Adrian Chadd wrote:
On Fri, Jun 22, 2007, Andreas Pettersson wrote:
This might be interesting to anyone using squid to do malware filtering.
It needs some kind of integration work before squid can utilize it.
http://code.google.com/apis/safebrowsing/
The Malware Block List is another way to filter web traffic.
http://www.malware.com.br/
There's also http://www.phishtank.org/ .
Who would like to see external_acl helpers which allow Squid to use
phishtank.org and google safebrowsing lists?
I would :)
However Phishtank publishes a full xml file which with some tweaking
could be converted into a plain text list of domains or urls for direct
use with squid.
http://www.phishtank.com/blog/2006/10/17/xml-data-file-of-online-valid-phishes-from-phishtank/
I'm not sure realtime lookups via the google or phishtank api could keep
up with caches serving over 100 requests/sec.
By the way, haven't a DNSBL for this purpose been discussed previously?
--
Andreas
