configuring web+icap+clamav

[martint]

Hello,

Please advise how to set up web + icap + avscan correctly
I tried it over eicar. Instead of the blocked page, he offered me to download the file.

Well thank you
my settings:
Version OPNsense 20.1.6-amd64


upload pic


upload pic


upload pic


upload pic


upload pic

[Mitheor]

Web proxy or transparent proxy?

That part of the config is missing.

[martint]

Hi,

Sorry yes transparent proxy.

Thanks


upload pic


upload pic

[Mitheor]

I suppose in the first tab the proxy is enable.

And what link are you using to try the AV?  Notice that you´re only using the proxy for HTTP

[martint]

Hi,

I tried all the files via http protocol ...


upload pic


upload pic

[Mitheor]

Ok, everything looks fine. Maybe a service / system reboot would make it work.

I remember having to reboot my OPNSense after configuring Clamav.

If that doesn´t work i´d check first if the traffic is being forwarded to the proxy.

I'm sorry I couldn't be more helpful :(

[martint]

Hi,

Thank you for supporting

The problem is on the eicar site. They also sent files via the http protocol as https.
I found another page http://www.rexswain.com/eicar.html which only goes http and it worked for me there.

Well thank you