enable the opnsense test ruleset and try to download the eicar virus:

http://www.eicar.org/download/eicar.com.txt

it should block (over http)

closes https://github.com/opnsense/core/issues/884