Re: [squid-users] webwasher ssl content scanner anyone ?

From: Christoph Haas <email@dont-contact.us>
Date: Fri, 8 Sep 2006 11:12:22 +0200

On Friday 08 September 2006 10:46, Jakob Curdes wrote:
> >>Note: You won't be able to scan CONNECT requests (https) via ICAP.
> >> ICAP only deals with HTTP data, and CONNECT switches to tunnel mode
> >> outside of HTTP.
>
> The only thing I wanted to know is if I can chain webwasher with squid;

You can. No problems to even run both processes on the same server. There
are even features that allow you to take the "Proxy-Authorization" header
(passed on through cache_peer) and assign a certain WebWasher profile to
certain users. We are doing LDAP authenticatio at Squid level but assign
further content filtering profiles at the WebWasher.

The reason I sound so euphoric is that I've wasted a whole year testing
different content filters and discovered that most of the commercial
software out there on the market is even worse than I expected. I'm still
dreaming of an OSS content filtering proxy. The ICAP interface would make
it a perfect addition to Squid then.

 Christoph
Received on Fri Sep 08 2006 - 03:12:31 MDT

This archive was generated by hypermail pre-2.1.9 : Sun Oct 01 2006 - 12:00:03 MDT