my first search came up with an answer http://www.wains.be/index.php/2006/12/19/centosrhelfedora-web-proxy-antivirus -clamav/
-----Original Message----- From: owner-m...@openbsd.org [mailto:owner-m...@openbsd.org]on Behalf Of Protocol Six Consulting Sent: Thursday, March 19, 2009 10:28 AM To: misc@openbsd.org Subject: PF and CLamAV "Integration" - how to do it? Hi, I was wondering if anyone here knows how to integrate the PF firewall with ClamAV. I am planning on putting into production an OpenBSD firewall and would like to do virus scanning at the network perimeter. I am definitely interested in scanning email traffic, but also possibly Web and IRC (and any other traffic types that makes sense) for a group of 25 people. Unfortunately I've not seen any real discussion or howtos for this type of integration. I've also looked in the PF FAQ pages and in the archives of Openbsd-misc or Openbsd-PF. Finally, the BookOfPF (which I like a lot!!) doesn't seem to touch on this topic either. I suspect my mental picture of how PF and ClamAV work together may be flawed or incomplete. I guess I'm assuming there is a way to have PF pass information directly to ClamAV, but perhaps some middle-ware glue is necessary. Any pointers and/or info would be greatly appreciated by this newbie. Thanks and best regards, :-) Sarah
