Re: [squid-users] Problem with squivir2, anyone?

Frank Fiene wrote:
>
> Am 16.04.2009 um 17:52 schrieb Henrik K:
>
>> On Thu, Apr 16, 2009 at 03:57:35PM +0200, Frank Fiene wrote:
>>> Hi i have a problem with integrating clamav with squivir2 into squid.
>>
>> Not that it helps with this specific question, but get yourself a real
>> tool.
>> Redirector based virus scanners are flawed by design. You want to look at
>> proxy based scanners like HAVP (http://www.server-side.de/) or ICAP based
>> like c-icap (http://c-icap.sourceforge.net/). They offer performance and
>> security.
>>
>
>
> Is anyone using HAVP? I read only one sentence on the home page:
>
> Disadvantage:
> If the scanning process is too slow and the file is larger than the
> defined "hold back data" you can still receive a virus! If the file
> contains a virus and the file is bigger than the "hold back data" the
> download will be cancelled with no warning. If you try to download the
> file again you will get the error message (this feature is not
> implemented yet).
>
> My opinion: this is a no-go!
>
> And ICAP is only working with Squid-3, this is not included in my
> distribution! I don't want to compile squid every time when there is a
> bugfix.

You don't have to rebuild every bug fix. Squid is only bundled every 4-8
weeks, its up to you whether anything you think important stuff has
changed and if to rebuild or not. Or whether just to grab the individual
fix patches and use them on your old bundle instead.

Amos

-- 
Please be using
   Current Stable Squid 2.7.STABLE6 or 3.0.STABLE14
   Current Beta Squid 3.1.0.7