In message on 05/10/05(23:27:16)
you Schoch Andreas wrote:
|using delegate as application proxy for special communications we have
|the requirement to virus scan this
|traffic. we are using trendmicro scan engines using ICAP protocol.
|Does delegate support a configuration like this?
|Searching on delegate.org I did not found infos about ICAP support.
|(found only also a question about ICAP support)
I have never considered it because no one asked me about it :)
Since DeleGate has a generic function to feed a message to filter program,
that is filtering a request to a server (by FTOSV parameter) or a
response to client (by FTOCL), it can be supported outside of DeleGate.
+------------->+ +--+ *-------->+
client -+ +- DeleGate + + server
+<--------+ +--+ +<-------------+
(stdin to stdout)
For example, usually, the FTOCL filter is realized as a local filter
program from stdin to stdout and specified as FTOCL=command.
Tentatively, it can be directed to remote TCP port with as
These generic mechanism might cause a little or significant overhead
depending on the application protocol. It the overhead is not acceptable,
it might be necessary to support ICAP directly in DeleGate's core.
D G Yutaka Sato http://delegate.org/y.sato/
( - ) National Institute of Advanced Industrial Science and Technology
_< >_ 1-1-4 Umezono, Tsukuba, Ibaraki, 305-8568 Japan
Do the more with the less -- B. Fuller