Re: [Snort-inline-users] Tips for integrating with Squid?

[Will M. <wil...@gm...>]

Why would you not use and or extend HAVP?

http://www.server-side.de/

On 3/2/07, Cooper F. Nelson <cn...@uc...> wrote:
>
> Hi,
>
> I'm currently evaluating the possibility of using snort-inline as a
> malware/phishing filter on an existing squid cache.
>
> I would appreciate some feedback/suggestions on a few issues.
>
> Performance is critical.  Does --enable-nfnetlink help in this regard?
> Are there any other suggestions to optimize deployment, other than
> simply enabling only the rules/preprocessors appropriate for web traffic?
>
> As a feature request, would it be possible to add an iptables client
> re-direct to the clamav preprocessor and rule syntax?  I would like to
> implement something like SquidClamAV project where users are presented
> with a page detailing that the site is blocked and why.
>
> --
> Cooper Nelson
> Network Security Analyst
> UCSD ACS/Network Operations
> cn...@uc... x41042
>
> -------------------------------------------------------------------------
> Take Surveys. Earn Cash. Influence the Future of IT
> Join SourceForge.net's Techsay panel and you'll get the chance to share
> your
> opinions on IT & business topics through brief surveys-and earn cash
> http://www.techsay.com/default.php?page=join.php&p=sourceforge&CID=DEVDEV
> _______________________________________________
> Snort-inline-users mailing list
> Sno...@li...
> https://lists.sourceforge.net/lists/listinfo/snort-inline-users
>