Re: anti virus software for mail server

2003-03-20 Thread Hilko Bengen
"J.J. van Gorkum" <[EMAIL PROTECTED]> writes:

> amavisd-new (amavisd-ng has some mime decoding problems... especially
> pgp/gpg encrypted mail) 

As the maintainer of AMaViS-ng I am looking forward to your bug
report about the issues you have encountered.

Regards,
-Hilko




Re: anti virus software for mail server

2003-03-20 Thread Hilko Bengen
"J.J. van Gorkum" <[EMAIL PROTECTED]> writes:

> amavisd-new (amavisd-ng has some mime decoding problems... especially
> pgp/gpg encrypted mail) 

As the maintainer of AMaViS-ng I am looking forward to your bug
report about the issues you have encountered.

Regards,
-Hilko


-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]



Re: anti virus software for mail server

2003-03-10 Thread Marcin Sochacki
On Mon, Mar 10, 2003 at 05:11:38PM +0100, J.J. van Gorkum wrote:
> On Mon, Mar 10, 2003 at 11:22:46AM +0100, Hirling Endre wrote:
> > On Sat, 2003-03-08 at 14:12, J.J. van Gorkum wrote:
> > > On Fri, 2003-03-07 at 16:44, C. R. Oldham wrote:
> > > > Can someone fill me in on ClamAV a little bit, the engine hasn't been
> > > > updated in a long time, but the virus signatures appear very recent.
> > > > Who is updating the signatures?  How often do they come out?
> > > > 
> > > We use amavisd-new with TrendMicro and ClamAV. When the Trendmicro vinds
> > > a virus and clamav doesn't we mail the virus part of the email to the
> > > maker of clamv... 
> > 
> > What do you use to unpack MIME messages for clamav? I haven't find
> > anything yet that can unpack messages the way trendmicro does, so clamav
> > will miss a great deal of viruses, mostly in error messages.
> > 
> amavisd-new (amavisd-ng has some mime decoding problems... especially
> pgp/gpg encrypted mail) for amavisd-new look at 

BTW: Have you ever heard about a virus which can self-sign itself with
PGP/GPG? :)

Marcin




Re: anti virus software for mail server

2003-03-10 Thread J.J. van Gorkum
On Mon, Mar 10, 2003 at 11:22:46AM +0100, Hirling Endre wrote:
> On Sat, 2003-03-08 at 14:12, J.J. van Gorkum wrote:
> > On Fri, 2003-03-07 at 16:44, C. R. Oldham wrote:
> > > Can someone fill me in on ClamAV a little bit, the engine hasn't been
> > > updated in a long time, but the virus signatures appear very recent.
> > > Who is updating the signatures?  How often do they come out?
> > > 
> > We use amavisd-new with TrendMicro and ClamAV. When the Trendmicro vinds
> > a virus and clamav doesn't we mail the virus part of the email to the
> > maker of clamv... 
> 
> What do you use to unpack MIME messages for clamav? I haven't find
> anything yet that can unpack messages the way trendmicro does, so clamav
> will miss a great deal of viruses, mostly in error messages.
> 
amavisd-new (amavisd-ng has some mime decoding problems... especially
pgp/gpg encrypted mail) for amavisd-new look at 

http://www.ijs.si/software/amavisd

JJ




Re: anti virus software for mail server

2003-03-10 Thread Marcin Sochacki
On Mon, Mar 10, 2003 at 05:11:38PM +0100, J.J. van Gorkum wrote:
> On Mon, Mar 10, 2003 at 11:22:46AM +0100, Hirling Endre wrote:
> > On Sat, 2003-03-08 at 14:12, J.J. van Gorkum wrote:
> > > On Fri, 2003-03-07 at 16:44, C. R. Oldham wrote:
> > > > Can someone fill me in on ClamAV a little bit, the engine hasn't been
> > > > updated in a long time, but the virus signatures appear very recent.
> > > > Who is updating the signatures?  How often do they come out?
> > > > 
> > > We use amavisd-new with TrendMicro and ClamAV. When the Trendmicro vinds
> > > a virus and clamav doesn't we mail the virus part of the email to the
> > > maker of clamv... 
> > 
> > What do you use to unpack MIME messages for clamav? I haven't find
> > anything yet that can unpack messages the way trendmicro does, so clamav
> > will miss a great deal of viruses, mostly in error messages.
> > 
> amavisd-new (amavisd-ng has some mime decoding problems... especially
> pgp/gpg encrypted mail) for amavisd-new look at 

BTW: Have you ever heard about a virus which can self-sign itself with
PGP/GPG? :)

Marcin


-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]



