aboutsummaryrefslogtreecommitdiffstats
path: root/config/havp
diff options
context:
space:
mode:
Diffstat (limited to 'config/havp')
-rw-r--r--config/havp/havp.xml684
1 files changed, 369 insertions, 315 deletions
diff --git a/config/havp/havp.xml b/config/havp/havp.xml
index f5afc2fe..08ff873f 100644
--- a/config/havp/havp.xml
+++ b/config/havp/havp.xml
@@ -1,324 +1,378 @@
<?xml version="1.0" encoding="utf-8" ?>
+<!DOCTYPE packagegui SYSTEM "../schema/packages.dtd">
+<?xml-stylesheet type="text/xsl" href="../xsl/package.xsl"?>
<packagegui>
- <name>havp</name>
- <title>Antivirus: HTTP proxy (havp + clamav)</title>
- <category>Status</category>
- <version>1.02</version>
- <include_file>/usr/local/pkg/havp.inc</include_file>
- <menu>
- <name>Antivirus</name>
- <tooltiptext>Antivirus service</tooltiptext>
- <section>Services</section>
- <url>/antivirus.php</url>
- </menu>
- <service>
+ <copyright>
+<![CDATA[
+/* $Id$ */
+/* ====================================================================================== */
+/*
+ havp.xml
+ part of pfSense (https://www.pfSense.org/)
+ Copyright (C) 2009-2010 Sergey Dvoriancev <dv_serg@mail.ru>
+ Copyright (C) 2014 Andrew Nikitin <andrey.b.nikitin@gmail.com>.
+ Copyright (C) 2015 ESF, LLC
+ All rights reserved.
+*/
+/* ====================================================================================== */
+/*
+ Redistribution and use in source and binary forms, with or without
+ modification, are permitted provided that the following conditions are met:
+
+
+ 1. Redistributions of source code must retain the above copyright notice,
+ this list of conditions and the following disclaimer.
+
+ 2. Redistributions in binary form must reproduce the above copyright
+ notice, this list of conditions and the following disclaimer in the
+ documentation and/or other materials provided with the distribution.
+
+
+ THIS SOFTWARE IS PROVIDED ``AS IS'' AND ANY EXPRESS OR IMPLIED WARRANTIES,
+ INCLUDING, BUT NOT LIMITED TO, THE IMPLIED WARRANTIES OF MERCHANTABILITY
+ AND FITNESS FOR A PARTICULAR PURPOSE ARE DISCLAIMED. IN NO EVENT SHALL THE
+ AUTHOR BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY,
+ OR CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF
+ SUBSTITUTE GOODS OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS
+ INTERRUPTION) HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN
+ CONTRACT, STRICT LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE)
+ ARISING IN ANY WAY OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE
+ POSSIBILITY OF SUCH DAMAGE.
+*/
+/* ====================================================================================== */
+ ]]>
+ </copyright>
+ <name>havp</name>
+ <title>Antivirus: HTTP proxy (HAVP + ClamAV)</title>
+ <category>Status</category>
+ <version>1.06</version>
+ <include_file>/usr/local/pkg/havp.inc</include_file>
+ <menu>
+ <name>Antivirus</name>
+ <tooltiptext>Antivirus service</tooltiptext>
+ <section>Services</section>
+ <url>/antivirus.php</url>
+ </menu>
+ <service>
<name>havp</name>
<rcfile>havp.sh</rcfile>
<executable>havp</executable>
- <description>Antivirus HTTP proxy Service</description>
- </service>
- <additional_files_needed>
- <item>https://packages.pfsense.org/packages/config/havp/havp.inc</item>
- <prefix>/usr/local/pkg/</prefix>
- <chmod>0755</chmod>
- </additional_files_needed>
- <!--additional_files_needed>
- <item>https://packages.pfsense.org/packages/config/havp/havp_fscan.xml</item>
- <prefix>/usr/local/pkg/</prefix>
- <chmod>0755</chmod>
- </additional_files_needed-->
- <additional_files_needed>
- <item>https://packages.pfsense.org/packages/config/havp/havp_avset.xml</item>
- <prefix>/usr/local/pkg/</prefix>
- <chmod>0755</chmod>
- </additional_files_needed>
- <additional_files_needed>
- <item>https://packages.pfsense.org/packages/config/havp/antivirus.php</item>
