On Fri, 17 May 2002, at 1:25pm, mike ledoux wrote:
> we now will also scan for virii on the Samba servers whenever a file is
> accessed.

  The general concensus is that the only way to do this without taking a
huge performance hit would be to build the anti-virus engine into either
Samba or the kernel.

> Now, I've found a number of virus scanners that will run on x86 Linux to
> scan for Windows virii at the command line, so periodic scans of the
> exported filesystems are not a problem, but I can't for the life of me
> figure out a way to make Samba scan a file before serving it to the
> client, or to make Samba scan an incoming file from the client before
> writing it to disk.

  Plugging an external scanner into this would likely suck.  You would have
to fork() on each I/O event.

> I'm facing some pressure here of the 'if this was an NT server, this
> wouldn't be a problem' variety...

  If NT is the better choice, use it.  "Linux at all costs" is a poor way to
do things, and hurts both the user and the Linux community.

> ... I'm really hoping that there is a known solution for this problem.

  How about an unknown solution?  Trend Micro <http://www.trendmicro.com>
claims to have a real-time anti-virus solution for Linux servers.  I have
not yet had a chance to see how (or even if) it works.  But it might be
worth checking out.  URL for the particular product is:

        http://www.antivirus.com/products/splinux/

-- 
Ben Scott <[EMAIL PROTECTED]>
| The opinions expressed in this message are those of the author and do not |
| necessarily represent the views or policy of any other person, entity or  |
| organization.  All information is provided without warranty of any kind.  |


*****************************************************************
To unsubscribe from this list, send mail to [EMAIL PROTECTED]
with the text 'unsubscribe gnhlug' in the message body.
*****************************************************************

Reply via email to