Re: anti virus software for mail server

2003-03-10 Thread J.J. van Gorkum
On Mon, Mar 10, 2003 at 11:22:46AM +0100, Hirling Endre wrote:
> On Sat, 2003-03-08 at 14:12, J.J. van Gorkum wrote:
> > On Fri, 2003-03-07 at 16:44, C. R. Oldham wrote:
> > > Can someone fill me in on ClamAV a little bit, the engine hasn't been
> > > updated in a long time, but the virus signatures appear very recent.
> > > Who is updating the signatures?  How often do they come out?
> > > 
> > We use amavisd-new with TrendMicro and ClamAV. When the Trendmicro vinds
> > a virus and clamav doesn't we mail the virus part of the email to the
> > maker of clamv... 
> 
> What do you use to unpack MIME messages for clamav? I haven't find
> anything yet that can unpack messages the way trendmicro does, so clamav
> will miss a great deal of viruses, mostly in error messages.
> 
amavisd-new (amavisd-ng has some mime decoding problems... especially
pgp/gpg encrypted mail) for amavisd-new look at 

http://www.ijs.si/software/amavisd

JJ


-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]



Re: anti virus software for mail server

2003-03-10 Thread Marcin Sochacki
On Mon, Mar 10, 2003 at 11:22:46AM +0100, Hirling Endre wrote:
> What do you use to unpack MIME messages for clamav? I haven't find
> anything yet that can unpack messages the way trendmicro does, so clamav
> will miss a great deal of viruses, mostly in error messages.

E.g. amavis.

Wanted




Re: anti virus software for mail server

2003-03-10 Thread Mozzi
On Saturday 08 March 2003 15:12, J.J. van Gorkum wrote:
> We use amavisd-new with TrendMicro and ClamAV. When the Trendmicro vinds
> a virus and clamav doesn't we mail the virus part of the email to the
> maker of clamv...
We use mailscanner (www.mailscanner.info) with f-prot here
Works rather well

Mozzi





RE: anti virus software for mail server

2003-03-10 Thread Hirling Endre
On Sat, 2003-03-08 at 14:12, J.J. van Gorkum wrote:
> On Fri, 2003-03-07 at 16:44, C. R. Oldham wrote:
> > Can someone fill me in on ClamAV a little bit, the engine hasn't been
> > updated in a long time, but the virus signatures appear very recent.
> > Who is updating the signatures?  How often do they come out?
> > 
> We use amavisd-new with TrendMicro and ClamAV. When the Trendmicro vinds
> a virus and clamav doesn't we mail the virus part of the email to the
> maker of clamv... 

What do you use to unpack MIME messages for clamav? I haven't find
anything yet that can unpack messages the way trendmicro does, so clamav
will miss a great deal of viruses, mostly in error messages.

-m-




Re: anti virus software for mail server

2003-03-10 Thread Marcin Sochacki
On Mon, Mar 10, 2003 at 11:22:46AM +0100, Hirling Endre wrote:
> What do you use to unpack MIME messages for clamav? I haven't find
> anything yet that can unpack messages the way trendmicro does, so clamav
> will miss a great deal of viruses, mostly in error messages.

E.g. amavis.

Wanted


-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]



RE: anti virus software for mail server

2003-03-10 Thread Hirling Endre
On Sat, 2003-03-08 at 14:12, J.J. van Gorkum wrote:
> On Fri, 2003-03-07 at 16:44, C. R. Oldham wrote:
> > Can someone fill me in on ClamAV a little bit, the engine hasn't been
> > updated in a long time, but the virus signatures appear very recent.
> > Who is updating the signatures?  How often do they come out?
> > 
> We use amavisd-new with TrendMicro and ClamAV. When the Trendmicro vinds
> a virus and clamav doesn't we mail the virus part of the email to the
> maker of clamv... 

What do you use to unpack MIME messages for clamav? I haven't find
anything yet that can unpack messages the way trendmicro does, so clamav
will miss a great deal of viruses, mostly in error messages.

-m-


-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]



Re: anti virus software for mail server

2003-03-10 Thread Mozzi
On Saturday 08 March 2003 15:12, J.J. van Gorkum wrote:
> We use amavisd-new with TrendMicro and ClamAV. When the Trendmicro vinds
> a virus and clamav doesn't we mail the virus part of the email to the
> maker of clamv...
We use mailscanner (www.mailscanner.info) with f-prot here
Works rather well

Mozzi



--
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]



RE: anti virus software for mail server

2003-03-08 Thread J.J. van Gorkum
On Fri, 2003-03-07 at 16:44, C. R. Oldham wrote:
> Can someone fill me in on ClamAV a little bit, the engine hasn't been
> updated in a long time, but the virus signatures appear very recent.
> Who is updating the signatures?  How often do they come out?
> 
We use amavisd-new with TrendMicro and ClamAV. When the Trendmicro vinds
a virus and clamav doesn't we mail the virus part of the email to the
maker of clamv... 

