Hi,
We are sending an encapsulated HTTP 307 redirect webpage header whenever a Virus is found and stop sending any other data after that, but squid complains about ICAP failure when we do that:
Adaptation::Icap::Xaction::noteCommRead threw exception: corrupted chunk size
We are not sending an ICAP header at this point because we already told Squid ICAP 200 OK header and begun a body transaction, we send some chunks back to the client for progress and hold the last part for scanning.
Ideally, we would like to just send our 307 to Squid and not having it count as a failure.
On Tue, Nov 26, 2019 at 3:44 PM Alex Rousskov <rousskov@xxxxxxxxxxxxxxxxxxxxxxx> wrote:
On 11/26/19 10:15 AM, Felipe Arturo Polanco wrote:
> While we can successfully scan our files and do content adaptation, we
> have been struggling to find a way to close the ICAP transaction before
> passing the whole body back to squid and at the same time avoid squid
> marking one icap failure.
Squid needs a valid ICAP response. The right ICAP response status code
depends on what you want Squid to do after receiving that response. You
have mentioned what you do _not_ want Squid to do (i.e. increase the
failure count), but that still leaves a lot of options.
> This is for an ICAP server that does Virus scanning and if virus found,
> the body is not sent back.
What do you want Squid to do when the ICAP service finds a virus? For
example, what message do you want Squid to send to the next HTTP hop?
Alex.
_______________________________________________ squid-users mailing list squid-users@xxxxxxxxxxxxxxxxxxxxx http://lists.squid-cache.org/listinfo/squid-users
