I'm not sure about any windows based solutions but you might want to check
out Dansguardian - http://dansguardian.org/

It has a AV addon - http://www.pcxperience.org/dgvirus/ that will scan the
content before passing it onto the clients.  I should note that there is
still a possibility that the client will receive the virus before it can
be intercepted.  The problem is the proxy has to download the content
first and scan it before it can pass it on.  If it takes the proxy too
long to download and scan, the client could time-out waiting for the proxy
to forward it on.  To get around the problem, the proxy sends some of the
content to the browser, usually 1 Byte every minute and that seems to keep
the client happy while it waits for the rest of the file.  There is still
an extremely small chance though that part of or all of a small virus
could get passed to the client when it does that depending on how big the
file is and how long it takes to proxy to receive it and scan it.

Another solution is mod_clamav which is a AV mod for apache2 that uses
ClamAV to scan for viruses.  It's the same kind of thing except it just
uses apaches proxy code instead of using an actual proxy application.  I
know for mod_clamav you can set it to not scan files over a certain size,
I'm not sure about the Dansguardian one though.

URL is http://software.othello.ch/mod_clamav/


-- 
Trevor Lauder

Personal:

Web: http://www.thelauders.net
E-Mail: [EMAIL PROTECTED]


Work:

Senior Linux Analyst

LAN Solutions
Telephone: (403) 255-5026
WWW: http://www.lansolutions.ab.ca
E-Mail: [EMAIL PROTECTED]

Grecko said:
> Hey all,
> I'm doing a science project on protecting a network with a windows
> gateway, and one of the things I am trying to do is to have the gateway
> intercept all HTTP requests, download the content requested, run a virus
> scanner over it, and then if its clean, passing it on to the client, or,
> if it contains a virus, passing a different page onto the client.
> Is there a program that will do this, or something close enough to this
> that a person with little programming knowledge could hack the program
> to do this?
> Thanks!
> Grecko
>
>
>
>
> _______________________________________________
> clug-talk mailing list
> [EMAIL PROTECTED]
> http://clug.ca/mailman/listinfo/clug-talk_clug.ca
>
>



_______________________________________________
clug-talk mailing list
[EMAIL PROTECTED]
http://clug.ca/mailman/listinfo/clug-talk_clug.ca

Reply via email to