[H-GEN] antivirus and squid recommendations?

[Tony Nugent]

[ Humbug *General* list - semi-serious discussions about Humbug and     ]
[ Unix-related topics. Posts from non-subscribed addresses will vanish. ]

On Tue Jan 14 2003 at 11:08, "Peter Arnold" wrote:

> Does anyone have any recomendations for virus scanning webtraffic on a
> running squid 2.5 on RH7.2?

squid is able to use "plugins" (add-ons), see:
	http://www.squid-cache.org/Doc/FAQ/FAQ-21.html#ss21.4

I have use squidguard in the past to block "bad" URLs (mainly porn).

I have no idea if this sort of approach can be used to filter for
malicious html code or viruses, but it is worth investigation. 

> I have a cowboy here who says "just install inoculate, it's got a linux
> version". I've yet to look into it but I doubt it filters traffic going
> through the proxy.

:-)

Many virus scanners do filter web content (and activeX and so on),
but AFAIK they need to be installed in the client box rather than a
proxy.  I have no idea if inoculate does web content scanning.

> We are getting a number of viri detected on PC's where the content has
> come from web browsing. ie:
> From: InocAlert
> Sent: Tuesday, 14 January 2003 10:43 AM
> To: Xxxx Yyyy
> Subject:
>
> [time 10:41:25 01/14/03: ID 26: machine PC703934.generaldept.qld.gov.au:
> response 10:42:21 01/14/03] The JScript/Netdex.Trojan virus was detected
> in C:\DOCUMENTS AND SETTINGS\STEPHENJ\LOCAL SETTINGS\TEMPORARY INTERNET
> FILES\CONTENT.IE5\UBUNET8L\BANNER[2].

It's just terrible, ey.  It is such a sh*##y os when it comes to
security and its implementation.  What makes the whole thing so
crazy is that you have to pay for the privilege of using it, then
you have to pay more (in terms of both time and money) just to
protect it.

Ahh well, it will be a brave new world (big brother watching too,
literally) once Palladium becomes a reality -- and this is going to
happen much sooner than most people expect.  It has the potential to
transform the way we all work with computers.  DRM (digital rights
management) has the ability to not only kill the very concept of
viruses, but also control just everything everyone does with
computers.  (And just guess who will be in control...)

> Thanks
> Peter Arnold

Cheers
Tony

--
* This is list (humbug) general handled by majordomo at lists.humbug.org.au .
* Postings to this list are only accepted from subscribed addresses of
* lists 'general' or 'general-post'.  See http://www.humbug.org.au/