Добрый день!
Настроил проверку http трафика через icap. Все работает хорошо, но обнаружил непонятную ошибку при скачивании архива с большим количеством вирусов.
Архив скачиваю отсюда: http://ifolder.ru/12616386
В логе icap-антивируса ошибок нет, но перечислены далеко не все вирусы из архива:
Jan 22 12:37:37 icap drweb-icapd [17117]: WARN url:[http://stg338.rusfolder.com/download/?12616386&5Y04FBkjgbjk4VP5jwmxLw%3D%3D], client_ip:[192.168.xxx.xxx], code=50000e0, size=1963k, viruses:[EndOne.456, #012#0117thSon.284, #012#0117thSon.284, #012#0117thSon.284, #012#011VirusConstructor.based, #012#011VirusConstructor.based, #012#0117thSon.350, #012#011Q.8Ball, #012#011XRCV.255, #012#011XRCV.330, #012#011XRCV.Ice.250, #012#011ACDC.494, #012#011ACDC.499, #012#011Dikshew.AD.132, #012#011Dikshew.AD.157, #012#011Dikshew.AD.173, #012#011Dikshew.AD.243, #012#011BitAddict.477, #012#011Tic.109, #012#011Ahav.336, #012#011Ahav.377, #012#011Airwalker.based, #012#011Airwalker.based, #012#011Airwalker.based, #012#011Airwalker.based, #012#011Airwalker.based, #012#011AK.251, #012#011Archinf, #012#011Archinf, #012#011Archinf, #012#011Trivial.71, #012#011Amazon.468, #012#011Amazon.468, #012#011Amazon.479, #012#011Amazon.479, #012#011Pixel.based, #012#011Pixel.based, #012#011Pixel.based, #012#011Pixel.based, #012#011Pixel.based, #012#011Pixel.based, #012#011Angarsk.238, #012#011Trivial.based, #012#011Trivial.based, #012#011AntiMIT.764, #012#011Siggen.694, #012#011Tiny.129, #012#011Angel.385, #012#011Auspar12.based, #012#011Australian.118, #012#011Australian.118, #012#011Australian.118, #012#011Australian.118, #012#011Australian.147, #012#011Australian.150, #012#011Australian.150, #012#011Australian.118, #012#011Australian.118, #012#011Australian.118, #012#011Australian.118, #012#011Australian.147, #012#011Australian.150, #012#011Australian.150, #012#011NightBird.419, #012#011NightBird.419, #012#0117thSon.428, #012#011XRCV.330, #012#011VirusConstructor.based, #012#011XRCV.475, #012#011XRCV.159, #012#011XRCV.Ice.199, #012#011XRCV.Ice.224, #012#011XRCV.Ice.250, #012#011XRCV.330, #012#011XRCV.255, #012#011XRCV.330, #012#011XRCV.Ice.250, #012#011Ash.280, #012#011Ash.449, #012#011Ash.451, #012#011Ash.270, #012#011Ash.280, #012#011Ash.280, #012#011VirusConstructor.based, #012#011VirusConstructor.based, #012#011VirusConstructor.based,
При этом squid возвращает страницу с ошибкой: Ошибка протокола ICAP. Система вернула: [No Error].
На данный момент я установил параметр StopOnFirstInfected = yes, и проблема исчезла.
Тем не менее хотелось бы разобраться что именно вызывает проблему.
