Karl Tischler

Hi, I assume, virus_scan.VirScanFileTypes is a global configuration option. And yes, you are right, that office doc's would only be detected, if the file type option has been set.

Thanks for response! This happens for the SF site self for example, google search and when used css from googleapis: Wed Jul 25 18:47:40 2018, 18069/2269566720, Scan from unzipped file /tmp/CI_TMP_aWMB4J of size 0 Wed Jul 25 18:47:40 2018, 18069/2269566720, Unable to uncompress deflate encoded data: uncompress: Uncompression Failure! Handle object as infected Wed Jul 25 18:47:40 2018, 18069/2269566720, VIRUS DETECTED: uncompress: Uncompression Failure , http client ip: 10.1.1.17, http user: -, http...

I'm sorry to make noise! It was my own fault! The fault was, If the testvirus comes from a secured page it's not scanned (if squid is not configured for), that's clear, but I tried to download the file with http:// in front of the url, but it was still taken from secured site (although the url is displayed unsecured in browser) But I've a question, because I've a configuraton running, which scans secured sites and was running long time without problems. But (I believe it was starting with squid version...

I'm sorry to make noise! It was my own fault! The fault was, If the testvirus comes from a secured page it's not scanned (if squid is not configured for), that's clear, but I tried to download the file with http:// in front of the url, but it was still taken from secured site (although the url is displayed unsecured in browser) But I've a question, because I've a configuraton running, which scans secured sites and was running long time without problems. But (I believe it was starting with squid version...

ah, I remember, that this was fact in earlier releases in conjunction with other virus scanner. I remember, if you scan over port and not the clamd-socket, it should work again. But there should be adaptions to the c-icap modules, I guess. I'll report, if this solves the problem for now

c-icap modules does not recognize virus with clamav 0.100.1