-- 
JJ van Gorkum Knowledge Zone
If UNIX isn't the solution, you've got the wrong problem.




RE: anti virus software for mail server

2003-03-08 Thread J.J. van Gorkum
On Fri, 2003-03-07 at 16:44, C. R. Oldham wrote:
> Can someone fill me in on ClamAV a little bit, the engine hasn't been
> updated in a long time, but the virus signatures appear very recent.
> Who is updating the signatures?  How often do they come out?
> 
We use amavisd-new with TrendMicro and ClamAV. When the Trendmicro vinds
a virus and clamav doesn't we mail the virus part of the email to the
maker of clamv... 

-- 
JJ van Gorkum Knowledge Zone
If UNIX isn't the solution, you've got the wrong problem.


-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]



Re: anti virus software for mail server

2003-03-07 Thread Pulu 'Anau
We've used RAV for over a year, we're a pretty small site for this list
(probably only about 300 users max) but it's worked PERFECTLY.  The
updating system has never failed, and it's never failed to catch a virus,
including the morning we got slammed with about 250 bugbear messages from
our local ISP.

One thing we do with it from time to time is also use the engine to scan
the home directories of our users (the main email server is connected via
nfs to our samba server)...  It works great for that too, although it's
only ever found one macro virus.

For us (2 domains) it's US$60 or something similar for a year of updates,
I don't think you can beat that.

We'd originally looked at it because it interfaced with the two primary
things we were interested in, Openbsd and postfix, but we're planning on
using it on our local debian server here as well as our colo redhat server
in the states.

Pulu



-
AFE.TO Ants
Ph: Country code 676 - 878-1332 or 27946
http://www.afe.to


> Hi,
>
> I've found
>
>   RAV Antivirus
>   (http://www.ravantivirus.com/pages/showproduct.php?p=21)
>
>
> but I never heard of that one before! From the first view it looks amazing
> - so
> if somebody has experience with that one post please! Of course also post
> your
> personal recommendations.
>
> As MTA I'm using Postfix 2.0 by the way !
>
>
>
> Kind Regards,
>
> Markus Welsch
>
>
> --
> To UNSUBSCRIBE, email to [EMAIL PROTECTED]
> with a subject of "unsubscribe". Trouble? Contact
> [EMAIL PROTECTED]
>




Re: anti virus software for mail server

2003-03-07 Thread Brad Lay
I know that you have said you were using postfix, but I'd like to point
out MIMEDefang (sendmail milter). Very good software for mangling mail,
virus scanning, spam tagging, anything you can code really.

ii  mimedefang 2.30-1 Electronic mail filter program
ii  clamav 0.54-2 Powerful antivirus scanner for Unix

And to enable mail scaning you put into /etc/mail/mimedefang.pl.conf the
line,

$Features{'Virus:CLAMAV'}  = '/usr/bin/clamscan';

And away she goes ;-)

Regards,

Brad Lay
([EMAIL PROTECTED])


On Fri, 7 Mar 2003, Markus Welsch wrote:

> Hi,
>
> I've found
>
>   RAV Antivirus
>   (http://www.ravantivirus.com/pages/showproduct.php?p=21)
>
>
> but I never heard of that one before! From the first view it looks amazing - 
> so
> if somebody has experience with that one post please! Of course also post your
> personal recommendations.
>
> As MTA I'm using Postfix 2.0 by the way !
>
>
>
> Kind Regards,
>
> Markus Welsch
>
>
> --
> To UNSUBSCRIBE, email to [EMAIL PROTECTED]
> with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]
>




Re: anti virus software for mail server

2003-03-07 Thread Pulu 'Anau
We've used RAV for over a year, we're a pretty small site for this list
(probably only about 300 users max) but it's worked PERFECTLY.  The
updating system has never failed, and it's never failed to catch a virus,
including the morning we got slammed with about 250 bugbear messages from
our local ISP.

One thing we do with it from time to time is also use the engine to scan
the home directories of our users (the main email server is connected via
nfs to our samba server)...  It works great for that too, although it's
only ever found one macro virus.

For us (2 domains) it's US$60 or something similar for a year of updates,
I don't think you can beat that.

We'd originally looked at it because it interfaced with the two primary
things we were interested in, Openbsd and postfix, but we're planning on
using it on our local debian server here as well as our colo redhat server
in the states.

