[squid-users] is squid 3.1.x is multiple chained ICAP server compliance ?

From: David Touzeau <david_at_touzeau.eu>
Date: Fri, 27 Aug 2010 16:32:37 +0200

dear

i have 3 ICAP services

first Kaspersky, second C-ICAP+clamav and third C-ICAP+SquidGuard.

It seems that Squid only use the first one has Kaspersky First for the
respmod

Url are correctly checked because it use only the reqmod but it seems
that the 2 respmod AV services are not chained.

Is squid 3.1 is multiple ICAP respmod compliance or is it only a
failover feature.

i have set this configuration:

# --------- ICAP Services.(2 service(s))

# Kaspersky For Proxy server:
# --------- icap_service KASPERSKY mode 3.1.1

icap_service is_kav_resp respmod_precache routing=on bypass=on
icap://127.0.0.1:1344/av/respmod

# --------- adaptation

adaptation_service_set class_antivirus_kav_resp is_kav_resp
adaptation_access class_antivirus_kav_resp allow all

# C-ICAP:
# --------- icap_service C-ICAP mode 3.1.x
# --------- icap_service C-ICAP + SquidGuard
icap_service service_url_check reqmod_precache routing=on bypass=on
icap://127.0.0.1:1345/url_check

# --------- adaptation

adaptation_service_set class_url_check service_url_check
adaptation_access class_url_check allow all

icap_service service_antivir respmod_precache routing=on bypass=on
icap://127.0.0.1:1345/srv_clamav

# --------- adaptation

adaptation_service_set class_antivirus service_antivir
adaptation_access class_antivirus deny MULTIMEDIA
adaptation_access class_antivirus allow all

icap_enable on
icap_preview_size 128
icap_service_failure_limit -1
icap_preview_enable on
icap_send_client_ip on
icap_send_client_username on
icap_client_username_header X-Authenticated-User
icap_client_username_encode on
Received on Fri Aug 27 2010 - 14:32:47 MDT

This archive was generated by hypermail 2.2.0 : Sat Aug 28 2010 - 12:00:02 MDT