AVIRA ANTIVIR UNIX WEBGATE, User Manual

Page: 35 / 83

Configuration
34
AntiVir WebGate Avira GmbH
4.5 Configuration Files
This part describes the structure of AntiVir WebGate configuration files. WebGate
reads these files by program start. It ignores empty lines and commented lines,
beginning with #.
The program is provided with default values, which are important for many procedures.
Some options can be deactivated with a # at the beginning of the line (commented) or can
be set with default values. These can be activated by removing the # character or by
changing the values.
4.5.1 Configuration File avwebgate.conf
This section provides a short description of the entries in
avwebgate.conf
. The
settings affect only AntiVir WebGate’s behavior and no other AntiVir programs.
They partly depend on the basic configuration, on which WebGate has to run (see
Monitoring HTTP Traffic – Page 26). You can also learn how to make these settings
using a graphical user interface, in Configuring AntiVir WebGate Using the GUI –
Page 62.
HTTPPort Port for scanning HTTP connections:
This sets the port on which WebGate responds to HTTP requests from Client or
proxy computers. There are various setups needed, according to the configuration
(see
Monitoring HTTP Traffic – Page 26).
The default is:
HTTPPort [host_ip_or_name:]8080
We recommend not to allow access to WebGate from outside your network. WebGate
should be therefore connected only to the internal network interface. If you have
installed WebGate as parent proxy on the same computer as your existing proxy server,
we recommend for example, the following settings:
HTTPPort 127.0.0.1:8080.
If neither hostname nor IP address are specified, the port is linked to all interfaces.
FTPPort Port for scanning FTP connections:
WebGate can also monitor real FTP connections. Unlike "FTP over HTTP",
WebGate communicates with the Client over FTP. This entry sets the port on
which WebGate responds to Client computers or to the FTP proxy server for FTP
connections.
FTPPort [hostname_or_ip:]2121
ICAPPort Port for ICAP support:
WebGate can be integrated with the ICAP interface (as ICAP server). This entry
sets the communication port between WebGate and the ICAP Clients.
ICAPPort [hostname_or_ip:]1344
User
Group
Switching to users and groups:
After starting, WebGate can switch to other user and group, for running its
process. WebGate should not run as root. Enter the user and group IDs, which