HTTP Anti-Virus Proxy

Official HAVP Support Forum
Registration disabled, I'm tired of spambots. E-mail havp@hege.li if you have questions.
HAVP project is pretty much frozen/abandoned at this time anyway.
It is currently 22 Jun 2014 09:52

All times are UTC + 2 hours [ DST ]




Post new topic Reply to topic  [ 2 posts ] 
Author Message
 Post subject: Logging
PostPosted: 19 May 2006 12:42 
Offline

Joined: 29 Mar 2006 17:52
Posts: 11
Hi

Been using HAVP and am well impressed with it.

What im trying to do is log any virus to a MySQL database. What ive done is changed virus.html in the templates directory to

<html>
<head>
<meta http-equiv="refresh" content="0;URL=http://server/cgi-bin/virus.cgi?virus<!--message-->">
</head>

This redirects when a virus is found and my virus.cgi script logs the info to the MySql db, what I dont have is the original source IP as I run with Squid in front. Can you add a variable e.g. <!--sourceip--> so I can use in the redirection?

Or does anyone have a better way of doing this?

Thanks

Paul


Top
 Profile  
 
 Post subject:
PostPosted: 19 May 2006 14:34 
Offline
HAVP Maintainer

Joined: 27 Feb 2006 19:08
Posts: 62
I would use the access.log. Everything you need is in this log. If you found a virus in this log you can put it in your db.

Using the redirect is not very reliable. The browser will not get the error page in some cases. If you hava a virus in a binary and the header is already send to the browser the error page will not work.


Top
 Profile  
 
Display posts from previous:  Sort by  
Post new topic Reply to topic  [ 2 posts ] 

All times are UTC + 2 hours [ DST ]


Who is online

Users browsing this forum: No registered users and 1 guest


You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot post attachments in this forum

Search for:
Jump to:  
Powered by phpBB® Forum Software © phpBB Group