Rudi Ahlers wrote: > Hi all > > I've been thinking about using CentOS on a Dell R200 server and turn > it into a firewall / network monitor / traffic shaper in our > datacentre, instead of using a dedicated firewall device. > > One of the devices that I have been looking at, with my limited > budget, is the D-Link DFL 860 - > http://www.netdefend.eu/Product.aspx?m=15&ref=DFL-860 > > It provides AV, SPI, VPN, DOS, P2P, etc protection. Most of this can > be done with Linux as well, but I'm not 100% sure about the AV part. > > How will I use / setup CentOS to check all traffic coming in & out > (HTTP, SMTP, POP3, IMAP, etc) for virusses and clean them? We host > both Windows & Linux servers, and I'm not too worried about the Linux > servers, but Windows needs a lot of extra protection. > well, pop/imap shouldn't need any virus scanning, that would be handled at the SMTP transfer layer, by something like MailScanner + ClamAV (I've used this combination), or spamassassin+clamav, and others. http virus scanning can be done by using Squid as a transparent web proxy agent and squid plugins. I've never attempted this myself, so I can't give you the exact recipe.