Gateway AntiVirus. Make my own?

[mboy]

I am trying to block viri from coming into my network at the gateway (or really right after my firewall).

Would their be a way to set up a pc with dual NIC's and have some type of AV scan traffic (at least Port 25/110?
The problem is I pop my email from my ISP's email server (about 60 accounts) and apparently, they only scan their servers at night and I would like to stop them before they come in (and before they hit my workstations (yes I have fully updated AV on all my stations, but want to cut down the viri @ the front door.
basically, make my own AV appliance.

Anyone ever even think about something like this before?
Yep, u guessed it, cheap as possible this needs to be.
Thanks.

 

[spidey07]

trend micro has a product. works great.

There are also other "appliance" based stuff that does what you want from most of the big virus guys (symantec, trend, mcafee, etc).

 

[mboy]

I thought trend's was an appliance. I know of the appliances out there, but I don't have 2k + to spend on it (actually, I have almost nothing to spend on it) and was hoping to make my own appliance

 

[Southerner]

Are you running Linux? My mailserver is set up to take every e-mail and forward it to ClamAV for an OK before accepting it for delivery; I'm using Exim but I've seen directions for doing the same on Postfix and Qmail. It seems you could have your local mail server fetch mail from your ISP, scan, and then pass on those that are clean.

Or, maybe you're just wanting a filter to rename/delete attachments that are infected? SonicWalls do this if you pay for the AV functionality (and will happily rename .scr, .bat, .exe, whatever files in-transfer as well).

 

[mboy]

No mail server here, that's my problem, we pop it right off the ISP's server.
I thought Sonicwall's Av was really just an enforcement thing and did not do the scannin on the unit itself. At least that's what I thought on my pro200.

 

[Diaonic]

I thought Sonicwall av's was like a striped down version of norton corprate, just rolls down clients an patches. An the clients do the scanning ect..

I don't think the appliance does any scanning, it just rolls down definitions an remote installs.

 

[mboy]

That's what I thought too and thats what I don't need (already have that).