ,please instruct step by step!

      10x

      1 Reply Last reply Reply Quote 0
      • D Offline
        dvserg
        last edited by

        @techmania:

        How to install HAVP and CLAMAV on pfsense ,please instruct step by step!

        10x

        For 1.2.2/FreeBSD 7.1
        1 pkg_add -r http://mirrors.linux.edu.lv/ftp.freebsd.org/ports/i386/packages-7.1-release/www/havp-0.88_1.tbz
        2 download HAVP xml/inc from http://www.diskatel.narod.ru/pfSense/ and put to /usr/local/pkg (via winscp3)
        3 exec gui http://you_pfsense/pkg_edit.php?xml=havp.xml&id=0

        ps GUI not addable to menu - use only (3) URL OR add manually to /cf/conf/config.xml -> <installed_packages>'menu' item

        
        <menu>
        			<name>Proxy HAVP</name>
        			Services
        			<url>/pkg_edit.php?xml=HAVP.xml&id=0</url>
        		</menu>
        
        

        and Del /tmp/config.cache file.</installed_packages>

        SquidGuardDoc EN  RU Tutorial
        Localization ru_PFSense

        1 Reply Last reply Reply Quote 0
        • T Offline
          techmania
          last edited by

          10x so a lot

          1 Reply Last reply Reply Quote 0
          • E Offline
            eri--
            last edited by

            dvserg why don't you put this in pfSense packages?

            1 Reply Last reply Reply Quote 0
            • S Offline
              sullrich
              last edited by

              Why not turn this into a package?

              1 Reply Last reply Reply Quote 0
              • D Offline
                dvserg
                last edited by

                Ok. I wiil prepare package & check ports for FreeBSD 7/7.1

                SquidGuardDoc EN  RU Tutorial
                Localization ru_PFSense

                1 Reply Last reply Reply Quote 0
                • M Offline
                  mishou
                  last edited by

                  I had to change the url line from

                  <menu>
                  <name>Proxy HAVP</name>
                  Services
                  <url>/pkg_edit.php?xml=HAVP.xml&id=0</url>
                  </menu>

                  to

                  <menu>
                  <name>Proxy HAVP</name>
                  Services
                  <url>/pkg_edit.php?xml=havp.xml&id=0</url>
                  </menu>

                  When I wget them from your link it took them in lower case

                  Mishou

                  1 Reply Last reply Reply Quote 0
                  • D Offline
                    dvserg
                    last edited by

                    yes - need lower case

                    SquidGuardDoc EN  RU Tutorial
                    Localization ru_PFSense

                    1 Reply Last reply Reply Quote 0
                    • T Offline
                      ToxIcon
                      last edited by

                      dvserg did you turn HAVP and CLAMAV into a pfSense packages?

                      1 Reply Last reply Reply Quote 0
                      • D Offline
                        dvserg
                        last edited by

                        @ToxIcon:

                        dvserg did you turn HAVP and CLAMAV into a pfSense packages?

                        I work with this. I test for 1.2.2/freeBSD 7.1
                        I need small time for all tests

                        SquidGuardDoc EN  RU Tutorial
                        Localization ru_PFSense

                        1 Reply Last reply Reply Quote 0
                        • D Offline
                          dvserg
                          last edited by

                          HAVP - HTTP Antivirus package added to packages list.
                          Pls test.

                          SquidGuardDoc EN  RU Tutorial
                          Localization ru_PFSense

                          1 Reply Last reply Reply Quote 0
                          • C Offline
                            Cino
                            last edited by

                            How do you setup HAVP in transparent proxy mode? And correct me if i'm wrong, transparent proxy mode means I dont have to set the proxy settings in each client pc..

                            thanks,

                            Cino

                            1 Reply Last reply Reply Quote 0
                            • N Offline
                              n1ko
                              last edited by

                              Does HAVP work with squid? I found http://www.server-side.de/ideas.htm but does this apply to pfsense also?

