Hi Amos.
Am 18.05.2015 um 13:39 schrieb Amos Jeffries:
On 18/05/2015 11:17 p.m., Stefan Kuegler wrote:
Hi Yuri.
http://i.imgur.com/mW7gNwD.png
http://squidclamav.darold.net/config.html
This is for squidclamav (I use it and have no problems with malware).
I just installed squidclamav - but the behaviour is always the same. An
object which has been stored in squid-cache will not be detected by an
icap server because squid does not scan the body again:
squidclamav.c(283) squidclamav_init_request_data: DEBUG initializing
request data handler.
pool hits:5 allocations: 1
Allocating from objects pool object 0
Requested service: squidclamav
squidclamav.c(337) squidclamav_check_preview_handler: DEBUG processing
preview header.
squidclamav.c(358) squidclamav_check_preview_handler: DEBUG X-Client-IP:
192.168.216.54
squidclamav.c(1319) extract_http_info: DEBUG method GET
squidclamav.c(1330) extract_http_info: DEBUG url
http://www.intern/eicar_com.zip
squidclamav.c(389) squidclamav_check_preview_handler: DEBUG URL
requested: http://www.intern/eicar_com.zip
squidclamav.c(430) squidclamav_check_preview_handler: DEBUG
Content-Length: 0
squidclamav.c(449) squidclamav_check_preview_handler: DEBUG No body
data, allow 204
squidclamav.c(304) squidclamav_release_request_data: DEBUG Releasing
request data.
Storing to objects pool object 0
Log request to access log file /var/log/c-icap/access.log
Width: 0, Parameter:
Any idea, how I can solve that problem. It seems that the only way to be
secure is to disable caching in squid. But I hope, this can't be the
solution.
see my earlier reply.
Thank you for your answer.
Will the RESPMOD POSTCACHE vectoring point be available in future
versions of squid?
Regards,
Stefan
_______________________________________________
squid-users mailing list
squid-users@xxxxxxxxxxxxxxxxxxxxx
http://lists.squid-cache.org/listinfo/squid-users
