From owner-freebsd-isp@FreeBSD.ORG Sat Aug 2 15:35:00 2003 Return-Path: Delivered-To: freebsd-isp@freebsd.org Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125]) by hub.freebsd.org (Postfix) with ESMTP id 37DC737B445 for ; Sat, 2 Aug 2003 15:34:59 -0700 (PDT) Received: from relay.transip.nl (relay.transip.nl [80.69.66.68]) by mx1.FreeBSD.org (Postfix) with ESMTP id 0FC9443FAF for ; Sat, 2 Aug 2003 15:34:58 -0700 (PDT) (envelope-from freebsd@walter.transip.nl) Received: from blue.calx.nl (blue.calx.nl [213.84.201.224]) by relay.transip.nl (Postfix) with ESMTP id 42DC528A; Sun, 3 Aug 2003 00:34:55 +0200 (CEST) Received: from kai.calx.nl (kai.calx.nl [172.23.7.10]) by blue.calx.nl (Postfix) with ESMTP id 312E4A931; Sun, 3 Aug 2003 00:34:55 +0200 (CEST) Date: Sun, 3 Aug 2003 00:34:56 +0200 From: Walter Hop X-Mailer: The Bat! (v1.62r) Educational X-Priority: 3 (Normal) Message-ID: <837849410.20030803003456@blue.calx.nl> To: "mouhammad sajjad" In-Reply-To: References: MIME-Version: 1.0 Content-Type: text/plain; charset=us-ascii Content-Transfer-Encoding: 7bit cc: freebsd-isp@freebsd.org Subject: Re: anti virus X-BeenThere: freebsd-isp@freebsd.org X-Mailman-Version: 2.1.1 Precedence: list List-Id: Internet Services Providers List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sat, 02 Aug 2003 22:35:01 -0000 [in reply to sajjadw21@hotmail.com, 1-8-2003] > i m using freebsd as a proxy server i need an antivirs for it as i get > a lot of virus links getting passed my network. Do you mean a HTTP proxy server, such as Squid? There is a filter plugin for Squid and a new "squid-vscan" project that is supposed to scan content on-access using a virusscanner. I haven't tried it out yet; there is no FreeBSD port yet but good chance it will run. http://www.openantivirus.org/projects.php I would assume that scanning every incoming file will use your available system resources quickly. As long as browsers are broken and ignore the Content-Type you will have to fire up the virusscanner for *every* cache miss; if you have many people behind the proxy you will probably need fast disks and probably even multiple proxies. I don't have plans for such a setup currently, but it seems like an interesting task. Let me know what solution worked out for you and what your comments are about its performance! cheers, walter