- <prefix>/usr/local/www/</prefix>
- <chmod>0755</chmod>
- </additional_files_needed>
- <tabs>
- <tab>
- <text>General page</text>
- <url>/antivirus.php</url>
- </tab>
- <tab>
- <text>HTTP proxy</text>
- <url>/pkg_edit.php?xml=havp.xml&amp;id=0</url>
- <active/>
- </tab>
- <!--tab>
- <text>Files Scanner</text>
- <url>/pkg_edit.php?xml=havp_fscan.xml&amp;id=0</url>
- </tab-->
- <tab>
- <text>Settings</text>
- <url>/pkg_edit.php?xml=havp_avset.xml&amp;id=0</url>
- </tab>
- <tab>
- <text>HAVP Log</text>
- <url>/havp_log.php</url>
- </tab>
- </tabs>
- <fields>
- <field>
- <fielddescr>Enable</fielddescr>
- <fieldname>enable</fieldname>
- <description>Check this for enable proxy.</description>
- <type>checkbox</type>
- </field>
- <field>
- <fielddescr>ClamAV mode</fielddescr>
- <fieldname>useclamd</fieldname>
- <description>
- Select ClamAV running mode:&lt;br&gt;
- &lt;b&gt;Daemon&lt;/b&gt; - HAVP will use ClamAV as socket scanner daemon. Default option.&lt;br&gt;
- &lt;b&gt;Library&lt;/b&gt; - HAVP will use ClamAV as loaded library scanner. Note: this mode needs much more memory.&lt;br&gt;
- </description>
- <type>select</type>
- <default_value>true</default_value>
- <options>
- <option><value>true</value><name>Daemon</name></option>
- <option><value>false</value><name>Library</name></option>
- </options>
- </field>
- <field>
- <fielddescr>Proxy mode</fielddescr>
- <fieldname>proxymode</fieldname>
- <description>
- Select interface mode: &lt;br&gt;
- &lt;b&gt; standard &lt;/b&gt; - client(s) bind to the 'proxy port' on selected interface(s); &lt;br&gt;
- &lt;b&gt; parent for squid &lt;/b&gt; - configure HAVP as parent for Squid proxy;&lt;br&gt;
- &lt;b&gt; transparent &lt;/b&gt; - all HTTP requests on interface(s) will be directed to the HAVP proxy server without any client configuration necessary (works as parent for squid with transparent Squid proxy); &lt;br&gt;
- &lt;b&gt; internal &lt;/b&gt; - HAVP will listen on the loopback (127.0.0.1) on configured 'proxy port.' Use you own traffic forwarding rules.&lt;br&gt;
+ <description>Antivirus HTTP Proxy Service</description>
+ </service>
+ <additional_files_needed>
+ <item>https://packages.pfsense.org/packages/config/havp/havp.inc</item>
+ <prefix>/usr/local/pkg/</prefix>
+ </additional_files_needed>
+ <!--
+ <additional_files_needed>
+ <item>https://packages.pfsense.org/packages/config/havp/havp_fscan.xml</item>
+ <prefix>/usr/local/pkg/</prefix>
+ </additional_files_needed>
+ -->
+ <additional_files_needed>
+ <item>https://packages.pfsense.org/packages/config/havp/havp_avset.xml</item>
+ <prefix>/usr/local/pkg/</prefix>
+ </additional_files_needed>
+ <additional_files_needed>
+ <item>https://packages.pfsense.org/packages/config/havp/antivirus.php</item>
+ <prefix>/usr/local/www/</prefix>
+ </additional_files_needed>
+ <tabs>
+ <tab>
+ <text>General Page</text>
+ <url>/antivirus.php</url>
+ </tab>
+ <tab>
+ <text>HTTP Proxy</text>
+ <url>/pkg_edit.php?xml=havp.xml</url>
+ <active/>
+ </tab>
+ <!--
+ <tab>
+ <text>Files Scanner</text>
+ <url>/pkg_edit.php?xml=havp_fscan.xml</url>
+ </tab>
+ -->
+ <tab>
+ <text>Settings</text>
+ <url>/pkg_edit.php?xml=havp_avset.xml</url>
+ </tab>
+ <tab>
+ <text>HAVP Log</text>
+ <url>/havp_log.php</url>
+ </tab>
+ </tabs>
+ <fields>
+ <field>
+ <fielddescr>Enable</fielddescr>
+ <fieldname>enable</fieldname>
+ <description>Check this to enable AV proxy.</description>
+ <type>checkbox</type>
+ </field>
+ <field>
+ <fielddescr>ClamAV Mode</fielddescr>
+ <fieldname>useclamd</fieldname>
+ <description>
+ <![CDATA[
+ Select ClamAV running mode:<br />
+ <strong>Daemon</strong> - HAVP will use ClamAV as socket scanner daemon. (Default option.)<br />
+ <strong>Library</strong> - HAVP will use ClamAV as loaded library scanner. Note: this mode needs <strong>much more</strong> memory.<br />
