Noel J. Bergman wrote:
I've looked into it too, but never had really time to get to it. It's not cutting edge, but still should be more than nothing, given now that most viruses in mails come in "periods".Consider this: http://help.rr.com/getpage.asp?/faqs/e_mgsp.html. From what I read, 80% of corporate mail servers now incorporate some form of virus detection.It would be nice if James had a matcher capable of virus detection. I came across this article http://online.securityfocus.com/infocus/1650, and the associated OpenAV project at www.openantivirus.org. Imagine my pleasure at finding that the official projects, ScannerDaemon, VirusHammer and PatternFinder, are written in Java. The project page mentions GPL, but their SourceForge.net page mentions that it is also licensed under BSD, so we'll just have to ask for clarification, and make sure that we have some Open Source, non-GPL, license, as we've received from other cooperative projects. I think that this looks interesting, but I expect my own time to be consumed on other parts of James. Does someone else have the time and interest to look at wrapping a Matcher around the OpenAV scanner classes?
This code can be run from a separate server or in process. Personally I like the separate-server thing so that I can offload processing.
A more complete antivirus system could use also other commercial virus products, but it would be a second step.
The definitions of the viruses are in a semi-standard format, but I don't know who actually updates them.
Finally, at Apache IIUC they use a sister project of it for a mail antivirus. Maybe asking what definitions they use could be interesting.
Ciao.
--
Nicola Ken Barozzi [EMAIL PROTECTED]
- verba volant, scripta manent -
(discussions get forgotten, just code remains)
---------------------------------------------------------------------
--
To unsubscribe, e-mail: <mailto:[EMAIL PROTECTED]>
For additional commands, e-mail: <mailto:[EMAIL PROTECTED]>
