RE: mail antivirus

> -----Original Message-----
> From: [email protected] 
> [mailto:[email protected]] On Behalf Of Tom Walsh
> Sent: 23 August 2007 19:09
> To: [email protected]
> Subject: RE: mail antivirus
> 
> ClamAV. http://www.clamav.net/
> 
> Open Source. Virus definitions automatically updated with new 
> definitions via freshclam. New strains added very quickly. 
> Client / Server model.
> 
> We use a shell script to make clamscan work with maildrop 
> xfilter and it works very well.
> 
> No complaints other than some issues with the code base 
> evolving a little to quickly which can make it difficult to 
> keep up to date (some newer virus definitions will not work 
> with an older version of clamscan so you need to check the 
> logs of freshclam occasionally for "WARNING: Your ClamAV 
> installation is OUTDATED!" and update when needed).

It is evolving rapidly for a very good reason:

<http://search.securityfocus.com/swsearch?query=clamav&sbm=archive%2F1%2F&submit=Search%21&metaname=alldoc&sort=swishlastmodified>

Yes, that's 7 pages of vulnerabilities over the last 3 years.

They ClamAV developers have a very commendable attitude to 
fixing security issues, but you do have to keep an eye out 
on the bugtrack list for the weekly issues.  Shame I cannot 
say the same about some very popular mailservers.  YMMV.


Paul