Netgate Discussion Forum
    • Categories
    • Recent
    • Tags
    • Popular
    • Users
    • Search
    • Register
    • Login

    HAVP

    Scheduled Pinned Locked Moved pfSense Packages
    52 Posts 16 Posters 33.2k Views
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • D Offline
      dvserg
      last edited by

      @techmania:

      How to install HAVP and CLAMAV on pfsense ,please instruct step by step!

      10x

      For 1.2.2/FreeBSD 7.1
      1 pkg_add -r http://mirrors.linux.edu.lv/ftp.freebsd.org/ports/i386/packages-7.1-release/www/havp-0.88_1.tbz
      2 download HAVP xml/inc from http://www.diskatel.narod.ru/pfSense/ and put to /usr/local/pkg (via winscp3)
      3 exec gui http://you_pfsense/pkg_edit.php?xml=havp.xml&id=0

      ps GUI not addable to menu - use only (3) URL OR add manually to /cf/conf/config.xml -> <installed_packages>'menu' item

      
      <menu>
      			<name>Proxy HAVP</name>
      			Services
      			<url>/pkg_edit.php?xml=HAVP.xml&id=0</url>
      		</menu>
      
      

      and Del /tmp/config.cache file.</installed_packages>

      SquidGuardDoc EN  RU Tutorial
      Localization ru_PFSense

      1 Reply Last reply Reply Quote 0
      • T Offline
        techmania
        last edited by

        10x so a lot

        1 Reply Last reply Reply Quote 0
        • E Offline
          eri--
          last edited by

          dvserg why don't you put this in pfSense packages?

          1 Reply Last reply Reply Quote 0
          • S Offline
            sullrich
            last edited by

            Why not turn this into a package?

            1 Reply Last reply Reply Quote 0
            • D Offline
              dvserg
              last edited by

              Ok. I wiil prepare package & check ports for FreeBSD 7/7.1

              SquidGuardDoc EN  RU Tutorial
              Localization ru_PFSense

              1 Reply Last reply Reply Quote 0
              • M Offline
                mishou
                last edited by

                I had to change the url line from

                <menu>
                <name>Proxy HAVP</name>
                Services
                <url>/pkg_edit.php?xml=HAVP.xml&id=0</url>
                </menu>

                to

                <menu>
                <name>Proxy HAVP</name>
                Services
                <url>/pkg_edit.php?xml=havp.xml&id=0</url>
                </menu>

                When I wget them from your link it took them in lower case

                Mishou

                1 Reply Last reply Reply Quote 0
                • D Offline
                  dvserg
                  last edited by

                  yes - need lower case

                  SquidGuardDoc EN  RU Tutorial
                  Localization ru_PFSense

                  1 Reply Last reply Reply Quote 0
                  • T Offline
                    ToxIcon
                    last edited by

                    dvserg did you turn HAVP and CLAMAV into a pfSense packages?

                    1 Reply Last reply Reply Quote 0
                    • D Offline
                      dvserg
                      last edited by

                      @ToxIcon:

                      dvserg did you turn HAVP and CLAMAV into a pfSense packages?

                      I work with this. I test for 1.2.2/freeBSD 7.1
                      I need small time for all tests

                      SquidGuardDoc EN  RU Tutorial
                      Localization ru_PFSense

                      1 Reply Last reply Reply Quote 0
                      • D Offline
                        dvserg
                        last edited by

                        HAVP - HTTP Antivirus package added to packages list.
                        Pls test.

                        SquidGuardDoc EN  RU Tutorial
                        Localization ru_PFSense

                        1 Reply Last reply Reply Quote 0
                        • C Offline
                          Cino
                          last edited by

                          How do you setup HAVP in transparent proxy mode? And correct me if i'm wrong, transparent proxy mode means I dont have to set the proxy settings in each client pc..

                          thanks,

                          Cino

                          1 Reply Last reply Reply Quote 0
                          • N Offline
                            n1ko
                            last edited by

                            Does HAVP work with squid? I found http://www.server-side.de/ideas.htm but does this apply to pfsense also?

                            1 Reply Last reply Reply Quote 0
                            • D Offline
                              dvserg
                              last edited by

                              @Cino:

                              How do you setup HAVP in transparent proxy mode? And correct me if i'm wrong, transparent proxy mode means I dont have to set the proxy settings in each client pc..

