Netgate Discussion Forum
    • Categories
    • Recent
    • Tags
    • Popular
    • Users
    • Search
    • Register
    • Login

    HAVP

    Scheduled Pinned Locked Moved pfSense Packages
    52 Posts 16 Posters 33.2k Views
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • M Offline
      mishou
      last edited by

      I had to change the url line from

      <menu>
      <name>Proxy HAVP</name>
      Services
      <url>/pkg_edit.php?xml=HAVP.xml&id=0</url>
      </menu>

      to

      <menu>
      <name>Proxy HAVP</name>
      Services
      <url>/pkg_edit.php?xml=havp.xml&id=0</url>
      </menu>

      When I wget them from your link it took them in lower case

      Mishou

      1 Reply Last reply Reply Quote 0
      • D Offline
        dvserg
        last edited by

        yes - need lower case

        SquidGuardDoc EN  RU Tutorial
        Localization ru_PFSense

        1 Reply Last reply Reply Quote 0
        • T Offline
          ToxIcon
          last edited by

          dvserg did you turn HAVP and CLAMAV into a pfSense packages?

          1 Reply Last reply Reply Quote 0
          • D Offline
            dvserg
            last edited by

            @ToxIcon:

            dvserg did you turn HAVP and CLAMAV into a pfSense packages?

            I work with this. I test for 1.2.2/freeBSD 7.1
            I need small time for all tests

            SquidGuardDoc EN  RU Tutorial
            Localization ru_PFSense

            1 Reply Last reply Reply Quote 0
            • D Offline
              dvserg
              last edited by

              HAVP - HTTP Antivirus package added to packages list.
              Pls test.

              SquidGuardDoc EN  RU Tutorial
              Localization ru_PFSense

              1 Reply Last reply Reply Quote 0
              • C Offline
                Cino
                last edited by

                How do you setup HAVP in transparent proxy mode? And correct me if i'm wrong, transparent proxy mode means I dont have to set the proxy settings in each client pc..

                thanks,

                Cino

                1 Reply Last reply Reply Quote 0
                • N Offline
                  n1ko
                  last edited by

                  Does HAVP work with squid? I found http://www.server-side.de/ideas.htm but does this apply to pfsense also?

                  1 Reply Last reply Reply Quote 0
                  • D Offline
                    dvserg
                    last edited by

                    @Cino:

                    How do you setup HAVP in transparent proxy mode? And correct me if i'm wrong, transparent proxy mode means I dont have to set the proxy settings in each client pc..

                    thanks,
                    Cino

                    Transparent proxy option now not ready. Will be in near time.

                    SquidGuardDoc EN  RU Tutorial
                    Localization ru_PFSense

                    1 Reply Last reply Reply Quote 0
                    • D Offline
                      dvserg
                      last edited by

                      @n1ko:

                      Does HAVP work with squid? I found http://www.server-side.de/ideas.htm but does this apply to pfsense also?

                      Havp will be work with squid. But before need test current variant havp.

                      SquidGuardDoc EN  RU Tutorial
                      Localization ru_PFSense

                      1 Reply Last reply Reply Quote 0
                      • L Offline
                        lordarcane
                        last edited by

                        This is absolutly great! When migrating to pfsense and removing our old proxy server that had havp+squid+squidguard i really missed the virus checking function that havp offered. Please continue working and add support for squid in transparent mode! Thank you for all the great work!

                        1 Reply Last reply Reply Quote 0
                        • D Offline
                          dvserg
                          last edited by

                          Update havp test - xml & inc in ZIP archive:
                          http://diskatel.narod.ru/pfSense/packages/havp/havp.zip

                          Changes:

                          • proxy mode are : standard, parent for squid, transparent, internal
                          • multiinterface
                          • work with user-defined rdr(mapping) from gui
                          • optimised RAM temp options

                          Store you old inc and xml from havp GUI
                          Download, unpack and copy to /usr/local/pkg
                          Check config HAVP from gui and Save.

                          –---------------------
                          Also new version with file AV-scanner. Possible, for example, scan Squid cache.
                          http://diskatel.narod.ru/pfSense/packages/havp/havpnew.zip

                          If errors or any other issues  - pls post here.

                          NOTE: This 'test only' version, not use for work systems.

                          SquidGuardDoc EN  RU Tutorial
                          Localization ru_PFSense

                          1 Reply Last reply Reply Quote 0
                          • C Offline
                            ColdFusion
                            last edited by

                            The file scanner seems to work, but I get this error in system log: php: : havp: Havp is installed but not started. Filter rules not created.