                              1 Reply Last reply Reply Quote 0
                              • D Offline
                                dvserg
                                last edited by

                                @Cino:

                                How do you setup HAVP in transparent proxy mode? And correct me if i'm wrong, transparent proxy mode means I dont have to set the proxy settings in each client pc..

                                thanks,
                                Cino

                                Transparent proxy option now not ready. Will be in near time.

                                SquidGuardDoc EN  RU Tutorial
                                Localization ru_PFSense

                                1 Reply Last reply Reply Quote 0
                                • D Offline
                                  dvserg
                                  last edited by

                                  @n1ko:

                                  Does HAVP work with squid? I found http://www.server-side.de/ideas.htm but does this apply to pfsense also?

                                  Havp will be work with squid. But before need test current variant havp.

                                  SquidGuardDoc EN  RU Tutorial
                                  Localization ru_PFSense

                                  1 Reply Last reply Reply Quote 0
                                  • L Offline
                                    lordarcane
                                    last edited by

                                    This is absolutly great! When migrating to pfsense and removing our old proxy server that had havp+squid+squidguard i really missed the virus checking function that havp offered. Please continue working and add support for squid in transparent mode! Thank you for all the great work!

                                    1 Reply Last reply Reply Quote 0
                                    • D Offline
                                      dvserg
                                      last edited by

                                      Update havp test - xml & inc in ZIP archive:
                                      http://diskatel.narod.ru/pfSense/packages/havp/havp.zip

                                      Changes:

                                      • proxy mode are : standard, parent for squid, transparent, internal
                                      • multiinterface
                                      • work with user-defined rdr(mapping) from gui
                                      • optimised RAM temp options

                                      Store you old inc and xml from havp GUI
                                      Download, unpack and copy to /usr/local/pkg
                                      Check config HAVP from gui and Save.

                                      –---------------------
                                      Also new version with file AV-scanner. Possible, for example, scan Squid cache.
                                      http://diskatel.narod.ru/pfSense/packages/havp/havpnew.zip

                                      If errors or any other issues  - pls post here.

                                      NOTE: This 'test only' version, not use for work systems.

                                      SquidGuardDoc EN  RU Tutorial
                                      Localization ru_PFSense

                                      1 Reply Last reply Reply Quote 0
                                      • C Offline
                                        ColdFusion
                                        last edited by

                                        The file scanner seems to work, but I get this error in system log: php: : havp: Havp is installed but not started. Filter rules not created.

                                        Squid=Transparent
                                        Havp proxy mode=transparent
                                        Havp proxy port=3129
                                        ram disk enabled

                                        Squid custom options=redirect_program /usr/local/bin/squidGuard -c /usr/local/etc/squidGuard/squidGuard.conf;redirector_bypass on;redirect_children 3

                                        I did have cache peer 127.0.0.1 3129 0…etc etc...but now that disappeared also...but either way..I got:Havp is installed but not started. Filter rules not created.

                                        1 Reply Last reply Reply Quote 0
                                        • D Offline
                                          dvserg
                                          last edited by

                                          Havp now updated as 'HAVP antivirus'
                                          Please delete previous package and install new.
                                          Changes: transparent proxy, parent for squid (autoconfigure), filter RDR rules, local files scanner, use clamd daemon (more quickly HAVP start, memory economy mode) - previous version used libclam.

                                          SquidGuardDoc EN  RU Tutorial
                                          Localization ru_PFSense

                                          1 Reply Last reply Reply Quote 0
                                          • T Offline
                                            ToxIcon
                                            last edited by

                                            Thanks dvserg for put the time and giving us Havp

                                            unfortunility I have a question can squid and Havp work together in transparent mode because i get this

                                            php: : Havp: Squid is already configured as transparent proxy. Use 'Standard' proxy mode

                                            I also try testing Havp  by using http://www.eicar.org/anti_virus_test_file.htm

                                            and it did not stop the http or https files download my desktop av popup on all files

                                            and their is nothing in the log files

                                            1 Reply Last reply Reply Quote 0
                                            • First post
                                              Last post
                                            Copyright 2025 Rubicon Communications LLC (Netgate). All rights reserved.