Re: What about including virus filter to squid ?

Hi All,

Infact, I am happy to say that we did try out an integration of the
virus scanner by Symantec with the squid icap client and succeeded just
a couple of weeks ago!

 Barring a few bugs in configuring some acls, the functionality of -
passing the response body to the (remote) virus scanner and getting
either a corrected body or an error message about the virus - is there.

There have been quite a few updates on the squid icap client sources at
he project site. The latest sources for these are available from
http://icap-server.sf.net

As you are aware, I branched out from the main devel sources around
squid2.4STABLE2 and had continued development separately. I am planning
to integrate back. Infact, I was waiting for Robert's content filter/esi
changes to go into the HEAD to integrate the icap client functionality
again with squid-devel.

Any suggestions for merging the sources ? Should I start again from
squid-2.5STABLE2?

Thanks and regards
Geetha

Henrik Nordstrom wrote:
>
> True.
>
> I don't think inline virus scanning within the Squid process is a good
> path. Instead the virus scanner should be a separate process, possibly
> even on separate machine(s).
>
> The problem is how a external virus scanner is to integrate with Squid.
> There needs to be something more than just HTTP for this to work in a
> somewhat efficient manner, and it needs to be reasonably standard to
> allow for different virus scanners to be used.
>
> IIRC this is one of the areas where the ICAP protocol can be used. There
> is a ICAP client implementation to Squid (see devel.squid-cache.org),
> and this might allow Squid to integrate with ICAP capable virus scanners
> (there seems to be quite a few already).
>
> Perhaps the ICAP client to Squid hasn't seen as much attention as it
> should?
>
> Regards
> Henrik
>
> fre 2002-11-08 klockan 17.09 skrev Evgeny Kotsuba:
> > Hi,
> > What about subj ?
> > Users periodically ask for this feature.
> >
> > SY,
> > Evgeny Kotsuba
Received on Wed Nov 13 2002 - 05:09:50 MST