Re: What about including virus filter to squid ?

Symantec AnitVirus Scan Engine 4.0, which supports ICAP 1.0 (and hence
squid), will be available 11/18 from our web site. Post launch we'll be
suggesting some enhancements to the ICAP forum to improve the protocol and
features available through it, particularly for caching devices consuming
services from ICAP servers.

Travis
Product Manager
Symantec AntiVirus Scan Engine
+1 757-249-5793

                                                                                                                                                
                      Geetha Manjunath
                      <geetham@india.hp To: Henrik Nordstrom <hno@squid-cache.org>, Robert Collins <robertc@squid-cache.org>
                      .com> cc: Evgeny Kotsuba <evgen__k@rambler.ru>, squid-dev@squid-cache.org, Travis Priest
                                                <tpriest@symantec.com>
                      11/13/2002 07:10 Subject: Re: What about including virus filter to squid ?
                      AM
                                                                                                                                                
                                                                                                                                                

Hi All,

Infact, I am happy to say that we did try out an integration of the
virus scanner by Symantec with the squid icap client and succeeded just
a couple of weeks ago!

 Barring a few bugs in configuring some acls, the functionality of -
passing the response body to the (remote) virus scanner and getting
either a corrected body or an error message about the virus - is there.

There have been quite a few updates on the squid icap client sources at
he project site. The latest sources for these are available from
http://icap-server.sf.net

As you are aware, I branched out from the main devel sources around
squid2.4STABLE2 and had continued development separately. I am planning
to integrate back. Infact, I was waiting for Robert's content filter/esi
changes to go into the HEAD to integrate the icap client functionality
again with squid-devel.

Any suggestions for merging the sources ? Should I start again from
squid-2.5STABLE2?

Thanks and regards
Geetha

Henrik Nordstrom wrote:
>
> True.
>
> I don't think inline virus scanning within the Squid process is a good
> path. Instead the virus scanner should be a separate process, possibly
> even on separate machine(s).
>
> The problem is how a external virus scanner is to integrate with Squid.
> There needs to be something more than just HTTP for this to work in a
> somewhat efficient manner, and it needs to be reasonably standard to
> allow for different virus scanners to be used.
>
> IIRC this is one of the areas where the ICAP protocol can be used. There
> is a ICAP client implementation to Squid (see devel.squid-cache.org),
> and this might allow Squid to integrate with ICAP capable virus scanners
> (there seems to be quite a few already).
>
> Perhaps the ICAP client to Squid hasn't seen as much attention as it
> should?
>
> Regards
> Henrik
>
> fre 2002-11-08 klockan 17.09 skrev Evgeny Kotsuba:
> > Hi,
> > What about subj ?
> > Users periodically ask for this feature.
> >
> > SY,
> > Evgeny Kotsuba
Received on Wed Nov 13 2002 - 08:30:14 MST