Re: [squid-users] Squidclamav - content doesen´t get scanned | squid 2.7 squidclamav 5.7

From: Amos Jeffries <squid3_at_treenet.co.nz>
Date: Fri, 18 Feb 2011 01:08:16 +1300

On 17/02/11 23:13, marco wrote:
> Howdi folks,
>
>
> i setup the squidclamav as the howto from:
> http://www.kernel-panic.it/openbsd/proxy/proxy5.html
>
> but it doesent work.
> Clamd creates the Socket but nothing happens if i interact with the
> squidclamav:
>
> root_at_debian:/var/run# /usr/local/bin/squidclamav -c /etc/squidclamav.conf
> SquidClamav v5.7 running in interactive mode
> Thu Feb 17 11:07:30 2011 LOG Anonymizing User-Agent: Mozilla/4.0
> (compatible; MSIE 6.0; Windows NT 5.1; SV1)
> Thu Feb 17 11:07:30 2011 LOG SquidClamav v5.7 (PID 1714) started
> http://www.testvirus.de/testvirus/eicar.com 10.12.0.5 mylog GET
>
>
> only empty lines is the Result.
> normaly this link points directly on a test Virus.
>

empty lines is the re-writers OK/no-change result.

It appears as if the scan downloaded the URL and found no virus. There
apparently is a bypass mode in old squidclamav. Check that you turned
this OFF for manual testing.

Amos

-- 
Please be using
   Current Stable Squid 2.7.STABLE9 or 3.1.11
   Beta testers wanted for 3.2.0.5
Received on Thu Feb 17 2011 - 12:08:21 MST

This archive was generated by hypermail 2.2.0 : Thu Feb 17 2011 - 12:00:05 MST