Re: MS BS + Sorting out the virii

2003-09-25 Thread Dariush Pietrzak
ClamAV is supported in Debian and it's very well integrated with amavisd-new (which, in turn, can be used also with spamassassin). Yes, but where can I find clamav for woody? Sid's package depends on whole lot of sid stuff, so recompiling it on woody requires significant effort. Data from

Re: MS BS + Sorting out the virii

2003-09-25 Thread Tomasz Papszun
On Thu, 25 Sep 2003 at 08:43:46 +0200, Dariush Pietrzak wrote: ClamAV is supported in Debian and it's very well integrated with amavisd-new (which, in turn, can be used also with spamassassin). Yes, but where can I find clamav for woody? Sid's package depends on whole lot of sid stuff, so

Re: MS BS + Sorting out the virii

2003-09-25 Thread Bernd Eckenfels
In article [EMAIL PROTECTED] you wrote: And... a mail with a positive virus recognition can be deleted without having to fear it's a false positive, umm... what makes you think so? Besides the typical case, that one wants to send a virus file (there are researches out there, you know) the

Re: MS BS + Sorting out the virii

2003-09-25 Thread Tomasz Papszun
On Wed, 24 Sep 2003 at 1:54:42 +0200, Thomas Ritter wrote: Just a note: Open Antivirus programs like clamav are not perfect, because the open virus database [1] is still too small... but for _sorting_ mail, clamav (it's in sid) is really good. It gives you [...] [1]

Re: MS BS + Sorting out the virii

2003-09-25 Thread Michael Sullenszino
Don't underestimate clamav. Sure it does not have 75,000 virii in it's database, but it catches well over 98% of the viruses that cross my little ISP. (I run both NOD32 and ClamAV with MailScanner so I see all the ones that NOD gets and ClamAV does not, which is _very_ few). Plus the ClamAV

Re: MS BS + Sorting out the virii

2003-09-25 Thread Thomas Ritter
Am Mittwoch, 24. September 2003 02:14 schrieb Bernd Eckenfels: In article [EMAIL PROTECTED] you wrote: And... a mail with a positive virus recognition can be deleted without having to fear it's a false positive, umm... what makes you think so? Okay, it's not absolutely safe, but for home

Re: MS BS + Sorting out the virii

2003-09-25 Thread Dariush Pietrzak
ClamAV is supported in Debian and it's very well integrated with amavisd-new (which, in turn, can be used also with spamassassin). Yes, but where can I find clamav for woody? Sid's package depends on whole lot of sid stuff, so recompiling it on woody requires significant effort. Data from

Re: MS BS + Sorting out the virii

2003-09-25 Thread Bernd Eckenfels
In article [EMAIL PROTECTED] you wrote: And... a mail with a positive virus recognition can be deleted without having to fear it's a false positive, umm... what makes you think so? Besides the typical case, that one wants to send a virus file (there are researches out there, you know) the

Re: MS BS + Sorting out the virii

2003-09-25 Thread Tomasz Papszun
On Wed, 24 Sep 2003 at 1:54:42 +0200, Thomas Ritter wrote: Just a note: Open Antivirus programs like clamav are not perfect, because the open virus database [1] is still too small... but for _sorting_ mail, clamav (it's in sid) is really good. It gives you [...] [1]

Re: MS BS + Sorting out the virii

2003-09-25 Thread Michael Sullenszino
Don't underestimate clamav. Sure it does not have 75,000 virii in it's database, but it catches well over 98% of the viruses that cross my little ISP. (I run both NOD32 and ClamAV with MailScanner so I see all the ones that NOD gets and ClamAV does not, which is _very_ few). Plus the ClamAV

Re: MS BS + Sorting out the virii

2003-09-25 Thread Thomas Ritter
Am Mittwoch, 24. September 2003 02:14 schrieb Bernd Eckenfels: In article [EMAIL PROTECTED] you wrote: And... a mail with a positive virus recognition can be deleted without having to fear it's a false positive, umm... what makes you think so? Okay, it's not absolutely safe, but for home

Re: MS BS + Sorting out the virii

2003-09-24 Thread Thomas Ritter
Am Mittwoch, 24. September 2003 02:34 schrieb Tomasz Papszun: Sorry but I must say that this is an incorrect claim. okay, not exclusively Currently ClamAV's own database is quite big and is updated even a couple of times a day if needed. It's quite good at new viruses caught in the wild,

Re: MS BS + Sorting out the virii

2003-09-24 Thread Michel Messerschmidt
On Wed, Sep 24, 2003 at 03:23:35PM +0200, Thomas Ritter wrote: Yes, I don't know the name, but there's a reference standard virus list. I think you're talking about the Wildlist (www.wildlist.org). That's not a reference list, but simply a list of viruses reported as currently active by at

Re: MS BS + Sorting out the virii

2003-09-24 Thread Michel Messerschmidt
On Wed, Sep 24, 2003 at 01:54:42AM +0200, Thomas Ritter wrote: And... a mail with a positive virus recognition can be deleted without having to fear it's a false positive, against which a mail found to be Spam by Spamassassin may be a real mail. This is not true. There's always the

Re: MS BS + Sorting out the virii

2003-09-24 Thread Tomasz Papszun
[ I'm resending it because yesterday try didn't appear on the list. Thomas Ritter has already answered to the copy which I sent directly to him. ] On Wed, 24 Sep 2003 at 1:54:42 +0200, Thomas Ritter wrote: Just a note: Open Antivirus programs like clamav are not perfect, because the open

Re: MS BS + Sorting out the virii

2003-09-24 Thread Thomas Ritter
Am Mittwoch, 24. September 2003 02:34 schrieb Tomasz Papszun: Sorry but I must say that this is an incorrect claim. okay, not exclusively Currently ClamAV's own database is quite big and is updated even a couple of times a day if needed. It's quite good at new viruses caught in the wild,

Re: MS BS + Sorting out the virii

2003-09-23 Thread Thomas Ritter
Am Dienstag, 23. September 2003 23:48 schrieb Joel HATSCH: of these fake Microsoft Update emails per day. The single part MIME filter doesn't seem to catch it though. What Just a note: Open Antivirus programs like clamav are not perfect, because the open virus database [1] is still too

Re: MS BS + Sorting out the virii

2003-09-23 Thread Thomas Ritter
Am Dienstag, 23. September 2003 23:48 schrieb Joel HATSCH: of these fake Microsoft Update emails per day. The single part MIME filter doesn't seem to catch it though. What Just a note: Open Antivirus programs like clamav are not perfect, because the open virus database [1] is still too