in the end did this work, the reason why i thought it wasnt is because i went on the eicar test website and downloaded the txt fle and i could see it on the website

reason was it was because it was cached and must have saved it in memory as "cache_dir" i have disabled, once i rebooted the squid server and tried to download the txt file again i got the squid virus page

i did have to update my clamav service via yum as when i run "freshclam" it errored saying running an old version but once i updated all was good

On Wed, 29 Sept 2021 at 18:51, robert k Wild <robertkwild@gmail.com> wrote:

hi all,

going by this link

https://wiki.squid-cache.org/ConfigExamples/ContentAdaptation/C-ICAP

theres two icap configuration options, what one should i use as atm i have this in my squid.conf

#ICAP
icap_enable on
adaptation_uses_indirect_client on
icap_send_client_ip on
icap_send_client_username on
icap_client_username_header X-Authenticated-User
icap_service service_req reqmod_precache bypass=0 icap://127.0.0.1:1344/squidclamav
adaptation_access service_req allow all
icap_service service_resp respmod_precache bypass=0 icap://127.0.0.1:1344/squidclamav
adaptation_access service_resp allow all

thanks,
rob

--
Regards,

Robert K Wild.