Re: [squid-users] Problem for use Squid with Interscan VirusWall Web

For a start, all those requests was sent to Interscan.. TIMEOUT_ only
tells that ICP timed out. FIRST_UP_PARENT tells that Squid selected the
first cache_peer (not being detected as being down).

Regards
Henrik Nordström
Squid Hacker

Second, I think you want to disable the use of ICP. Add no-query to the
cache_peer line.

Third, if you want Squid to never ever bypass the Interscan then use
never_direct instead of prefer_direct off.

Regards
Henrik Nordström
Squid Hacker

Sebastien Douche wrote:
>
> Hi,
> I use actually a squid proxy, and I want add a virus scanning
> fonctionnality.
>
> I use 2 Linux boxs, Squid on 10.202.17.10 with port 3128 and Interscan
> on 10.202.17.11 with port 8090.
>
> So, I add the following lines in squid.conf :
>
> cache_peer 10.202.17.11 parent 8090 7 default
> prefer_direct off
>
> And Interscan configuration is :
>
> InterScan HTTP Proxy port (connects to browser): 8090
> Original HTTP server location:
> Other (server and port): 10.202.17.10 3128
>
> But Squid said respond :
>
> 1007632350.684 4383 10.202.17.10 TCP_MISS/200 18814 GET
> http://intrinsec.com/fr/body.htm - TIMEOUT_FIRST_UP_PARENT/10.202.17.11
> text/html
> 1007632350.881 34 10.202.17.10 TCP_MISS/304 300 GET
> http://intrinsec.com/images/body_background.gif -
> TIMEOUT_FIRST_UP_PARENT/10.202.17.11 image/gif
> 1007632350.907 50 10.202.17.10 TCP_MISS/304 300 GET
> http://intrinsec.com/images/offre.gif -
> TIMEOUT_FIRST_UP_PARENT/10.202.17.11 image/gif
> 1007632350.952 91 10.202.17.10 TCP_MISS/304 300 GET
> http://intrinsec.com/images/centre.gif -
> TIMEOUT_FIRST_UP_PARENT/10.202.17.11 image/gif
> 1007632350.969 111 10.202.17.10 TCP_MISS/304 300 GET
> http://intrinsec.com/images/entreprise.gif -
> TIMEOUT_FIRST_UP_PARENT/10.202.17.11 image/gif
> 1007632350.981 99 10.202.17.10 TCP_MISS/304 300 GET
> http://intrinsec.com/images/pictures/mosaic.gif -
> TIMEOUT_FIRST_UP_PARENT/10.202.17.11 image/gif
> ......
>
> That is when the firewall block all packets from 10.2002.17.10.
> If I permit Squid to go to Internet, the Squid try parent
> (TIMEOUT_PARENT) and go direct.
>
> How to do work corectly Squid and VirusWall together ?
>
> Thanks in advance
>
> --
> Sébastien Douche <sdouche@free.fr>
Received on Fri Dec 07 2001 - 16:16:57 MST