+ ]]>
</description>
- <type>select</type>
- <default_value>standard</default_value>
- <options>
- <option><value>standard</value><name>Standard</name></option>
- <option><value>squid</value><name>Parent for Squid</name></option>
- <option><value>transparent</value><name>Transparent</name></option>
- <option><value>internal</value><name>Internal</name></option>
- </options>
- </field>
- <field>
- <fielddescr>Proxy interface(s)</fielddescr>
- <fieldname>proxyinterface</fieldname>
- <description>The interface(s) for client connections to the proxy. Use 'Ctrl' + L. Click for multiple selection.</description>
- <type>interfaces_selection</type>
- <required/>
- <multiple/>
- <default_value>lan</default_value>
- </field>
- <field>
- <fielddescr>Proxy port</fielddescr>
- <fieldname>proxyport</fieldname>
- <description>
- This is the port the proxy server will listen on (for example: 8080). This port must be different from Squid proxy.
- </description>
- <type>input</type>
- <size>10</size>
- <required/>
- <default_value>3125</default_value>
- </field>
- <field>
- <fielddescr>Parent proxy</fielddescr>
- <fieldname>parentproxy</fieldname>
- <description>
- Enter the parent (upstream) proxy settings as PROXY:PORT format or leave empty.
- </description>
- <type>input</type>
- <size>90</size>
- </field>
- <field>
- <fielddescr>Enable X-Forwarded-For</fielddescr>
- <fieldname>enablexforwardedfor</fieldname>
- <description>
- If client sent this header, FORWARDED_IP setting defines the value, then it is passed on. You might want to keep this disabled for security reasons.
- &lt;br&gt;Enable this if you use your own parent proxy after HAVP, so it will see the original client IP.
- &lt;br&gt;Disabling this also disables Via: header generation.
- </description>
- <type>checkbox</type>
- </field>
- <field>
- <fielddescr>Enable Forwarded IP</fielddescr>
- <fieldname>enableforwardedip</fieldname>
- <description>
- If HAVP is used as a parent proxy for some other proxy, this allows writing the real user's IP to log, instead of the proxy IP.
- </description>
- <type>checkbox</type>
- </field>
- <field>
- <fielddescr>Language</fielddescr>
- <fieldname>lang</fieldname>
- <description>Select the language in which the proxy server will display error messages to users.</description>
- <type>select</type>
- <value>en</value>
- <options>
- <option><value>br</value><name>Brazil</name></option>
- <option><value>de</value><name>Germany</name></option>
- <option><value>en</value><name>English</name></option>
- <option><value>es</value><name>Spain</name></option>
- <option><value>fr</value><name>French</name></option>
- <option><value>it</value><name>Italian</name></option>
- <option><value>nf</value><name>Norfolk Island</name></option>
- <option><value>pl</value><name>Poland</name></option>
- <option><value>ru</value><name>Russian</name></option>
- </options>
- </field>
- <field>
- <fielddescr>Max download size, Bytes</fielddescr>
- <fieldname>maxdownloadsize</fieldname>
- <description>Enter value (in Bytes) or leave empty. Downloads larger than 'Max download size' will be blocked if not whitelisted.</description>
- <type>input</type>
- <size>10</size>
- <default_value></default_value>
- </field>
- <field>
- <fielddescr>HTTP Range requests</fielddescr>
- <fieldname>range</fieldname>
- <description>
- Set this for allow HTTP Range requests, and broken downloads can be resumed.
- Allowing HTTP Range is a security risk, because partial HTTP requests may not be properly scanned.
- Whitelisted sites are allowed to use Range in any case.
- </description>
- <type>checkbox</type>
- </field>
- <field>
- <fielddescr>Whitelist</fielddescr>
- <fieldname>whitelist</fieldname>
- <description>
- Enter each destination URL on a new line that will be accessable to the users without scanning.
