My company is considering making a purchase of the Barracuda Spyware
Firewall 310 appliance which it is hoped will assist us in dealing with the
growing threat of drive-by spyware installs. The cost with all the updates
would be nearly $5000. The question I have is this: is there a similar
solution that runs on linux that we can impliment on our own? I'm thinking
along the lines of (perhaps) SpamAssassin, but for spyware.

If anyone has any ideas, please let me know!

Thanks for reading this far

You could look at putting in place a grunty server with
squid, dansguardian and the clam-av patch for dans-
guardian (which should get rid of the nasty's). Not sure
how much cheaper it's going to be since the grunt required
of the box heavily depends on the size and usage of the
network. Also note that (and that's not a flaw but a natural
consequence of the setup) web-virii and spyware that come
in via ssl connections won't be picked up by either concept,
and you'll still need tools on the desktops, too.


Cheers,
Tink

On 1 Jun 2005 15:22:56 -0700, tink mumbled:
>
>
> You could look at putting in place a grunty server with
> squid, dansguardian and the clam-av patch for dans-
> guardian (which should get rid of the nasty's). Not sure
> how much cheaper it's going to be since the grunt required
> of the box heavily depends on the size and usage of the
> network. Also note that (and that's not a flaw but a natural
> consequence of the setup) web-virii and spyware that come
> in via ssl connections won't be picked up by either concept,
> and you'll still need tools on the desktops, too.
>
>
> Cheers,
> Tink
>

Might also consider squid+privoxy+clamAV. This has the advantage of not
needing desktop-level tools, but the disadvantage of requiring regular
maintainence (adding new known spyware/malware 'signatures'), since I'm
not aware of anyone providing an ongoing, regularly updated list.

--
Sufficiently advanced Technology is indistinguishable from Magic.
Sufficiently advanced Incompetence is indistinguishable from Malice.
Sufficiently advanced Socialism is indistinguishable from Anarchy.
Sufficiently advanced Capitalism is indistinguishable from Aristocracy.