Hi all,
sorry, I was not able to follow this list for a few days.
The TIS FWTK is a good starting point, but I see one difficulty: you are
not allowed to provide support for it (we went through it with NAI before)
which is the reason why I wrote the FTP-Proxy. Apart from that, the FWTK
lacks some concepts I wanted to have: LDAP-config, RegEx for FTP-Cmds, GNU
AutoConf, and several others. Anyone can use the FWTK, but they have to do
all changes on their own.
The SuSE Proxy-Suite is an ongoing project with new components right now
being worked on. Next to release are a Virus-Scanner for SMTP and FTP,
plus proxies for Telnet (incl. S/Key), SSH, LDAP, and a Generic-Proxy (a
la Plug-GW). All of those are nearly finished. If I only had more time to
spend on it, there would be way more components available by now.
I am also thinking about an HTTP proxy with a config interface (LDAP) what
to allow/forbid, based upon URL+Client+Protocol (like JavaScript, ActiveX,
...). Dunno if this would be regarded as useful?
I am wide open for suggestions what to do additionally (best would be more
contributors of course :-) or any changes in priority. Just let me know.
Please include my address directly, as I might not always be reading each
and every posting on the list [Sorry].
Maik Außendorf
Is the SuSE Proxy Suite it too ???? Well, the SuSE Proxy Suite contains yet only an FTP Proxy, see http://proxy-suite.suse.de
What is about NNTP, SMTP, Netmeeting, Telnet.... Are there Proxy´s too ????
Hmm, what about the TIS FWTK (www.fwtk.org) or the Juniper Firewall from Obtuse (www.obtuse.com/open_source/). Imho there's a lack of (good) Application Gateways for Linux - but maybe this changes with the SuSE Proxy Suite?! :-)
What´s about Virus/Trojan or ActiveX and Script Scanning on an Firewall Gateway under Linux. Are there any tools avaible for free or only commercial Produkts ???
Commercial: Trend Micro's InterScan VirusWall (www.antivirus.com), but it does not work with SuSE 6.2 (I have reports, that it does not work with 6.3, too), because it was developed for RedHat 6.x (I hate it, if software does only run with a specific Linux distro). Well, limited to eMail Gateway, either AMaViS (GPL), IspMailGate, Scan4Virus (GPL) or H+B EDV AvGuard (commercial, imho). AMaViS can be found at http://amavis.org - but please have a look at http://www.ce.is.fh-furtwangen.de/~link/security/amavis-patch.php3 and especially http://www.unixzone.com/virus/ IspMailGate is a Perl Module, see (your local) CPAN-Archive. Scan4Virus (works only with qmail), see http://www.geocities.com/jhaar/scan4virus/ AvGate is still beta (currently 0.7, IIRC), see ftp.antivir.de/linux/ I would recommend AMaViS, but, well, I'm biased :-) You may also have a look at: http://www.ce.is.fh-furtwangen.de/~link/security/av-linux.php3 http://www.ce.is.fh-furtwangen.de/~link/security/hotlist.php3#Linux HTH best regards, Rainer Link Maintainer Mini-FAQ "Antivirus software for Linux" Member of the AMaViS Development Group -- Rainer Link, eMail: linkra@fh-furtwangen.de, WWW: http://rainer.w3.to/ Student of Communication Engineering/Computer Networking, University of Applied Sciences,Furtwangen,Germany,http://www.ce.is.fh-furtwangen.de/ --------------------------------------------------------------------- To unsubscribe, e-mail: suse-security-unsubscribe@suse.com For additional commands, e-mail: suse-security-help@suse.com