On Friday 08 September 2006 10:46, Jakob Curdes wrote: > >>Note: You won't be able to scan CONNECT requests (https) via ICAP. > >> ICAP only deals with HTTP data, and CONNECT switches to tunnel mode > >> outside of HTTP. > > The only thing I wanted to know is if I can chain webwasher with squid; You can. No problems to even run both processes on the same server. There are even features that allow you to take the "Proxy-Authorization" header (passed on through cache_peer) and assign a certain WebWasher profile to certain users. We are doing LDAP authenticatio at Squid level but assign further content filtering profiles at the WebWasher. The reason I sound so euphoric is that I've wasted a whole year testing different content filters and discovered that most of the commercial software out there on the market is even worse than I expected. I'm still dreaming of an OSS content filtering proxy. The ICAP interface would make it a perfect addition to Squid then. Christoph