HAVP

sullrich

Why not turn this into a package?

dvserg

Ok. I wiil prepare package & check ports for FreeBSD 7/7.1

mishou

I had to change the url line from

<menu>
<name>Proxy HAVP</name>
Services
<url>/pkg_edit.php?xml=HAVP.xml&id=0</url>
</menu>

to

<menu>
<name>Proxy HAVP</name>
Services
<url>/pkg_edit.php?xml=havp.xml&id=0</url>
</menu>

When I wget them from your link it took them in lower case

Mishou

dvserg

yes - need lower case

ToxIcon

dvserg did you turn HAVP and CLAMAV into a pfSense packages?

dvserg

@ToxIcon:

dvserg did you turn HAVP and CLAMAV into a pfSense packages?

I work with this. I test for 1.2.2/freeBSD 7.1
I need small time for all tests

dvserg

HAVP - HTTP Antivirus package added to packages list.
Pls test.

Cino

How do you setup HAVP in transparent proxy mode? And correct me if i'm wrong, transparent proxy mode means I dont have to set the proxy settings in each client pc..

thanks,

Cino

n1ko

Does HAVP work with squid? I found http://www.server-side.de/ideas.htm but does this apply to pfsense also?

dvserg

@Cino:

How do you setup HAVP in transparent proxy mode? And correct me if i'm wrong, transparent proxy mode means I dont have to set the proxy settings in each client pc..

thanks,
Cino

Transparent proxy option now not ready. Will be in near time.

dvserg

@n1ko:

Does HAVP work with squid? I found http://www.server-side.de/ideas.htm but does this apply to pfsense also?

Havp will be work with squid. But before need test current variant havp.

lordarcane

This is absolutly great! When migrating to pfsense and removing our old proxy server that had havp+squid+squidguard i really missed the virus checking function that havp offered. Please continue working and add support for squid in transparent mode! Thank you for all the great work!

dvserg

Update havp test - xml & inc in ZIP archive:
http://diskatel.narod.ru/pfSense/packages/havp/havp.zip

Changes:

proxy mode are : standard, parent for squid, transparent, internal
multiinterface
work with user-defined rdr(mapping) from gui
optimised RAM temp options

Store you old inc and xml from havp GUI
Download, unpack and copy to /usr/local/pkg
Check config HAVP from gui and Save.

–---------------------
Also new version with file AV-scanner. Possible, for example, scan Squid cache.
http://diskatel.narod.ru/pfSense/packages/havp/havpnew.zip

If errors or any other issues - pls post here.

NOTE: This 'test only' version, not use for work systems.

ColdFusion

The file scanner seems to work, but I get this error in system log: php: : havp: Havp is installed but not started. Filter rules not created.

Squid=Transparent
Havp proxy mode=transparent
Havp proxy port=3129
ram disk enabled

Squid custom options=redirect_program /usr/local/bin/squidGuard -c /usr/local/etc/squidGuard/squidGuard.conf;redirector_bypass on;redirect_children 3

I did have cache peer 127.0.0.1 3129 0…etc etc...but now that disappeared also...but either way..I got:Havp is installed but not started. Filter rules not created.

dvserg

Havp now updated as 'HAVP antivirus'
Please delete previous package and install new.
Changes: transparent proxy, parent for squid (autoconfigure), filter RDR rules, local files scanner, use clamd daemon (more quickly HAVP start, memory economy mode) - previous version used libclam.

ToxIcon

Thanks dvserg for put the time and giving us Havp

unfortunility I have a question can squid and Havp work together in transparent mode because i get this

php: : Havp: Squid is already configured as transparent proxy. Use 'Standard' proxy mode

I also try testing Havp by using http://www.eicar.org/anti_virus_test_file.htm

and it did not stop the http or https files download my desktop av popup on all files

and their is nothing in the log files

dvserg

I tested HAVP transparent mode - and have some problem (i have bridged ifaces).
This options declared but not worked ( rdr rule ).
I hope in future to solve this problem. :-\

About squid - i success use squid(non transparent) > havp > inet on my system. Before only need check saquid cache (must use 'File scan').

kongar

How to configure HAVP to use it with transparent SQUID?
Or should I disable transparent in SQUID?

dvserg

@kongar:

How to configure HAVP to use it with transparent SQUID?
Or should I disable transparent in SQUID?

Setup HAVP as 'ParentForSquid' mode
Setup Squid as Transparent

kongar

I did just like this, but eicar code didn't blocked (from the link above).
What's wrong? How can I test that HAVP works?