Netgate Discussion Forum
    • Categories
    • Recent
    • Tags
    • Popular
    • Users
    • Search
    • Register
    • Login

    Anti virus Fails eicar test file

    Scheduled Pinned Locked Moved Cache/Proxy
    21 Posts 3 Posters 8.4k Views
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • D
      doktornotor Banned
      last edited by

      Dude. This just works, as shown on the screenshots above.

      • The ACLs have no relevance as long as you keep the Allow Users on Interface checked.
      • The Traffic Mgmt is totally irrelevant

      The only relevant things here is that

      • Antivirus is enabled an running
      • The file is not cached locally by the browser
      • The request hits the proxy (i.e., your browser is configured to use the proxy)

      Check the logs to see whether that requests goes to Squid or not. Its shown realtime. Use the damned logs. They are there for a reason.

      1 Reply Last reply Reply Quote 0
      • F
        firefox
        last edited by

        The only relevant things here is that

        • Antivirus is enabled an running
        • The file is not cached locally by the browser
        • The request hits the proxy (i.e., your browser is configured to use the proxy)

        Antivirus is enabled an running – yes
        The file is not cached locally by the browser -- How do I check it ?
        The request hits the proxy (i.e., your browser is configured to use the proxy) yes

        Check the logs to see whether that requests goes to Squid or not. Its shown realtime. Use the damned logs. They are there for a reason.

        real time dont show notting
        i try my ip

        what is

        damned logs

        dont see this tab

        ![Screenshot from 2015-10-10 15:20:20.png](/public/imported_attachments/1/Screenshot from 2015-10-10 15:20:20.png)
        ![Screenshot from 2015-10-10 15:20:20.png_thumb](/public/imported_attachments/1/Screenshot from 2015-10-10 15:20:20.png_thumb)
        ![Screenshot from 2015-10-10 15:27:39.png](/public/imported_attachments/1/Screenshot from 2015-10-10 15:27:39.png)
        ![Screenshot from 2015-10-10 15:27:39.png_thumb](/public/imported_attachments/1/Screenshot from 2015-10-10 15:27:39.png_thumb)
        ![Screenshot from 2015-10-10 15:29:03.png](/public/imported_attachments/1/Screenshot from 2015-10-10 15:29:03.png)
        ![Screenshot from 2015-10-10 15:29:03.png_thumb](/public/imported_attachments/1/Screenshot from 2015-10-10 15:29:03.png_thumb)
        ![Screenshot from 2015-10-10 15:31:08.png](/public/imported_attachments/1/Screenshot from 2015-10-10 15:31:08.png)
        ![Screenshot from 2015-10-10 15:31:08.png_thumb](/public/imported_attachments/1/Screenshot from 2015-10-10 15:31:08.png_thumb)
        ![Screenshot from 2015-10-10 15:33:02.png](/public/imported_attachments/1/Screenshot from 2015-10-10 15:33:02.png)
        ![Screenshot from 2015-10-10 15:33:02.png_thumb](/public/imported_attachments/1/Screenshot from 2015-10-10 15:33:02.png_thumb)

        1 Reply Last reply Reply Quote 0
        • D
          doktornotor Banned
          last edited by

          Auto-Detect proxy does absolutely NOTHING useful without DHCP/DNS/WPAD configuration. Unless Squid is configured as transparent, those requests will not ever hit the proxy. Which very much corresponds with your observation that "real time dont show notting".

          1 Reply Last reply Reply Quote 0
          • F
            firefox
            last edited by

            Auto-Detect proxy does absolutely NOTHING useful without DHCP/DNS/WPAD configuration

            It was on "use system proxy settings"
            I changed it
            I wanted to see if that would help

            Unless Squid is configured as transparent, those requests will not ever hit the proxy.

            squid not configured as transparent (I tried it – There was no Internet access)

            Which very much corresponds with your observation that "real time dont show notting

            how do i make it work
            it work before (dont remember the last time I checked, the date I mean)

            what is

            damned logs

            where i can see it ?

            1 Reply Last reply Reply Quote 0
            • D
              doktornotor Banned
              last edited by

              Kindly explicitly point your browser to you pfSense LAN IP port 3128 in the proxy settings. Proxy autoconfiguration will not work without setting up things as mentioned above.

              1 Reply Last reply Reply Quote 0
              • F
                firefox
                last edited by

                like this ?

                ![Screenshot from 2015-10-10 16:12:18.png](/public/imported_attachments/1/Screenshot from 2015-10-10 16:12:18.png)
                ![Screenshot from 2015-10-10 16:12:18.png_thumb](/public/imported_attachments/1/Screenshot from 2015-10-10 16:12:18.png_thumb)

                1 Reply Last reply Reply Quote 0
                • D
                  doktornotor Banned
                  last edited by

                  No, NOT like this. You cannot leave the field before the port empty!!!

                  1 Reply Last reply Reply Quote 0
                  • F
                    firefox
                    last edited by

                    You cannot leave the field before the port empty!!!

                    What should be listed there ?

                    Thanks for your help and patience

                    1 Reply Last reply Reply Quote 0
                    • D
                      doktornotor Banned
                      last edited by

                      @firefox:

                      You cannot leave the field before the port empty!!!

                      What should be listed there ?

                      Urgh!!!! I already answered that question!!!

                      @doktornotor:

                      Kindly explicitly point your browser to your pfSense LAN IP port 3128 in the proxy settings.

                      1 Reply Last reply Reply Quote 0
                      • F
                        firefox
                        last edited by

                        i did it but
                        when it was like that
                        i had no internet access
                        not even to the pfsense 192.168.0.1

                        ![Screenshot from 2015-10-10 16:43:30.png_thumb](/public/imported_attachments/1/Screenshot from 2015-10-10 16:43:30.png_thumb)
                        ![Screenshot from 2015-10-10 16:43:30.png](/public/imported_attachments/1/Screenshot from 2015-10-10 16:43:30.png)

                        1 Reply Last reply Reply Quote 0
                        • D
                          doktornotor Banned
                          last edited by

                          OK. I seriously do NOT have time for this any more. Maybe someone else has the patience to explain how to configure a proxy in browser in 2-pages thread. I don't any more. This gets hazardous to my health and mental sanity.

                          FUCKING HELL: Type the IP adress there!!! Of the pfSense LAN. "pfSense LAN IP" is not a valid IP address!!! WTH!!!!!!!!!!!  Google how IP address looks if unsure!

                          :( >:( >:( >:( >:( >:( >:( >:( >:( >:(

                          1 Reply Last reply Reply Quote 0
                          • F
                            firefox
                            last edited by

                            It works finally

                            Thank you

                            Before
                            I did not have to write this information,
                            And it worked

                            Anyway
                            Thanks again

                            1 Reply Last reply Reply Quote 0
                            • D
                              doktornotor Banned
                              last edited by

                              1 Reply Last reply Reply Quote 0
                              • First post
                                Last post
                              Copyright 2025 Rubicon Communications LLC (Netgate). All rights reserved.