« Posts tagged antivirus

Squid proxy + Antivirus

In an earlier post I've told you how to use an eebox as a cache proxy and content filter...Today I've added also an antivirus control with HAVP ( http://www.server-side.de/ ) and ClamAV ( http://www.clamav.net )

let's go:

me@linuxbox# apt-get update && apt-get install havp

Now we need to configure havp so open /etc/havp/havp.config and edit these values:

PARENTPROXY localhost
PARENTPORT 8081
FORWARDED_IP true
BIND_ADDRESS 127.0.0.1
TEMPLATEPATH /etc/havp/templates/"yourlang"

These are "sufficient" so read the manual and config HAVP to fit your needs.

Now edit /etc/squid/squid.conf and add these options

http_port localhost:8081
acl Scan_HTTP proto HTTP
never_direct allow Scan_HTTP
cache_peer 127.0.0.1 parent 8080 0 no-query no-digest no-netdb-exchange default
cache_peer_access 127.0.0.1 allow Scan_HTTP

Reload Squid and start HAVP and you can test if the system is working downloading an "eicar test" here http://www.eicar.org/anti_virus_test_file.htm