Re: [Mimedefang] ClamAV effectiveness

2014-09-19 Thread G.W. Haywood
Hi there, On Fri, 19 Sep 2014, David F. Skoll wrote: 4. ClamAV effectiveness (was Re: MIMEDefang Digest, Vol 132, Issue 3) Oops. Sorry about that. :/ Mr. Skoll also wrote: On Thu, 18 Sep 2014 17:33:44 +0100 (BST) "G.W. Haywood" wrote: In my opinion ClamAV is more or less useless for any

Re: [Mimedefang] ClamAV effectiveness (was Re: MIMEDefang Digest, Vol 132, Issue 3)

2014-09-18 Thread David F. Skoll
On Thu, 18 Sep 2014 14:17:13 -0500 Richard Laager wrote: > Is there a virus scanner you'd recommend for use with MIMEDefang on > Linux? No, not really. I'd recommend not running Windows which reduces your exposure to viruses by 99%. And rather than any sort of virus scanner, I'd simply block a

Re: [Mimedefang] ClamAV effectiveness (was Re: MIMEDefang Digest, Vol 132, Issue 3)

2014-09-18 Thread Richard Laager
On Thu, 2014-09-18 at 12:45 -0400, David F. Skoll wrote: > ClamAV has become almost completely useless since the > Sourcefire and then Cicso acquisition. It's a fine engine, but signatures > are awful. Is there a virus scanner you'd recommend for use with MIMEDefang on Linux? -- Richard signa

[Mimedefang] ClamAV effectiveness (was Re: MIMEDefang Digest, Vol 132, Issue 3)

2014-09-18 Thread David F. Skoll
On Thu, 18 Sep 2014 17:33:44 +0100 (BST) "G.W. Haywood" wrote: > In my opinion ClamAV is more or less useless for anything other than > the phishing signatures etc. for which I use it. Seconded. ClamAV has become almost completely useless since the Sourcefire and then Cicso acquisition. It's a

Re: [Mimedefang] ClamAV effectiveness

2013-10-11 Thread Helmut Hullen
Hallo, Andrew, Du meintest am 11.10.13: > I have to agree that ClamAV seems well behind other software > packages. > I do get a numbers of attachments e-mail to me which I then check via > https://www.virustotal.com and they are then reported as a virus. I'd first test for "*.exe" or "zipped *

Re: [Mimedefang] ClamAV effectiveness

2013-10-11 Thread Andrew Watkins
I have to agree that ClamAV seems well behind other software packages. I do get a numbers of attachments e-mail to me which I then check via https://www.virustotal.com and they are then reported as a virus. ClamAV is open source so I guess it does a good job for us people who can't purchase

Re: [Mimedefang] ClamAV effectiveness

2013-10-10 Thread WBrown
DFS wrote on 10/10/2013 12:08:04 PM: > Has anyone noticed that ClamAV does a pretty poor job lately of > catching viruses? Here are a few days' worth of statistics from a > reasonably-busy mail server cluster: Not seeing it being caught by Symantec or McAfee on mail servers behind our CanIt sys

[Mimedefang] ClamAV effectiveness

2013-10-10 Thread David F. Skoll
Hi, all, Has anyone noticed that ClamAV does a pretty poor job lately of catching viruses? Here are a few days' worth of statistics from a reasonably-busy mail server cluster: Total messages scanned: 25 814 586 Viruses detected by ClamAV: 32 147 Viruses missed b