Currently running pfSense 2.4.4 snapshot, I found a problem where Squid+ClamAV would not work. Specifically, c-icap would not start. If you were to start c-icap manually as instructed on the rc.d unit, you'd meet this error:
[2.4.4-RELEASE][root@pfsense]/usr/local/bin: c-icap -D -d 9 <...> Fatal error while parsing config file: "/usr/local/etc/c-icap/c-icap.conf" line: 134 The line is: ListenAddress 127.0.0.1 <...>
Googling, you'd find this: https://sourceforge.net/p/c-icap/mailman/message/36379708/
It seems, on 0.5.x, ListenAddress has been removed in favor of the Port statement.
To fix C-ICAP, you must:
- Remove "ListenAddress 127.0.0.1" statement on line 134 of c-icap.conf
- Replace "Port 1344" statement on line 142 of c-icap.conf with "Port 127.0.0.1:1344"
- To prevent pfSense from overwriting, "chmod -w" that file to prevent writes to it.