[squid-users] icap dies on downloading www.gliffy.com plugin

From: Sean Boran <sean_at_boran.com>
Date: Fri, 21 Dec 2012 06:25:11 +0100

Hi,

the URL http://www.gliffy.com/products/confluence-plugin/download/archive/gliffy-confluence-plugin-5.0.3.jar
Consistently gives the error:
ICAP protocol error.
The system returned: [No Error]
This means that some aspect of the ICAP communication failed.
Some possible problems are:
The ICAP server is not reachable.
An Illegal response was received from the ICAP server.

In the squid log:
TCP_MISS/500 3347 GET
http://www.gliffy.com/products/confluence-plugin/download/archive/gliffy-confluence-plugin-5.0.3.jar
- HIER_DIRECT/63.246.25.247 text/html

Increasing icap debug to level2:
Fri Dec 21 06:14:03 2012, general, DEBUG
squidclamav_init_request_data: initializing request data handler.
Fri Dec 21 06:14:03 2012, general, DEBUG
squidclamav_check_preview_handler: processing preview header.
Fri Dec 21 06:14:03 2012, general, DEBUG
squidclamav_check_preview_handler: preview data size is 1024
Fri Dec 21 06:14:03 2012, general, DEBUG
squidclamav_check_preview_handler: X-Client-IP: 2001:918:xxxxx
Fri Dec 21 06:14:03 2012, general, DEBUG
squidclamav_check_preview_handler: URL requested:
http://www.gliffy.com/products/confluence-plugin/download/archive/gliffy-confluence-plugin-5.0.3.jar
Fri Dec 21 06:14:03 2012, general, DEBUG
squidclamav_check_preview_handler: Content-Type:
application/x-java-archive
Fri Dec 21 06:14:05 2012, general, Bug in the service. Please report
to the servive author!!!!
Fri Dec 21 06:14:05 2012, general, DEBUG
squidclamav_release_request_data: Releasing request data.

grep icap /etc/squid/squid.conf:
icap_enable on
icap_send_client_ip on
icap_send_client_username on
icap_client_username_encode off
icap_client_username_header X-Authenticated-User
icap_preview_enable on
icap_preview_size 1024
icap_service service_req reqmod_precache bypass=0
icap://127.0.0.1:1344/squidclamav
icap_service service_resp respmod_precache bypass=0
icap://127.0.0.1:1344/squidclamav

egrep -v '^#|^ *$' /etc/c-icap/c-icap.conf
PidFile /var/run/c-icap/c-icap.pid
CommandsSocket /var/run/c-icap/c-icap.ctl
Timeout 300
MaxKeepAliveRequests 100
KeepAliveTimeout 600
StartServers 30
MaxServers 200
MinSpareThreads 10
MaxSpareThreads 20
ThreadsPerChild 10
MaxRequestsPerChild 0
Port 1344
User c-icap
Group nogroup
ServerAdmin root_at_mydomain.ch
ServerName proxy.mydomain.ch
TmpDir /tmp
MaxMemObject 131072
DebugLevel 2
ModulesDir /usr/lib/c_icap
ServicesDir /usr/lib/c_icap
TemplateDir /usr/share/c_icap/templates/
TemplateDefaultLanguage en
LoadMagicFile /etc/c-icap/c-icap.magic
RemoteProxyUsers off
RemoteProxyUserHeader X-Authenticated-User
RemoteProxyUserHeaderEncoded on
ServerLog /var/log/c-icap/server.log
AccessLog /var/log/c-icap/access.log
Service squidclamav squidclamav.so
Service echo srv_echo.so

egrep -v '^#|^ *$' /etc/c-icap/srv_squidclamav.conf
maxsize 5000000
redirect http://myproxy.ch:8080/cgi-bin/clwarn.cgi
clamd_local /var/run/clamav/clamd.ctl
timeout 1
logredir 1
dnslookup 0
abort ^.*\.(ico|gif|png|jpg)$
abortcontent ^image\/.*$
abortcontent ^text\/.*$
abortcontent ^application\/x-javascript$
abortcontent ^video\/x-flv$
abortcontent ^video\/mp4$
abort ^.*\.swf$
abortcontent ^application\/x-shockwave-flash$
abortcontent ^.*application\/x-mms-framed.*$
whitelist .*\.clamav.net
whitelist .*sourceforge\.net/.*clamav

Any suggestions please? Can other verify this issue?

I'm running a new compile about a week old.

Thanks.....
Received on Fri Dec 21 2012 - 05:25:20 MST

This archive was generated by hypermail 2.2.0 : Fri Dec 21 2012 - 12:00:09 MST