ICAP mode: DENIED : Could not perform content scan!

91 views
Skip to first unread message

MarkusPL

unread,
Sep 12, 2022, 8:20:58 AM9/12/22
to e2guardian
Hi,

I set up  E2G as an ICAP for Squid. In general it works really fine. Today for some reason E2G couldn't perform content scan and it sent a DENIED response to the Squid with message:

*DENIED* ICAP Response filtering: WARNING: Could not perform content scan!

my question is:  how to configure E2G  so that it responds with ACCEPT in such a case 
(I mean if it's impossible to perform the content scan)

the problem is kinda serious, because if that happens the whole company can't browse the internet :)

thx for any hints

markus.

MarkusPL

unread,
Sep 23, 2022, 6:31:55 AM9/23/22
to e2guardian
is this group  still alive?

Philip Pearce

unread,
Oct 10, 2022, 5:45:04 AM10/10/22
to Marek, e2guardian
This error is associated with using a virus scanning plug-in.  

Please look in system log to get more details of the error cause.

If there is the error "Unknown return code from content scanner:" then this can be bypassed by setting "disablecontentscanerror = on" in your e2guardianfN.conf files.

This is clearly documented in the 'AV_SCANNERS' section of the example e2guardianf1.conf file.

#disablecontentscanerror = off
#
# Disable content scanning with error (timeout, AV crash, etc)
# If you enable this option you will allow object with an unexpected result
# Content scanning primarily is AV scanning (if enabled) but could include
# other types.
# With "on" you can allow INFECTED objects
# (on|off) default = off. (default and highly recommended)

If there is the error "scanFile/Memory returned error: NNNN" then either investigate why the virus scan engine you are using is returning the the unexpected error code NNNN and fix that, or turn off the virus scanning.

Regards
Philip
--
E2guardian:
https://groups.google.com/d/forum/e2guardian
Github:
https://github.com/e2guardian/e2guardian
Follow us on twitter:
https://twitter.com/e2guardian
---
You received this message because you are subscribed to the Google Groups "e2guardian" group.
To unsubscribe from this group and stop receiving emails from it, send an email to e2guardian+...@googlegroups.com.
To view this discussion on the web, visit https://groups.google.com/d/msgid/e2guardian/1a7b0e95-55c7-4d92-82c7-156940e3c7c0n%40googlegroups.com.
Reply all
Reply to author
Forward
0 new messages