[squid-users] squid does not send cached object to an icap-server

[Amos Jeffries]

On 18/05/2015 11:17 p.m., Stefan Kuegler wrote:
> Hi Yuri.
>>
>> http://i.imgur.com/mW7gNwD.png
>>
>> http://squidclamav.darold.net/config.html
>>
>> This is for squidclamav (I use it and have no problems with malware).
> 
> I just installed squidclamav - but the behaviour is always the same. An
> object which has been stored in squid-cache will not be detected by an
> icap server because squid does not scan the body again:
> 
> squidclamav.c(283) squidclamav_init_request_data: DEBUG initializing
> request data handler.
> pool hits:5 allocations: 1
> Allocating from objects pool object 0
> Requested service: squidclamav
> squidclamav.c(337) squidclamav_check_preview_handler: DEBUG processing
> preview header.
> squidclamav.c(358) squidclamav_check_preview_handler: DEBUG X-Client-IP:
> 192.168.216.54
> squidclamav.c(1319) extract_http_info: DEBUG method GET
> squidclamav.c(1330) extract_http_info: DEBUG url
> http://www.intern/eicar_com.zip
> squidclamav.c(389) squidclamav_check_preview_handler: DEBUG URL
> requested: http://www.intern/eicar_com.zip
> squidclamav.c(430) squidclamav_check_preview_handler: DEBUG
> Content-Length: 0
> squidclamav.c(449) squidclamav_check_preview_handler: DEBUG No body
> data, allow 204
> squidclamav.c(304) squidclamav_release_request_data: DEBUG Releasing
> request data.
> Storing to objects pool object 0
> Log request to access log file /var/log/c-icap/access.log
> Width: 0, Parameter:
> 
> Any idea, how I can solve that problem. It seems that the only way to be
> secure is to disable caching in squid. But I hope, this can't be the
> solution.


see my earlier reply.

Amos