Re: [squid-users] Squid3 with ClamAV and Contentfilter

 On Mon, 04 Apr 2011 17:29:10 +0200, Sebastian Schnur wrote:
> Hello list, I'm new here. :)
>
> I will aproax aproach the status of an it specialist in system
> integration in June this year.
>
> So I have to do a project: Setting up a proxy server for filtering
> (AV, Content) the internet (surf)-traffic.
>
> We currently have squid 2.7 (debian squeeze) installed. I'm
> suggesting to replace it with squid3 with c-icap and clamav. I read
> about some facts, that users have to click on a link on a webpage
> when
> they want to download a file, because first of all squid forwards the
> request via its icap-client through the icap-server to clamav and
> clamav. Is this still the current status? Can I adapt my
> configuration
> to do it like HTTP Antivirus Proxy (havp) does (sends the
> response-file directly to the client)?

 Where did you get that "fact"? I don't recall that being true.

  * The old clamav integration provided the alternative URL
 automatically in the background and the browser would redirect to it
 without the user needing to do anything.
  * the ICAP filters mid-stream similar to havp. The early clamav server
 implementation did have issues around delaying the download while it
 pulled in and scanned the whole object. Not sure if that has been
 resolved or not.

 (I do not use clamav, so may be wrong.)

 NP: When you go to squid3 you may want to use the 3.1.11 or later
 packages available in the Debian sid repositories. The squeeze package
 has a few annoying issues that do not qualify for fixing under the
 Debian policy.

 Amos
Received on Mon Apr 04 2011 - 23:46:32 MDT