- Use '*' symbol for mask. Example: *.github.com/*, *sourceforge.net/*clamav-*, */*.xml, */*.inc
- </description>
- <type>textarea</type>
- <cols>60</cols>
- <rows>5</rows>
- <encoding>base64</encoding>
- </field>
- <field>
- <fielddescr>Blacklist</fielddescr>
- <fieldname>blacklist</fieldname>
- <description>Enter each destination domain on a new line that will be accessable to the users that are allowed to use the proxy.</description>
- <type>textarea</type>
- <cols>60</cols>
- <rows>5</rows>
- <encoding>base64</encoding>
- </field>
- <field>
- <fielddescr>Block file if error scanning</fielddescr>
- <fieldname>failscanerror</fieldname>
- <description>If set, the proxy will block the files on which an error scanning.</description>
- <type>checkbox</type>
- </field>
- <field>
- <fielddescr>Enable RAM Disk</fielddescr>
- <fieldname>enableramdisk</fieldname>
- <description>
- This option allow use RAM disk for HAVP temp files for more quick traffic scan.
- RAM disk size depends on 'ScanMax' file size and available memory.
- This option can be ignored on systems with low memory.
- ( RAM disk size calculated as [1/4 available system memory] > [Scan max file size] * 100 )
- </description>
- <type>checkbox</type>
- </field>
- <field>
- <fielddescr>Scan max file size</fielddescr>
- <fieldname>scanmaxsize</fieldname>
- <description>
- Select this value for limit maximum file size or leave '---(5M)'.
- Files larger than this limit won't be scanned.
- Small values increace scan speed and maximum new connections per second and allow RAM disk use.
- &lt;br&gt;
- NOTE: Setting limit is a security risk, because some archives like
- ZIP need all the data to be scanned properly! Use this only if you
- can't afford temporary space for big files.
- </description>
- <type>select</type>
- <value>0</value>
- <options>
- <option><value> 5000</value><name>--- (5M)</name></option>
- <option><value> 1</value><name> 1 K</name></option>
- <option><value> 2</value><name> 2 K</name></option>
- <option><value> 3</value><name> 3 K</name></option>
- <option><value> 5</value><name> 5 K</name></option>
- <option><value> 7</value><name> 7 K</name></option>
- <option><value> 10</value><name> 10 K</name></option>
- <option><value> 20</value><name> 20 K</name></option>
- <option><value> 30</value><name> 30 K</name></option>
- <option><value> 50</value><name> 50 K</name></option>
- <option><value> 70</value><name> 70 K</name></option>
- <option><value> 100</value><name> 100 K</name></option>
- <option><value> 200</value><name> 200 K</name></option>
- <option><value> 300</value><name> 300 K</name></option>
- <option><value> 500</value><name> 500 K</name></option>
- <option><value> 700</value><name> 700 K</name></option>
- <option><value> 1000</value><name> 1000 K</name></option>
- <option><value> 1500</value><name> 1500 K</name></option>
- <option><value> 2000</value><name> 2000 K</name></option>
- <option><value> 2500</value><name> 2500 K</name></option>
- <option><value> 3000</value><name> 3000 K</name></option>
- <option><value> 3500</value><name> 3500 K</name></option>
- <option><value> 4000</value><name> 4000 K</name></option>
- <option><value> 4500</value><name> 4500 K</name></option>
- <option><value> 5000</value><name> 5000 K</name></option>
- <option><value> 5500</value><name> 5500 K</name></option>
- <option><value> 6000</value><name> 6000 K</name></option>
- <option><value> 7000</value><name> 7000 K</name></option>
- <option><value> 8000</value><name> 8000 K</name></option>
- <option><value> 9000</value><name> 9000 K</name></option>
- <option><value>10000</value><name>10 000 K</name></option>
- </options>
- </field>
- <field>
- <fielddescr>Scan images</fielddescr>
- <fieldname>scanimg</fieldname>
- <description>
- Check this for scan image files.
- This option allows you to increase reliability, but also slows down the scanning process.
