# # To enable srv_clamav service in c-icap, copy this file in c-icap # configuration directory and add the following line at the end of # c-icap.conf file: # Include srv_clamav.conf # # Module: srv_clamav # Description: # This is an antivirus services which uses the open source # clamav antivirus. # Example: # Service antivirus_module srv_clamav.so # ServiceAlias avscan srv_clamav?allow204=on&sizelimit=off&mode=simple # # Load the srv_clamav service: Service antivirus_module srv_clamav.so # Add the alias avscan for srv_clamav service. It is used by many # ICAP based antivirus clients: ServiceAlias avscan srv_clamav?allow204=on&sizelimit=off&mode=simple # Antivirus module settings # TAG: srv_clamav.ScanFileTypes # Format: srv_clamav.ScanFileTypes type1 [type2] ... # Description: # the list of file types or groups of file types which will be # scanned for viruses. For supported types look in c-icap.magic # configuration file. # Default: # None set. srv_clamav.ScanFileTypes TEXT DATA EXECUTABLE ARCHIVE GIF JPEG MSOFFICE #The percentage of data to sent if the downloaded file exceeds the StartSendPercentDataAfter size # TAG: srv_clamav.SendPercentData # Format: srv_clamav.SendPercentData percent # Description: # the percentage of data that can be sent by the c-icap server # before receiving the complete body of a request. # This feature in conjuction with the folowing can be usefull # becouse if the download of the object takes a lot of time # the connection of web client to proxy can be expired. # It must be noticed that the data which delivered to the # web client maybe contains a virus or a part of a virus # and can be dangerous. In the other hand partial data # (for example 5% data of a zip or an exe file) in most # cases can not be used. # Set it to 0 to disable this feature. # Default: # srv_clamav.SendPercentData 0 srv_clamav.SendPercentData 5 # TAG: srv_clamav.StartSendPercentDataAfter # Format: srv_clamav.StartSendPercentDataAfter bytes # Description: # Only if the object is bigger than size then the percentage # of data which defined by SendPercentData sent by the c-icap # server before receiving the complete body of request. # Default: # srv_clamav.StartSendPercentDataAfter 0 srv_clamav.StartSendPercentDataAfter 2M # TAG: srv_clamav.Allow204Responces # Format: srv_clamav.Allow204Responces on|off # Description: # enable 204 responces outside previews for srv_clamav if # your icap client support it. For squid let it off. # Default: # srv_clamav.Allow204Responces off # The Maximum object to be scanned. # TAG: srv_clamav.MaxObjectSize # Format: srv_clamav.MaxObjectSize Bytes # Description: # The maximum size of files which will be scanned by # clamav.You can use K and M indicators to define size # in kilobytes or megabytes. # Default: # srv_clamav.MaxObjectSize 5M srv_clamav.MaxObjectSize 5M # TAG: srv_clamav.ClamAvTmpDir # Format: srv_clamav.ClamAvTmpDir path # Description: # clamav's temporary directory. # Default: # srv_clamav.ClamAvTmpDir /var/tmp srv_clamav.ClamAvTmpDir /var/tmp # TAG: srv_clamav.ClamAvMaxFilesInArchive # Format: srv_clamav.ClamAvMaxFilesInArchive Num # Description: # Sets the maximum number of files in archive. Used # by clamav library. Set it to 0 to disable it. # Default: # srv_clamav.ClamAvMaxFilesInArchive 0 srv_clamav.ClamAvMaxFilesInArchive 0 # TAG: srv_clamav.ClamAvMaxFileSizeInArchive # Format: srv_clamav.ClamAvMaxFileSizeInArchive Bytes # Description: # Sets the maximal archived file size. Used by clamav # library. Set it to 0 to disable it. # Default: # srv_clamav.ClamAvMaxFileSizeInArchive 100M srv_clamav.ClamAvMaxFileSizeInArchive 100M # TAG: srv_clamav.ClamAvMaxRecLevel # Format: srv_clamav.ClamAvMaxRecLevel level # Description: # The maximal recursion level. Used by clamav library. # Set it to 0 to disable it. # Default: # srv_clamav.ClamAvMaxRecLevel 5 srv_clamav.ClamAvMaxRecLevel 5 # The following directives are related with an experimental # mode which I call "viralator like" mode. The srv_clamav # service checks the type of file and if it included in # VirScanFileTypes list (see below) download the file localy # and sends to the web client messages about the progress # of download. After the download completed it sends a message # with the web location where the downloaded file stored. # TAG: srv_clamav.VirSaveDir # Format: srv_clamav.VirSaveDir path # Description: # The directory where the downloaded files stored. # Must be a directory where a web server has access. # Default: # No set # Example: # srv_clamav.VirSaveDir /srv/www/htdocs/downloads/ # from where the documents can be retrieved (you can find the get_file.pl script in contrib dir) # TAG: srv_clamav.VirHTTPServer # Format: srv_clamav.VirHTTPServer URL # Description: # The url which used by the web client to retrieve # downloaded file. The file where the download stored # can has diferent name than the original, if a file # with the same name exists in the directory. In the # url the "%f" can be used to specify the real name # of downloaded file. # You can use the small cgi program "get_file.pl" # which exists in contrib directory of c-icap-modules # distribution. # Default: # No set # Example: # srv_clamav.VirHTTPServer "http://fortune/cgi-bin/get_file.pl?usename=%f&remove=1&file=" # TAG: smv_clamav.VirUpdateTime # Format: smv_clamav.VirUpdateTime seconds # Description: # The secs is the interval between the "progress of download" # messages in seconds. # Default: # srv_clamav.VirUpdateTime 15 # TAG: srv_clamav.VirScanFileTypes # Format: srv_clamav.VirScanFileTypes type1 type2 ... # Description: # The list of file types and groups of file types, # for which this mode must be used. # Default: # None set # Example: # srv_clamav.VirScanFileTypes ARCHIVE EXECUTABLE # End module: srv_clamav