Problems with configuring ClamAV Anti-Virus Integration Using C-ICAP on squid proxy server.
-
Hi!
I am having problems configuring ClamAV Anti-Virus Integration Using C-ICAP on squid proxy server.
I have set squid proxy server on two interfaces the LAN and OPENVPN plus I have activated the Transparent HTTP Proxy.
When I go to configure ClamAV Anti-Virus pfsense freezes, the internet connection no longer works and I have to restore the previous configuration to make it work again.
Question
is there something wrong with the proxy server configuration? Possibly attach screen shots. I apologize for the language I am Sicilian and I have a bit of difficulty Thanks -
Are you running out of memory? The SG-1100 is not expected to run Squid/Squidguard, pfBlocker and ClamAV. To do so you would need to tune the rules/lists very carefully.
Did you run freshclam to update the virus definitions?
What do the logs show?
Steve
-
This post is deleted! -
This post is deleted! -
This post is deleted! -
@stephenw10 said in Problems with configuring ClamAV Anti-Virus Integration Using C-ICAP on squid proxy server.:
freshclam
I made freshclam update in the tab in real time it gives me an error, I also tried to change the region from europe to canada and the clamav service as you can see from the screenshoot does not start.
I'm not running out of memory until 60% is tolerable
Question in Select customer information to forward to ClamAV what should I enter?
But do you have to activate the users?
Help me start the clam also because I have the premium subscription I still have this and pfbloker who is helping me a guy in the other post and then finally I can start working with customers thanks -
This post is deleted! -
That's just the key. There is no error, none of your packages show as red or yellow.
@antonio-briguglio said in Problems with configuring ClamAV Anti-Virus Integration Using C-ICAP on squid proxy server.:
I made freshclam update in the tab in real time it gives me an error,
What is the error?
@antonio-briguglio said in Problems with configuring ClamAV Anti-Virus Integration Using C-ICAP on squid proxy server.:
I have the premium subscription
That is not supported.
You realise that clamav can only scan traffic that is proxied? Your setup is only proxying http traffic. So any traffic that is https will not be scanned. Which is like 95% of all web traffic.
ClamAV really does almost nothing. You should just disable it.
Even if you do get this running it's going to run very badly on the SG-1100. You should be running something like the SG-5100 to cope with all those large packages.
Steve
-
@stephenw10 thank you :-)