- </description>
- <type>checkbox</type>
- </field>
- <field>
- <fielddescr>Scan media stream</fielddescr>
- <fieldname>scanstream</fieldname>
- <description>Check this for scan media (audio/video) stream. Use this for additional scan exploits for players.</description>
- <type>checkbox</type>
- </field>
- <field>
- <fielddescr>Scan Broken Executables</fielddescr>
- <fieldname>scanbrokenexe</fieldname>
- <description>Check this to enable the Heuristic Broken Executable scan.</description>
- <type>checkbox</type>
- <default_value>on</default_value>
- </field>
- <field>
- <fielddescr>HAVP Log</fielddescr>
- <fieldname>log</fieldname>
- <description>Check this for enable HAVP log.</description>
- <type>checkbox</type>
- <enablefields>syslog</enablefields>
- </field>
- <field>
- <fielddescr>HAVP Syslog</fielddescr>
- <fieldname>syslog</fieldname>
- <description>Check this for enable HAVP Syslog.</description>
- <type>checkbox</type>
- </field>
- </fields>
- <custom_php_command_before_form>
- havp_before_form($pkg);
- </custom_php_command_before_form>
- <custom_php_validation_command>
- havp_validate_settings($_POST, $input_errors);
- </custom_php_validation_command>
- <custom_php_resync_config_command>
- havp_resync();
- </custom_php_resync_config_command>
- <custom_php_install_command>
+ <type>select</type>
+ <default_value>true</default_value>
+ <options>
+ <option><value>true</value><name>Daemon</name></option>
+ <option><value>false</value><name>Library</name></option>
+ </options>
+ </field>
+ <field>
+ <fielddescr>Proxy Mode</fielddescr>
+ <fieldname>proxymode</fieldname>
+ <description>
+ <![CDATA[
+ Select proxy interface mode:<br />
+ <strong>Standard</strong> - clients bind to the 'proxy port' on selected interface(s)<br />
+ <strong>Parent for Squid</strong> - configure HAVP as parent for Squid proxy<br />
+ <strong>Transparent</strong> - all HTTP requests on interface(s) will be directed to the HAVP proxy server without any client configuration necessary. (Works as parent for Squid with transparent Squid proxy.)<br />
+ <strong>Internal</strong> - HAVP will listen on the loopback (127.0.0.1) on configured 'Proxy Port.' Use your own firewall forwarding rules.<br />
+ ]]>
+ </description>
+ <type>select</type>
+ <default_value>standard</default_value>
+ <options>
+ <option><value>standard</value><name>Standard</name></option>
+ <option><value>squid</value><name>Parent for Squid</name></option>
+ <option><value>transparent</value><name>Transparent</name></option>
+ <option><value>internal</value><name>Internal</name></option>
+ </options>
+ </field>
+ <field>
+ <fielddescr>Proxy Interface(s)</fielddescr>
+ <fieldname>proxyinterface</fieldname>
+ <description>The interface(s) for client connections to the proxy. Use 'Ctrl' + left click for multiple selection.</description>
+ <type>interfaces_selection</type>
+ <required/>
+ <multiple/>
+ <default_value>lan</default_value>
+ </field>
+ <field>
+ <fielddescr>Proxy Port</fielddescr>
+ <fieldname>proxyport</fieldname>
+ <description>
+ <![CDATA[
+ This is the port that HAVP proxy server will listen on. (Example: 8080)<br />
+ <strong>Note: This port must be different from Squid proxy.</strong>
+ ]]>
+ </description>
+ <type>input</type>
+ <size>10</size>
+ <required/>
+ <default_value>3125</default_value>
+ </field>
+ <field>
+ <fielddescr>Parent Proxy</fielddescr>
+ <fieldname>parentproxy</fieldname>
+ <description>Enter the parent (upstream) proxy settings in PROXY:PORT format or leave empty.</description>
+ <type>input</type>
+ <size>90</size>
+ </field>
+ <field>
+ <fielddescr>Enable X-Forwarded-For</fielddescr>
+ <fieldname>enablexforwardedfor</fieldname>
+ <description>
+ <![CDATA[
+ If client sends this header, FORWARDED_IP setting defines the value, then it is passed on. You might want to keep this disabled for security reasons.<br />
+ Enable this if you use your own parent proxy after HAVP, so it will see the original client's IP.<br />
+ Note: Disabling this also disables <em>Via:</em> header generation.<br />
+ ]]>
+ </description>
+ <type>checkbox</type>
+ </field>
+ <field>
