Anti virus Fails eicar test file

[doktornotor]

The configuration in the tabs is most likely not what the real configuration is. Wipe all those textareas and save. Until next version (https://github.com/pfsense/pfsense-packages/pull/1088), any debugging of this is a complete waste of time.

[firefox]

i have version 0.3.8
when is this  version Is distributed ?

[Netizen1]

@firefox:

i have version 0.3.8
when is this  version Is distributed ?

As soon as the pull request doktornotor quoted gets approved and merged… no ETA at this point

[doktornotor]

Try with 0.3.9.1

[firefox]

After the update, and after it runs
Still Fails

it this website ?

http://www.eicar.org/85-0-Download.html

i try to download this files
and they are downloaded
no any virus Message

[doktornotor]

Clear your browser cache. All I can suggest. When it's cached locally, won't hit Squid at all.

[firefox]

i  Clear my browser cache
and try from another computer

and just delete squid cache

still cant see the virus

Could be
Something in the settings squid

[doktornotor]

Dude. This just works, as shown on the screenshots above.

• The ACLs have no relevance as long as you keep the Allow Users on Interface checked.
• The Traffic Mgmt is totally irrelevant

The only relevant things here is that

• Antivirus is enabled an running
• The file is not cached locally by the browser
• The request hits the proxy (i.e., your browser is configured to use the proxy)

Check the logs to see whether that requests goes to Squid or not. Its shown realtime. Use the damned logs. They are there for a reason.

[firefox]

The only relevant things here is that

• Antivirus is enabled an running
• The file is not cached locally by the browser
• The request hits the proxy (i.e., your browser is configured to use the proxy)

Antivirus is enabled an running – yes
The file is not cached locally by the browser -- How do I check it ?
The request hits the proxy (i.e., your browser is configured to use the proxy) yes

Check the logs to see whether that requests goes to Squid or not. Its shown realtime. Use the damned logs. They are there for a reason.

real time dont show notting
i try my ip

what is

damned logs

dont see this tab


[doktornotor]

Auto-Detect proxy does absolutely NOTHING useful without DHCP/DNS/WPAD configuration. Unless Squid is configured as transparent, those requests will not ever hit the proxy. Which very much corresponds with your observation that "real time dont show notting".

[firefox]

Auto-Detect proxy does absolutely NOTHING useful without DHCP/DNS/WPAD configuration

It was on "use system proxy settings"
I changed it
I wanted to see if that would help

Unless Squid is configured as transparent, those requests will not ever hit the proxy.

squid not configured as transparent (I tried it – There was no Internet access)

Which very much corresponds with your observation that "real time dont show notting

how do i make it work
it work before (dont remember the last time I checked, the date I mean)

what is

damned logs

where i can see it ?

[doktornotor]

Kindly explicitly point your browser to you pfSense LAN IP port 3128 in the proxy settings. Proxy autoconfiguration will not work without setting up things as mentioned above.

[firefox]

like this ?


[doktornotor]

No, NOT like this. You cannot leave the field before the port empty!!!

[firefox]

You cannot leave the field before the port empty!!!

What should be listed there ?

Thanks for your help and patience

[doktornotor]

@firefox:

You cannot leave the field before the port empty!!!

What should be listed there ?

Urgh!!!! I already answered that question!!!

@doktornotor:

Kindly explicitly point your browser to your pfSense LAN IP port 3128 in the proxy settings.

[firefox]

i did it but
when it was like that
i had no internet access
not even to the pfsense 192.168.0.1


[doktornotor]

OK. I seriously do NOT have time for this any more. Maybe someone else has the patience to explain how to configure a proxy in browser in 2-pages thread. I don't any more. This gets hazardous to my health and mental sanity.

FUCKING HELL: Type the IP adress there!!! Of the pfSense LAN. "pfSense LAN IP" is not a valid IP address!!! WTH!!!!!!!!!!!  Google how IP address looks if unsure!

:( >:( >:( >:( >:( >:( >:( >:( >:( >:(

[firefox]

It works finally

Thank you

Before
I did not have to write this information,
And it worked

Anyway
Thanks again

[doktornotor]