Author Topic: What does the avast Webproxy filter?  (Read 4837 times)

0 Members and 1 Guest are viewing this topic.

afragnicht

  • Guest
What does the avast Webproxy filter?
« on: April 24, 2010, 02:18:27 PM »
Hello,

I am playing around with Proximetron and avast Server 4.8 on my Gateway. Luckily I discovered, how to implement avasts Webproxy on Port 12080 for Proymetron as External Proxy Server.

When I go to eicar.org and start downloading eicar.com the file comes through the system unchecked and my Browser wants to save it on my Client Workstation.

Are downloaded files not filtered by avast? In Proxymetrons Log I see that avast was correctly used:
=============== snip =============
Using Proxy - 127.0.0.1:12080
GET http://www.eicar.org/download/eicar.com HTTP/1.1
Accept: image/gif, image/jpeg, image/pjpeg, application/x-ms-application, application/vnd.ms-xpsdocument, application/xaml+xml, application/x-ms-xbap, application/x-shockwave-flash, */*
Referer: http://www.eicar.org/anti_virus_test_file.htm
Accept-Language: de
User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.0; WOW64; Trident/4.0; SLCC1; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729)
Content-Filter-Helper: E4E5F6D652BC5A6F40D6FB2C
Accept-Encoding: gzip, deflate
Host: www.eicar.org
If-Modified-Since: Fri, 04 Jul 2008 10:38:03 GMT
Connection: keep-alive

==================== snap =============

But no Result of virus scanning.
In my avast settings local connections are not ignored.

Please tell me how to use it right.

Chris

afragnicht

  • Guest
Re: What does the avast Webproxy filter?
« Reply #1 on: April 26, 2010, 12:54:00 PM »
I found a solution here: http://forum.avast.com/index.php?topic=50729.15

======================= snip =============
Anyway!! don't you guys use spycar test files inspite of eicar? Avast detects it as well. 
http://www.spycar.org/Welcome%20to%20Spycar.html
========================== snap ==============

This works for me for the first moment, but I want to see webproxy filtering also the eicar.com

My second question is How can I activate script blocking for Proxymetron?