Topic: Alternate Virus scanner

[jrgns]

Hi all...

We're just exploring, and we're looking for alternatives for clamav and spamassassin.

Preferably open source and free.

Thnx!

[gzartman]

Jrgns,

Clamav is about the best GPL AV scanner out there for SME.  What is it that you don't like about Clam?  I've used several AV scanners on SME over the years, both commercial and GPL.  Clam does a fine job at detecting viruses, is activily developed, and has fairly up to date definitions.  If you are looking to step up from Clam, then I think you need to be looking at a commercial solutions.  

By far and away, the best AV scanner for SME that I've used is Virus Wall by Trend.  This is the scanner that comes with Mitel's Servicelink package.  It would be wonderful is someone in the community, nudge nudge, would develop a standalone contrib for Trend's Virus Wall.  My guess is that it wouldn't be that big of a task to do using one of the currently available contribs as a starting point.

Darrel May has put together a turnkey commercial AV scanner for SME called BitDefender.  BD is a fairly good scanner, but is about on par with Clam IMO. I would only purchase this scanner if you really want the comfort of a commercial solution though.

As far as an alternate to spamassassin, there are numerious options available depending on what level of spam prevention you want to implement.  

Good luck.

Greg Zartman

[RavenIV]

i use avmailgate for virus scanning.
it's free for private use.
and there is a contrib for it.

search the forum for "avmailgate" or "hbedv".

cheers

[psoren]

i use avmailgate for virus scanning.
it's free for private use.
and there is a contrib for it.

search the forum for "avmailgate" or "hbedv".

cheers

I have used avmailgate (AntiVir) for a couple of years now. It works well but not together with smtpfront-qmail and RBL listing. AntiVir picks up everything that comes in on port 25 before it get's to smtpfront-qmail. This means that all mails get scanned, also the ones that should have been rejected by RBL list and (if installed) Mailfront mailrules.
So i have now switched to CLAMAV (from the Swerts-Knudsen script) which actually is integrated well in the servermanager. Its very easy to overview and delete virusmails. This is not the case with AntiVir

Per

Per

[aussie]

Jrgns,

Clamav is about the best GPL AV scanner out there for SME.  What is it that you don't like about Clam?  I've used several AV scanners on SME over the years, both commercial and GPL.  Clam does a fine job at detecting viruses, is activily developed, and has fairly up to date definitions.  If you are looking to step up from Clam, then I think you need to be looking at a commercial solutions.  

By far and away, the best AV scanner for SME that I've used is Virus Wall by Trend.  This is the scanner that comes with Mitel's Servicelink package.  It would be wonderful is someone in the community, nudge nudge, would develop a standalone contrib for Trend's Virus Wall.  My guess is that it wouldn't be that big of a task to do using one of the currently available contribs as a starting point.

Darrel May has put together a turnkey commercial AV scanner for SME called BitDefender.  BD is a fairly good scanner, but is about on par with Clam IMO. I would only purchase this scanner if you really want the comfort of a commercial solution though.

As far as an alternate to spamassassin, there are numerious options available depending on what level of spam prevention you want to implement.  

Good luck.

Greg Zartman

I notice several updates for clamav and wonder what version the sme-friendly is and if the newer ones work or are necessary.
regards,   Rob

[raem]

jrgns

The Pattern matching technique works really well, it's rejecting 99% or better of messages with virus infected attachments.
You should still have clamav or similar and desktop scanning installed just as a backup measure in case something slips through (clamav only detects 1 message every month or two as all the rest are rejected by pattern matching).

http://mirror.contribs.org/smeserver/contribs/rmitchell/smeserver/howto/Virus%20and%20file%20blocking%20HOWTO%20using%20smtpfront-qmail%20for%20sme%20server.htm


RBL blocking is also very effective at reducing spam, I would say it reduces spam by 75 to 90% depending on which RBL lists you use. Some users have reported over 90% reduction in spam.
I personally feel this system (of rejecting messages from spamming sources) is more practical, as spamassassin still requires you to personally review junk messages.

http://mirror.contribs.org/smeserver/contribs/rmitchell/smeserver/howto/Spam%20blocking%20HOWTO%20using%20smtpfront-qmail%20for%20sme%20server.htm


The other techniques worthy of use is the qconfirm contrib by Gordon Rowell. It does require senders to respond to a confirmation message (only once) that is automatically generated by the sme server (qconfirm), so that you only accept messages from legitimate senders.

A combination of these methods should just about kill all spam and virus type messages.

The original release notes seemed to have disappeared from the devinfo list since the big contrbs.org crash but you can find some of the details here:

http://mirror.contribs.org/smeserver/contribs/rmitchell/smeserver/devinfo%20posts/qconfirm%20release%20annouce%20devinfo.txt

qconfirm-0.13.0-01.i386.rpm
e-smith-qconfirm-0.0.1-03.noarch.rpm