Re: [users@httpd] Apache virus scanning

2016-03-10 Thread Wei-min Lee
You can configure scheduled scans of your system with clamav. As for real time protection, that'll take some research - might even have to consider a commercial product. But if you end up paying for a commercial product, you might as well get one that also supports ICAP - the popular ones do nowada

Re: [users@httpd] Apache virus scanning

2016-03-10 Thread Rubén Toribio Aldeguer
Thanks, This information is very ussefull for me too. What about for an antivirus on the server? do yo have any experiencie with it? TX. 2016-03-09 21:22 GMT+01:00 Wei-min Lee : > Using ICAP is a good way to go so that the person uploading files can be > notified of upload fails due to the virus

Re: [users@httpd] Apache virus scanning

2016-03-09 Thread Wei-min Lee
Using ICAP is a good way to go so that the person uploading files can be notified of upload fails due to the virus scan. Relying on filesystem virus scans lacks visibility of quarantined/rejected files. On Wed, Mar 9, 2016 at 12:18 PM, Wei-min Lee wrote: > You could use clamav via ICAP with squ

Re: [users@httpd] Apache virus scanning

2016-03-09 Thread Wei-min Lee
You could use clamav via ICAP with squid transparently in front of apache. http://wiki.squid-cache.org/ConfigExamples/ContentAdaptation/C-ICAP http://squidclamav.darold.net/config.html http://louwrentius.com/setting-up-a-squid-proxy-with-clamav-anti-virus-using-c-icap.html On Wed, Mar 9, 2016 at

Re: [users@httpd] Apache virus scanning

2016-03-09 Thread Aurélien Terrestris
On a large scale prod (200 000 users/day), I was using proxies working with antivirus through ICAP protocol (RFC 3507). The results were pretty good. I am not sure we could use this technology with Apache, and ICAP seems a bit old now. 2016-03-09 16:45 GMT+01:00 Christopher Schultz : > John, > >

Re: [users@httpd] Apache virus scanning

2016-03-09 Thread Christopher Schultz
John, On 3/9/16 10:21 AM, Rose, John B wrote: > What about if your web sites allow for uploading files? Would you not want > to scan those on upload before they got on your filesystem? Sure, it would be nice to have the file scanned during upload, but I'm guessing that the AV can't give an opinio

Re: [users@httpd] Apache virus scanning

2016-03-09 Thread David Copeland
Hi John, For that I use a php script that handles the upload. It runs clamscan on the uploaded file. For example: $outputlines = array(); $last = exec ( "clamscan --quiet ".$_FILES['uploadedfile']['tmp_name'], $outputlines, $rc ); # then check $rc . 1 => a virus was fo

Re: [users@httpd] Apache virus scanning

2016-03-09 Thread Rose, John B
What about if your web sites allow for uploading files? Would you not want to scan those on upload before they got on your filesystem? On 3/9/16 9:49 AM, "Christopher Schultz" wrote: >John, > >On 3/8/16 6:02 PM, Rose, John B wrote: >> I am interested in both >> >> Thanks >> >> Sent from my iPa

Re: [users@httpd] Apache virus scanning

2016-03-09 Thread Christopher Schultz
John, On 3/8/16 6:02 PM, Rose, John B wrote: > I am interested in both > > Thanks > > Sent from my iPad > >> On Mar 8, 2016, at 3:27 PM, Christopher Schultz >> wrote: >> > John > On 3/8/16 2:43 PM, Rose, John B wrote: Looking for comments on mod_clamav, and any other alternative >>

Re: [users@httpd] Apache virus scanning

2016-03-08 Thread Rose, John B
I am interested in both Thanks Sent from my iPad > On Mar 8, 2016, at 3:27 PM, Christopher Schultz > wrote: > > -BEGIN PGP SIGNED MESSAGE- > Hash: SHA1 > > John > >> On 3/8/16 2:43 PM, Rose, John B wrote: >> Looking for comments on mod_clamav, and any other alternative >> antivirus

Re: [users@httpd] Apache virus scanning

2016-03-08 Thread Christopher Schultz
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 John On 3/8/16 2:43 PM, Rose, John B wrote: > Looking for comments on mod_clamav, and any other alternative > antivirus software for Apache on linux Are you trying to protect your clients or your servers? - -chris -BEGIN PGP SIGNATURE- Comme

[users@httpd] Apache virus scanning

2016-03-08 Thread Rose, John B
Looking for comments on mod_clamav, and any other alternative antivirus software for Apache on linux