installing squidClamAV - check if blocking viruses

Issues related to applications and software problems
robertw
Posts: 167
Joined: 2012/04/25 13:26:59

installing squidClamAV - check if blocking viruses

Postby robertw » 2017/12/02 21:02:57

hi all,

i have installed squidclamav via this guide -

http://squidclamav.darold.net/installv6.html

i only installed the below, i didnt install squidGuard

yum install -y squid clamav

and i extrated these tars and for each i did configure/make/make install like the guide says to do

https://sourceforge.net/projects/squidc ... t/download

http://sourceforge.net/projects/c-icap/ ... z/download

i dont know what squid config files to copy/paste in my squid.conf file

do i use 3.4.x
3.1.x
3.0.x

bear in mind when i did the yum install squid, it installed 3.5.20

once installed, i test it, in my browser i change to manual proxy and change ip/port to my proxy server

when i go to websites all works and i can see the logs here -

watch -n 0.5 tail /usr/local/c-icap/var/log/server.log

but how do i check if its blocking viruses?

many thanks in advanced

rob

pjsr2
Posts: 296
Joined: 2014/03/27 20:11:07

Re: installing squidClamAV - check if blocking viruses

Postby pjsr2 » 2017/12/03 11:27:16

There is a special tryal "virus" that you can use to test your installation and see if the virusscanner reacts on it. It is made available by Eicar, http://www.eicar.org/.
You can download it with the following command:

Code: Select all

curl -O http://www.eicar.org/download/eicar.com

robertw
Posts: 167
Joined: 2012/04/25 13:26:59

Re: installing squidClamAV - check if blocking viruses

Postby robertw » 2017/12/06 12:49:06

gave up installing a standalone proxy server with real time AV checking for http traffic ie squidclamav

instead i did it the easy way and that was to install squid on my pfsense firewall, once installed went to "services > squid proxy server" and enabled -

under the general tab - squid proxy service also the transparent http proxy

under the antivirus tab - AV

once did that when i go to this site -

http://www.eicar.org/85-0-Download.html

when i click on the zip link it straight away takes me to my pfsense firewall squid page -

https://s17.postimg.org/sevc62cr3/squidclamav.png

i will try and install a seperate server for this if when i have time but this is by far the easy way to do it i found