HAVP not blocking EICAR test downloads



  • I haven't been running pfSense for long. I've installed Http AntiVirus Proxy. I wanted to test that it is working so I went to http://www.eicar.org/85-0-Download.html and downloaded some EICAR test files, expecting them to be blocked. But they weren't blocked which makes me suspicious that the antivirus isn't working.

    On the antivirus General page both Http Antivirus Proxy and Antivirus Server say they're running.

    Update status is:

    Database         Date            Size      Ver.   Signatures Builder
    main.cvd            2013.09.17      61.72 M    55      2424225    neo
    bytecode.cvd        2014.02.05      0.06 M    236      43          dgoddard
    daily.cld          2014.04.06      53.25 M    18747    87169      neo

    Any ideas what's going on?



  • How are you running HAVP? Is it bound to the loopback or a phyical interface and are you redirecting traffice to it?


Log in to reply