[squid-users] Antivirus for squid

[Eliezer Croitoru]

Hey Yuri,

What wiki article?

Thanks,
Eliezer

----
Eliezer Croitoru
Linux System Administrator
Mobile: +972-5-28704261
Email: eliezer at ngtech.co.il


-----Original Message-----
From: squid-users [mailto:squid-users-bounces at lists.squid-cache.org] On Behalf Of Yuri Voinov
Sent: Wednesday, February 1, 2017 5:52 PM
To: squid-users at lists.squid-cache.org
Subject: Re: [squid-users] Antivirus for squid

Squid's wiki article contains all required points about performance and tuning.


01.02.2017 21:41, erdosain9 пишет:
> Hi, again.
> Well i installed squidclamav, c-icap, and clamav; and its working all 
> fine, but... the download is too slow, the download of a file. There 
> is a way to accelerate this??
What do you mean "too slow"? Exact data, pls. Subjective and relative adjectives, do not say anything of substance.

I mean, i.e.: "Before I've installed clamav, download speed was 1 terabit per second for file http://bwah-bwah.com/bwahbwahbwah.tar.gz.
After - only 10 megabits. It seems too slow".
> Also, when the file its a virus, the message "this is a virus bla 
> bla", go
This is different procedure, which is not executed by squid itself.
> fast... i mean the slow download its for all the other files that 
> dosent have a virus...
>
> *This is squid.conf
> *
> # c-icap integration
> icap_enable on
> icap_send_client_ip on
> icap_send_client_username on
> icap_client_username_header X-Authenticated-User icap_preview_enable 
> on icap_preview_size 1024 icap_service service_req reqmod_precache 
> bypass=1 icap://127.0.0.1:1344/squidclamav adaptation_access 
> service_req allow all icap_service service_resp respmod_precache 
> bypass=1 icap://127.0.0.1:1344/squidclamav adaptation_access 
> service_resp allow all # end integration
>
>
> *c-icap.conf
> *
> PidFile /var/run/c-icap.pid
> CommandsSocket /var/run/c-icap.ctl
> StartServers 1
> MaxServers 20
> MaxRequestsPerChild  100
> Port 1344
> ServerAdmin yourname at yourdomain
> TmpDir /tmp
> MaxMemObject 131072
> DebugLevel 0
> ModulesDir /usr/local/c-icap/lib/c_icap/ ServicesDir 
> /usr/local/c-icap/lib/c_icap/ LoadMagicFile 
> /usr/local/etc/c-icap.magic
>
> acl localhost src 127.0.0.1/255.255.255.255 acl PERMIT_REQUESTS type 
> REQMOD RESPMOD icap_access allow localhost PERMIT_REQUESTS icap_access 
> deny all
>
> ServerLog /var/log/c-icap/server.log
> AccessLog /var/log/c-icap/access.log
>
> Service squidclamav squidclamav.so
>
>
> *CLAMD.CONF*
> LogFile /var/log/clamd.scan
> PidFile /var/run/clamd.scan/clamd.pid
> TemporaryDirectory /var/tmp
> DatabaseDirectory /var/lib/clamav
> LocalSocket /var/run/clamd.scan/clamd.sock TCPSocket 3310 TCPAddr 
> 127.0.0.1 User clamscan
>
>
> *SQUIDCLAMAV.CONF
> *
> maxsize 5000000
> redirect http://squid.espaciomemoria.lan/cgi-bin/clwarn.cgi.en_EN
> clamd_ip 127.0.0.1
> clamd_port 3310
> trust_cache 0
> timeout 1
> logredir 1
> dnslookup 0
> safebrowsing 0
>
> abortcontent ^video\/x-flv$
> abortcontent ^video\/mp4$
> # White list some sites
>
> Somebody can give me a hand with this???
> Thanks to all.
Thelepathy on vacation. To give your hand, it is require to have root access to your server to make performance diagnostics during "slow downloads". But you always can do this yourself. Pieces of configs is not enough to diagnostics, and, therefore, for tuning.
>
>
>
> --
> View this message in context: 
> http://squid-web-proxy-cache.1019090.n4.nabble.com/Antivirus-for-squid
> -tp4681323p4681413.html Sent from the Squid - Users mailing list 
> archive at Nabble.com.
> _______________________________________________
> squid-users mailing list
> squid-users at lists.squid-cache.org
> http://lists.squid-cache.org/listinfo/squid-users

--
Bugs to the Future