Originally posted here by phishphreek80
The only problem I see with the virus scanner on the firewall box... is:

In order to scan the virus, you have to have the file stored in memory or on the hard disk. Since that box would just be routing the traffic, it wouldn't catch the virus. It would have to download the file to memory or hard disk in order to scan it. Then pass it on to the requester after it has been scanned.
Most companies I know have the software located on the mail server and it will spit an e-mail minus the attachment stating the item has been cleaned or the file was deleted. Is there any way to perform a similiar action? The people I usually end up doing the favor of cleaning their system get their viruses via e-mail by a forward happy friend.

Originally posted here by phishphreek80
But... if this only runs on windows, then you're going to drive the cost of the box up. You're going to need better hardware, pay for another OS, then pay for the firewall and then the AV software. If you do it client based... you can use older hardware for the router and don't have to pay for an OS... just the av software for the clients.
If I can perform the function correctly, it is not money out of my own pocket, it just saves me the time and headaches. I would still love to figure this out through linux. I understand the hardware will cost money, but if I could figure out a way to package a few utilities to perform the actions we are discussing this could end up being a heavily used document I will create. Then again, If I can find someone to help me re-write and package it together, I may have my own version of an Open Source Package I can distribute.

Then again, I might find it somewhere else... Already acheived and be happy with a functional piece of software I can really use.