packets scan

Patrick Schaaf bof@bof.de
Mon, 30 Jul 2001 20:42:42 +0200


Hi all,

as the QUEUE target has been proposed as a solution for coupling
in such a virus scanner: that would mean implementing the full
TCP stack in user level, wouldn't it? If you are thinking about
an on-the-fly passthrough with only-scanning, how do you then
abort the transport when a virus is found, without violating
the POP3 protocol?

Wouldn't the REDIRECT target be a more proper solution?

regards
  Patrick