On 2022-04-05 09:57, Nikolaos Milas wrote:
Based on your experiences with similar setups, can you please suggest
additional ways to provide high (or at least better) AV protection?
http://sanesecurity.com/foxhole-databases/ add as much of that 3dr party
signatures to clamav, disable decode in amavisd, its just additional
work for amavis, less work for clamav, ensure clamav have unrar unpack
supported, some distros disabled this :/
now more virus packed by rar have a free ride
check virus samples first on virustotal.com, if possitive hit there send
the same sample to clamav false possitive to be added
for another scanner on linux i recommend bitdefender
i seldom see attached exe files by missing foxhole databases signature
when i keeps 0days out of the bussiness in mail inbox
