From edd26d4525fd346b0493e255235aca5706c96428 Mon Sep 17 00:00:00 2001 From: serg dvoriancev Date: Fri, 1 May 2009 22:59:43 +0400 Subject: havp update new version ; squidGuard fix small bug --- config/havp/havp.xml | 251 +++++++++++++++++++++++++++++---------------------- 1 file changed, 145 insertions(+), 106 deletions(-) (limited to 'config/havp/havp.xml') diff --git a/config/havp/havp.xml b/config/havp/havp.xml index a70b09bc..f2e07c91 100644 --- a/config/havp/havp.xml +++ b/config/havp/havp.xml @@ -1,30 +1,58 @@ havp - Services: Antivirus proxy server (havp + clamav) -> Settings + Antivirus: HTTP proxy (havp + clamav) Status - 1.7.1 - havp.inc + 0.88_03 + /usr/local/pkg/havp.inc - HTTP Antivirus - Proxy server antivirus + Antivirus + Antivirus service
Services
/pkg_edit.php?xml=havp.xml&id=0 + + havp + havp.sh + havp + Antivirus HTTP proxy Service + + http://www.pfsense.com/packages/config/havp/havp.inc + /usr/local/pkg/ + 0755 + + + http://www.pfsense.com/packages/config/havp/havp_fscan.xml + /usr/local/pkg/ + 0755 + + + http://www.pfsense.com/packages/config/havp/havp_avset.xml + /usr/local/pkg/ + 0755 - Settings + HTTP proxy /pkg_edit.php?xml=havp.xml&id=0 + + Files Scanner + /pkg_edit.php?xml=havp_fscan.xml&id=0 + + + Settings + /pkg_edit.php?xml=havp_avset.xml&id=0 + + Enable @@ -33,38 +61,72 @@ checkbox - Use external interface - listenextinterface - Select this for use external interface, otherwise the proxy will use the internal interface '127.0.0.1'. Cascade you other proxy to the HAVP as 'parent proxy' via '127.0.0.1' ip. - checkbox - proxyiface + Proxy mode + proxymode + + Select interface mode: <br> + <b> standard </b> - client(s) bind to the 'proxy port' on selected interface(s); <br> + <b> parent for squid </b> - configure HAVP as parent for Squid proxy;<br> + <b> transparent </b> - all 'http' requests on interface(s) will be translated to the HAVP proxy server without any client(s) additional configuration necessary (worked as 'parent for squid' with 'transparent' Squid proxy); <br> + <b> internal </b> - HAVP listen internal interface (127.0.0.1) on 'proxy port', use you own traffic forwarding rules.<br> + + select + standard + + + + + + + - Proxy interface - proxyiface - The interface(s) the proxy server will bind to. + Proxy interface(s) + proxyinterface + The interface(s) for client connections to the proxy. Use 'Ctrl' + L.Click for multiple selection. interfaces_selection - lan + + lan Proxy port proxyport - This is the port the proxy server will listen on. + + This is the port the proxy server will listen on (for example: 8080). This port must be different from Squid proxy. + input 10 - 3128 + 3125 Parent proxy parentproxy - Enter the parent proxy as PROXY:PORT format or leave empty. + Enter the parent (upstream) proxy settings as PROXY:PORT format or leave empty. input 90 + + Enable X-Forwarded-For + enablexforwardedfor + + If client sent this header, FORWARDED_IP setting defines the value, then it is passed on. You might want to keep this disabled for security reasons. + <br>Enable this if you use your own parent proxy after HAVP, so it will see the original client IP. + <br>Disabling this also disables Via: header generation. + + checkbox + + + Enable Forwarded IP + enableforwardedip + + If HAVP is used as parent proxy by some other proxy, this allows to write the real users IP to log, instead of proxy IP. + + checkbox + Language lang @@ -84,17 +146,21 @@ - Max download size + Max download size, Bytes maxdownloadsize - Enter value or leave empty. Value in bytes. Downloads larger than 'Max download size' will be blocked. Only if not Whitelisted! + Enter value (in Bytes) or leave empty. Downloads larger, than 'Max download size' will be blocked. Only if not Whitelisted! input 10 - Disable X-Forward - xforwardedfor - If not set, proxy will include your system's IP address or name in the HTTP requests it forwards. + HTTP Range requests + range + + Set this for allow HTTP Range requests, and broken downloads can be resumed. + Allowing HTTP Range is a security risk, because partial HTTP requests may not be properly scanned. + Whitelisted sites are allowed to use Range in any case. + checkbox @@ -128,102 +194,71 @@ checkbox + + Enable RAM Disk + enableramdisk + + This option allow use RAM Disk for HAVP temp files for more quick traffic scan. + Ram Disc size depend from 'ScanMax file size and avialable memory. + This option can be ignored in VMVare or on 'low system memory'. + ( RAM Disk size calculated as [1/4 avialable system memory] > [Scan max file size] * 100 ) + + checkbox + Scan max file size scanmaxsize - Enter here value in bytes (5, 10, 15, 20) or leave empty. + Select this value for limit maximum file size or leave '---(5M)'. Files larger than this limit won't be scanned. - Empty or 0 also disables the limit. + Small values increace scan speed and maximum new connections per second and allow RAM Disk use. + <br> NOTE: Setting limit is a security risk, because some archives like ZIP need all the data to be scanned properly! Use this only if you - can't afford temporary space for big files. Also scanner settings - will affect how many files will be scanned inside an archive etc. + can't afford temporary space for big files. - input - 10 + select + 0 + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + - Scan images scanimg Check this for scan image files. checkbox - - - Scan archives - scanarc - Check this for scan within archives and compressed files. - checkbox - - - - Scan archive max file size - scanarcmaxsize - 10M - - Enter here value in megabytes (15M) or leave empty. - Files in archives larger than this limit won't be scanned. - Value of 0 also disables the limit. - - input - 10 - - - - AV bases update - havpavupdate - - <input name='submit' type='submit' value='Update_AV'> - Press button for update AV database now. - - select - hv_none - - - - - - - - - - - - - - Regional AV database update mirror - dbregion - Select regional database mirror. - select - - - - - - - - - - - - - - - - - - - - Optional AV database update servers - avupdateserver - Enter here space separated AV update servers, or leave empty. - textarea - 60 - 5 - - Syslog syslog @@ -237,11 +272,15 @@ checkbox + + + havp_before_form(&$pkg); + - havp_validate_settings($_POST, &$input_errors); + havp_validate_settings($_POST, &$input_errors); - havp_resync(); + havp_resync(); -- cgit v1.2.3