Virus Scan from Servlet

Hiii,

First of all I cant decide where to post this message... this can be wrong place but I am sure that you can give some valuable ideas...

I have a servlet that donwloads some files from some users, and puts them to appropriate place... but dosent look at the files are corrupted by virus, trojans or etc... so that it brings a security issue that I have to handle... but I dont know where to begin... My server runs RedHat EE ..

In my opinnion I should use command line scanning ... scanner can scan file and may RETURN some information about the file .. finally do some necessary job(delete, copy or move file ... etc..)...

Some anti-virus softares has command line scanners.. but it seems that they do not return a meaningfull message .. ...

I think I am clear about the problem...

Is there anybody who has done such kind of a job before.. ? ..

[897 byte] By [atopraka] at [2007-10-3 2:00:50]
# 1

Providing you don't need to report back to the user that their files are invalid how about uploading the files to a quarantined area on your server and setting a cron job to scan this files before moving them to correct directory?

Kaspersky do a linux virus scanner you might try - http://www.kaspersky.com/lin_fileserver

No idea how flexible the command line interface is though.

SteveNaivea at 2007-7-14 18:59:33 > top of Java-index,Enterprise & Remote Computing,Web Tier APIs...
# 2

Sorry for my english... ,

I must get the report back about the scan results.... because I have to give (for example file is corrupted and deleted from the system... etc) feedback to the uploader.. if we ignore that, you are completely right... and solutions is feasible...

but I have to report back ...

atopraka at 2007-7-14 18:59:33 > top of Java-index,Enterprise & Remote Computing,Web Tier APIs...
# 3
probably this link might be of some use to u ... http://forum.java.sun.com/thread.jspa?threadID=733726&tstart=0You may also use McAfee Command Line Scanner.
RohitKumara at 2007-7-14 18:59:33 > top of Java-index,Enterprise & Remote Computing,Web Tier APIs...