I currently run run squid with squidguard and I wanted to do a couple of things and here are my questions as follows:

1 - under squidguard how would I be able to disallow my w2k users from downloading *.exe, *.zip and etc. Would that be configured under squid or squidgaurd and what would I have to add to either of those to programs?

2 - How would I factor in clamav into the picture for additional virus protection because I currently use f-prot but version is not as robust as calmav. From what I understand clamav can scan things as they go through the proxy? After I install it what additional things would I have to do.

1. Write an ACL that uses reg expressions to deny urls that contain the string .zip or .exe. There is an example in the squid guide on doing it with .avi files in the ACL section of the squid docs here:
http://squid-docs.sourceforge.net/la...l.html#AEN1389

2. Take a look at SquidClamAVRedirector (SCAVR) and SafeSquid already has it integrated.

I was using f-prot but it does have a daemon the freeware that I am talking about. CLAMAV is cool was but it is a pain to configure!