Re: Anti-virus and squid integration. Any hacker ?

Makes sense.

/Henrik

Paul Boyer wrote:
>
> Many thanks for your feed-back.
>
> I am working to involve Trend Micro (the Interscan VirusWall Linux
> development team is located in Paris) in such a development in order
> for them to be able to sell a "plugin" for Squid, taking advantage of
> all the squid functionnalities.
> Also the necessary adaptation of Squid would allow for other content
> analysis/filtering technologies to come up with some plugin
> functionnalities.
>
> I am also trying to see if there is a possibility to launch a
> OpenSource development for an Anti-virus engine (with eventually some
> commercial subscription to live virus signatures feed).
> At the very moment, my (still small) company, involved in security
> with OpenSource Software has not enough money to directly finance a
> big development effort as a contribution to the community, but I am
> hoping to get funding some day soon, and part of it will allow us to
> contribute to this.
>
> I hope this will make it possible to get some very good solution to
> cope with the difficulties of anti-virus through HTTP, and help the
> coming up of opensource software in this matter.
> Setting up the architecture that make it possible for a commercial
> plugin is a way to attract developpers into contributing to some Free
> Software plugin involved in content analysis.
>
> I hope you agree with this vision.
>
> Paul Boyer
>
> Henrik Nordstrom wrote:
> >
> > Paul Boyer wrote:
> >
> > > How do the squid hackers estimate it could be done in the squid piece
> > > of software, and how much work would be involved in writing a hook in
> > > the piece of code called for retrievals from the Internet, so that it
> > > calls an anti-virus api ?
> >
> > Shouldn't be that hard I guess. All incoming data from the various
> > protocols goes to a single function storeAppend() and then into
> > stmemAppend(). I guess it would be possible to divert the data stream
> > there. It might however be a bit tricky if you need to reject the
> > request..
> >
> > --
> > Henrik Nordstrom
> > Squid hacker
Received on Fri Jun 02 2000 - 14:28:50 MDT