[clamav-users] Squid + ClamAV

2020-04-01 Thread Andrea Venturoli via clamav-users
Hello. I'm trying the combination Squid + C-ICAP + SquidClamAV + ClamAV, and I'm seeing terrible performance. It seems there's no SquidClamAV specific mailing list and asking on generic Squid list did not help much. Perhaps someone here is using the same thing or knows how to better tweak the

Re: [clamav-users] Squid + ClamAV

2020-04-01 Thread Vladislav Kurz via clamav-users
Dne středa 1. dubna 2020 15:47:09 CEST, Andrea Venturoli via clamav-users napsal(a): > Hello. > > I'm trying the combination Squid + C-ICAP + SquidClamAV + ClamAV, and > I'm seeing terrible performance. > It seems there's no SquidClamAV specific mailing list and asking on > generic Squid list did

Re: [clamav-users] Squid + ClamAV

2020-04-01 Thread Andrea Venturoli via clamav-users
On 2020-04-01 16:08, Vladislav Kurz via clamav-users wrote: Hello, Thanks for your answer. Are you running clamav as daemon? Sure. Is c-icap using the daemon socket (as if runing clamdscan)? AFAIK it does. I've got this in its config: # Path to the clamd socket, use clamd_local if

Re: [clamav-users] Squid + ClamAV

2020-04-01 Thread G.W. Haywood via clamav-users
Hi there, On Wed, 1 Apr 2020, Andrea Venturoli via clamav-users wrote: I'm trying the combination Squid + C-ICAP + SquidClamAV + ClamAV, and I'm seeing terrible performance. ... Perhaps someone here is using the same thing or knows how to better tweak the engine. I'm not surprised that the p

Re: [clamav-users] Squid + ClamAV

2020-04-01 Thread Henrik K
On Wed, Apr 01, 2020 at 03:47:09PM +0200, Andrea Venturoli via clamav-users wrote: > > The whole thing is working, but page loading times varies a lot: sometimes > they'll load as fast as without virus scanning, but often (the same pages) > will take several seconds to display (with ClamAV eating

Re: [clamav-users] Squid + ClamAV

2020-04-01 Thread Henrik K
On Wed, Apr 01, 2020 at 04:36:15PM +0100, G.W. Haywood via clamav-users wrote: > Hi there, > > On Wed, 1 Apr 2020, Andrea Venturoli via clamav-users wrote: > > >I'm trying the combination Squid + C-ICAP + SquidClamAV + ClamAV, and I'm > >seeing terrible performance. > >... > >Perhaps someone here

Re: [clamav-users] Squid + ClamAV

2020-04-01 Thread Paul Kosinski via clamav-users
I've been using HAVP with libclamav for years now, and have liked it. Now, of course, the prevalence of HTTPS limits the utility of something like HAVP. (I sometimes wonder what the *net* improvement in security is when HTTPS is used, given that one is now almost totally dependent on how secure the

Re: [clamav-users] Squid + ClamAV

2020-04-01 Thread Andrea Venturoli via clamav-users
On 2020-04-01 19:38, Henrik K wrote: >> But pretty much all >> websites are SSL encrypted these days, so there's nothing to scan >> unless you do nasty man-in-the-middle decryption. Everyone has virus >> scanners on their PC, browsers have all sorts of proctection etc. >> The days of proxy scann

Re: [clamav-users] Squid + ClamAV

2020-04-01 Thread Henrik K
On Thu, Apr 02, 2020 at 08:14:21AM +0200, Andrea Venturoli via clamav-users wrote: > On 2020-04-01 19:38, Henrik K wrote: > > >> But pretty much all > >> websites are SSL encrypted these days, so there's nothing to scan > >> unless you do nasty man-in-the-middle decryption. Everyone has virus >