[squid-users] Problems configuring Squid with C-ICAP+Squidclamav

C. L. Martinez carlopmart at gmail.com
Wed May 11 14:41:05 UTC 2016


Hi all,

 I am installing a new squid proxy server under OpenBSD 5.9 with C-ICAP+Squidclamav, and I am having some troubles. When squid start up and I request some web page, it is returning the following error:

 2016/05/11 14:22:06 kid1| essential ICAP service is down after an options fetch failure: icap://localhost:1344/squidclamav [down,!opt]
 2016/05/11 14:23:54 kid1| suspending ICAP service for too many failures

 I've read Squid's wiki page about this and I don't see any error in my config. Squid's config is:

icap_enable on
icap_send_client_ip on
icap_send_client_username on
icap_client_username_header X-Authenticated-User
icap_preview_enable on
icap_preview_size 1024
#icap_service_failure_limit -1
icap_service service_avi_req reqmod_precache icap://localhost:1344/squidclamav bypass=off
adaptation_access service_avi_req allow all
icap_service service_avi_resp respmod_precache icap://localhost:1344/squidclamav bypass=on
adaptation_access service_avi_resp allow all

 And c-icap's config is:

PidFile /var/run/c-icap/c-icap.pid
CommandsSocket /var/run/c-icap/c-icap.ctl
Timeout 300
MaxKeepAliveRequests 100
KeepAliveTimeout 600
StartServers 3
MaxServers 10
MinSpareThreads     10
MaxSpareThreads     20
ThreadsPerChild     10
MaxRequestsPerChild  0
Port 1344
TmpDir /var/tmp
MaxMemObject 131072
DebugLevel 1
Pipelining on
ModulesDir /usr/local/lib/c_icap
ServicesDir /usr/local/lib/c_icap
TemplateDir /usr/local/share/c_icap/templates/
LoadMagicFile /etc/c-icap/c-icap.magic
RemoteProxyUsers off
RemoteProxyUserHeader X-Authenticated-User
RemoteProxyUserHeaderEncoded on
acl localhost src 127.0.0.1/255.255.255.255
acl ALLREQUESTS type RESPMOD REQMOD
icap_access allow localhost ALLREQUESTS
icap_access deny all
ServerLog /var/log/c-icap/server.log
AccessLog /var/log/c-icap/access.log
Logger file_logger
Module logger sys_logger.so
Service squidclamav squidclamav.so

 Any idea what am I doing wrong?? How can I do a simple test against c-icap server from command line??

Thanks.

-- 
Greetings,
C. L. Martinez



More information about the squid-users mailing list