On 18/05/2015 11:17 p.m., Stefan Kuegler wrote: > Hi Yuri. >> >> http://i.imgur.com/mW7gNwD.png >> >> http://squidclamav.darold.net/config.html >> >> This is for squidclamav (I use it and have no problems with malware). > > I just installed squidclamav - but the behaviour is always the same. An > object which has been stored in squid-cache will not be detected by an > icap server because squid does not scan the body again: > > squidclamav.c(283) squidclamav_init_request_data: DEBUG initializing > request data handler. > pool hits:5 allocations: 1 > Allocating from objects pool object 0 > Requested service: squidclamav > squidclamav.c(337) squidclamav_check_preview_handler: DEBUG processing > preview header. > squidclamav.c(358) squidclamav_check_preview_handler: DEBUG X-Client-IP: > 192.168.216.54 > squidclamav.c(1319) extract_http_info: DEBUG method GET > squidclamav.c(1330) extract_http_info: DEBUG url > http://www.intern/eicar_com.zip > squidclamav.c(389) squidclamav_check_preview_handler: DEBUG URL > requested: http://www.intern/eicar_com.zip > squidclamav.c(430) squidclamav_check_preview_handler: DEBUG > Content-Length: 0 > squidclamav.c(449) squidclamav_check_preview_handler: DEBUG No body > data, allow 204 > squidclamav.c(304) squidclamav_release_request_data: DEBUG Releasing > request data. > Storing to objects pool object 0 > Log request to access log file /var/log/c-icap/access.log > Width: 0, Parameter: > > Any idea, how I can solve that problem. It seems that the only way to be > secure is to disable caching in squid. But I hope, this can't be the > solution. see my earlier reply. Amos _______________________________________________ squid-users mailing list squid-users@xxxxxxxxxxxxxxxxxxxxx http://lists.squid-cache.org/listinfo/squid-users
