For the last several years, I have been using Vexira MailArmor (http://www.centralcommand.com) for anti-virus protection on the mail server here at Shorewall.net. While Vexira is an excellent product and I have been very happy with it, it costs me $300US/year for a one-domain license. To avoid this expense, I have decided to try ClamAV (http://www.clamav.net). I have installed ClamAV and since my license for Vexira expires tomorrow, I have turned it off today. ClamAV installation is very painless with Amavisd-new and I''m hoping that it will be an acceptable AV solution; if it is, I''ll make a donation to the ClamAV project and still be able to save some money. -Tom -- Tom Eastep \ Nothing is foolproof to a sufficiently talented fool Shoreline, \ http://shorewall.net Washington USA \ teastep@shorewall.net PGP Public Key \ https://lists.shorewall.net/teastep.pgp.key
Hi Tom, FYI: There´s a product called antivir (www.antivir.de) with a free license for non-comercial/private users. The normal command-line scanner integrates also very well into Amavisd-new. I´m using it a couple of years at home on my private mailserver and also on our company´s mailservers. And they are are REALLY fast with signature updates and we are quite happy about the detection rate. Alex
We are also using ClamAV in conjunction with amavisd-new and are extremely satisfied with it. In theory, a number of AV engines can be run as primary and secondary AV scanners, but so far we haven''t had a need for a commercial scanner. Additionally, spamassassin integrates with this whole solution as well and is highly recommended. I believe that there is a new commercial filtering product coming on the market soon that integrates a firewall, antivirus and spam filtering as well as internet content filtering all-in-one using a combination of open sourced products, but I don''t remember off-hand what it is. If anyone is _that_ interested, I can see if I can find the announcement for it. -Gary On Wed, 03 Nov 2004 09:06:55 -0800, Tom Eastep <teastep@shorewall.net> wrote:> For the last several years, I have been using Vexira MailArmor > (http://www.centralcommand.com) for anti-virus protection on the mail > server here at Shorewall.net. While Vexira is an excellent product and I > have been very happy with it, it costs me $300US/year for a one-domain > license. To avoid this expense, I have decided to try ClamAV > (http://www.clamav.net). I have installed ClamAV and since my license > for Vexira expires tomorrow, I have turned it off today. > > ClamAV installation is very painless with Amavisd-new and I''m hoping > that it will be an acceptable AV solution; if it is, I''ll make a > donation to the ClamAV project and still be able to save some money. > > -Tom > -- > Tom Eastep \ Nothing is foolproof to a sufficiently talented fool > Shoreline, \ http://shorewall.net > Washington USA \ teastep@shorewall.net > PGP Public Key \ https://lists.shorewall.net/teastep.pgp.key > > > _______________________________________________ > Shorewall-users mailing list > Post: Shorewall-users@lists.shorewall.net > Subscribe/Unsubscribe: https://lists.shorewall.net/mailman/listinfo/shorewall-users > Support: http://www.shorewall.net/support.htm > FAQ: http://www.shorewall.net/FAQ.htm > > >
Message from "Tom Eastep" on 11/03/04 09:06 AM PT quoted: > ClamAV installation is very painless with Amavisd-new and I''m hoping> that it will be an acceptable AV solution; if it is, I''ll make a > donation to the ClamAV project and still be able to save some money.Sorry for the off-topic post, but I thought this might be useful... When I''m trying out new anti-virus software for either client mail or mail server, I use this web page to help me figure out how good it is: http://www.testvirus.org/ You can have them send you various types of attachments with various types of encoding methods, etc, to test out how well your anti-virus responds. This may be helpful to see how effective the new anti-virus software is. It is a free service. Just be very careful what you do with the attachments should they get through your anti-virus software. -MikeD
Hi, I concur, our company is also using amavisd-new with TrendMicro and ClamaAV side by side as its virus scanner(s), as of today, the only "viruses" that Trend cathes that clamav misses are the "joke" programs, which are not computer viruses at all. ClamAV also is the first AV to caught the Bagle.C worm here, so I''m quite happy with their definition updates. As long as every one contributes by sending virus samples, ClamAV definitions files are quite as updated as the commercial ones, IMHO. regards, Kenneth Gary Buckmaster wrote:>We are also using ClamAV in conjunction with amavisd-new and are >extremely satisfied with it. In theory, a number of AV engines can be >run as primary and secondary AV scanners, but so far we haven''t had a >need for a commercial scanner. Additionally, spamassassin integrates >with this whole solution as well and is highly recommended. I believe >that there is a new commercial filtering product coming on the market >soon that integrates a firewall, antivirus and spam filtering as well >as internet content filtering all-in-one using a combination of open >sourced products, but I don''t remember off-hand what it is. If anyone >is _that_ interested, I can see if I can find the announcement for it. > >-Gary > > >On Wed, 03 Nov 2004 09:06:55 -0800, Tom Eastep <teastep@shorewall.net> wrote: > > >>For the last several years, I have been using Vexira MailArmor >>(http://www.centralcommand.com) for anti-virus protection on the mail >>server here at Shorewall.net. While Vexira is an excellent product and I >>have been very happy with it, it costs me $300US/year for a one-domain >>license. To avoid this expense, I have decided to try ClamAV >>(http://www.clamav.net). I have installed ClamAV and since my license >>for Vexira expires tomorrow, I have turned it off today. >> >>ClamAV installation is very painless with Amavisd-new and I''m hoping >>that it will be an acceptable AV solution; if it is, I''ll make a >>donation to the ClamAV project and still be able to save some money. >> >>-Tom >>-- >>Tom Eastep \ Nothing is foolproof to a sufficiently talented fool >>Shoreline, \ http://shorewall.net >>Washington USA \ teastep@shorewall.net >>PGP Public Key \ https://lists.shorewall.net/teastep.pgp.key >> >> >>_______________________________________________ >>Shorewall-users mailing list >>Post: Shorewall-users@lists.shorewall.net >>Subscribe/Unsubscribe: https://lists.shorewall.net/mailman/listinfo/shorewall-users >>Support: http://www.shorewall.net/support.htm >>FAQ: http://www.shorewall.net/FAQ.htm >> >> >> >> >> >_______________________________________________ >Shorewall-users mailing list >Post: Shorewall-users@lists.shorewall.net >Subscribe/Unsubscribe: https://lists.shorewall.net/mailman/listinfo/shorewall-users >Support: http://www.shorewall.net/support.htm >FAQ: http://www.shorewall.net/FAQ.htm > >
> When I''m trying out new anti-virus software for either client mail or mail > server, I use this web page to help me figure out how good it is: > http://www.testvirus.org/ > > You can have them send you various types of attachments with various types > of encoding methods, etc, to test out how well your anti-virus responds. > This may be helpful to see how effective the new anti-virus software is. > It is a free service. Just be very careful what you do with the > attachments should they get through your anti-virus software.It''s important to note that testvirus.org sends out the EICAR virus test signature, and not actually live virus code. The EICAR signature is obscured in a variety of ways which is then helpful for testing exactly how effective your AV scanning is. Bug as Mike said, its an extremely useful service. -Gary