[mp2.0] Input Filter virus scan (more info)

2003-01-04 Thread Chris Hoffmann 


Me again,

I have been asked to supply more details of what I am trying to achieve with the Input 
Filter.  The following is an attempt to clearly define more requirements.

I have an Apache/2.0.43 + mod_perl/1.99_08-dev + Perl/5.8.0 server that hosts simple 
static html and dynamic perl generated pages.  I am unable to modify perl scripts 
without voiding my warranty.  I therefore require a PerlInputFilterHandler to process 
the Apache request object and then pass it onto
the default handler.

The PerlInputFilterHandler is to scan the request object with an Anti Virus program 
(such as Sophos).  If a virus is located the request should be blocked and a response 
displayed on the clients browser.  If clean the request will be allowed to pass to the 
default handler.

All this is to happen in the background and without the users' knowledge.

I have found a module called "mod_vscan" by Kazutoshi Kubota <[EMAIL PROTECTED]> at
http://www.willbe6.org/security/mod_vscan/
But this C code appears to only handle output from the server.

My need is to scan incoming data.

If anyone has used "mod_vscan" on incoming data or know if the "All-in-One Filter" 
example located at;
http://perl.apache.org/docs/2.0/user/handlers/filters.html#All_in_One_Filter
can do this please contact me.



Chris.
[EMAIL PROTECTED]

[mp2.0] Input Filter virus scan

2003-01-04 Thread Chris Hoffmann 

Hi, newbie here,

Can someone please tell me if the "All-in-One Filter" example located at;

http://perl.apache.org/docs/2.0/user/handlers/filters.html#All_in_One_Filter

can be used by a Anti Virus scan program to clear or block incoming Apache request 
data streams.



Chris...
[EMAIL PROTECTED]

RE: mod_perl.c Not Compatible with Apache

2003-01-04 Thread Dale Lancaster 

Trying to narrow down a problem I am having with mod_perl::PerlRun on a
stock RedHat 8.0 system, I have the following that simply doesn't work
reliably under Apache 2.0.40 and mod_perl-1.99_05-3.  The script runs fine
for the first few refreshes and then I get the ominous error message:

Error message:
Not a CODE reference at /home/usa/cgi-bin/env.cgi line 7.

After a few retries and then nothing seems to fix it until I do a cold
restart on Apache.

env.cgi is:

#!/usr/bin/perl

print "Content-type: text/html\n\n";

require "/home/usa/cgi-bin/authlib_test.pl" ;

my $status = testsub() ;

foreach (keys %ENV){
print "$_ -> $ENV{$_}\n";
}

and the file authlib_test.pl contains:

sub testsub {

return 1 ;
}

1;


If I move the code for authlib_test.pl into env.cgi, it works all the time,
moving it into that seperate file that is required seems to break it.  I am
trying to reproduce a code snippet that causes my production mod_perl
programs to produce a zero byte response page (no data returned, but returns
with a status 200).  But this is far as I get.

The config is:

LoadModule perl_module modules/mod_perl.so
PerlModule Apache2
Alias /perl /home/usa/cgi-bin

SetHandler perl-script
PerlHandler ModPerl::PerlRun
PerlOptions +ParseHeaders
PerlSendHeader On
Options ExecCGI FollowSymLinks Includes


I also tried this on the CVS code for apache and mod_perl and get the same
results, so I dropped back to the standard RPM versions with RedHat.

Any ideas?
thanks
dale