ASG
IBM
Zystems
Cressida
Icon
Netflexity
 
  MQSeries.net
Search  Search       Tech Exchange      Education      Certifications      Library      Info Center      SupportPacs      LinkedIn  Search  Search                                                                   FAQ  FAQ   Usergroups  Usergroups
 
Register  ::  Log in Log in to check your private messages
 
RSS Feed - WebSphere MQ Support RSS Feed - Message Broker Support

MQSeries.net Forum Index » WebSphere Message Broker (ACE) Support » Virus check data in WMB

Post new topic  Reply to topic
 Virus check data in WMB « View previous topic :: View next topic » 
Author Message
TBS
PostPosted: Fri Jun 18, 2010 4:58 am    Post subject: Virus check data in WMB Reply with quote

Centurion

Joined: 29 Jan 2007
Posts: 143
Location: Hillerød / Denmark

Hi !

I have a Flow that receive a file embedded in a xml msg onto a broker.
File is in base 64

Is there a recomnedation for virus check the imbedded file ?

/Torben
Back to top
View user's profile Send private message
Gaya3
PostPosted: Fri Jun 18, 2010 5:22 am    Post subject: Re: Virus check data in WMB Reply with quote

Jedi

Joined: 12 Sep 2006
Posts: 2493
Location: Boston, US

TBS wrote:
Hi !

I have a Flow that receive a file embedded in a xml msg onto a broker.
File is in base 64

Is there a recomnedation for virus check the imbedded file ?

/Torben


its good to do virus check before the message it get in to broker.

why do you want, broker to act like an anti-virus software.
_________________
Regards
Gayathri
-----------------------------------------------
Do Something Before you Die
Back to top
View user's profile Send private message
TBS
PostPosted: Fri Jun 18, 2010 5:28 am    Post subject: Reply with quote

Centurion

Joined: 29 Jan 2007
Posts: 143
Location: Hillerød / Denmark

It is not possible to check the file in base64 before it hit the broker as it in in base 64 ..
Back to top
View user's profile Send private message
mqjeff
PostPosted: Fri Jun 18, 2010 6:59 am    Post subject: Reply with quote

Grand Master

Joined: 25 Jun 2008
Posts: 17447

There are other, better, ways to solve this than by trying to write a virus checker in Broker.

It seems rather unlikely that Broker itself is capable of doing anything that will actually execute any virus code in a message, either. You would have to take steps to apply message contents in an executable manner...
Back to top
View user's profile Send private message
sushilishere
PostPosted: Sun Jun 20, 2010 9:53 pm    Post subject: Reply with quote

Apprentice

Joined: 27 Jul 2008
Posts: 36

Just a suggestion from what we do when we have to do something that requires calling a "outside" API/exe.

USe Java to invoke a virus checker app.. send ur msg to it and once the app returns the file, continue ur msgflow from that location.

Expecting Broker to do a virus check would put norton and other guys out of work and IBM wld take over the world
_________________
----------------------------
IBM MQ v6.0 Sys Admin
IBM MBv6.0 Sol Desgnr
----------------------------------------------------
By the Mountain Side.. looking at the Great Divide
----------------------------------------------------
Back to top
View user's profile Send private message
Vitor
PostPosted: Mon Jun 21, 2010 4:56 am    Post subject: Reply with quote

Grand High Poobah

Joined: 11 Nov 2005
Posts: 26093
Location: Texas, USA

sushilishere wrote:
Just a suggestion from what we do when we have to do something that requires calling a "outside" API/exe.


I repeat the question of my associate - why? It seems very unlikely that anything will execute inside a WMB flow, virus or no. Anything that you're called via a JCN or similar will be something you've explicitly coded to be called and hence (if not actually written by yourselves) will be from a trusted source.
_________________
Honesty is the best policy.
Insanity is the best defence.
Back to top
View user's profile Send private message
sushilishere
PostPosted: Mon Jun 21, 2010 9:25 pm    Post subject: Reply with quote

Apprentice

Joined: 27 Jul 2008
Posts: 36

What i meant to say was the API/App being trusted but the data that has to be processed contains a virus!!!

But ill stick to what u said!! this kinda scenario has never appeared to us nor do we forsee anything like this!!..

"My suggestion was on the lines of how MB allows external APIs to be run/used."
_________________
----------------------------
IBM MQ v6.0 Sys Admin
IBM MBv6.0 Sol Desgnr
----------------------------------------------------
By the Mountain Side.. looking at the Great Divide
----------------------------------------------------
Back to top
View user's profile Send private message
Vitor
PostPosted: Tue Jun 22, 2010 4:09 am    Post subject: Reply with quote

Grand High Poobah

Joined: 11 Nov 2005
Posts: 26093
Location: Texas, USA

sushilishere wrote:
What i meant to say was the API/App being trusted but the data that has to be processed contains a virus!!!


Again, how does a virus that's in data manage to infect anything? I'm interested as I've not heard of this previously. Either as a virus concept or something that's been developed within broker.
_________________
Honesty is the best policy.
Insanity is the best defence.
Back to top
View user's profile Send private message
sirsi
PostPosted: Wed Jun 23, 2010 2:27 am    Post subject: Reply with quote

Disciple

Joined: 11 Mar 2005
Posts: 177

who has got the time in this world to write a virus in a MB message!!!
Back to top
View user's profile Send private message
AndreasMartens
PostPosted: Fri Jun 25, 2010 2:01 am    Post subject: Slightly crazy scenario, but: Reply with quote

Acolyte

Joined: 30 Jan 2006
Posts: 65
Location: Hursley, UK

How about you're using Broker to transfer pdf files uploaded to your public FTP server into a DMZ for further processing... And as we know pdf files can contain virals, so to prevent that virus infecting the poor individual who's job it is to review all the documents uploaded you want to scan the documents when they're in transit...?

Obviously there are far better ways
Back to top
View user's profile Send private message MSN Messenger
Display posts from previous:   
Post new topic  Reply to topic Page 1 of 1

MQSeries.net Forum Index » WebSphere Message Broker (ACE) Support » Virus check data in WMB
Jump to:  



You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot vote in polls in this forum
Protected by Anti-Spam ACP
 
 


Theme by Dustin Baccetti
Powered by phpBB © 2001, 2002 phpBB Group

Copyright © MQSeries.net. All rights reserved.