Ethical Hacking

Learn to find vulnerabilities before the bad guys do! Gain real world hands on hacking experience in our state of the art hacking lab. Course designed and taught by expert instructors with years of penetration testing experience. 12 student maximum in every class. Certification attempt included in every package.
Computer Forensics Training at InfoSec Institute

Gain the in-demand skills of a certified computer examiner, learn to recover trace data left behind by fraud, theft, and cybercrime perpetrators. Discover the source of computer crime and abuse at your organization so that it never happens again. All of our class sizes are guaranteed to be 12 students or less to facilitate one-on-one interaction with one of our expert instructors.




Network Security Focus-Linux
[Top] [All Lists]

RE: mail antivirus

Subject: RE: mail antivirus
Date: Tue, 4 Sep 2007 12:08:12 +0100


-----Original Message-----
From: listbounce@securityfocus.com 
[mailto:listbounce@securityfocus.com] On Behalf Of Tom Walsh
Sent: 23 August 2007 19:09
To: focus-linux@securityfocus.com
Subject: RE: mail antivirus

ClamAV. http://www.clamav.net/

Open Source. Virus definitions automatically updated with new 
definitions via freshclam. New strains added very quickly. 
Client / Server model.

We use a shell script to make clamscan work with maildrop 
xfilter and it works very well.

No complaints other than some issues with the code base 
evolving a little to quickly which can make it difficult to 
keep up to date (some newer virus definitions will not work 
with an older version of clamscan so you need to check the 
logs of freshclam occasionally for "WARNING: Your ClamAV 
installation is OUTDATED!" and update when needed).

It is evolving rapidly for a very good reason:

<http://search.securityfocus.com/swsearch?query=clamav&sbm=archive%2F1%2F&submit=Search%21&metaname=alldoc&sort=swishlastmodified>

Yes, that's 7 pages of vulnerabilities over the last 3 years.

They ClamAV developers have a very commendable attitude to 
fixing security issues, but you do have to keep an eye out 
on the bugtrack list for the weekly issues.  Shame I cannot 
say the same about some very popular mailservers.  YMMV.


Paul


<Prev in Thread] Current Thread [Next in Thread>
  • RE: mail antivirus, Paul Ryland <=