HTTP Anti Virus Proxy
HAVP (HTTP Anti Virus Proxy) is a proxy which scans downloads for viruses with several scanners (ClamAV, F-Prot, Kaspersky, NOD32, Sophos) at the same time. The main aims are continuous, non-blocking downloads and smooth scanning of dynamic and password protected HTTP traffic. It can be used with squid or standalone, and it also supports transparent proxy mode.
| Tags | Internet Proxy Servers Networking Firewalls Web |
|---|---|
| Licenses | GPL |
| Operating Systems | POSIX Linux |
| Implementation | C++ |
Recent releases
- 02 Apr 2009 17:55
Changes: ClamAV library 0.95 support (recompilation is needed). Support for NOD32 version 3 (set NOD32VERSION 30 in config). PRELOADZIPHEADER config has been added (Squid 3.x might not work if this is enabled). SYSLOGVIRUSLEVEL config has been added.
- 07 Aug 2008 17:09
Changes: A possible retry loop and hang has been fixed. The Via: header is always sent, which fixes some IIS problems (e.g. MSNBC).
- 16 Apr 2008 03:53
Changes: ClamAV library 0.93 is supported (recompilation is needed, and the CLAMMAXSCANSIZE option was added). CLAMMAXFILESIZE default is now 100MB. A random seed issue (in which ClamAV generated some temporary file errors) was fixed. DISABLELOCKINGFOR config was added, which fixes ZIP handling in ClamAV 0.93. Arcavir version 2008 support was added. Log scanner errors are sent to the errorlog. SSL/CONNECT port limits were relaxed. (It is not recommended to use --enable-ssl-tunnel, since Squid should be used instead.)
- 24 Jan 2008 10:26
Changes: DrWeb scanner support has been added. F-Prot support for v6.0 has been added (also check FPROTOPTIONS). If X_FORWARDED_FOR is false, this release also drops the Via: header for privacy. Avast and AVG bugs have been fixed. Templates support "url" and "clientip" tags. Supplementary groups for user are used if defined. A TRICKLINGBYTES configuration option has been added. The *MAXFILES settings have been reduced to 50 for performance reasons. The missing HTTP methods MKACTIVITY, CHECKOUT, and MERGE have been added.
- 17 Apr 2007 06:06
Changes: Experimental support was added for chunked Transfer-Encoding, which fixes some broken sites. The IGNOREVIRUS configuration directive was added for whitelisting virus names. The CLAMBLOCKBROKEN configuration directive was added. Detection with AVG was improved. HAVP is killed if database reloading fails for Library Scanner. The URL is logged when a crashed scanner process is detected. The build system updated, adding the --prefix, --sbindir, --sysconfdir, and --localstatedir options.
