Transparent proxy to scan multipart requests (Clammit equivalent)

[James Kennard 0]

Is there Linux based product that will allow me to transparently proxy requests, rejecting any request that appears to have a virus attached?

i.e. something equivalent to https://github.com/ifad/clammit

If there isn't anything out-of-the-box, all I need is a service or socket that can be connected to and given a payload to scan. Clammit can be modified to talk to this instead for clamd.

Thanks

James.

[Marcos 5,074]

I assume this won't work. Even if you were able to integrate odscan with Clammit, it would take several seconds to load modules upon starting odscan before each web object is scanned.

[James Kennard 0]

Thanks Marcos,

odscan looks like it can only scan files on the file system, so is a non-starter anyway.

I noticed there is an ICAP server available as part of ESET Server Security for Linux. I think this could be plugged into a proxy such as squid which might provide the same functionality as clammit.