Pulu



-
AFE.TO Ants
Ph: Country code 676 - 878-1332 or 27946
http://www.afe.to


> Hi,
>
> I've found
>
>   RAV Antivirus
>   (http://www.ravantivirus.com/pages/showproduct.php?p=21)
>
>
> but I never heard of that one before! From the first view it looks amazing
> - so
> if somebody has experience with that one post please! Of course also post
> your
> personal recommendations.
>
> As MTA I'm using Postfix 2.0 by the way !
>
>
>
> Kind Regards,
>
> Markus Welsch
>
>
> --
> To UNSUBSCRIBE, email to [EMAIL PROTECTED]
> with a subject of "unsubscribe". Trouble? Contact
> [EMAIL PROTECTED]
>


-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]



Re: anti virus software for mail server

2003-03-07 Thread Brad Lay
I know that you have said you were using postfix, but I'd like to point
out MIMEDefang (sendmail milter). Very good software for mangling mail,
virus scanning, spam tagging, anything you can code really.

ii  mimedefang 2.30-1 Electronic mail filter program
ii  clamav 0.54-2 Powerful antivirus scanner for Unix

And to enable mail scaning you put into /etc/mail/mimedefang.pl.conf the
line,

$Features{'Virus:CLAMAV'}  = '/usr/bin/clamscan';

And away she goes ;-)

Regards,

Brad Lay
([EMAIL PROTECTED])


On Fri, 7 Mar 2003, Markus Welsch wrote:

> Hi,
>
> I've found
>
>   RAV Antivirus
>   (http://www.ravantivirus.com/pages/showproduct.php?p=21)
>
>
> but I never heard of that one before! From the first view it looks amazing - so
> if somebody has experience with that one post please! Of course also post your
> personal recommendations.
>
> As MTA I'm using Postfix 2.0 by the way !
>
>
>
> Kind Regards,
>
> Markus Welsch
>
>
> --
> To UNSUBSCRIBE, email to [EMAIL PROTECTED]
> with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]
>


-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]



Re: anti virus software for mail server

2003-03-07 Thread Garry Byrne
At 04:13 PM 3/7/2003 +0100, you wrote:
>> Yes, it's a great Romanian AV software.
>> But why not try a GPL software first -- ClamAV?
>
>I didn't take a look at ClamAV yet! I need a stable, proven-to-work solution 
>which will still work fine under heavy load.

We have been using Amavis and ClamAV for around 4 months with 2400
/Maildir's on a Pentium 111 with 500meg Ram.  I am pretty happy with ClamAV
and the virus definition updates are keeping our mail virus free, along
with Amavis of course.

Cheers
Garry

Garry Byrne
Highway Internet




Re: anti virus software for mail server

2003-03-07 Thread Marcin Sochacki
On Fri, Mar 07, 2003 at 10:09:33AM -0800, Erick Lopez Carreon wrote:
> If found a virus, then send mail to postmaster, sender
> and receiver.

Don't do that. You generate unnecessary traffic, which is pointless and
annoying in many situations. Most recent viruses and worms use a special
technique of mangling source and destination addresses, and your
warnings rarely reach the person who's computer is infected.

If you have a reliable method of detection _which_ virus was found in
a given e-mail, you may send a warning if it's one of the older viruses
which don't spoof e-mail headers.

In case of Klez and friends -- the only information you can be quite sure
of is the IP address of the sending machine. If you want, you could send
the warning to the owner/administrator of the particular network, but
do it only once per IP (i.e. keep the database of your previous
mailings).

Marcin




Re: anti virus software for mail server

2003-03-07 Thread Garry Byrne
At 04:13 PM 3/7/2003 +0100, you wrote:
>> Yes, it's a great Romanian AV software.
>> But why not try a GPL software first -- ClamAV?
>
>I didn't take a look at ClamAV yet! I need a stable, proven-to-work solution 
>which will still work fine under heavy load.

We have been using Amavis and ClamAV for around 4 months with 2400
/Maildir's on a Pentium 111 with 500meg Ram.  I am pretty happy with ClamAV
and the virus definition updates are keeping our mail virus free, along
with Amavis of course.

Cheers
Garry

Garry Byrne
Highway Internet


-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]



Re: anti virus software for mail server

2003-03-07 Thread Marcin Sochacki
On Fri, Mar 07, 2003 at 10:09:33AM -0800, Erick Lopez Carreon wrote:
> If found a virus, then send mail to postmaster, sender
> and receiver.

Don't do that. You generate unnecessary traffic, which is pointless and
annoying in many situations. Most recent viruses and worms use a special
technique of mangling source and destination addresses, and your
warnings rarely reach the person who's computer is infected.

If you have a reliable method of detection _which_ virus was found in
a given e-mail, you may send a warning if it's one of the older viruses
which don't spoof e-mail headers.

In case of Klez and friends -- the only information you can be quite sure
of is the IP address of the sending machine. If you want, you could send
the warning to the owner/administrator of the particular network, but
do it only once per IP (i.e. keep the database of your previous
mailings).