                            Squid=Transparent
                            Havp proxy mode=transparent
                            Havp proxy port=3129
                            ram disk enabled

                            Squid custom options=redirect_program /usr/local/bin/squidGuard -c /usr/local/etc/squidGuard/squidGuard.conf;redirector_bypass on;redirect_children 3

                            I did have cache peer 127.0.0.1 3129 0…etc etc...but now that disappeared also...but either way..I got:Havp is installed but not started. Filter rules not created.

                            1 Reply Last reply Reply Quote 0
                            • D Offline
                              dvserg
                              last edited by

                              Havp now updated as 'HAVP antivirus'
                              Please delete previous package and install new.
                              Changes: transparent proxy, parent for squid (autoconfigure), filter RDR rules, local files scanner, use clamd daemon (more quickly HAVP start, memory economy mode) - previous version used libclam.

                              SquidGuardDoc EN  RU Tutorial
                              Localization ru_PFSense

                              1 Reply Last reply Reply Quote 0
                              • T Offline
                                ToxIcon
                                last edited by

                                Thanks dvserg for put the time and giving us Havp

                                unfortunility I have a question can squid and Havp work together in transparent mode because i get this

                                php: : Havp: Squid is already configured as transparent proxy. Use 'Standard' proxy mode

                                I also try testing Havp  by using http://www.eicar.org/anti_virus_test_file.htm

                                and it did not stop the http or https files download my desktop av popup on all files

                                and their is nothing in the log files

                                1 Reply Last reply Reply Quote 0
                                • D Offline
                                  dvserg
                                  last edited by

                                  I tested HAVP transparent mode - and have some problem (i have bridged ifaces).
                                  This options declared but not worked ( rdr rule ).
                                  I hope in future to solve this problem.   :-\

                                  About squid - i success use squid(non transparent) > havp > inet on my system. Before only need check saquid cache (must use 'File scan').

                                  SquidGuardDoc EN  RU Tutorial
                                  Localization ru_PFSense

                                  1 Reply Last reply Reply Quote 0
                                  • K Offline
                                    kongar
                                    last edited by

                                    How to configure HAVP to use it with transparent SQUID?
                                    Or should I disable transparent in SQUID?

                                    1 Reply Last reply Reply Quote 0
                                    • D Offline
                                      dvserg
                                      last edited by

                                      @kongar:

                                      How to configure HAVP to use it with transparent SQUID?
                                      Or should I disable transparent in SQUID?

                                      Setup HAVP as 'ParentForSquid' mode
                                      Setup Squid as Transparent

                                      SquidGuardDoc EN  RU Tutorial
                                      Localization ru_PFSense

                                      1 Reply Last reply Reply Quote 0
                                      • K Offline
                                        kongar
                                        last edited by

                                        I did just like this, but eicar code didn't blocked (from the link above).
                                        What's wrong? How can I test that HAVP works?

                                        1 Reply Last reply Reply Quote 0
                                        • D Offline
                                          dvserg
                                          last edited by

                                          @kongar:

                                          I did just like this, but eicar code didn't blocked (from the link above).
                                          What's wrong? How can I test that HAVP works?

                                          • Update AV base (need wait some time)
                                          • Set HAVP to standard mode
                                          • Set Browser proxy settings > to HAVP_IP:PORT
                                          • Test eicar …. /* if not - it is havp problem */
                                          • Start scan squid cache with AV files scanner.
                                          • Set squid non transparent (uncheck transparent) + HAVP as Parent for squid;
                                          • Set Browser Proxy Settings > to squid_IP:PORT
                                          • Test eicar .... /* if not - havp-squid LINK problem */
                                          • Set squid as Transparent
                                          • Unset Browser proxy settings
                                          • Test eicar .... /* if not - squid TRANSPARENT problem */

                                          SquidGuardDoc EN  RU Tutorial
                                          Localization ru_PFSense

                                          1 Reply Last reply Reply Quote 0
                                          • C Offline
                                            Cino
                                            last edited by

                                            Dvserg,

                                            Can HAVP be used in transparent mode without using squid? I dont use squid but would be nice if HAVP can scan for viruses as I use the web without changing any settings to my browser.

                                            1 Reply Last reply Reply Quote 0
                                            • First post
                                              Last post
                                            Copyright 2025 Rubicon Communications LLC (Netgate). All rights reserved.