Configuration
Avira GmbH
Avira AntiVir WebGate
26
4.4
Configuration Files
This part describes the contents of Avira AntiVir WebGate configuration files:
•
/etc/avwebgate.conf
- Product configuration
•
/etc/avwebgate-scanner.conf
- Scanner configuration
•
/etc/avira/avupdate.conf
- Updater configuration
•
/etc/avwebgate.acl
- Access Control List configuration
The program is provided with default values, which are important for many procedures.
Some options can be deactivated with a # at the beginning of the line (commented) or can
be set with default values. These can be activated by removing the # character or by
changing the values.
4.4.1 Product Configuration in avwebgate.conf
This section provides a short description of the entries in
/etc/avwebgate.conf
. The
settings affect only Avira AntiVir WebGate’s behavior and no other AntiVir
programs. They partly depend on the basic configuration, on which WebGate has
to run (see
Monitoring HTTP Traffic
– Page 18).
HTTPPort
Port for scanning HTTP connections:
This sets the port on which WebGate responds to HTTP requests from Client or
proxy computers. There are various setups needed, according to the configuration
(see
Monitoring HTTP Traffic
– Page 18).
The default is:
HTTPPort [host_ip_or_name:]8080
We recommend
not to
allow access to WebGate from outside your network. WebGate
should be therefore connected only to the internal network interface. If you have
installed WebGate as parent proxy on the same computer as your existing proxy server,
we recommend for example, the following settings:
HTTPPort 127.0.0.1:8080.
If neither hostname nor IP address are specified, the port is linked to all interfaces.
FTPPort
Port for scanning FTP connections:
WebGate can also monitor
real
FTP connections. Unlike "FTP over HTTP",
WebGate communicates with the Client over FTP. This entry sets the port on
which WebGate responds to Client computers or to the FTP proxy server for FTP
connections.
FTPPort [hostname_or_ip:]2121
ICAPPort
Port for ICAP support:
WebGate can be integrated with the ICAP interface (as ICAP server). This entry
sets the communication port between WebGate and the ICAP Clients.
ICAPPort [hostname_or_ip:]1344
User
Group
Switching to users and groups:
After starting, WebGate can switch to other user and group, for running its
process. WebGate should not run as root. Enter the user and group IDs, which