Marcin


-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]



Re: anti virus software for mail server

2003-03-07 Thread Erick Lopez Carreon
We have 60 users by server in average, and here goes
some mail statistics:

M   msgsfr  bytes_from   msgstobytes_to  msgsrej
msgsdis  Mailer
 10  0K  754  17445K0 
 0  *file*
 3 3136 103034K 8465  30360K0 
 0  amavis
 5 9271 549384K 6661  33748K0 
 0  smtp
=
 T12407 652418K15880  81553K0 
 0
 C6 59370



Clamav is executed by amavis each time that in/out a
mail:
Mar  7 12:06:09 server sendmail[15880]:
h27I5Vwg015880: from=<[EMAIL PROTECTED]>,
size=131300, class=0, nrcpts=1,
msgid=<[EMAIL PROTECTED]>,
proto=SMTP, daemon=MTA, relay=web41305.mail.yahoo.com
[66.218.93.54]
Mar  7 12:06:11 server amavis[15884]: starting. 
amavis perl-11 Tue Dec 17 14:12:52 CST 2002
Mar  7 12:06:13 server amavis[15884]: Virus found -
quarantined as virus-20030307-120613-15884


If found a virus, then send mail to postmaster, sender
and receiver.


And although the server from whom he takes these
statistics has other services does not affect
performance at all:
Memory:  TotalUsedFree  Shared
Buffers  Cached
Mem:191320  178292   13028   0
  38672   74500
Swap:   530104   13252  516852

Bootup: xxxLoad average: 0.44 0.32 0.28
1/70 15909

user  :   1d 22:56:56.35   3.5%  page in :  4797642 
disk 1:   441104r 6221758w
nice  :   0:08:10.22   0.0%  page out: 62890365
system:   4d 22:26:53.14   8.7%  swap in :63853
idle  :  49d 19:09:54.18  87.8%  swap out:25971


This machine is a pentium II 400Mhz with 192 MB ram
and 7200 rpm hard disk IDE 





--- Markus Welsch <[EMAIL PROTECTED]> wrote:
> > I already use amavis + clamav for our servers and
> > works fine.I have 9 months using clamav and his
> virus
> > data base is update one o two times in a week.
> 
> That sounds great. So could you give us a bit of a
> short review, like how much 
> mail traffic those servers have to handle, etc.
> 


=
Por favor, NO utilice formatos  de archivo  propietarios para el
 intercambio de  documentos, como DOC y XLS; sino HTML, RTF, TXT,
CSV o cualquier otro que NO obligue a utilizar un programa de un
fabricante  concreto para tratar la información contenida en él.
Erick Ivaan Lopez Carreon -CuahutliMexica
Ing. en Electronica -Soñador aficionado.
www.fsl.org.mx

__
Do you Yahoo!?
Yahoo! Tax Center - forms, calculators, tips, more
http://taxes.yahoo.com/




Re: anti virus software for mail server

2003-03-07 Thread Nicolas Bougues
On Fri, Mar 07, 2003 at 04:13:30PM +0100, Markus Welsch wrote:
> >Yes, it's a great Romanian AV software.
> >But why not try a GPL software first -- ClamAV?
> 
> I didn't take a look at ClamAV yet! I need a stable, proven-to-work 
> solution which will still work fine under heavy load.
> 

I use Amavis + uvscan (McAfee) + spamassassin. There is a script to do
FTP updates automatically every night.

It works very well, but it requires quite a lot of resources. I
believe this is more because of spamassassin (Perl interpreter),
though.

With 1 GB RAM and a PIV, it can handle about 100 msg/minute.

--
Nicolas Bougues
Axialys Interactive




Re: anti virus software for mail server

2003-03-07 Thread Erick Lopez Carreon
We have 60 users by server in average, and here goes
some mail statistics:

M   msgsfr  bytes_from   msgstobytes_to  msgsrej
msgsdis  Mailer
 10  0K  754  17445K0 
 0  *file*
 3 3136 103034K 8465  30360K0 
 0  amavis
 5 9271 549384K 6661  33748K0 
 0  smtp
=
 T12407 652418K15880  81553K0 
 0
 C6 59370



Clamav is executed by amavis each time that in/out a
mail:
Mar  7 12:06:09 server sendmail[15880]:
h27I5Vwg015880: from=<[EMAIL PROTECTED]>,
size=131300, class=0, nrcpts=1,
msgid=<[EMAIL PROTECTED]>,
proto=SMTP, daemon=MTA, relay=web41305.mail.yahoo.com
[66.218.93.54]
Mar  7 12:06:11 server amavis[15884]: starting. 
amavis perl-11 Tue Dec 17 14:12:52 CST 2002
Mar  7 12:06:13 server amavis[15884]: Virus found -
quarantined as virus-20030307-120613-15884


If found a virus, then send mail to postmaster, sender
and receiver.


