Skip to content

Commit

Permalink
fix typo
Browse files Browse the repository at this point in the history
  • Loading branch information
mimugmail authored and fichtner committed Sep 20, 2017
1 parent 54f41f5 commit 90deaa6
Showing 1 changed file with 1 addition and 1 deletion.
Original file line number Diff line number Diff line change
Expand Up @@ -19,7 +19,7 @@ virus_scan.Allow204Responces on
{% if helpers.exists('OPNsense.cicap.antivirus.passonerror') and OPNsense.cicap.antivirus.passonerror != '' %}
virus_scan.PassOnError off
{% endif %}
{% if helpers.exists('OPNsense.cicap.antivirus.cmaxobjectsize') and OPNsense.cicap.antivirus.maxobjectsize != '' %}
{% if helpers.exists('OPNsense.cicap.antivirus.maxobjectsize') and OPNsense.cicap.antivirus.maxobjectsize != '' %}
virus_scan.MaxObjectSize 5M

This comment has been minimized.

Copy link
@fabianfrz

fabianfrz Sep 20, 2017

Member

this line might require a change too - otherwise it makes no sense to have it in the config

{% endif %}
Module common clamd_mod.so
Expand Down

2 comments on commit 90deaa6

@Stephanowicz
Copy link

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Hi,

as mentioned in the forum https://forum.opnsense.org/index.php?topic=5999.msg25489 we had this error again, that cicap tried to download a big file though the max size is set to 5mb...

Any ideas what else could be the problem?

Cheers, Stephan

(Btw. we did a 'stress test' with the proxy, suricata & clamav and besides of this issue it all really performed very well! Thanx!)

@Stephanowicz
Copy link

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Update:

ServiceAlias avscan virus_scan?allow204=on&sizelimit=off&mode=simple
is the problem.
Acoording to http://c-icap.sourceforge.net/install.html

sizelimit=off to ignore srv_clamav.MaxObjectSize directive in c-icap.conf file

I just tested it and removing this solved it...

Cheers,

Stephan

Please sign in to comment.