How to configure HAVP

akintemel

Thank you very much now i can see log entri in havp access.log…buy the way how can i test it could you help me again please..

Thank you very much again.. ;D

dvserg

@akintemel:

Thank you very much now i can see log entri in havp access.log…buy the way how can i test it could you help me again please..

Thank you very much again.. ;D

Look this
http://www.eicar.org/anti_virus_test_file.htm

View log via GUI
Diagnostics: Execute command
PHP Execute

echo(
file_get_contents("/var/log/havp/access.log")
);

cheesyboofs

Sorry to hi-jack but how is "transparent" and "multi-wan" coming on dvserg?

dvserg

@cheesyboofs:

Sorry to hi-jack but how is "transparent" and "multi-wan" coming on dvserg?

I work with this (70-80% ready). But 2 months i really haven't free time :'(

andrew0401

I think we have the same/similar problem.

Squid and squidguard work. Havp works. But not together with havp as the parent proxy. We get

havp[22448]: (127.0.0.1) Invalid request from browser

when the above cache peer line is used.

Any more clues on what to try as I am now totally confused.

Regards

Andrew

dvserg

@andrew0401:

I think we have the same/similar problem.

Squid and squidguard work. Havp works. But not together with havp as the parent proxy. We get

havp[22448]: (127.0.0.1) Invalid request from browser

when the above cache peer line is used.

Any more clues on what to try as I am now totally confused.

Regards

Andrew

Post pls you havp config, squid 'cutom options' and 'upstream proxy' options

andrew0401

Upstream proxy - blank - not used

Custom

redirect_program /usr/local/bin/squidGuard -c /usr/local/etc/squidGuard/squidGuard.conf;redirector_bypass on;redirect_children 3;cache_peer 127.0.0.1 parent 3121 7 no

HAVP is now logging most entries to syslog - about 1 in 10 are either "could not send body to browser" or "Inavlid request from browser".

But Eicar test comes through no problem! I seem to either have havp working in isolation or as a parent proxy and it stops scanning.

Confused

Andrew

dvserg

cache_peer 127.0.0.1 parent 3121 7 no-query

havp mast have port 3121

andrew0401

havp is on 3121

also just realised that whilst havp is working as much as logging some (but not all reuests), squidguard and lightsquid have both stopped working!

At this stage not impressed with havp

Andrew

andrew0401

As suspected - removed Havp and lightsquid and squidguard started working again.

Has anyone managed to get this group of packages to work together and if so how?

Regards

Andrew

dvserg

HowTo use squid & HAVP

Scheme: {inet}->[HAVP]->[Squid cache]->{clients}

HAVP:

'Use external proxy interface' disable
'Proxy port' - select HAVP-proxy-port, different from the squid-proxy-port
'Parent proxy' leave empty

Squid:

disable upstream proxy
custom options Add (here 3121 - havp proxy port, change to you self)

cache_peer 127.0.0.1 parent 3121 7 no-query

(do not delete exists options)

andrew0401

This is exactly what I had - agree Havp & squid seemed to be working (though logging was irregular) but squidguard etc stopped working.

Regards

Andrew

dvserg

@andrew0401:

This is exactly what I had - agree Havp & squid seemed to be working (though logging was irregular) but squidguard etc stopped working.

Regards

Andrew

What squid Custom option you have ?

Seth

I'm seeing this as well

1.2.3-RC1 built on Mon Apr 13 16:35:28 EDT 2009
squid 2.6.21_09
squidGuard 1.3-2
Lightsquid 1.7.1
HAVP 0.88

Squid options


refresh_pattern guru.avg.com/.*\.(bin) 4320 100% 43200 reload-into-ims;
refresh_pattern windowsupdate.com/.*\.(cab|exe) 4320 100% 43200 reload-into-ims;
refresh_pattern download.microsoft.com/.*\.(cab|exe) 4320 100% 43200 reload-into-ims;
refresh_pattern au.download.windowsupdate.com/.*\.(cab|exe) 4320 100% 43200 reload-into-ims;
cache_peer 127.0.0.1 parent 3121 7 no-query;
redirect_program /usr/local/bin/squidGuard -c /usr/local/etc/squidGuard/squidGuard.conf;
redirector_bypass on;redirect_children 3

Thanks in advance
–Seth