And although the server from whom he takes these
statistics has other services does not affect
performance at all:
Memory:  TotalUsedFree  Shared
Buffers  Cached
Mem:191320  178292   13028   0
  38672   74500
Swap:   530104   13252  516852

Bootup: xxxLoad average: 0.44 0.32 0.28
1/70 15909

user  :   1d 22:56:56.35   3.5%  page in :  4797642 
disk 1:   441104r 6221758w
nice  :   0:08:10.22   0.0%  page out: 62890365
system:   4d 22:26:53.14   8.7%  swap in :63853
idle  :  49d 19:09:54.18  87.8%  swap out:25971


This machine is a pentium II 400Mhz with 192 MB ram
and 7200 rpm hard disk IDE 





--- Markus Welsch <[EMAIL PROTECTED]> wrote:
> > I already use amavis + clamav for our servers and
> > works fine.I have 9 months using clamav and his
> virus
> > data base is update one o two times in a week.
> 
> That sounds great. So could you give us a bit of a
> short review, like how much 
> mail traffic those servers have to handle, etc.
> 


=
Por favor, NO utilice formatos  de archivo  propietarios para el
 intercambio de  documentos, como DOC y XLS; sino HTML, RTF, TXT,
CSV o cualquier otro que NO obligue a utilizar un programa de un
fabricante  concreto para tratar la información contenida en él.
Erick Ivaan Lopez Carreon -CuahutliMexica
Ing. en Electronica -Soñador aficionado.
www.fsl.org.mx

__
Do you Yahoo!?
Yahoo! Tax Center - forms, calculators, tips, more
http://taxes.yahoo.com/


-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]



RE: anti virus software for mail server

2003-03-07 Thread C. R. Oldham
Can someone fill me in on ClamAV a little bit, the engine hasn't been
updated in a long time, but the virus signatures appear very recent.
Who is updating the signatures?  How often do they come out?

-- 
C. R. Oldham
Director of Technology
NCA CASI




Re: anti virus software for mail server

2003-03-07 Thread Markus Welsch
I already use amavis + clamav for our servers and
works fine.I have 9 months using clamav and his virus
data base is update one o two times in a week.
That sounds great. So could you give us a bit of a short review, like how much 
mail traffic those servers have to handle, etc.




Re: anti virus software for mail server

2003-03-07 Thread Erick Lopez Carreon
I already use amavis + clamav for our servers and
works fine.I have 9 months using clamav and his virus
data base is update one o two times in a week.



--- Markus Welsch <[EMAIL PROTECTED]> wrote:
> > Yes, it's a great Romanian AV software.
> > But why not try a GPL software first -- ClamAV?
> 
> I didn't take a look at ClamAV yet! I need a stable,
> proven-to-work solution 
> which will still work fine under heavy load.
> 
> 
> -- 
> To UNSUBSCRIBE, email to
> [EMAIL PROTECTED]
> with a subject of "unsubscribe". Trouble? Contact
> [EMAIL PROTECTED]
> 


=
Por favor, NO utilice formatos  de archivo  propietarios para el
 intercambio de  documentos, como DOC y XLS; sino HTML, RTF, TXT,
CSV o cualquier otro que NO obligue a utilizar un programa de un
fabricante  concreto para tratar la información contenida en él.
Erick Ivaan Lopez Carreon -CuahutliMexica
Ing. en Electronica -Soñador aficionado.
www.fsl.org.mx

__
Do you Yahoo!?
Yahoo! Tax Center - forms, calculators, tips, more
http://taxes.yahoo.com/




Re: anti virus software for mail server

2003-03-07 Thread Nicolas Bougues
On Fri, Mar 07, 2003 at 04:13:30PM +0100, Markus Welsch wrote:
> >Yes, it's a great Romanian AV software.
> >But why not try a GPL software first -- ClamAV?
> 
> I didn't take a look at ClamAV yet! I need a stable, proven-to-work 
> solution which will still work fine under heavy load.
> 

I use Amavis + uvscan (McAfee) + spamassassin. There is a script to do
FTP updates automatically every night.

It works very well, but it requires quite a lot of resources. I
believe this is more because of spamassassin (Perl interpreter),
though.

With 1 GB RAM and a PIV, it can handle about 100 msg/minute.

--
Nicolas Bougues
Axialys Interactive


-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]



Re: anti virus software for mail server

2003-03-07 Thread Markus Welsch
Yes, it's a great Romanian AV software.
But why not try a GPL software first -- ClamAV?
I didn't take a look at ClamAV yet! I need a stable, proven-to-work solution 
which will still work fine under heavy load.