+ <fielddescr>Enable Forwarded IP</fielddescr>
+ <fieldname>enableforwardedip</fieldname>
+ <description>If HAVP is used as a parent proxy for some other proxy, this allows writing the real user's IP to log, instead of the proxy IP.</description>
+ <type>checkbox</type>
+ </field>
+ <field>
+ <fielddescr>Language</fielddescr>
+ <fieldname>lang</fieldname>
+ <description>Select the language in which the HAVP proxy server will display error messages to users.</description>
+ <type>select</type>
+ <value>en</value>
+ <options>
+ <option><value>br</value><name>Brazilian Portuguese</name></option>
+ <option><value>de</value><name>German</name></option>
+ <option><value>en</value><name>English</name></option>
+ <option><value>es</value><name>Spanish</name></option>
+ <option><value>fr</value><name>French</name></option>
+ <option><value>it</value><name>Italian</name></option>
+ <option><value>nf</value><name>Norf'k</name></option>
+ <option><value>pl</value><name>Polish</name></option>
+ <option><value>ru</value><name>Russian</name></option>
+ </options>
+ </field>
+ <field>
+ <fielddescr>Max Download Size</fielddescr>
+ <fieldname>maxdownloadsize</fieldname>
+ <description>
+ <![CDATA[
+ Enter value <strong>(in bytes)</strong> or leave empty. Downloads larger than 'Max Download Size' will be blocked if not whitelisted.
+ ]]>
+ </description>
+ <type>input</type>
+ <size>10</size>
+ <default_value></default_value>
+ </field>
+ <field>
+ <fielddescr>HTTP Range Requests</fielddescr>
+ <fieldname>range</fieldname>
+ <description>
+ <![CDATA[
+ Set this to allow HTTP Range requests, so that broken downloads can be resumed.<br />
+ Allowing HTTP Range is a security risk, because partial HTTP requests may not be properly scanned.<br />
+ Note: Whitelisted sites are allowed to use HTTP Range in any case, regardless of this setting.
+ ]]>
+ </description>
+ <type>checkbox</type>
+ </field>
+ <field>
+ <fielddescr>Whitelist</fielddescr>
+ <fieldname>whitelist</fieldname>
+ <description>
+ <![CDATA[
+ Enter each destination URL on a <strong>separate line</strong>. The URLs will be accessible to users without AV scanning.<br />
+ Use '*' symbol as wildcard mask. URL examples: *.github.com/*, *sourceforge.net/*clamav-*, */*.xml, */*.inc
+ ]]>
+ </description>
+ <type>textarea</type>
+ <cols>60</cols>
+ <rows>5</rows>
+ <encoding>base64</encoding>
+ </field>
+ <field>
+ <fielddescr>Blacklist</fielddescr>
+ <fieldname>blacklist</fieldname>
+ <description>
+ <![CDATA[
+ Enter each destination URL on a <strong>separate line</strong>, using the same syntax as 'Whitelist'.<br />
+ <strong>Access to these URLs will be blocked for HAVP proxy users.</strong>
+ ]]>
+ </description>
+ <type>textarea</type>
+ <cols>60</cols>
+ <rows>5</rows>
+ <encoding>base64</encoding>
+ </field>
+ <field>
+ <fielddescr>Block File on Scanning Error</fielddescr>
+ <fieldname>failscanerror</fieldname>
+ <description>If enabled, the proxy will block the files if an error occurs while scanning.</description>
+ <type>checkbox</type>
+ </field>
+ <field>
+ <fielddescr>Enable RAM Disk</fielddescr>
+ <fieldname>enableramdisk</fieldname>
+ <description>
+ <![CDATA[
+ This option allows to use RAM disk for HAVP temporary files for faster traffic scan.<br />
+ RAM disk size depends on 'Scan Max File Size' and available memory. <strong>This option should be ignored on systems with low memory.</strong><br />
+ Note: RAM disk size is calculated as [1/4 available system memory] > [Scan max file size] * 100 ).
+ ]]>
+ </description>
+ <type>checkbox</type>
+ </field>
+ <field>
+ <fielddescr>Scan Max File Size</fielddescr>
+ <fieldname>scanmaxsize</fieldname>
+ <description>
+ <![CDATA[
+ Select the value to limit maximum scanned file size or leave at default (5 MB). Files larger than this limit will not be scanned.<br />
+ Small values increase scan speed and maximum new connections per second and allow RAM disk use.<br />
+ NOTE: Setting a low limit is a security risk, because some archives like ZIP need all the data to be scanned properly! Use this only if you
+ can't afford temporary space for large files.
