pfsense 2.1.1-RELEASE (i386)
squid3-dev
squidGuard-squid3

The paths for clwarn.cgi (/usr/local/www/clwarn.cgi) and pearl (/usr/pbi/squid-i386/bin/) seem to be ok. I edited the clwarn.cgi file to point to pearl at #!/usr/pbi/squid-i386/bin/perl to avoid using symlinks.

I think maybe it's my syntax for the squid-clam.conf?

I changed the names for this example but I am using the .dom extension for the pfsense firewall name and set the redirect parameter in squidclamav to http://somename.somedomain.dom/usr/local/www/clwarn.cgi and I tried downloading the test file at eicar.org which resulted in a 404 page.

The address bar of the browser is showing the passed variables…

http://somename.somedomain.dom/usr/local/www/clwarn.cgi?url=http://www.eicar.org/download/eicar.com.txt&source=192.168.1.104&user=-&virus=stream:%20Eicar-Test-Signature%20FOUND

The redirect is trying but dies at this point and only a 404 page is shown and not one with the virus info.

In opera I got a failed DNS lookup up on somename.somedomain.dom so I tried using the IP to redirect 192.168.1.1//usr/local/www/clwarn.cgi. Now I get the 404 error an no passed parameters show in the address bar of the browser.

Any help would be greatly appreciated.

TIA,
RandyN