Firewall Wizards mailing list archives

RE: Silly Question Time


From: Henry Sieff <hsieff () orthodon com>
Date: Mon, 2 Oct 2000 10:02:39 -0500

Agreed; mail relay is where I do my AV scanning (well, there and at
the IDS).

And no, I haven't actually SEEN CVP, nor do I recommend it really (for
other reasons, but yes, it being proprietary is simply the icing on
the anti-cake).

Henry

-----Original Message-----
From: ark () eltex ru [mailto:ark () eltex ru]
Sent: Monday, October 02, 2000 5:38 AM
To: hsieff () orthodon com
Cc: firewall-wizards () nfr net
Subject: RE: [fw-wiz] Silly Question Time


-----BEGIN PGP SIGNED MESSAGE-----

nuqneH,

Questionable. mail relay may be a better place for AV.

CVP is not a way to go, anyways - have you seen the specification?
Sources? All i could find is _binary_ library by checkpoint 
for serveral
OSes.

Waiting for i-cap..

Henry Sieff <hsieff () orthodon com> said :

Handling malicious code is actually part of the general purpose of
a
firewall; checking incoming data for a virus in email is not
significantly different from reverse proxying and checking the
http
requests coming in. Some AV vendors (Norton, for example) make
firewall AV components, although it only works with certain types
of
firewalls (I believe the fireall must support CVP, for example).

                                    _     _  _  _  _      _  _
 {::} {::} {::}  CU in Hell          _| o |_ | | _|| |   / 
_||_|   |_ |_ |_
 (##) (##) (##)        /Arkan#iD    |_  o  _||_| _||_| /   _| 
 | o |_||_||_|
 [||] [||] [||]            Do i believe in Bible? 
Hell,man,i've seen one!

-----BEGIN PGP SIGNATURE-----
Version: PGP 6.5.1i

iQCVAwUBOdhlmaH/mIJW9LeBAQFHYgQAglIx5fqo/Mx5M0DD5P2rRLxbJcC7m1EP
tPgh08fRPFBSGJKfnigQZRXlD2TPssADUud6kT6XXGVkURyGhTXsJ4pkEW9RR0O3
UMB8hEAv3cS6/xITY6FIaGIbjnKxraFhOMq05YFVMof32fkZnF+EgviB/my+BhlG
UhJave5oTCM=
=1Db4
-----END PGP SIGNATURE-----


_______________________________________________
Firewall-wizards mailing list
Firewall-wizards () nfr net
http://www.nfr.net/mailman/listinfo/firewall-wizards


Current thread: