I am trying to develop some thing similar to mod_clamav for apache. This module scans only responses, I need to scan even requests. Posted at Nginx Forum: http://forum.nginx.org/read.php?2,217811,217814#msg-217814