Netgate Discussion Forum
    • Categories
    • Recent
    • Tags
    • Popular
    • Users
    • Search
    • Register
    • Login

    How to configure HAVP

    Scheduled Pinned Locked Moved pfSense Packages
    66 Posts 10 Posters 63.4k Views
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • A
      akintemel
      last edited by

      Fisrt thank you very much for your reply… :)
      Ok i did it ..squid port is 3128 and in squid.conf file i changed the

      cache_peer 127.0.0.1 parent 3121 7 no-query

      and havp port i use the 3121 ..
      and tested again but still not working.in havp access.log ( /var/log/havp/access.log )  i see anything log file ..and i can download virus file in http://www.eicar.org/anti_virus_test_file.htm  this site.

      1 Reply Last reply Reply Quote 0
      • D
        dvserg
        last edited by

        @akintemel:

        Fisrt thank you very much for your reply… :)
        Ok i did it ..squid port is 3128 and in squid.conf file i changed the

        cache_peer 127.0.0.1 parent 3121 7 no-query

        and havp port i use the 3121 ..
        and tested again but still not working.in havp access.log ( /var/log/havp/access.log )  i see anything log file ..and i can download virus file in http://www.eicar.org/anti_virus_test_file.htm  this site.

        Via GUI Squid custom options add
        cache_peer 127.0.0.1 parent 3121 7 no-query
        and disable squid GUI parent proxy options

        SquidGuardDoc EN  RU Tutorial
        Localization ru_PFSense

        1 Reply Last reply Reply Quote 0
        • A
          akintemel
          last edited by

          Thank you very much now i can see log entri in havp access.log…buy the way how can i test it could you help me again please..

          Thank you very much again..  ;D

          1 Reply Last reply Reply Quote 0
          • D
            dvserg
            last edited by

            @akintemel:

            Thank you very much now i can see log entri in havp access.log…buy the way how can i test it could you help me again please..

            Thank you very much again..  ;D

            Look this
            http://www.eicar.org/anti_virus_test_file.htm

            View log via GUI
            Diagnostics: Execute command
            PHP Execute

            echo(
            file_get_contents("/var/log/havp/access.log")
            );
            

            SquidGuardDoc EN  RU Tutorial
            Localization ru_PFSense

            1 Reply Last reply Reply Quote 0
            • C
              cheesyboofs
              last edited by

              Sorry to hi-jack but how is "transparent" and "multi-wan" coming on dvserg?

              Author of pfSense themes:

              DARK-ORANGE

              CODE-RED

              1 Reply Last reply Reply Quote 0
              • D
                dvserg
                last edited by

                @cheesyboofs:

                Sorry to hi-jack but how is "transparent" and "multi-wan" coming on dvserg?

                I work with this (70-80% ready). But 2 months i really haven't free time  :'(

                SquidGuardDoc EN  RU Tutorial
                Localization ru_PFSense

                1 Reply Last reply Reply Quote 0
                • A
                  andrew0401
                  last edited by

                  I think we have the same/similar problem.

                  Squid and squidguard work.  Havp works.  But not together with havp as the parent proxy.  We get

                  havp[22448]: (127.0.0.1) Invalid request from browser

                  when the above cache peer line is used.

                  Any more clues on what to try as I am now totally confused.

                  Regards

                  Andrew

                  1 Reply Last reply Reply Quote 0
                  • D
                    dvserg
                    last edited by

                    @andrew0401:

                    I think we have the same/similar problem.

                    Squid and squidguard work.  Havp works.  But not together with havp as the parent proxy.  We get

                    havp[22448]: (127.0.0.1) Invalid request from browser

                    when the above cache peer line is used.

                    Any more clues on what to try as I am now totally confused.

                    Regards

                    Andrew

                    Post pls you havp config, squid 'cutom options' and 'upstream proxy' options

                    SquidGuardDoc EN  RU Tutorial
                    Localization ru_PFSense

                    1 Reply Last reply Reply Quote 0
                    • A
                      andrew0401
                      last edited by

                      Upstream proxy - blank - not used

                      Custom

                      redirect_program /usr/local/bin/squidGuard -c /usr/local/etc/squidGuard/squidGuard.conf;redirector_bypass on;redirect_children 3;cache_peer 127.0.0.1 parent 3121 7 no

                      HAVP is now logging most entries to syslog - about 1 in 10 are either "could not send body to browser" or "Inavlid request from browser".

