qmail-scanner-attachments.db for netsky and beagle RE: Stopping Sophie doesn't work very well

"Pete Henshall" <[email protected]> Wed, 10 Mar 2004 14:34:38 -0000
Newsgroups gmane.comp.security.virus.vtools
Message-ID <[email protected]>
> > 2 I'm having a wierd problem. I have Postfix with amavisd-new
SpamAssassin
> > and Sophie and it detects virussus very wel but from time to time
virusses
> > get past the filter and i can't find any record about the entire mail in
the
> > amavisd or postfix log. Does this have to do with Sophie??

> We are calling Sophie with qmail-scanner and have modified the
> qmail-scanner-attachments.db to handle the Netskys and Bagles that were
> getting through.  We are thinking about adding Clamav as well, but are a
> little worried about the extra CPU load of running two virus scanners.

Any chance of you sharing your quarentine-attachments with us?  Having 2
scanners running isn't ideal on our load (as you say)..

Thanks
Pete