HTTP Anti-Virus Proxy

Official HAVP Support Forum
Registration disabled, I'm tired of spambots. E-mail havp@hege.li if you have questions.
HAVP project is pretty much frozen/abandoned at this time anyway.
It is currently 22 Jun 2014 09:52

All times are UTC + 2 hours [ DST ]




Post new topic Reply to topic  [ 6 posts ] 
Author Message
PostPosted: 11 May 2010 02:20 
Offline

Joined: 11 May 2010 02:15
Posts: 3
widows authentication only working if proxy is turned off. if I turn on web proxy and transparent proxy on green (anti-virus scan enabled) i can no longer authenticate. i tried advproxy but that also disables the network virus scan. need a workaround or setting fix for a client. THANK YOU


Top
 Profile  
 
PostPosted: 11 May 2010 08:24 
Offline

Joined: 23 Apr 2008 09:36
Posts: 101
Hi harryknuckles69!
You are using copfilter on an ipcop system?
You can find some information and the solution on this page:
http://www.copfilter.org/wiki/doku.php? ... gs-problem
The workaround is only in german this time, but it should be self complained. Let me know, if you have some problems.

You can find find a forum for copfilter related questions on http://www.copfilter.org/forum

regards


Top
 Profile  
 
PostPosted: 12 May 2010 05:45 
Offline

Joined: 11 May 2010 02:15
Posts: 3
I found a workaround, in ipcop: leave "enabled on green" proxy checked, but uncheck "transparent on green" proxy.
Then setup web browser to use proxy in manual configuration to use ipcop ip address and use port 800 for all entries (tested in firefox).
Then put in address to force authentication in No Proxy for at the bottom.

This forced authentication for the website I wanted and antivirus is still working in copfilter - eicar test.

Firefox -> tools -> options-> advanced -> network -> settings ->

my ipcop ip is 192.168.1.252
web address that needs authentication admin.spatechadmin.com
*** need to clear cache in ipcop and firefox to test after you make changes.

Firefox setting looked like this:

Attachment:
setting.jpg
setting.jpg [ 142.97 KiB | Viewed 3133 times ]


Top
 Profile  
 
PostPosted: 12 May 2010 09:59 
Offline

Joined: 23 Apr 2008 09:36
Posts: 101
This is the same way to make a proxy exception, as my described way! The only difference is, that you are loosing the transparent proxy conduct.
So I'm glad to hear, that this works for you!


Top
 Profile  
 
PostPosted: 12 May 2010 21:09 
Offline

Joined: 11 May 2010 02:15
Posts: 3
website I needed to authenticate was admin.spatechadmin.com and keep green transparent proxy on to enable network anti-virus.

Here is the fix in English:

Windows Authentication with transparent proxy on. Part I


Putty to ipcop, logon as root, enter password

cd /var/log/copfilter/default/opt/havp/etc/init.d

vi copfilter_havp

# COPFILTER START - havp - do not modify
acl copfilter_all src 0.0.0.0/0.0.0.0
acl Scan_HTTP proto HTTP
acl Scan_FTP proto FTP

cache_peer 127.0.0.1 parent 10080 0 no-query no-digest no-netdb-exchange default
cache_peer_access 127.0.0.1 allow copfilter_all

acl NOSCAN dstdomain admin.spatechadmin.com
always_direct allow NOSCAN

always_direct allow Scan_FTP
never_direct allow Scan_HTTP
# COPFILTER END - havp - do not modify

*** Need to enter this for it to work in the correct location***

acl NOSCAN dstdomain admin.spatechadmin.com
always_direct allow NOSCAN


Windows Authentication with transparent proxy on. Part II


Linux Commands:

The most important commands in vi are these:
Press i to enter the Insert mode. Now you can type in your text.
To leave the Insert mode press ESC.
To delete the character that is currently under the cursor you must press x (and you must not be in Insert mode because if you are you will insert the character x instead of deleting the character under the cursor). So if you have just opened the file with vi, you can immediately use x to delete characters. If you are in Insert mode you have to leave it first with ESC.
If you have made changes and want to save the file, press :x (again you must not be in Insert mode. If you are, press ESC to leave it).
If you haven't made any changes, press :q to leave the file (but you must not be in Insert mode).
If you have made changes, but want to leave the file without saving the changes, press :q! (but you must not be in Insert mode).
Please note that during all these operations you can use your keyboard's arrow keys to navigate the cursor through the text.
*** Clear proxy cache then reboot ipcop, also clear browser cache

thank you! karesmakro


Top
 Profile  
 
PostPosted: 12 May 2010 21:25 
Offline

Joined: 23 Apr 2008 09:36
Posts: 101
I would prefer this way! Especially in a big network area this way is saving much time :D
Nice howto!


Top
 Profile  
 
Display posts from previous:  Sort by  
Post new topic Reply to topic  [ 6 posts ] 

All times are UTC + 2 hours [ DST ]


Who is online

Users browsing this forum: Google [Bot] and 2 guests


You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot post attachments in this forum

Search for:
Jump to:  
Powered by phpBB® Forum Software © phpBB Group