clamav-users June 2008 archive
Main Archive Page > Month Archives  > clamav-users archives
clamav-users: Re: [Clamav-users] Frequency of virus attacks

Re: [Clamav-users] Frequency of virus attacks

From: Freddie Cash <fjwcash_at_nospam>
Date: Fri Jun 13 2008 - 20:42:20 GMT
To: "ClamAV users ML" <>

On Fri, Jun 13, 2008 at 9:21 PM, Eggert Ehmke <> wrote:
> Since I installed ClamAV on my mail server, I did not get one single mail with
> virus attached. Other spam mail is filtered out by DSpam. When I send some
> test mail to my own address and attach some test virus, it is detected by
> ClamAV. Is this the expected behaviour? I would have expected to get some
> real viruses sooner or later. So I get the impression that real attacks are
> not so frequently as expected, or am I just lucky?

How many messages are being processed per day? For how many accounts?  And what percentage of those accounts are Windows stations?

The higher those numbers, the higher the likelihood you'll see infected messages reach your mail server.

We process around 2.3 millions messages a month, with about 1.7 million of those blocked as spam at the SMTP level, about 300,000 are blocked as spam by amavis/spamassassin/dspam, another 50,000 or so are tagged as possible spam but still delivered, and maybe 20,000 are blocked as infected. The rest go through.

So they're still out there. :) -- Freddie Cash _______________________________________________ Help us build a comprehensive ClamAV guide: visit