Re: [Sysadmins] Squid, вирусы и ещё что-то

[Vaso VV <fuckel@ukr.net>]

[-- Attachment #1: Type: text/plain, Size: 1137 bytes --]

здесь взял исходники:
http://sourceforge.net/projects/squidclamav/files/squidclamav/5.3/squidclamav-5.3.tar.gz/download
отсюда взял спек:
> http://filebin.ca/sxsjz/squidclamav-3.9-alt0.1.src.rpm
интуитивно его подправил, собралось* squidclamav-5.3, вроде работает (во 
всяком случае вирей с eicar распознаёт).
* - собирается только в присутствии /etc/squidclamav.conf, c 
clwarn.cgi.pt_BR собрать не удалось (исключил).

ЕСЛИ доработать (у меня пока скилов не хватает):
1. хаутушки (хороши, потому что русский, вот только бы немного освежить);
2. в squidclamav.conf добавить значение для работы "из коробки":
    logfile /var/log/squidclamav/squidclamav.log
    clamd_local /var/lib/clamav/clamd.socket
3. Чтобы *.cgi попали в /var/www/cgi-bin
4. Где-то БОЛЬШИМИ КРАСНЫМИ БУКВАМИ написать, что с localhost 
работоспособность squidclamav + squid проверить нельзя - будет много:
   CURLOPT_ERRORBUFFER: Operation timed out after 60001 milliseconds 
with 0 bytes received
потому и redirector_access deny localhost в squid.conf
ТО получим отличное решение для прикручивания squid к clamav.


-- 
WBR........[x]
TFTHAOT....[ ]
AMF........[ ]

[-- Attachment #2: squidclamav.spec --]
[-- Type: text/plain, Size: 2163 bytes --]

Name: squidclamav
Version: 5.3
Release: alt0.1

Summary: Squid ClamAV, is a Squid helper Script, to get Virus scanning for defined Extensions
License: GPLv3
Group: Monitoring
Url: http://squidclamav.darold.net/
Packager: SomeOne <some@one.net>

Source: http://sourceforge.net/projects/squidclamav/files/%name/%version/%name-%version.tar.gz
Source1: squidclamav-README.koi8-r
Source2: squidclamav-README.utf8

Requires: clamav squid perl-CGI

BuildRequires: libcurl-devel

%description
SquidClamAV is a Squid helper script which adds virus scanning
for defined filename extensions. It has been tested with ClamAV,
and Squid. Squid has to be configured to use "redirect_program"
and to either deny access to a URL defined in the SquidClamAV
configuration or to redirect to a remote Site which displays
an error (and some information). SquidClamAV handles the request
as given from Squid, downloads the URL, and scans it for known
viruses. It rewrites the URL from Squid to a blocked URL or an
information page with information about the scanning results.

%prep
%setup

%build
%configure
%make_build

%install
mkdir -p %buildroot%_sysconfdir
mkdir -p %buildroot%_logdir/%name
install -m644 %SOURCE1 README.koi8-r
install -m644 %SOURCE2 README.utf8
install -Dp -m 0644 etc/squidclamav.conf %buildroot%_sysconfdir/squidclamav.conf
%makeinstall

%files
%doc INSTALL COPYING ChangeLog *README*
%_bindir/*
%_sysconfdir/squidclamav.conf
%_mandir/*
%_datadir/*
%_libdir/%name/*
%exclude %_libdir/%name/clwarn.cgi.pt_BR
%dir %attr (0750,squid,squid) %_logdir/%name

%changelog
* Thu Jun 24 2010 SomeOne SomeOne <some@one.net> 5.3-alt0.1
- New version

* Wed Jan 21 2009 Motsyo Gennadi <drool@altlinux.ru> 3.9-alt0.1
- New version

* Thu Oct 23 2008 Motsyo Gennadi <drool@altlinux.ru> 3.7-alt0.1
- New version

* Wed May 07 2008 Motsyo Gennadi <drool@altlinux.ru> 3.5-alt0.1
- New version
- Added README in UTF8

* Thu Nov 08 2007 Motsyo Gennadi <drool@altlinux.ru> 3.2-alt1
- New version

* Mon Oct 08 2007 Grigory Fateyev <greg@altlinux.ru> 3.1-alt1
- New version for Sisyphus

* Fri Jun 22 2007 Grigory Fateyev <greg@altlinux.ru> 3.0-alt1.M30
- Initial build for ALC 3.0