Re: [squid-users] R: Re: [squid-users] Squid + Antivirus

From: Amos Jeffries <squid3_at_treenet.co.nz>
Date: Tue, 24 Mar 2009 00:02:09 +1300

projproxy_at_libero.it wrote:
> Thanks for your hint....
> Than, do you mean that just with a url-rewrite-program in squid.conf with
> path to clamav I can let the antivirus check through each request on squid?
> Or I need a redirection configuration?
> I wonder if it would be really necessary a redirector program?

No, the redirector method was a hack.
The 'redirector' receives the URL from Squid and does a download of its
own through a back channel. Which after receiving any AV can scan as a
local disk file. It then either redirects squid to a local URI for the
saved object, redirects to an error page about the bad object, or
permits squid to D/L the object a seconds time and send it to the client.

ICAP is *much* easier, less resource hungry, and less breakable.

> The problem is that i´m implementing on both system Suse and windows.
> I should simply tell squid to let the antivirus control what is passing
> through...
>
> If you have other advices, I´ll be thankful.
>
>
>
>> ----Messaggio originale----
>> Da: squid3_at_treenet.co.nz
>> Data: 23-mar-2009 11.13
>> A: "projproxy_at_libero.it"<projproxy_at_libero.it>
>> Cc: <squid-users_at_squid-cache.org>
>> Ogg: Re: [squid-users] Squid + Antivirus
>>
>> projproxy_at_libero.it wrote:
>>> Hi,
>>> I´d like to have some answers about using squid with an antivirus.
>>> I´m using squid as webproxy and I would like to set an antivirus to check
> all
>>> squid is passing to the end-user.
>>> I found some information about Clamav...but the problem is that no
> example
>>> of configuration with squid and my aim was mentioned.
>>> -Is it possible to now wich kind of line should I configure in squid to
> let
>>> check by Clamav what squid is proxying?
>> IIRC Clam permits either a custom ACL or redirector doing fancy
>> background load-save-scan-permit/deny or with Squid-3 it can do ICAP
>> much simpler.
>>
>> Others like NOD32 act like child/parent proxies to pull info through.
>>
>> Websense IIRC maybe is a redirector when linked to Squid?
>>
>>> -If Clamav is not a good solution (relationed to squid) could you please
> give
>>> me an advice about a good antivirus I could use with squid (and possibly
> some
>>> informations about the way to configure it)?
>> I've heard people mention good stuff about squid integration with
>> ClamAV, HAVP, NOD32.
>> There may be others I' haven't heard of yet.
>>
>> hope that helps you some. no configs though.
>>
>>> I´m really satisfy from squid, and I´d like to bring finally this project
> out
>>> of the test phase.
>>> Thanks in advance to everybody.
>> Indeed I'd like to get this into the wiki ASAP.
>>
>> Is anyone able to either add a ConfigExamples page for it or publish
>> details here?
>>
>> Amos
>> --
>> Please be using
>> Current Stable Squid 2.7.STABLE6 or 3.0.STABLE13
>> Current Beta Squid 3.1.0.6
>>
>
>

-- 
Please be using
   Current Stable Squid 2.7.STABLE6 or 3.0.STABLE13
   Current Beta Squid 3.1.0.6
Received on Mon Mar 23 2009 - 11:01:25 MDT

This archive was generated by hypermail 2.2.0 : Mon Mar 23 2009 - 12:00:02 MDT