Re: anti virus software for mail server

2003-03-07 Thread Mark Sprong
Markus Welsch wrote:
Hi,
I've found
RAV Antivirus
(http://www.ravantivirus.com/pages/showproduct.php?p=21)
but I never heard of that one before! From the first view it looks 
amazing - so if somebody has experience with that one post please! Of 
course also post your personal recommendations.

As MTA I'm using Postfix 2.0 by the way !
Markus,
I've been using this product for a few months now and must say that the 
virusscanning part of it is really good. We are running an isp that's 
serving 500k+ customers and are running RAV on the incoming smtps and 
relays, you can imagine what amount of mail has to be scanned here. The 
software still doesn't use a lot of system resources and is quite 
configurable. We run qmail as MTA and ofcourse Debian as OS.

RAV comes in rpm packages, I've requested that they make native debs and 
they said they are looking into it. So for now you should use alien to 
convert. Also you will have to make sure ownership and permissions are 
set right but that's all documented.

The spamfiltering part of it sux.
Virus definition updates are easily automated.
The pricing is pretty cheap compared to other commercial vendors like 
McAffee etc. Response on support requests via e-mail is quick.

So all in all I'm pretty happy with it.
grtx, Mark



Re: anti virus software for mail server

2003-03-07 Thread Markus Welsch
Well I don't think the price is too bad for a ISP. The clamav engine seems to be 
last updated 21-Nov-2002 ... quite a while and it's not v1.0 yet.

How many users are you providing antivirus for ?
Which MTA are you using ?
It is a bit pricy.  I have used http://clamav.elektrapro.com/ with great 
sucess.  Lot cheaper and works well.

Kind Regards,
Markus



Re: anti virus software for mail server

2003-03-07 Thread Marcin Sochacki
On Fri, Mar 07, 2003 at 03:03:16PM +0100, Markus Welsch wrote:
>   RAV Antivirus
>   (http://www.ravantivirus.com/pages/showproduct.php?p=21)

Yes, it's a great Romanian AV software.
But why not try a GPL software first -- ClamAV?

Marcin




Re: anti virus software for mail server

2003-03-07 Thread Robert Lazzurs
On Friday 07 March 2003 14:03, Markus Welsch wrote:
> Hi,
>
> I've found
>
>   RAV Antivirus
>   (http://www.ravantivirus.com/pages/showproduct.php?p=21)
>
>
> but I never heard of that one before! From the first view it looks amazing
> - so if somebody has experience with that one post please! Of course also
> post your personal recommendations.

It is a bit pricy.  I have used http://clamav.elektrapro.com/ with great 
sucess.  Lot cheaper and works well.

Take care - RL
-- 

This email and any files transmitted with it are confidential and intended
solely for the use of the individual or entity to whom they are addressed.
If you have received this email in error please notify the sender. Any
offers or quotation of service are subject to formal specification.
Errors and omissions excepted.  Please note that any views or opinions
presented in this email are solely those of the author and do not
necessarily represent those of edNET or lightershade ltd. Finally, the
recipient should check this email and any attachments for the presence of
viruses.  edNET and lightershade ltd accepts no liability for any damage
caused by any virus transmitted by this email.

-- 
-- 
Virus scanned by edNET.




RE: anti virus software for mail server

2003-03-07 Thread C. R. Oldham
Can someone fill me in on ClamAV a little bit, the engine hasn't been
updated in a long time, but the virus signatures appear very recent.
Who is updating the signatures?  How often do they come out?

-- 
C. R. Oldham
Director of Technology
NCA CASI


--
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]



Re: anti virus software for mail server

2003-03-07 Thread Markus Welsch
I already use amavis + clamav for our servers and
works fine.I have 9 months using clamav and his virus
data base is update one o two times in a week.
That sounds great. So could you give us a bit of a short review, like how much 
mail traffic those servers have to handle, etc.

--
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]


anti virus software for mail server

2003-03-07 Thread Markus Welsch
Hi,
I've found
RAV Antivirus
(http://www.ravantivirus.com/pages/showproduct.php?p=21)
but I never heard of that one before! From the first view it looks amazing - so 
if somebody has experience with that one post please! Of course also post your 
personal recommendations.

As MTA I'm using Postfix 2.0 by the way !

Kind Regards,
Markus Welsch



Re: anti virus software for mail server

2003-03-07 Thread Erick Lopez Carreon
I already use amavis + clamav for our servers and
works fine.I have 9 months using clamav and his virus
data base is update one o two times in a week.



