QuintoLabs updates Content Security to version 1.1

The QuintoLabs Content Security web filtering application was upgraded to the version 1.1. It adds support for ICAP based integration with Squid proxy that lead to overall performance improvements. Another new thing is a package compiled for ArchLinux (i686). The decent package usable from Pacman is missing though…

Installation procedure that is described in my previous post about “Tiny Content Filtering and Web Acceleration Appliance” now become a little outdated. The default way integration with Squid (at least for 3+) is now ICAP instead of URL rewriting… so add the following section to your /etc/squid3/squid.conf (I am using Ubuntu remember!).

icap_enable on
icap_preview_enable on
icap_preview_size 4096
icap_persistent_connections on
icap_send_client_ip on
icap_send_client_username on
icap_client_username_header X-Client-Username
icap_service qlproxy reqmod_precache bypass=0 icap://
adaptation_access qlproxy allow all

Well it means the ICAP server (qlproxyd) is supposed to be installed on the same machine as Squid, but I tried installing it on a separate Fedora 14 machine and it worked as expected. So the same host deployment recommendation may be just a lack of time to test the muliti host solution at QuintoLabs 🙂

About sichent

This entry was posted in Network. Bookmark the permalink.