Netgate Discussion Forum
    • Categories
    • Recent
    • Tags
    • Popular
    • Users
    • Search
    • Register
    • Login

    HAVP

    Scheduled Pinned Locked Moved pfSense Packages
    52 Posts 16 Posters 33.2k Views
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • D Offline
      dvserg
      last edited by

      Ok. I wiil prepare package & check ports for FreeBSD 7/7.1

      SquidGuardDoc EN  RU Tutorial
      Localization ru_PFSense

      1 Reply Last reply Reply Quote 0
      • M Offline
        mishou
        last edited by

        I had to change the url line from

        <menu>
        <name>Proxy HAVP</name>
        Services
        <url>/pkg_edit.php?xml=HAVP.xml&id=0</url>
        </menu>

        to

        <menu>
        <name>Proxy HAVP</name>
        Services
        <url>/pkg_edit.php?xml=havp.xml&id=0</url>
        </menu>

        When I wget them from your link it took them in lower case

        Mishou

        1 Reply Last reply Reply Quote 0
        • D Offline
          dvserg
          last edited by

          yes - need lower case

          SquidGuardDoc EN  RU Tutorial
          Localization ru_PFSense

          1 Reply Last reply Reply Quote 0
          • T Offline
            ToxIcon
            last edited by

            dvserg did you turn HAVP and CLAMAV into a pfSense packages?

            1 Reply Last reply Reply Quote 0
            • D Offline
              dvserg
              last edited by

              @ToxIcon:

              dvserg did you turn HAVP and CLAMAV into a pfSense packages?

              I work with this. I test for 1.2.2/freeBSD 7.1
              I need small time for all tests

              SquidGuardDoc EN  RU Tutorial
              Localization ru_PFSense

              1 Reply Last reply Reply Quote 0
              • D Offline
                dvserg
                last edited by

                HAVP - HTTP Antivirus package added to packages list.
                Pls test.

                SquidGuardDoc EN  RU Tutorial
                Localization ru_PFSense

                1 Reply Last reply Reply Quote 0
                • C Offline
                  Cino
                  last edited by

                  How do you setup HAVP in transparent proxy mode? And correct me if i'm wrong, transparent proxy mode means I dont have to set the proxy settings in each client pc..

                  thanks,

                  Cino

                  1 Reply Last reply Reply Quote 0
                  • N Offline
                    n1ko
                    last edited by

                    Does HAVP work with squid? I found http://www.server-side.de/ideas.htm but does this apply to pfsense also?

                    1 Reply Last reply Reply Quote 0
                    • D Offline
                      dvserg
                      last edited by

                      @Cino:

                      How do you setup HAVP in transparent proxy mode? And correct me if i'm wrong, transparent proxy mode means I dont have to set the proxy settings in each client pc..

                      thanks,
                      Cino

                      Transparent proxy option now not ready. Will be in near time.

                      SquidGuardDoc EN  RU Tutorial
                      Localization ru_PFSense

                      1 Reply Last reply Reply Quote 0
                      • D Offline
                        dvserg
                        last edited by

                        @n1ko:

                        Does HAVP work with squid? I found http://www.server-side.de/ideas.htm but does this apply to pfsense also?

                        Havp will be work with squid. But before need test current variant havp.

                        SquidGuardDoc EN  RU Tutorial
                        Localization ru_PFSense

                        1 Reply Last reply Reply Quote 0
                        • L Offline
                          lordarcane
                          last edited by

                          This is absolutly great! When migrating to pfsense and removing our old proxy server that had havp+squid+squidguard i really missed the virus checking function that havp offered. Please continue working and add support for squid in transparent mode! Thank you for all the great work!

                          1 Reply Last reply Reply Quote 0
                          • D Offline
                            dvserg
                            last edited by

                            Update havp test - xml & inc in ZIP archive:
                            http://diskatel.narod.ru/pfSense/packages/havp/havp.zip

                            Changes:

                            • proxy mode are : standard, parent for squid, transparent, internal
                            • multiinterface
                            • work with user-defined rdr(mapping) from gui
                            • optimised RAM temp options

                            Store you old inc and xml from havp GUI
                            Download, unpack and copy to /usr/local/pkg
                            Check config HAVP from gui and Save.

                            –---------------------
                            Also new version with file AV-scanner. Possible, for example, scan Squid cache.
                            http://diskatel.narod.ru/pfSense/packages/havp/havpnew.zip

                            If errors or any other issues  - pls post here.

