Re: [squid-users] transparent squid + clamav + https

2010-03-17 Thread Henrik Nordström
ons 2010-03-17 klockan 03:53 + skrev Amos Jeffries: During the infected period imaginary-HAVP scans the documents and sends a large clean prefix to all visitors. BUT... aborts when the appended infection is detected. Browser is lucky enough to notice the file is incomplete and retires

Re: [squid-users] transparent squid + clamav + https

2010-03-17 Thread Henrik Nordström
ons 2010-03-17 klockan 07:51 +0100 skrev Henrik Nordström: ons 2010-03-17 klockan 03:53 + skrev Amos Jeffries: During the infected period imaginary-HAVP scans the documents and sends a large clean prefix to all visitors. BUT... aborts when the appended infection is detected. Browser

Re: [squid-users] transparent squid + clamav + https

2010-03-17 Thread Stefan Reible
Hi, I have configured the viralator. But I have some problems with the redirector. When I run /opt/squirm/bin/squirm as user squid by hand, I get the following text: squid1 logs # tail -f squirm.info Wed Mar 17 15:33:19 2010:processing configuration file [/opt/squirm/etc/squirm.conf] Wed

Re: [squid-users] transparent squid + clamav + https

2010-03-17 Thread Amos Jeffries
On Wed, 17 Mar 2010 16:04:03 +0100, Stefan Reible m...@stefan-reible.de wrote: Hi, I have configured the viralator. But I have some problems with the redirector. When I run /opt/squirm/bin/squirm as user squid by hand, I get the following text: squid1 logs # tail -f squirm.info Wed

Re: [squid-users] transparent squid + clamav + https

2010-03-16 Thread Leonardo Carneiro - Veltrac
Tks for your info Amos. Amos Jeffries wrote: On Mon, 15 Mar 2010 14:50:54 -0300, Leonardo Carneiro - Veltrac lscarne...@veltrac.com.br wrote: I have always read that transparent proxy + https was not possible. It is now? There is a stable squid version with this feature? There aew any

Re: Re: [squid-users] transparent squid + clamav + https

2010-03-16 Thread Trever L. Adams
On 01/-10/-28163 12:59 PM, Henrik Nordström wrote: Yes. See the viralator mode of c-icap srv_clamav. The service supports 3 different modes of download management - Wait with response until scanning have completed - Send some data of the file while scanning is performed to keep the client

Re: [squid-users] transparent squid + clamav + https

2010-03-16 Thread Henrik Nordström
mån 2010-03-15 klockan 18:47 +0200 skrev Henrik K: If you don't want this limitation, you can use HAVP. It scans the file while it's being transferred to client, while keeping small part of it buffered (in case of virus, it is not transferred so client can't open incomplete file). It's as

Re: [squid-users] transparent squid + clamav + https

2010-03-16 Thread Henrik K
On Tue, Mar 16, 2010 at 08:58:27PM +0100, Henrik Nordström wrote: mån 2010-03-15 klockan 18:47 +0200 skrev Henrik K: If you don't want this limitation, you can use HAVP. It scans the file while it's being transferred to client, while keeping small part of it buffered (in case of virus, it

Re: [squid-users] transparent squid + clamav + https

2010-03-16 Thread Amos Jeffries
On Wed, 17 Mar 2010 05:24:38 +0200, Henrik K h...@hege.li wrote: On Tue, Mar 16, 2010 at 08:58:27PM +0100, Henrik Nordström wrote: mån 2010-03-15 klockan 18:47 +0200 skrev Henrik K: If you don't want this limitation, you can use HAVP. It scans the file while it's being transferred to

Re: [squid-users] transparent squid + clamav + https

2010-03-16 Thread Henrik K
On Wed, Mar 17, 2010 at 03:53:01AM +, Amos Jeffries wrote: So HAVP is designed specifically to send client scanned parts of the file before the entire thing is checked? Right. Of course all this is configurable. That explains something that I was wondering about... Consider this

Re: [squid-users] transparent squid + clamav + https

2010-03-15 Thread Henrik Nordström
mån 2010-03-15 klockan 12:30 +0100 skrev Stefan Reible: The transparent http proxy with clamav ist working very nice, but now i have problems with the implementation of ssl. My first idea was, to break down the encryption at the squid, an then create a new one.

Re: [squid-users] transparent squid + clamav + https

2010-03-15 Thread Luis Daniel Lucio Quiroz
Le Lundi 15 Mars 2010 05:30:11, Stefan Reible a écrit : Hi, for my exam I want to set up a transparent proxy with http and https under gentoo linux. The transparent http proxy with clamav ist working very nice, but now i have problems with the implementation of ssl. My first idea was, to

Re: [squid-users] transparent squid + clamav + https

2010-03-15 Thread Henrik K
On Mon, Mar 15, 2010 at 12:30:11PM +0100, Stefan Reible wrote: PS: I have an secound problem with downloading big files, is it possilbe to send any infos about the download progress to the webbrowser? Like opening an ajax script or something else. If you don't want this limitation, you can

Re: [squid-users] transparent squid + clamav + https

2010-03-15 Thread Leonardo Carneiro - Veltrac
I have always read that transparent proxy + https was not possible. It is now? There is a stable squid version with this feature? There aew any major drawbacks using this feature? Tks in advance. Henrik K wrote: On Mon, Mar 15, 2010 at 12:30:11PM +0100, Stefan Reible wrote: PS: I have an

Re: [squid-users] transparent squid + clamav + https

2010-03-15 Thread Amos Jeffries
On Mon, 15 Mar 2010 14:50:54 -0300, Leonardo Carneiro - Veltrac lscarne...@veltrac.com.br wrote: I have always read that transparent proxy + https was not possible. It is now? There is a stable squid version with this feature? There aew any major drawbacks using this feature? Tks in