#1 No-clam-scan takes a few minutes

[Anonymous]

Downloading movies from youtube via c-icap with srv_clamav takes minutes, even, when the file is too big to be scanned by clamav. Is that normal ?
Attached you find my
c-icap.conf
srv_clamav.conf
icap_access.log
icap_server.log
I ran this c-icap using "-d 10"

[Nobody/Anonymous]

[reinerotto]

Can somebody confirm this effect, or deny ?

[chtsanti]

Are you using squid?
What service did you use in your squid.conf file.
From what I can see you are using the avscan alias name of the srv_clamav service which:
- turn off the file size limits
- does not allow early ICAP responses (The c-icap waits to retrieve all body data before start sending back data)

In your squid.conf file change the avscan service to srv_clamav service

[reinerotto]

YES. You are right. Now it wroks. Mea Culpa.
Thanx for the clarification.

Just for completion, I add my options for squid 3.1, to use clam antivirus scanning:

icap_enable on
icap_send_client_ip on
icap_preview_size 128
icap_service service_avi_req reqmod_precache bypass=1 icap://127.0.0.1:1344/srv_clamav
icap_service service_avi_resp respmod_precache bypass=0 icap://127.0.0.1:1344/srv_clamav

adaptation_access service_avi_req allow all
adaptation_access service_avi_resp allow all