HTTP Anti-Virus Proxy

Hi, I use havp as transparent proxy for antivirus in my server. There are
about 60 users behind the server. I found that the performance is not
good enough when surfing the net. I had do some changes in havp config
file like follows:

SERVERNUMBER 40
MAXSERVERS 100
LOG_OKS false
LOGLEVEL 0
MAXSCANSIZE 20480
SCANIMAGES false

When I go to some website like Yahoo or Youtube, it takes over 20s to load a page.
So, is there any way to improve havp by adjusting config file or something?
I also found two parameter “KEEPBACKBUFFER” & “KEEPBACKTIME” in havp.conf.
Are these parameters helpful for speeding up havp ?

Version: HAVP 0.84
AV Engine: Sophos

Thanks

First of all, your MAXSCANSIZE is not very sensible. I would set it atleast 500000 or else viruses can leak through.

The default keepback settings are sensible, they don't affect speed at all..

So what kind of server do you have?

My server is P4 3.2G with 1GB ram, and OS is Fedora Core 4.


Thanks

Server seems to be more than enough to not slow down anything. Could you try with ClamAV if it works fine? Maybe there is something strange going on with Sophos.

Ok, I will try that.

Thanks

Would you please show/tell me how to access the config file on IPCOP? Please. I've tried the commands I found, but do luck; perhaps they assume prior commands and I don't know what those are. Please if you'd show me from start to end. Thanks so much.

can i dont scan some sites? im using havp with squid parent proxy...
and i dont want scan sites like youtube or dailymotion
any ideia?

How about the whitelist file?

Best way to get high-performance from HAVP.

1. Use the 'squid sandwitch' config.

2. Set aggressive whitelists for high-bandwidth sites and content, like Flikr/youtube, etc.

With a 8x8 box (dual quad core, 8 gigs) we plan on serving a few thousand users.