Topic: ANTIVIRUS SOLUTION?

[Engelmann]

hi,
i use MS-Outlook (sorry) to email and calender... in nower days there are many of those VBS virus that uses outlook to send itself... so i think a ANTIVIRUS solution should be built in e-smith.
does anyone have an good idea how to do so? which AV solution is the best with linux? mcafee? does anyone know a good AVgatway that scans all traffic coming thrue?

cu engel

[Michel Jung]

> i use MS-Outlook (sorry) to email and calender... in nower
> days there are many of those VBS virus that uses outlook to
> send itself... so i think a ANTIVIRUS solution should be
I use it too but updated Outlook with the security patches from MS so no .vbs script will be executed.

> does anyone have an good idea how to do so? which AV solution
> is the best with linux? mcafee? does anyone know a good
> AVgatway that scans all traffic coming thrue?
There is no "ready-to-run" solution. But when you have knowledge on the command prompt and able to install .rpm and you know what means make; make install etc. you should have a look on http://www.amavis.org which is a MAIL virus scanner for Linux and supports a bunch of commercial scanners which you can use. With this package and the licensed SOPHOS Antivirus package I sweep every night through the samba shares and scan every incomming/outgoing email.
A detailed step-by-step instruction was published by another user on the E-Smith Developer mailing list.

Michael Jung

[Dean Mumby]

Try http://www.ravantivirus.com they have a qmail compatible antivirus program which seems to be out the box.

[Mike Sensney]

Swynk came up with their own answer to the I LOVE YOU virus, which I think is among the best possible solutions. Change Windows so it won't run those pesky VBS viruses when you click on them.

http://swynk.com/friends/policht/Art050500.asp

I made usable copies of the scripts for my own use. I have them available here for now. There is one for Win 9x and one for NT/W2K.

http://www.shockwave.dyndns.org/e-smith/

The first time you run them they change your registry. They second time they pop up in notepad, since they are VBS scripts.

Anyway, they have worked for me.

[Darrell May]

Dean Mumby wrote:
>
> Try http://www.ravantivirus.com they have a qmail compatible
> antivirus program which seems to be out the box.

I download and installed RAV for Qmail v8.  Looks very impressive.  Have you any experience running this with e-smith yourself?

Darrell

[jose velez]

how to remove ravantivirus.  It is blocking my email.  Any Idea how to remove it

[Dean Mumby]

Not yet I will be trying it this weekend, I have however installed it on a test qmail instalation on rh7 and its works fine. It send out warnings and doesnt seem to be to heavy on resources. One problem I have had is that it doesnt seem to delete the infected attachement, which is not the end of the world because you cant miss the fact that there is a virus in the email. I will ost next week how it went with e-smith.