Netgate Discussion Forum
    • Categories
    • Recent
    • Tags
    • Popular
    • Users
    • Search
    • Register
    • Login

    Anti virus Fails eicar test file

    Scheduled Pinned Locked Moved Cache/Proxy
    21 Posts 3 Posters 8.2k Views
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • F
      firefox
      last edited by

      i  Clear my browser cache
      and try from another computer

      and just delete squid cache

      still cant see the virus

      Could be
      Something in the settings squid

      home.plex_-Proxy_Server_Access_Control-_2015-10-10_14.18.46.png
      home.plex_-Proxy_Server_Access_Control-_2015-10-10_14.18.46.png_thumb
      home.plex_-Proxy_server_Traffic_Management-_2015-10-10_14.18.07.png
      home.plex_-Proxy_server_Traffic_Management-_2015-10-10_14.18.07.png_thumb

      1 Reply Last reply Reply Quote 0
      • D
        doktornotor Banned
        last edited by

        Dude. This just works, as shown on the screenshots above.

        • The ACLs have no relevance as long as you keep the Allow Users on Interface checked.
        • The Traffic Mgmt is totally irrelevant

        The only relevant things here is that

        • Antivirus is enabled an running
        • The file is not cached locally by the browser
        • The request hits the proxy (i.e., your browser is configured to use the proxy)

        Check the logs to see whether that requests goes to Squid or not. Its shown realtime. Use the damned logs. They are there for a reason.

        1 Reply Last reply Reply Quote 0
        • F
          firefox
          last edited by

          The only relevant things here is that

          • Antivirus is enabled an running
          • The file is not cached locally by the browser
          • The request hits the proxy (i.e., your browser is configured to use the proxy)

          Antivirus is enabled an running – yes
          The file is not cached locally by the browser -- How do I check it ?
          The request hits the proxy (i.e., your browser is configured to use the proxy) yes

          Check the logs to see whether that requests goes to Squid or not. Its shown realtime. Use the damned logs. They are there for a reason.

          real time dont show notting
          i try my ip

          what is

          damned logs

          dont see this tab

          ![Screenshot from 2015-10-10 15:20:20.png](/public/imported_attachments/1/Screenshot from 2015-10-10 15:20:20.png)
          ![Screenshot from 2015-10-10 15:20:20.png_thumb](/public/imported_attachments/1/Screenshot from 2015-10-10 15:20:20.png_thumb)
          ![Screenshot from 2015-10-10 15:27:39.png](/public/imported_attachments/1/Screenshot from 2015-10-10 15:27:39.png)
          ![Screenshot from 2015-10-10 15:27:39.png_thumb](/public/imported_attachments/1/Screenshot from 2015-10-10 15:27:39.png_thumb)
          ![Screenshot from 2015-10-10 15:29:03.png](/public/imported_attachments/1/Screenshot from 2015-10-10 15:29:03.png)
          ![Screenshot from 2015-10-10 15:29:03.png_thumb](/public/imported_attachments/1/Screenshot from 2015-10-10 15:29:03.png_thumb)
          ![Screenshot from 2015-10-10 15:31:08.png](/public/imported_attachments/1/Screenshot from 2015-10-10 15:31:08.png)
          ![Screenshot from 2015-10-10 15:31:08.png_thumb](/public/imported_attachments/1/Screenshot from 2015-10-10 15:31:08.png_thumb)
          ![Screenshot from 2015-10-10 15:33:02.png](/public/imported_attachments/1/Screenshot from 2015-10-10 15:33:02.png)
          ![Screenshot from 2015-10-10 15:33:02.png_thumb](/public/imported_attachments/1/Screenshot from 2015-10-10 15:33:02.png_thumb)

          1 Reply Last reply Reply Quote 0
          • D
            doktornotor Banned
            last edited by

            Auto-Detect proxy does absolutely NOTHING useful without DHCP/DNS/WPAD configuration. Unless Squid is configured as transparent, those requests will not ever hit the proxy. Which very much corresponds with your observation that "real time dont show notting".

            1 Reply Last reply Reply Quote 0
            • F
              firefox
              last edited by

              Auto-Detect proxy does absolutely NOTHING useful without DHCP/DNS/WPAD configuration

              It was on "use system proxy settings"
              I changed it
              I wanted to see if that would help

              Unless Squid is configured as transparent, those requests will not ever hit the proxy.

              squid not configured as transparent (I tried it – There was no Internet access)

              Which very much corresponds with your observation that "real time dont show notting

              how do i make it work
              it work before (dont remember the last time I checked, the date I mean)

              what is

              damned logs

              where i can see it ?

              1 Reply Last reply Reply Quote 0
              • D
                doktornotor Banned
                last edited by

                Kindly explicitly point your browser to you pfSense LAN IP port 3128 in the proxy settings. Proxy autoconfiguration will not work without setting up things as mentioned above.

                1 Reply Last reply Reply Quote 0
                • F
                  firefox
                  last edited by

                  like this ?

                  ![Screenshot from 2015-10-10 16:12:18.png](/public/imported_attachments/1/Screenshot from 2015-10-10 16:12:18.png)
                  ![Screenshot from 2015-10-10 16:12:18.png_thumb](/public/imported_attachments/1/Screenshot from 2015-10-10 16:12:18.png_thumb)

                  1 Reply Last reply Reply Quote 0
                  • D
                    doktornotor Banned
                    last edited by

                    No, NOT like this. You cannot leave the field before the port empty!!!

                    1 Reply Last reply Reply Quote 0
                    • F
                      firefox
                      last edited by

                      You cannot leave the field before the port empty!!!

                      What should be listed there ?

                      Thanks for your help and patience

                      1 Reply Last reply Reply Quote 0
                      • D
                        doktornotor Banned
                        last edited by

                        @firefox:

                        You cannot leave the field before the port empty!!!

                        What should be listed there ?

                        Urgh!!!! I already answered that question!!!

                        @doktornotor:

                        Kindly explicitly point your browser to your pfSense LAN IP port 3128 in the proxy settings.

                        1 Reply Last reply Reply Quote 0
                        • F
                          firefox
                          last edited by

                          i did it but
                          when it was like that
                          i had no internet access
                          not even to the pfsense 192.168.0.1

                          ![Screenshot from 2015-10-10 16:43:30.png_thumb](/public/imported_attachments/1/Screenshot from 2015-10-10 16:43:30.png_thumb)
                          ![Screenshot from 2015-10-10 16:43:30.png](/public/imported_attachments/1/Screenshot from 2015-10-10 16:43:30.png)

                          1 Reply Last reply Reply Quote 0
                          • D
                            doktornotor Banned
                            last edited by

                            OK. I seriously do NOT have time for this any more. Maybe someone else has the patience to explain how to configure a proxy in browser in 2-pages thread. I don't any more. This gets hazardous to my health and mental sanity.

                            FUCKING HELL: Type the IP adress there!!! Of the pfSense LAN. "pfSense LAN IP" is not a valid IP address!!! WTH!!!!!!!!!!!  Google how IP address looks if unsure!

                            :( >:( >:( >:( >:( >:( >:( >:( >:( >:(

                            1 Reply Last reply Reply Quote 0
                            • F
                              firefox
                              last edited by

                              It works finally

                              Thank you

                              Before
                              I did not have to write this information,
                              And it worked

                              Anyway
                              Thanks again

                              1 Reply Last reply Reply Quote 0
                              • D
                                doktornotor Banned
                                last edited by

                                1 Reply Last reply Reply Quote 0
                                • First post
                                  Last post
                                Copyright 2025 Rubicon Communications LLC (Netgate). All rights reserved.