| Main Archive Page > Month Archives > focus-linux archives |
RE: mail antivirus
From: Tom Walsh <mailinglist_at_nospam>Date: Thu Aug 23 2007 - 18:09:10 GMT
To: <focus-linux@securityfocus.com>
ClamAV. http://www.clamav.net/
Open Source. Virus definitions automatically updated with new definitions via freshclam. New strains added very quickly. Client / Server model.
We use a shell script to make clamscan work with maildrop xfilter and it works very well.
No complaints other than some issues with the code base evolving a little to quickly which can make it difficult to keep up to date (some newer virus definitions will not work with an older version of clamscan so you need to check the logs of freshclam occasionally for "WARNING: Your ClamAV installation is OUTDATED!" and update when needed).
Recently purchased by SourceFire (makers of Snort), so I figure that at some point there is going to be a fork in the signatures they provide to a similar structure as the Snort Rules (two or three tiers with paying customers getting access to the newest rules instantly). I should note that this is only conjecture on my part, but is something to keep an eye on.
Hope that helps.
-----Original Message-----
From: listbounce@securityfocus.com [mailto:listbounce@securityfocus.com] On
Behalf Of mircea
Sent: Wednesday, August 22, 2007 11:54 AM
To: focus-linux@securityfocus.com
Subject: mail antivirus
Hello,
what kind of antivirus filter are you using on linux mail servers?
I appreciate solution names and a few words on why you're using it.
Thanks,
Mircea