Project

General

Profile

Actions

Bug #4197

closed

squid 3.4 anti-virus feature not working

Added by Cino . over 9 years ago. Updated over 8 years ago.

Status:
Resolved
Priority:
Normal
Category:
Squid
Target version:
-
Start date:
01/11/2015
Due date:
% Done:

100%

Estimated time:
Plus Target Version:
Affected Version:
All
Affected Plus Version:
Affected Architecture:
amd64

Description

I haven't posted this on the forum yet but it looks like the symbiotic links aren't being created for the anti-virus feature to work.

I had to create the following links:
ln -s /usr/pbi/squid-amd64/local/bin/c-icap /usr/local/bin/c-icap
ln -s /usr/pbi/squid-amd64/local/bin/c-icap-client /usr/local/bin/c-icap-client
ln -s /usr/pbi/squid-amd64/local/bin/c-icap-config /usr/local/bin/c-icap-config
ln -s /usr/pbi/squid-amd64/local/bin/c-icap-libicapapi-config /usr/local/bin/c-icap-libicapapi-config
ln -s /usr/pbi/squid-amd64/local/bin/c-icap-stretch /usr/local/bin/c-icap-stretch
ln -s /usr/pbi/squid-amd64/local/lib/c_icap /usr/local/lib/c_icap
ln -s /usr/pbi/squid-amd64/local/share/c_icap /usr/local/share/c_icap
ln -s /usr/pbi/squid-amd64/local/etc/c-icap /usr/local/etc/c-icap
ln -s /usr/pbi/squid-amd64/local/lib/libicapapi.so.3.0.5 /usr/local/lib/libicapapi.so.3

ln -s /usr/pbi/squid-amd64/local/etc/clamd.conf /usr/local/etc/clamd.conf
ln -s /usr/pbi/squid-amd64/local/etc/freshclam.conf /usr/local/etc/freshclam.conf

The c-icap.magic isn't being created, /usr/pbi/squid-amd64/local/etc/c-icap/c-icap.magic.sample should be also be copied to /usr/pbi/squid-amd64/local/etc/c-icap/c-icap.magic

The c-icap binary is complied with with IPv6 support (default port option). With the default build options, c-icap isn't listing on IPv4 anymore. Reading https://github.com/darold/squidclamav, squid.inc needs to be updated. I'll submit the changes in github shortly

start at line 1367 and replace current with this:
icap_service service_avi_req reqmod_precache icap://localhost:1344/squidclamav bypass=off
adaptation_access service_avi_req allow all
icap_service service_avi_resp respmod_precache icap://localhost:1344/squidclamav bypass=on
adaptation_access service_avi_resp allow all

If its not already, can c-icap be compiled with option --enable-large-files? squid is complied with it and also mention in https://github.com/darold/squidclamav

perl isn't working correcyly either. I only know its used so display /usr/local/www/clwarn.cgi when a virus is detected. I manually installed perl5 thru pkg install and to changed the first line in /usr/local/www/clwarn.cgi to use #!/usr/bin/perl

Actions

Also available in: Atom PDF