From owner-freebsd-hackers  Thu May 22 02:41:18 1997
Return-Path: <owner-hackers>
Received: (from root@localhost)
          by hub.freebsd.org (8.8.5/8.8.5) id CAA12540
          for hackers-outgoing; Thu, 22 May 1997 02:41:18 -0700 (PDT)
Received: from gate.slc.ru ([194.85.158.33])
          by hub.freebsd.org (8.8.5/8.8.5) with SMTP id CAA12535
          for <hackers@freebsd.org>; Thu, 22 May 1997 02:41:13 -0700 (PDT)
Received: from asteroid.intermedia.ru by gate.slc.ru with ESMTP id NAA21166;
  (8.6.11/vak/1.9) Thu, 22 May 1997 13:38:27 +0400
Received: from asteroid.intermedia.ru (localhost.intermedia.ru [127.0.0.1])
	by asteroid.intermedia.ru (8.8.5/8.8.5) with ESMTP id NAA24670;
	Thu, 22 May 1997 13:44:51 +0400 (MSD)
Message-Id: <199705220944.NAA24670@asteroid.intermedia.ru>
X-Mailer: exmh version 2.0gamma 1/27/96
To: Lars Jonas Olsson <ljo@mcs.net>
cc: hackers@freebsd.org
Subject: Re: VirusWall on FreeBSD? 
In-reply-to: Your message of "Mon, 19 May 1997 12:02:32 CDT."
             <199705191702.MAA14701@Jupiter.Mcs.Net> 
Mime-Version: 1.0
Content-Type: text/plain; charset=us-ascii
Date: Thu, 22 May 1997 13:44:17 +0400
From: Alex Povolotsky <tarkhil@asteroid.intermedia.ru>
Sender: owner-hackers@freebsd.org
X-Loop: FreeBSD.org
Precedence: bulk

>  I've got a FreeBSD machine that provides WWW and email services for a
> small company (60 people is this office). I'd like to detect
> MSDOS/Windows viruses sent via email and WWW on this machine.
I fear you'll overload your server by infinite checking, for you'll have to 
check also .zip, .arj and a dozen of other archives, and still you'll unable 
to prevent users to bring viruses, say, on floppies (we're hunting for floppy 
with OneHalf for half a year, without any success). Well, and what if your 
user will get encrypted file with virus?

Alex.