On Mon, 04 Apr 2011 17:29:10 +0200, Sebastian Schnur wrote:
Hello list, I'm new here. :)
I will aproax aproach the status of an it specialist in system
integration in June this year.
So I have to do a project: Setting up a proxy server for filtering
(AV, Content) the internet (surf)-traffic.
We currently have squid 2.7 (debian squeeze) installed. I'm
suggesting to replace it with squid3 with c-icap and clamav. I read
about some facts, that users have to click on a link on a webpage
when
they want to download a file, because first of all squid forwards the
request via its icap-client through the icap-server to clamav and
clamav. Is this still the current status? Can I adapt my
configuration
to do it like HTTP Antivirus Proxy (havp) does (sends the
response-file directly to the client)?
Where did you get that "fact"? I don't recall that being true.
* The old clamav integration provided the alternative URL
automatically in the background and the browser would redirect to it
without the user needing to do anything.
* the ICAP filters mid-stream similar to havp. The early clamav server
implementation did have issues around delaying the download while it
pulled in and scanned the whole object. Not sure if that has been
resolved or not.
(I do not use clamav, so may be wrong.)
NP: When you go to squid3 you may want to use the 3.1.11 or later
packages available in the Debian sid repositories. The squeeze package
has a few annoying issues that do not qualify for fixing under the
Debian policy.
Amos