                            NOTE: This 'test only' version, not use for work systems.

                            SquidGuardDoc EN  RU Tutorial
                            Localization ru_PFSense

                            1 Reply Last reply Reply Quote 0
                            • C Offline
                              ColdFusion
                              last edited by

                              The file scanner seems to work, but I get this error in system log: php: : havp: Havp is installed but not started. Filter rules not created.

                              Squid=Transparent
                              Havp proxy mode=transparent
                              Havp proxy port=3129
                              ram disk enabled

                              Squid custom options=redirect_program /usr/local/bin/squidGuard -c /usr/local/etc/squidGuard/squidGuard.conf;redirector_bypass on;redirect_children 3

                              I did have cache peer 127.0.0.1 3129 0…etc etc...but now that disappeared also...but either way..I got:Havp is installed but not started. Filter rules not created.

                              1 Reply Last reply Reply Quote 0
                              • D Offline
                                dvserg
                                last edited by

                                Havp now updated as 'HAVP antivirus'
                                Please delete previous package and install new.
                                Changes: transparent proxy, parent for squid (autoconfigure), filter RDR rules, local files scanner, use clamd daemon (more quickly HAVP start, memory economy mode) - previous version used libclam.

                                SquidGuardDoc EN  RU Tutorial
                                Localization ru_PFSense

                                1 Reply Last reply Reply Quote 0
                                • T Offline
                                  ToxIcon
                                  last edited by

                                  Thanks dvserg for put the time and giving us Havp

                                  unfortunility I have a question can squid and Havp work together in transparent mode because i get this

                                  php: : Havp: Squid is already configured as transparent proxy. Use 'Standard' proxy mode

                                  I also try testing Havp  by using http://www.eicar.org/anti_virus_test_file.htm

                                  and it did not stop the http or https files download my desktop av popup on all files

                                  and their is nothing in the log files

                                  1 Reply Last reply Reply Quote 0
                                  • D Offline
                                    dvserg
                                    last edited by

                                    I tested HAVP transparent mode - and have some problem (i have bridged ifaces).
                                    This options declared but not worked ( rdr rule ).
                                    I hope in future to solve this problem.   :-\

                                    About squid - i success use squid(non transparent) > havp > inet on my system. Before only need check saquid cache (must use 'File scan').

                                    SquidGuardDoc EN  RU Tutorial
                                    Localization ru_PFSense

                                    1 Reply Last reply Reply Quote 0
                                    • K Offline
                                      kongar
                                      last edited by

                                      How to configure HAVP to use it with transparent SQUID?
                                      Or should I disable transparent in SQUID?

                                      1 Reply Last reply Reply Quote 0
                                      • D Offline
                                        dvserg
                                        last edited by

                                        @kongar:

                                        How to configure HAVP to use it with transparent SQUID?
                                        Or should I disable transparent in SQUID?

                                        Setup HAVP as 'ParentForSquid' mode
                                        Setup Squid as Transparent

                                        SquidGuardDoc EN  RU Tutorial
                                        Localization ru_PFSense

                                        1 Reply Last reply Reply Quote 0
                                        • K Offline
                                          kongar
                                          last edited by

                                          I did just like this, but eicar code didn't blocked (from the link above).
                                          What's wrong? How can I test that HAVP works?

                                          1 Reply Last reply Reply Quote 0
                                          • D Offline
                                            dvserg
                                            last edited by

                                            @kongar:

                                            I did just like this, but eicar code didn't blocked (from the link above).
                                            What's wrong? How can I test that HAVP works?

                                            • Update AV base (need wait some time)
                                            • Set HAVP to standard mode
                                            • Set Browser proxy settings > to HAVP_IP:PORT
                                            • Test eicar …. /* if not - it is havp problem */
                                            • Start scan squid cache with AV files scanner.
                                            • Set squid non transparent (uncheck transparent) + HAVP as Parent for squid;
                                            • Set Browser Proxy Settings > to squid_IP:PORT
                                            • Test eicar .... /* if not - havp-squid LINK problem */
                                            • Set squid as Transparent
                                            • Unset Browser proxy settings
                                            • Test eicar .... /* if not - squid TRANSPARENT problem */

                                            SquidGuardDoc EN  RU Tutorial
                                            Localization ru_PFSense

                                            1 Reply Last reply Reply Quote 0
                                            • First post
                                              Last post
                                            Copyright 2025 Rubicon Communications LLC (Netgate). All rights reserved.