On Thu, 20 Mar 2014 14:49:32 -0400 (EDT) Jason Englander <ja...@englanders.us> wrote:
> Personally and professionally I've used ClamAV (via clamd) for a > long time. I actually used to be a "team member" pre-Cisco, > pre-SourceFire. Post-Cisco, ClamAV seems to have greatly declined in usefulness. It catches hardly anything anymore... anyone else experiencing this? In my experience, most of the commercial AV scanners for Linux are horrible. They often use undocumented wire protocols making it difficult/impossible to use them efficiently from MIMEDefang. The "MIMEDefang-friendliest" one I know of is F-PROTD version 6. On our hosted anti-spam offering, we simply block outright *.EXE, *.SCR etc whether directly attached or within zip files, RAR files, etc. So far no-one has complained. Regards, David. _______________________________________________ NOTE: If there is a disclaimer or other legal boilerplate in the above message, it is NULL AND VOID. You may ignore it. Visit http://www.mimedefang.org and http://www.roaringpenguin.com MIMEDefang mailing list MIMEDefang@lists.roaringpenguin.com http://lists.roaringpenguin.com/mailman/listinfo/mimedefang