+ ]]>
+ </description>
+ <type>select</type>
+ <value>0</value>
+ <options>
+ <option><value> 5000</value><name>--- (5M)</name></option>
+ <option><value> 1</value><name> 1 K</name></option>
+ <option><value> 2</value><name> 2 K</name></option>
+ <option><value> 3</value><name> 3 K</name></option>
+ <option><value> 5</value><name> 5 K</name></option>
+ <option><value> 7</value><name> 7 K</name></option>
+ <option><value> 10</value><name> 10 K</name></option>
+ <option><value> 20</value><name> 20 K</name></option>
+ <option><value> 30</value><name> 30 K</name></option>
+ <option><value> 50</value><name> 50 K</name></option>
+ <option><value> 70</value><name> 70 K</name></option>
+ <option><value> 100</value><name> 100 K</name></option>
+ <option><value> 200</value><name> 200 K</name></option>
+ <option><value> 300</value><name> 300 K</name></option>
+ <option><value> 500</value><name> 500 K</name></option>
+ <option><value> 700</value><name> 700 K</name></option>
+ <option><value> 1000</value><name> 1000 K</name></option>
+ <option><value> 1500</value><name> 1500 K</name></option>
+ <option><value> 2000</value><name> 2000 K</name></option>
+ <option><value> 2500</value><name> 2500 K</name></option>
+ <option><value> 3000</value><name> 3000 K</name></option>
+ <option><value> 3500</value><name> 3500 K</name></option>
+ <option><value> 4000</value><name> 4000 K</name></option>
+ <option><value> 4500</value><name> 4500 K</name></option>
+ <option><value> 5000</value><name> 5000 K</name></option>
+ <option><value> 5500</value><name> 5500 K</name></option>
+ <option><value> 6000</value><name> 6000 K</name></option>
+ <option><value> 7000</value><name> 7000 K</name></option>
+ <option><value> 8000</value><name> 8000 K</name></option>
+ <option><value> 9000</value><name> 9000 K</name></option>
+ <option><value>10000</value><name>10 000 K</name></option>
+ </options>
+ </field>
+ <field>
+ <fielddescr>Scan Images</fielddescr>
+ <fieldname>scanimg</fieldname>
+ <description>Check this option to scan image files. This option allows you to increase reliability, but also slows down the scanning process.</description>
+ <type>checkbox</type>
+ </field>
+ <field>
+ <fielddescr>Scan Media Streams</fielddescr>
+ <fieldname>scanstream</fieldname>
+ <description>Check this option to scan media (audio/video) streams.</description>
+ <type>checkbox</type>
+ </field>
+ <field>
+ <fielddescr>Scan Broken Executables</fielddescr>
+ <fieldname>scanbrokenexe</fieldname>
+ <description>Check this to enable the Heuristic Broken Executable Scan.</description>
+ <type>checkbox</type>
+ <default_value>on</default_value>
+ </field>
+ <field>
+ <fielddescr>HAVP Log</fielddescr>
+ <fieldname>log</fieldname>
+ <description>Check this to enable HAVP logging.</description>
+ <type>checkbox</type>
+ <enablefields>syslog</enablefields>
+ </field>
+ <field>
+ <fielddescr>HAVP Syslog</fielddescr>
+ <fieldname>syslog</fieldname>
+ <description>Check this to enable HAVP logging to syslog.</description>
+ <type>checkbox</type>
+ </field>
+ </fields>
+ <custom_php_validation_command>
+ havp_validate_settings($_POST, $input_errors);
+ </custom_php_validation_command>
+ <custom_php_resync_config_command>
+ havp_resync();
+ </custom_php_resync_config_command>
