Re: smtpscanner for obsd?

From: erik (erik_at_geenspam.vanwesten.net)
Date: 04/30/04


Date: Fri, 30 Apr 2004 14:01:24 +0200

Brent Bolin wrote:

> erik <erik@geenspam.vanwesten.net> wrote in message
> news:<40899af4$0$568$e4fe514c@news.xs4all.nl>...
>> Brent Bolin wrote:
>>
>> > erik <erik@geenspam.vanwesten.net> wrote in message
>> > news:<40891fb4$0$13292$e4fe514c@news.xs4all.nl>...
>> >> Peter Matulis wrote:
>> >>
>> >> > On Thu, 22 Apr 2004 20:27:37 +0200, "Joris Kemperman"
>> >> > <jor_SPAM_is@kempermann.demon.nl> wrote:
>> >> >
>> >> >>Hey guys
>> >> >>
>> >> >>I'm running OpenBSD 3.4 with the default sendmail install, and
>> >> >>i'm searching for an decent smtp anti-virus scanner with an
>> >> >>automatic update feature!
>> >> >
>> >> > Try Antivir:
>> >> >
>> >> > http://www.hbedv.com/
>> >> >
>> >> > Haven't tried it myself.
>> >>
>> >> I did, it did not survive the required version updates. Amavis (in
>> >> one form or the other) should work however.
>> >>
>> >> EJ
>> >
>> >
>> > I don't understand what "version updates" is but it works fine
>> > here.
>> >
>> > The product we use is Vexira. Its the same thing.
>> >
>> > http://www.centralcommand.com/index.html
>> >
>> > Does not include spam control but we use spamassassin for that
>> > anyway.
>> >
>>
>> Version 3.something of OpenBSD to version 3.something+1. How about
>> not running closed source programs on an open source OS? How about
>> using ClamAV which better suits the policies laid out by a *secure*
>> Open Source OS? Did I mention that a lot of people using OpenBSD are
>> a little bit paranoid? :-)
>>
>> EJ
>
>
> I have tried clamav. Works fairly well but does not have as many
> definitions as a commercial product. Also it does not detect many of
> the Begal/Netsky viruses because they are base64 encoded(at least when
> I used it).

Weird, we noticed that it was updating it's definitions faster than the
commercial one we used. It was already blocking at ISP level, where the
home users did not have an update yet. :-)

>
> Someone also posted later in this thread that it is a.out binary.
> This is not true. Admittedly my experience is with FreeBSD but think
> the ports tree is consisant with OpenBSD.

No, that was exactly where I ran into problems, it was the same port
(FreeBSD). And that did not work anymore at that time with OpenBSD.
Checked the site several times, but no updates. Anyway, antivir is free
of charge for the home user, and one cannot really complain to the
manufacturer if it does not work.

>
> Again antivir is the same as vexira
>
> One domain and 6000 mailboxes @ about $300.00 is a good price.
>

We agree to disagree here. At ISP level we use clamav, numerous domains
and 100.000's of users can be handled with clamav, and that at (it's
amazing Mike!) $ 0. One of the additional complaints I had about
antivir was that it was not exactly fast. AFAIK clamav is faster,
especially since one can have it communicate on sockets instead of ip,
but I did not benchmark antivir. Given the budget we simply cannot
afford to use a commercial antivirus.

EJ

-- 
Remove the obvious part (including the dot) for my email address.
http://www.vanwesten.net for examples of ipf and pf.


Relevant Pages

  • Re: [opensuse] antivirus
    ... but I'm really curious as to clamav and antivir. ... Most of them are fighted by firewalls, proper software maintenance (ie, closing fast the holes as they are discovered), good practices. ... It is possible that an email contains code, but in Linux mail clients do not execute code without you knowing - and would execute as user, not root, so the damage would be limited. ...
    (SuSE)
  • RE: mail antivirus
    ... Open Source. ... Client / Server model. ... check the logs of freshclam occasionally for "WARNING: Your ClamAV ...
    (Focus-Linux)
  • Re: [opensuse] antivirus
    ... Interesting that the windows machines are being protected ... but I'm really curious as to clamav and antivir. ... set-up and configured Linux workstation. ...
    (SuSE)
  • Re: AntiVir nicht in =?ISO-8859-15?Q?Proze=DFliste=2Fwie?= Autostart ?
    ... Ich benutze kein Antivir, sondern clamav. ... > Ich habe KDE als Desktop. ... Sind besondere Verzeichnisse, die nicht physikalisch auf der Platte ...
    (de.comp.os.unix.linux.misc)
  • Re: ClamAV or another?
    ... >> seem to find are Fedora rpms for ClamAV. ... >> If there is something better than CLamAV and open source, ... Well I have several email accounts on this system. ...
    (RedHat)