HTTP Anti-Virus Proxy

Official HAVP Support Forum
Registration disabled, I'm tired of spambots. E-mail havp@hege.li if you have questions.
HAVP project is pretty much frozen/abandoned at this time anyway.


All times are UTC + 2 hours [ DST ]




Post new topic Reply to topic  [ 1 post ] 
Author Message
PostPosted: 29 Jun 2011 19:14 
Offline

Joined: 29 Jun 2011 18:40
Posts: 2
Hi,
I'm running havp 0.92 between Squid 2.7 stable 3 on debian 5. As scanengine I'm using ClamAV 0.97
From time to time I test a download of eicar.com. Since about two weeks a download from
GET 200 http://www.eicar.org/download/eicar.com 436+0 OK
is not recognized as virus, while a download from
GET 200 http://meineipadresse.de/testvirus/eicar.tar 431+1536 VIRUS ClamAV: Eicar-Test-Signature
is blocked, like it should.
I downloaded both files to /tmp of the proxy server and did a
clamscan eicar.com
both files are reported to be infected, a "diff eicar.com eicar.com.1" shows no difference.
The file should not be cached, since i started squid with empty cache and also connected the browser directly to the havp instance.

Any idea?
Best Regards
Peter


Top
 Profile  
 
Display posts from previous:  Sort by  
Post new topic Reply to topic  [ 1 post ] 

All times are UTC + 2 hours [ DST ]


Who is online

Users browsing this forum: Google [Bot] and 2 guests


You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot post attachments in this forum

Search for:
Jump to:  
Powered by phpBB® Forum Software © phpBB Group