+ <custom_php_install_command>
havp_install();
- </custom_php_install_command>
- <custom_php_deinstall_command>
+ </custom_php_install_command>
+ <custom_php_deinstall_command>
havp_deinstall();
- </custom_php_deinstall_command>
+ </custom_php_deinstall_command>
</packagegui>
'>1717 1718 1719 1720 1721 1722 1723 1724 1725 1726 1727 1728 1729 1730 1731 1732 1733 1734 1735 1736 1737 1738 1739 1740 1741 1742 1743 1744 1745 1746 1747 1748 1749 1750 1751 1752 1753 1754 1755 1756 1757 1758 1759 1760 1761 1762 1763 1764 1765 1766 1767 1768 1769 1770 1771 1772 1773 1774 1775 1776 1777 1778 1779 1780 1781 1782 1783 1784 1785 1786 1787 1788 1789 1790 1791 1792 1793 1794 1795 1796 1797 1798 1799 1800 1801 1802 1803 1804 1805 1806 1807 1808 1809 1810 1811 1812 1813 1814 1815 1816 1817 1818 1819 1820 1821 1822 1823 1824 1825 1826 1827 1828 1829 1830 1831 1832 1833 1834 1835 1836 1837 1838 1839 1840 1841 1842 1843 1844 1845 1846 1847 1848 1849 1850 1851 1852 1853 1854 1855 1856 1857 1858 1859 1860 1861 1862 1863 1864 1865 1866 1867 1868 1869 1870 1871 1872 1873 1874 1875 1876 1877 1878 1879 1880 1881 1882 1883 1884 1885 1886 1887 1888 1889 1890 1891 1892 1893 1894 1895 1896 1897 1898 1899 1900 1901 1902 1903 1904 1905 1906 1907 1908 1909 1910 1911 1912 1913 1914 1915 1916 1917 1918 1919 1920 1921 1922 1923 1924 1925 1926 1927 1928 1929 1930 1931 1932 1933 1934 1935 1936 1937 1938 1939 1940 1941 1942 1943 1944 1945 1946 1947 1948 1949 1950 1951 1952 1953 1954 1955 1956 1957 1958 1959 1960 1961 1962 1963 1964 1965 1966 1967 1968 1969 1970 1971 1972 1973 1974 1975 1976 1977 1978 1979 1980 1981 1982 1983 1984 1985 1986 1987 1988 1989 1990 1991 1992 1993 1994 1995 1996 1997 1998 1999 2000 2001 2002 2003 2004 2005 2006 2007 2008 2009 2010 2011 2012 2013 2014 2015 2016 2017 2018 2019 2020 2021 2022 2023 2024 2025 2026 2027 2028 2029 2030 2031 2032 2033 2034 2035 2036 2037 2038 2039 2040 2041 2042 2043 2044 2045 2046 2047 2048 2049 2050 2051 2052 2053 2054 2055 2056 2057 2058 2059 2060 2061 2062 2063 2064 2065 2066 2067 2068 2069 2070 2071 2072 2073 2074 2075 2076 2077 2078 2079 2080 2081 2082 2083 2084 2085 2086 2087 2088 2089 2090 2091 2092 2093 2094 2095 2096 2097 2098 2099 2100 2101 2102 2103 2104 2105 2106 2107 2108 2109 2110 2111 2112 2113 2114 2115 2116 2117 2118 2119 2120 2121 2122 2123 2124 2125 2126 2127 2128 2129 2130 2131 2132 2133 2134 2135 2136 2137 2138 2139 2140 2141 2142 2143 2144 2145 2146 2147 2148 2149 2150 2151 2152 2153 2154 2155 2156 2157 2158 2159 2160 2161 2162 2163 2164 2165 2166 2167 2168 2169 2170 2171 2172 2173 2174 2175 2176 2177 2178 2179 2180 2181 2182 2183 2184 2185 2186 2187 2188 2189 2190 2191 2192 2193 2194 2195 2196 2197 2198 2199 2200 2201 2202 2203 2204 2205 2206 2207 2208 2209 2210 2211 2212 2213 2214 2215 2216 2217 2218 2219 2220 2221 2222 2223 2224 2225 2226 2227 2228 2229 2230 2231 2232 2233 2234 2235 2236 2237 2238 2239 2240 2241 2242 2243 2244 2245 2246 2247 2248 2249 2250 2251 2252 2253 2254 2255 2256 2257 2258 2259 2260 2261 2262 2263 2264 2265 2266 2267 2268 2269 2270 2271 2272 2273 2274 2275 2276 2277 2278 2279 2280 2281 2282 2283 2284 2285 2286 2287 2288 2289 2290 2291 2292 2293 2294 2295 2296 2297 2298 2299 2300 2301 2302 2303 2304 2305 2306 2307 2308 2309 2310 2311 2312 2313 2314 2315 2316 2317 2318 2319 2320