--- Markus Welsch <[EMAIL PROTECTED]> wrote:
> > Yes, it's a great Romanian AV software.
> > But why not try a GPL software first -- ClamAV?
> 
> I didn't take a look at ClamAV yet! I need a stable,
> proven-to-work solution 
> which will still work fine under heavy load.
> 
> 
> -- 
> To UNSUBSCRIBE, email to
> [EMAIL PROTECTED]
> with a subject of "unsubscribe". Trouble? Contact
> [EMAIL PROTECTED]
> 


=
Por favor, NO utilice formatos  de archivo  propietarios para el
 intercambio de  documentos, como DOC y XLS; sino HTML, RTF, TXT,
CSV o cualquier otro que NO obligue a utilizar un programa de un
fabricante  concreto para tratar la información contenida en él.
Erick Ivaan Lopez Carreon -CuahutliMexica
Ing. en Electronica -Soñador aficionado.
www.fsl.org.mx

__
Do you Yahoo!?
Yahoo! Tax Center - forms, calculators, tips, more
http://taxes.yahoo.com/


-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]



Re: anti virus software for mail server

2003-03-07 Thread Markus Welsch
Yes, it's a great Romanian AV software.
But why not try a GPL software first -- ClamAV?
I didn't take a look at ClamAV yet! I need a stable, proven-to-work solution 
which will still work fine under heavy load.

--
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]


Re: anti virus software for mail server

2003-03-07 Thread Mark Sprong
Markus Welsch wrote:
Hi,

I've found

RAV Antivirus
(http://www.ravantivirus.com/pages/showproduct.php?p=21)
but I never heard of that one before! From the first view it looks 
amazing - so if somebody has experience with that one post please! Of 
course also post your personal recommendations.

As MTA I'm using Postfix 2.0 by the way !
Markus,

I've been using this product for a few months now and must say that the 
virusscanning part of it is really good. We are running an isp that's 
serving 500k+ customers and are running RAV on the incoming smtps and 
relays, you can imagine what amount of mail has to be scanned here. The 
software still doesn't use a lot of system resources and is quite 
configurable. We run qmail as MTA and ofcourse Debian as OS.

RAV comes in rpm packages, I've requested that they make native debs and 
they said they are looking into it. So for now you should use alien to 
convert. Also you will have to make sure ownership and permissions are 
set right but that's all documented.

The spamfiltering part of it sux.

Virus definition updates are easily automated.

The pricing is pretty cheap compared to other commercial vendors like 
McAffee etc. Response on support requests via e-mail is quick.

So all in all I'm pretty happy with it.

grtx, Mark



--
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]


Re: anti virus software for mail server

2003-03-07 Thread Markus Welsch
Well I don't think the price is too bad for a ISP. The clamav engine seems to be 
last updated 21-Nov-2002 ... quite a while and it's not v1.0 yet.

How many users are you providing antivirus for ?
Which MTA are you using ?
It is a bit pricy.  I have used http://clamav.elektrapro.com/ with great 
sucess.  Lot cheaper and works well.


Kind Regards,

Markus

--
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]


Re: anti virus software for mail server

2003-03-07 Thread Marcin Sochacki
On Fri, Mar 07, 2003 at 03:03:16PM +0100, Markus Welsch wrote:
>   RAV Antivirus
>   (http://www.ravantivirus.com/pages/showproduct.php?p=21)

Yes, it's a great Romanian AV software.
But why not try a GPL software first -- ClamAV?

Marcin


-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]



Re: anti virus software for mail server

2003-03-07 Thread Robert Lazzurs
On Friday 07 March 2003 14:03, Markus Welsch wrote:
> Hi,
>
> I've found
>
>   RAV Antivirus
>   (http://www.ravantivirus.com/pages/showproduct.php?p=21)
>
>
> but I never heard of that one before! From the first view it looks amazing
> - so if somebody has experience with that one post please! Of course also
> post your personal recommendations.

It is a bit pricy.  I have used http://clamav.elektrapro.com/ with great 
sucess.  Lot cheaper and works well.

Take care - RL
-- 

This email and any files transmitted with it are confidential and intended
solely for the use of the individual or entity to whom they are addressed.
If you have received this email in error please notify the sender. Any
offers or quotation of service are subject to formal specification.
Errors and omissions excepted.  Please note that any views or opinions
presented in this email are solely those of the author and do not
necessarily represent those of edNET or lightershade ltd. Finally, the
recipient should check this email and any attachments for the presence of
viruses.  edNET and lightershade ltd accepts no liability for any damage
caused by any virus transmitted by this email.

-- 
-- 
Virus scanned by edNET.


-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]



anti virus software for mail server

2003-03-07 Thread Markus Welsch
Hi,

I've found

RAV Antivirus
(http://www.ravantivirus.com/pages/showproduct.php?p=21)
but I never heard of that one before! From the first view it looks amazing - so 
if somebody has experience with that one post please! Of course also post your 
personal recommendations.

As MTA I'm using Postfix 2.0 by the way !



Kind Regards,

Markus Welsch

--
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]