|
Thanks, Scott.
I appreciate your posts on this topic. I have been
following the hows and whys of using the phish.ndb and getting updates for
it.
I was thinking that for my own usage, I'd rather worry
about false positives and run it as a Declude JunkMail antispam external
test.
It is certainly working for you to catch scams, but have
you checked for false positives? I was thinking that in particular, I
might miss posts to the support lists regarding Declude text filters to
fight 419 scams, and more generally, my users might be
affected.
I am looking forward to implementing this when I have more
time to spare in the office. (At my current rate, probably in April.
Seriously.)
Andrew 8)
I running clamav as one of my scanners. The
SaneSecurity is an additional defintion database named phish.ndb.
I put the phish.ndb into my
c:\clamav-devel\share\clamav folder and it does all of the rest.
----- Original Message -----
Sent: Wednesday, March 01, 2006 2:15
PM
Subject: RE: [Declude.Virus] ClamAV
& sanesecurity definitions
Scott,
Are you running ClamAV with the SaneSecurity
antiphishing signatures as an external spam test in Declude Pro, or as an
antivirus engine in Declude Virus Pro?
Andrew 8)
As a followup on last week's discussions
on the SaneSecurity phish definitions for ClamAv.
ClamAv (without SaneSecurity) caught 273
phish for me in February (all 28 days).
SaneSecurity definitions caught 178 phish for
me in the last 8 days of February.
McAfee caught 118 and none after I installed
the SaneSecurity definitions.
SaneSecurity has done a wonderful job
here.
Thanks again Bill!
-----------------------------------------------------
Scott
Fisher
Director of IT
Farm Progress Companies
191 S Gary
Ave
Carol Stream, IL 60188
630-462-2323
This email message, including any attachments, is for the sole use of
the intended recipient(s) and may contain confidential and privileged
information. Any unauthorized review, use, disclosure or distribution is
prohibited. If you are not the intended recipient, please contact the
sender by reply email and destroy all copies of the original message.
Although Farm Progress Companies has taken reasonable precautions to
ensure no viruses are present in this email, the company cannot accept
responsibility for any loss or damage arising from the use of this email
or attachments.
|
