Re: [squid-users] Re: Squid Issues and Problems

We are affected by this problem, IWSS is telling:
2008/07/30 11:05:35 GMT-03:00 <18297:19575> WARNING: X-TE trailers
not found, ICAP client does NOT support trickling for this type of
transaction

When trying to download a large file. Is there any plan on making a
modification on Squid for this to work? Or is something Trendmicro
will need to modify?

Thanks

On Mon, Jul 7, 2008 at 2:07 PM, Henrik Nordstrom
<henrik_at_henriknordstrom.net> wrote:
> It's Trend Micro way of telling the ICAP server (IWSS) that the ICAP
> client (the proxy) is capable of forwarding the response from the ICAP
> server before the entire object has been sent to the ICAP Server.
>
> Most others assume this by default without requiring the private "X-TE:
> trailers" header.
>
> The ICAP standard do not cover explicit how ICAP clients should behave
> in this regard.
>
> This is used by IWSS both for showing a download progress bar, and also
> in trickle mode where the data is slowly sent to the requestor while
> scanned for viruses.
>
> I do not know who proposed the "X-TE: trailers" name. It's a very odd
> name for the feature as it
>
> a) Does not have anything to do with transfer encoding (TE)
>
> b) Does not have anything to do with trailers.
>
> But with it being an X-* header it's free to mean anyting implementation
> specific, as long as everyone involved privately agrees on what the
> meaning actually is...
>
>
> Regards
> Henrik
>
>
>
> On m�n, 2008-07-07 at 11:01 -0400, Jeremy Hall wrote:
>> What do X-TE headers do?
>>
>> _J
>>
>> >>> <jerome_law_at_trendmicro.co.uk> 7/7/2008 5:28 AM >>>
>> Hi there all,
>>
>> Firstly many thanks for all your work on Squid thus far :)
>>
>> I have been testing Squid 3.0 since PRE6 in various configurations, and one
>> of the more notable issues I have found is that when Squid is running in
>> ICAP mode, coupled with Trend Micro IWSx (InterScan Web Security) - IWSx
>> reports that Squid does not support the X-TE trailers for data trickling.
>> The error is usually logged when dealing with video from CNN (at first I
>> thought all flash video, but YouTube is unaffected) and downloading certain
>> MS Hotfixes. There might be other triggers as well - but these seem to be
>> the main ones. When I configure IWSx to use a different ICAP server - say
>> NetCache or other, there is no issue or error logged and things work as
>> expected.
>>
>> A quick search of the squid source provided no answers, however a search of
>> the archives show that there was a patch for Squid 2.5 ICAP dealing with
>> X-TE trailers:
>>
>> http://www.squid-cache.org/mail-archive/squid-dev/200311/att-0018/squid-icap
>> -2_5-x-auth-user.diff
>> http://www.squid-cache.org/~hno/changesets/squid/patches/7972.patch <http://www.squid-cache.org/%7Ehno/changesets/squid/patches/7972.patch>
>>
>> Looking at ICAPModXact.cc I can see that there are some similar references
>> to the area's above, however most certainly the code is above my level of
>> expertise to have a play around with to cobble something together.
>>
>> I was wondering if there were any plans to include support for X-TE trailers
>> in this version? If you could let me know that would be greatly appreciated.
>>
>> Best Regards,
>>
>> Jerome
>>
>>
>>
>> <http://websecurity.trendmicro.com/>
>>
>>
>>
>> Jerome Law | Solutions Architect, Regional Marketing EMEA
>>
>> Pacific House, Third Avenue, Globe Business Park, Marlow
>>
>> Buckinghamshire, SL7 1YL, United Kingdom
>>
>> Office: +44 (0) 1628 400586 | Mobile: +44 (0) 7979 99 33 77
>>
>>
>>
>>
>>
>>
>>
>>
>>
>>
>>
>>
>>
>> <http://feeds.feedburner.com/~r/Anti-MalwareBlog/~6/2>
>>
>>
>>
>>
>>
>> =======================================================================
>> TREND MICRO EMAIL NOTICE
>>
>> Trend Micro (UK) Limited, a Limited Liability Company. Registered in England No. 3698292. Registered Office: Pacific House, Third Avenue, Globe Business Park, Marlow, Bucks, SL7 1YL Telephone: +44 1628 400500 Facsimile: +44 1628 400511.
>>
>> The information contained in this email and any attachments is confidential and may be subject to copyright or other intellectual property protection. If you are not the intended recipient, you are not authorized to use or disclose this information, and we request that you notify us by reply mail or telephone and delete the original message from your mail system.
>>
>>
>>
>>
>
Received on Wed Jul 30 2008 - 14:57:08 MDT