Squid ICAP Syntax with F-Secure Internet Gate Keeper (IGK)
*** UPDATE September 2015 - This article has been updated with the correct syntax and confirmed working on Squid 3.3.8 ***
The doco for IGK is some what lacking for the ICAP settings but it does mention ” Refer to the documentation of the proxy for information on how to set it up”. That’s not very helpful so I contacted F-Secure technical support and asked them. This is the reply:
You will need to add these lines to Squid config file:
icap_enable on icap_send_client_ip on icap_service service_req reqmod_precache bypass=1 icap://[IP address of IGK]:1344/request adaptation_access service_req allow all icap_service service_resp respmod_precache bypass=0 icap://[IP address of IGK]:1344/response adaptation_access service_resp allow all
Unfortunately that still doesn’t work for some unknown reason and I am only getting the error:
ErrPage: ERR_CANNOT_FORWARD
I don’t have anymore time to spend on this, I guess I’ll just use the F-Secure HTTP proxy as a parent proxy for squid.