havp Status 0.88_03 /usr/local/pkg/havp.inc Antivirus Antivirus service

Services

/pkg_edit.php?xml=havp.xml&id=0 havp havp.sh havp Antivirus HTTP proxy Service http://www.pfsense.com/packages/config/havp/havp.inc /usr/local/pkg/ 0755 http://www.pfsense.com/packages/config/havp/havp_fscan.xml /usr/local/pkg/ 0755 http://www.pfsense.com/packages/config/havp/havp_avset.xml /usr/local/pkg/ 0755 HTTP proxy /pkg_edit.php?xml=havp.xml&id=0 Files Scanner /pkg_edit.php?xml=havp_fscan.xml&id=0 Settings /pkg_edit.php?xml=havp_avset.xml&id=0 Enable enable Check this for enable proxy. checkbox Proxy mode proxymode Select interface mode: <br> <b> standard </b> - client(s) bind to the 'proxy port' on selected interface(s); <br> <b> parent for squid </b> - configure HAVP as parent for Squid proxy;<br> <b> transparent </b> - all 'http' requests on interface(s) will be translated to the HAVP proxy server without any client(s) additional configuration necessary (worked as 'parent for squid' with 'transparent' Squid proxy); <br> <b> internal </b> - HAVP listen internal interface (127.0.0.1) on 'proxy port', use you own traffic forwarding rules.<br> select standard standardStandard squidParent for Squid transparentTransparent internalInternal Proxy interface(s) proxyinterface The interface(s) for client connections to the proxy. Use 'Ctrl' + L.Click for multiple selection. interfaces_selection lan Proxy port proxyport This is the port the proxy server will listen on (for example: 8080). This port must be different from Squid proxy. input 10 3125 Parent proxy parentproxy Enter the parent (upstream) proxy settings as PROXY:PORT format or leave empty. input 90 Enable X-Forwarded-For enablexforwardedfor If client sent this header, FORWARDED_IP setting defines the value, then it is passed on. You might want to keep this disabled for security reasons. <br>Enable this if you use your own parent proxy after HAVP, so it will see the original client IP. <br>Disabling this also disables Via: header generation. checkbox Enable Forwarded IP enableforwardedip If HAVP is used as parent proxy by some other proxy, this allows to write the real users IP to log, instead of proxy IP. checkbox Language lang Select the language in which the proxy server will display error messages to users. select en brBrazil deGermany enEnglish esSpain frFrench itItalian nfNorfolk Island plPoland ruRussian Max download size, Bytes maxdownloadsize Enter value (in Bytes) or leave empty. Downloads larger, than 'Max download size' will be blocked. Only if not Whitelisted! input 10 HTTP Range requests range Set this for allow HTTP Range requests, and broken downloads can be resumed. Allowing HTTP Range is a security risk, because partial HTTP requests may not be properly scanned. Whitelisted sites are allowed to use Range in any case. checkbox Whitelist whitelist Enter each destination url on a new line that will be accessable to the users without scanning. Use '*' symbol for mask. Example: *.pfsense.com/*, *sourceforge.net/*clamav-*, */*.xml, */*.inc textarea 60 5 base64 Blacklist blacklist Enter each destination domain on a new line that will be accessable to the users that are allowed to use the proxy. textarea 60 5 base64 Block file if error scanning failscanerror If set, the proxy will block the files on which an error scanning. checkbox Enable RAM Disk enableramdisk This option allow use RAM Disk for HAVP temp files for more quick traffic scan. Ram Disc size depend from 'ScanMax file size and avialable memory. This option can be ignored in VMVare or on 'low system memory'. ( RAM Disk size calculated as [1/4 avialable system memory] > [Scan max file size] * 100 ) checkbox Scan max file size scanmaxsize Select this value for limit maximum file size or leave '---(5M)'. Files larger than this limit won't be scanned. Small values increace scan speed and maximum new connections per second and allow RAM Disk use. <br> NOTE: Setting limit is a security risk, because some archives like ZIP need all the data to be scanned properly! Use this only if you can't afford temporary space for big files. select 0 5000--- (5M) 1 1 K 2 2 K 3 3 K 5 5 K 7 7 K 10 10 K 20 20 K 30 30 K 50 50 K 70 70 K 100 100 K 200 200 K 300 300 K 500 500 K 700 700 K 1000 1000 K 1500 1500 K 2000 2000 K 2500 2500 K 3000 3000 K 3500 3500 K 4000 4000 K 4500 4500 K 5000 5000 K 5500 5500 K 6000 6000 K 7000 7000 K 8000 8000 K 9000 9000 K 1000010 000 K Scan images scanimg Check this for scan image files. checkbox Syslog syslog Check this for enable Syslog. checkbox Log log Check this for enable log. checkbox havp_before_form(&$pkg); havp_validate_settings($_POST, &$input_errors); havp_resync();