This viralator solution is not acceptable in my
organization. The viralator scanner is prone to
loops, it can't recognize docs embedded in pages, and
numerous other problems. It is not very elegant as
stated below, but the loops it gets into drove our
server into the ground. I don't think I've
implemented it wrong, but if anyone has any tips. We
desperately would like a virus scanner to integrate
with squidguard.
Ryan Kather
--- Scott McGee <[EMAIL PROTECTED]> wrote:
> If you want to use viralator, here is a version that
> was modified to
> work with SquidGuard. See below:
>
> : This was posted previously to the list by someone
> else. Attached is a
> : version of Viralator that is modified to work with
> SquidGuard.
> :
> : In /etc/squidGuard.conf, add:
> :
> : dest virus{
> : expressionlist antivirus/expressions
> : log virus.log
> : redirect
> http://192.168.1.1:3131/cgi-bin/viralator.cgi?url=%u
> : }
> :
> : acl {
> : default {
> : pass !virus !custom all
> : redirect http://ThisSiteIsBlocked.net/
> : }
> :
> : In your dbhome directory:
> :
> : #ls -l squidGuard/db/blacklists/antivirus
> : -rw-rw---- 1 squid squid 22 Oct 18
> 2001 expressions
> :
> : #cat expressions
> : \.(zip|exe|doc|vbs)$
> :
> : It's not a very elegant solution, but it gets the
> job done.
> Basically,
> : squidGuard directs any downloaded files with the
> above extensions to
> be
> : directed through Viralator. It then downloads the
> file to the Squid
> : box, scans for viruses, and then gives a pop-up
> window allowing the
> user
> : to click a link and download the file from the
> Squid box.
> :
> : Scott
>
> ATTACHMENT part 2 application/octet-stream
name=viralator.cgi
__________________________________________________
Do You Yahoo!?
Yahoo! - Official partner of 2002 FIFA World Cup
http://fifaworldcup.yahoo.com
