1
General Discussion / Re: configure AV but dosen't show any alert in log
« on: January 30, 2019, 06:10:45 am »
You right, i most see logs in ICAP plugin. but there isn't any log there..
Show Posts
This section allows you to view all posts made by this member. Note that you can only see posts made in areas you currently have access to.
Pages: [1]
2
General Discussion / Re: configure AV but dosen't show any alert in log
« on: January 29, 2019, 11:21:44 am »
Yes, AV can detect
3
Intrusion Detection and Prevention / IDS can't detect fragmented packet and passed firewall
« on: January 28, 2019, 11:56:07 am »
hello all,
i'd configured IDS and enabled it. also download rules and adding some rules for IP Flag protocol. unfortunately, packet with ip.flags=0x04(Reserved), ip.flags=0x02(Don't fragment), ip.flags=0x01(More fragments) passed firewall and i receive it.
would i ask you to help me? actually, need to specific configurations?
thanks
i'd configured IDS and enabled it. also download rules and adding some rules for IP Flag protocol. unfortunately, packet with ip.flags=0x04(Reserved), ip.flags=0x02(Don't fragment), ip.flags=0x01(More fragments) passed firewall and i receive it.
would i ask you to help me? actually, need to specific configurations?
thanks
4
General Discussion / configure AV but dosen't show any alert in log
« on: January 28, 2019, 10:29:04 am »
hello all,
i follow https://wiki.opnsense.org/manual/how-tos/proxyicapantivirus.html for install and configure av. everythings is ok. for test engine, i went to http://www.eicar.org/85-0-Download.html and used several files in it. but at my logs, i can't see any alert for detecting virus. can you help me? any configuration else needs to do?
thanks for attention and help
i follow https://wiki.opnsense.org/manual/how-tos/proxyicapantivirus.html for install and configure av. everythings is ok. for test engine, i went to http://www.eicar.org/85-0-Download.html and used several files in it. but at my logs, i can't see any alert for detecting virus. can you help me? any configuration else needs to do?
thanks for attention and help
Pages: [1]