                      But Eicar test comes through no problem!  I seem to either have havp working in isolation or as a parent proxy and it stops scanning.

                      Confused

                      Andrew

                      1 Reply Last reply Reply Quote 0
                      • D
                        dvserg
                        last edited by

                        cache_peer 127.0.0.1 parent 3121 7 no-query

                        havp mast have port 3121

                        SquidGuardDoc EN  RU Tutorial
                        Localization ru_PFSense

                        1 Reply Last reply Reply Quote 0
                        • A
                          andrew0401
                          last edited by

                          havp is on 3121

                          also just realised that whilst havp is working as much as logging some (but not all reuests), squidguard and lightsquid have both stopped working!

                          At this stage not impressed with havp

                          Andrew

                          1 Reply Last reply Reply Quote 0
                          • A
                            andrew0401
                            last edited by

                            As suspected - removed Havp and lightsquid and squidguard started working again.

                            Has anyone managed to get this group of packages to work together and if so how?

                            Regards

                            Andrew

                            1 Reply Last reply Reply Quote 0
                            • D
                              dvserg
                              last edited by

                              HowTo use squid & HAVP

                              Scheme: {inet}->[HAVP]->[Squid cache]->{clients}
                              

                              HAVP:

                              • 'Use external proxy interface' disable
                              • 'Proxy port' - select HAVP-proxy-port, different from the squid-proxy-port
                              • 'Parent proxy' leave empty

                              Squid:

                              • disable upstream proxy
                              • custom options Add (here 3121 - havp proxy port, change to you self)
                              cache_peer 127.0.0.1 parent 3121 7 no-query
                              

                              (do not delete exists options)

                              SquidGuardDoc EN  RU Tutorial
                              Localization ru_PFSense

                              1 Reply Last reply Reply Quote 0
                              • A
                                andrew0401
                                last edited by

                                This is exactly what I had - agree Havp & squid seemed to be working (though logging was irregular) but squidguard etc stopped working.

                                Regards

                                Andrew

                                1 Reply Last reply Reply Quote 0
                                • D
                                  dvserg
                                  last edited by

                                  @andrew0401:

                                  This is exactly what I had - agree Havp & squid seemed to be working (though logging was irregular) but squidguard etc stopped working.

                                  Regards

                                  Andrew

                                  What squid Custom option you have ?

                                  SquidGuardDoc EN  RU Tutorial
                                  Localization ru_PFSense

                                  1 Reply Last reply Reply Quote 0
                                  • S
                                    Seth
                                    last edited by

                                    I'm seeing this as well

                                    1.2.3-RC1 built on Mon Apr 13 16:35:28 EDT 2009
                                    squid 2.6.21_09
                                    squidGuard 1.3-2
                                    Lightsquid 1.7.1
                                    HAVP 0.88

                                    Squid options

                                    
                                    refresh_pattern guru.avg.com/.*\.(bin) 4320 100% 43200 reload-into-ims;
                                    refresh_pattern windowsupdate.com/.*\.(cab|exe) 4320 100% 43200 reload-into-ims;
                                    refresh_pattern download.microsoft.com/.*\.(cab|exe) 4320 100% 43200 reload-into-ims;
                                    refresh_pattern au.download.windowsupdate.com/.*\.(cab|exe) 4320 100% 43200 reload-into-ims;
                                    cache_peer 127.0.0.1 parent 3121 7 no-query;
                                    redirect_program /usr/local/bin/squidGuard -c /usr/local/etc/squidGuard/squidGuard.conf;
                                    redirector_bypass on;redirect_children 3
                                    
                                    

                                    Thanks in advance
                                    –Seth

                                    1 Reply Last reply Reply Quote 0
                                    • First post
                                      Last post
                                    Copyright 2025 Rubicon Communications LLC (Netgate). All rights reserved.