HTTP Anti-Virus Proxy
http://havp.hege.li/forum/

Lock down HAVP
http://havp.hege.li/forum/viewtopic.php?f=3&t=62
Page 1 of 1

Author:  housey [ 29 Mar 2006 17:54 ]
Post subject:  Lock down HAVP

Hi

Just found HAVP and it looks like it just what ive been looking for - thanks!

I cant see anyway (within HAVP) to lock down who can access it?

i.e. I set it up and any IP can use it, do you have to use something like IPTables to lock it down?

Cheers

Paul

Author:  Christian [ 29 Mar 2006 18:07 ]
Post subject: 

If you want to allow only some ips you can use iptables.

If you want to allow only some users you need a proxy that supports authentication e.g. squid. This proxy can use havp as parent proxy.

Author:  housey [ 29 Mar 2006 18:23 ]
Post subject: 

Thanks

I was intending on using squid -> HAVP

I know I can control squid with ACL's but can I configure HAVP (without IPtables) to only allow requests on 127.0.0.1? or would I still need to confirgure this with IPTables?

Cheers

Paul

Author:  Christian [ 29 Mar 2006 18:32 ]
Post subject: 

You can bind havp to 127.0.0.1.


#
# IP address that HAVP listens on.
# Let it be undefined to bind all addresses.
#
# Default: NONE
BIND_ADDRESS 127.0.0.1


This will be enough

Author:  housey [ 29 Mar 2006 18:35 ]
Post subject: 

Thanks

My apologies I should have spotted that in the conf file!

Paul

Page 1 of 1 All times are UTC + 2 hours [ DST ]
Powered by phpBB® Forum Software © phpBB Group
https://www.phpbb.com/