[squid-users] Problems configuring Squid with C-ICAP+Squidclamav
C. L. Martinez
carlopmart at gmail.com
Wed May 11 14:41:05 UTC 2016
Hi all,
I am installing a new squid proxy server under OpenBSD 5.9 with C-ICAP+Squidclamav, and I am having some troubles. When squid start up and I request some web page, it is returning the following error:
2016/05/11 14:22:06 kid1| essential ICAP service is down after an options fetch failure: icap://localhost:1344/squidclamav [down,!opt]
2016/05/11 14:23:54 kid1| suspending ICAP service for too many failures
I've read Squid's wiki page about this and I don't see any error in my config. Squid's config is:
icap_enable on
icap_send_client_ip on
icap_send_client_username on
icap_client_username_header X-Authenticated-User
icap_preview_enable on
icap_preview_size 1024
#icap_service_failure_limit -1
icap_service service_avi_req reqmod_precache icap://localhost:1344/squidclamav bypass=off
adaptation_access service_avi_req allow all
icap_service service_avi_resp respmod_precache icap://localhost:1344/squidclamav bypass=on
adaptation_access service_avi_resp allow all
And c-icap's config is:
PidFile /var/run/c-icap/c-icap.pid
CommandsSocket /var/run/c-icap/c-icap.ctl
Timeout 300
MaxKeepAliveRequests 100
KeepAliveTimeout 600
StartServers 3
MaxServers 10
MinSpareThreads 10
MaxSpareThreads 20
ThreadsPerChild 10
MaxRequestsPerChild 0
Port 1344
TmpDir /var/tmp
MaxMemObject 131072
DebugLevel 1
Pipelining on
ModulesDir /usr/local/lib/c_icap
ServicesDir /usr/local/lib/c_icap
TemplateDir /usr/local/share/c_icap/templates/
LoadMagicFile /etc/c-icap/c-icap.magic
RemoteProxyUsers off
RemoteProxyUserHeader X-Authenticated-User
RemoteProxyUserHeaderEncoded on
acl localhost src 127.0.0.1/255.255.255.255
acl ALLREQUESTS type RESPMOD REQMOD
icap_access allow localhost ALLREQUESTS
icap_access deny all
ServerLog /var/log/c-icap/server.log
AccessLog /var/log/c-icap/access.log
Logger file_logger
Module logger sys_logger.so
Service squidclamav squidclamav.so
Any idea what am I doing wrong?? How can I do a simple test against c-icap server from command line??
Thanks.
--
Greetings,
C. L. Martinez
More information about the squid-users
mailing list