                              thanks,
                              Cino

                              Transparent proxy option now not ready. Will be in near time.

                              SquidGuardDoc EN  RU Tutorial
                              Localization ru_PFSense

                              1 Reply Last reply Reply Quote 0
                              • D Offline
                                dvserg
                                last edited by

                                @n1ko:

                                Does HAVP work with squid? I found http://www.server-side.de/ideas.htm but does this apply to pfsense also?

                                Havp will be work with squid. But before need test current variant havp.

                                SquidGuardDoc EN  RU Tutorial
                                Localization ru_PFSense

                                1 Reply Last reply Reply Quote 0
                                • L Offline
                                  lordarcane
                                  last edited by

                                  This is absolutly great! When migrating to pfsense and removing our old proxy server that had havp+squid+squidguard i really missed the virus checking function that havp offered. Please continue working and add support for squid in transparent mode! Thank you for all the great work!

                                  1 Reply Last reply Reply Quote 0
                                  • D Offline
                                    dvserg
                                    last edited by

                                    Update havp test - xml & inc in ZIP archive:
                                    http://diskatel.narod.ru/pfSense/packages/havp/havp.zip

                                    Changes:

                                    • proxy mode are : standard, parent for squid, transparent, internal
                                    • multiinterface
                                    • work with user-defined rdr(mapping) from gui
                                    • optimised RAM temp options

                                    Store you old inc and xml from havp GUI
                                    Download, unpack and copy to /usr/local/pkg
                                    Check config HAVP from gui and Save.

                                    –---------------------
                                    Also new version with file AV-scanner. Possible, for example, scan Squid cache.
                                    http://diskatel.narod.ru/pfSense/packages/havp/havpnew.zip

                                    If errors or any other issues  - pls post here.

                                    NOTE: This 'test only' version, not use for work systems.

                                    SquidGuardDoc EN  RU Tutorial
                                    Localization ru_PFSense

                                    1 Reply Last reply Reply Quote 0
                                    • C Offline
                                      ColdFusion
                                      last edited by

                                      The file scanner seems to work, but I get this error in system log: php: : havp: Havp is installed but not started. Filter rules not created.

                                      Squid=Transparent
                                      Havp proxy mode=transparent
                                      Havp proxy port=3129
                                      ram disk enabled

                                      Squid custom options=redirect_program /usr/local/bin/squidGuard -c /usr/local/etc/squidGuard/squidGuard.conf;redirector_bypass on;redirect_children 3

                                      I did have cache peer 127.0.0.1 3129 0…etc etc...but now that disappeared also...but either way..I got:Havp is installed but not started. Filter rules not created.

                                      1 Reply Last reply Reply Quote 0
                                      • D Offline
                                        dvserg
                                        last edited by

                                        Havp now updated as 'HAVP antivirus'
                                        Please delete previous package and install new.
                                        Changes: transparent proxy, parent for squid (autoconfigure), filter RDR rules, local files scanner, use clamd daemon (more quickly HAVP start, memory economy mode) - previous version used libclam.

                                        SquidGuardDoc EN  RU Tutorial
                                        Localization ru_PFSense

                                        1 Reply Last reply Reply Quote 0
                                        • T Offline
                                          ToxIcon
                                          last edited by

                                          Thanks dvserg for put the time and giving us Havp

                                          unfortunility I have a question can squid and Havp work together in transparent mode because i get this

                                          php: : Havp: Squid is already configured as transparent proxy. Use 'Standard' proxy mode

                                          I also try testing Havp  by using http://www.eicar.org/anti_virus_test_file.htm

                                          and it did not stop the http or https files download my desktop av popup on all files

                                          and their is nothing in the log files

                                          1 Reply Last reply Reply Quote 0
                                          • D Offline
                                            dvserg
                                            last edited by

                                            I tested HAVP transparent mode - and have some problem (i have bridged ifaces).
                                            This options declared but not worked ( rdr rule ).
                                            I hope in future to solve this problem.   :-\

                                            About squid - i success use squid(non transparent) > havp > inet on my system. Before only need check saquid cache (must use 'File scan').

                                            SquidGuardDoc EN  RU Tutorial
                                            Localization ru_PFSense

                                            1 Reply Last reply Reply Quote 0
                                            • First post
                                              Last post
                                            Copyright 2025 Rubicon Communications LLC (Netgate). All rights reserved.