Dr.Web ICAPD

The Dr.Web ICAPD component connects to an HTTP proxy server (such as Squid) via the ICAP protocol. Typically, an HTTP proxy server is installed on a server (gateway) that is used to provide Internet access to LAN users. The proxy server uses Dr.Web ICAPD as an external filter. Thus, Dr.Web ICAPD analyzes user requests and server responses to these requests. If user access to any resource located on the external network must be forbidden, or transmitted data (a user request or a server response) contains a threat or cannot be scanned because of an error, Dr.Web ICAPD instructs the proxy server to return a special HTML page to the user, which is generated by Dr.Web ICAPD from a template.

In case of high intensity of the scanning of files transferred via the HTTP protocol, there is a possibility of having problems with scanning due to depletion of the number of available file descriptors by Dr.Web Network Checker. In this case, it is necessary to increase the limit number of file descriptors available to Dr.Web for UNIX (see section “Errors without codes” in the Appendix F of the Administrator Manual).

Full version of Administrator Manual for Dr.Web for UNIX is available

•At Doctor Web official website https://download.drweb.com/doc/ (Internet connection is required).

•You can view a PDF file in the <opt_dir>/share/doc directory (the suffix in the name indicates the language).

Details:

•Operating Principles

•Command Line Arguments

•Configuration Parameters

•Integration with HTTP Squid Proxy Server