My enviroment: WS<---SRV1(SQUID)<---SRV2 (<--HAVP<--SQUID<--)<---INTERNET
Use HAVP with clam (over socket):
ENABLECLAMD true
CLAMDSERVER 127.0.0.1
CLAMDPORT 3310
Open test page:
http://www.eicar.org/download/eicar_com.zipIn the my Browser see RED attantion about Virus, but without virus name...
In the SRV2 /var/log/clamd/clamd.log - i see info about this virus:
/var/tmp/havp/havp-QuhVRR: Eicar-Test-Signature FOUND
In the SRV2 /var/log/havp/access.log - i see about this virus too:
02/01/2010 12:05:21 192.168.252.17 GET 200
http://www.eicar.org/download/eicar_com.zip 474+184 VIRUS Clamd: Eicar-Test-Signature
Why in the Browser attantion without Virus Name ?
Serg