Plugins: Antivirus Reports or Logs

[rout3rx]

Hello friends
as you know, the last update clamav + c-icap added in opnsense.
where can i see the Logs of clamav if any malware detected?
and another question, should clients use proxy for using antivirus? or all the traffic checks when it started?

in onion router plugin, do you have any document about the configuration?
thanks

[kekek2]

I wrote a viewing of logs, but it uses https://github.com/opnsense/core/pull/1613

[rout3rx]

it seems have problems. Is there any packages that can i install on the device?

[fichtner]

We're not quite there yet WRT syslog-ng. I think we can easily add a log page, but handing over to maintainer to tell us which logs are needed. :)

[rout3rx]

hello fichtner,
thanks, i need to see the Antivirus logs, i need to see which malware blocked or not.

[mimugmail]

Viruses are logged to /var/log/c-icap/server.log
I'll try to add a viewer for it the next days.

[mimugmail]

@fichtner
Is this still allowed for new implementations:
https://github.com/opnsense/plugins/blob/master/security/tinc/src/opnsense/mvc/app/models/OPNsense/Tinc/Menu/Menu.xml#L5

[fichtner]

yes, it uses an easy-edit template to minimise impact

[mimugmail]

@fichtner is it problematic to refactor the menu like this?

[fichtner]

no, not at all :)

[mimugmail]

@kekek2 ok for you? Since you also contribute to c-icap :)

[kekek2]

We have made a separate tab

[mimugmail]

How do you include the url into the tab? My html skills are nearly 0 :)

[kekek2]

Just as in the settings of squid

[mimugmail]

I had a look at all Services, everytime there's a Log File the Menu has subfolders, so I would refactor like this, also for ClamAV plugin.

[fichtner]

Alex's variant is more pretty but relies on newer code I still have on my TODO list. The current way of extra log page is the only portable way at the moment, because these templates do not work when embedded into MVC code.

[rout3rx]

is there any patch for add this separate tab?

[rout3rx]

no one help me? i don't know it is on the the update or not.

[mimugmail]

The logviewer will be in the next Update :)

[rout3rx]

@mimugmail hi,
i update opnsense but nothing around ClamAV reports added...

[mimugmail]

Oh, I completely forgot it, sorry. I'll try to push it to 17.7.9.

[rout3rx]

thanks a lot. would you say me When will the new version come about? i can have any patch file until that?
excuse me, thanks

[mimugmail]

Sorry, now I reread the issue ... you would see blocked viruses in Services - C-ICAP - Logs
I'll add a Logviewer for ClamAV too but this wont fit your needs, it's already in C-ICAP Log