[Samba] Sama + Virus Detection

[Peter Koch]

OAV samba-vscan seems to be a nice one, in the future. But at the moment it
only hooks to file open, which is the exact opposite of what I want. I
assume that a file that exists on the server has already been scanned in
some way. I only want INCOMING files to be scanned. Samba-vscan only scans
outgoing files (incoming is on the todo-list), the Kaspersky monitor does
both.
pk.

----- Original Message -----
From: <dj at 4ict.com>
To: "Peter Koch" <pkliste at schlund.de>
Cc: <samba at lists.samba.org>
Sent: Friday, April 19, 2002 11:17 AM
Subject: Re: [Samba] Sama + Virus Detection


> On Fri, 19 Apr 2002, Peter Koch wrote:
>
> > I am in the process of replacing our existing netware server by a linux
> > samba machine. The setup itself shouldn't be too difficult, everybody
gets a
> > home directory and a few shared directories for workgroups in the
company.
> > But I'm always looking for a fine working solution for scanning incoming
> > (from server view) files for viruses in real time, just like NetShield
from
> > NAI does. I bought Kaspersky Anti Virus for Linux Servers, because it
> > contains it. You have to compile a kernel module that kind of intercepts
the
> > open, close and execute states of files for scanning them. But this is
not
> > only slow, it's suuuuuuuper veeeeeery uuuuuultra slow. Copying 100 files
of
> > mixed sizes (sum. 100MB) took like 4 minutes, without it it takes no
more
> > than 15 seconds or so.
> >
> > Anyone with similar problems/solutions/hints ?
>
> I'm also setting up something simular, but I'm thinking of using the
> samba-vscan tool. It is a link between samba and different antivirus
> tools. See http://www.openantivirus.org/ for more info.
>
> I havent tried it yet so I can't comment on how fast it is, but seems
> worth a try.
>
> Regards,
> Tim
>
> --
>
===========================================================================
> Tim Verhoeven
>                                 Linux & Open Source Specialist
> GSM : 0496 / 693 453                          + e-business solutions
> Email : dj at 4ict.com                           + consulting
> URL : www.sin.khk.be/~dj/                     + Server consolidation
>
===========================================================================
>
>