Netgate Discussion Forum
    • Categories
    • Recent
    • Tags
    • Popular
    • Users
    • Search
    • Register
    • Login

    Squid, clamAV config file

    Scheduled Pinned Locked Moved pfSense Packages
    3 Posts 3 Posters 1.5k Views
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • Mr_JinXM Offline
      Mr_JinX
      last edited by

      Hi,

      I'm using squid with clam av package, however when a users downloads a virusĀ  (eicar) the url of the blocked page uses the old hostname of the box, when i change it to the IP 192.168.200.1 manually the blocked page works fine,

      Does anyone know which config holds the url to visit when a site gets blocked, please

      Example:

      https://hostname.domain.com/squid_clwarn.php?url=http://www.eicar.org/download/eicar.com.txt&source=192.168.200.21&user=-&virus=stream:%20Win.Test.EICAR_NDB-1%20FOUND

      NOTE: hostname part is using the wrong fqdn (i've checked DNS and the address its using does not resolve to what its going to

      Would like it to do to:

      https://192.168.200.1/squid_clwarn.php?url=http://www.eicar.org/download/eicar.com.txt&source=192.168.200.21&user=-&virus=stream:%20Win.Test.EICAR_NDB-1%20FOUND

      NOTE: 192.168.200.1 the address of the internal firewall (LAN interface)

      1 Reply Last reply Reply Quote 0
      • R Offline
        raules
        last edited by

        I Have the same error. I change de hostname of server and when I found a virus this send to the warning page with the old Hostname. Example:
        https://hostnameOLD.domain.com:443/squid_clwarn.php?url=http://www.eicar.org/download/eicar.com&source=192.X.X.X&user=-&virus=stream:%20Eicar-Test-Signature%20FOUND

        When I change the hostmane on string for the new hostname I can see the warning page. What can I do?

        AnyOne solved this error?

        1 Reply Last reply Reply Quote 0
        • PippinP Offline
          Pippin
          last edited by

          Yes, here same:
          https://forum.pfsense.org/index.php?topic=115323.0

          I gloomily came to the ironic conclusion that if you take a highly intelligent person and give them the best possible, elite education, then you will most likely wind up with an academic who is completely impervious to reality.
          Halton Arp

          1 Reply Last reply Reply Quote 0
          • First post
            Last post
          Copyright 2025 Rubicon Communications LLC (Netgate). All rights reserved.