Re: Better antivirus (AV) protection?

On 5/4/2022 6:12 μ.μ., Damian wrote:

> Look for "Found decoder for" lines on Amavis restart.

I did a localinstall of the package. After Amavis reload:

...
Apr  5 18:21:35 mailgw1 amavis[1064531]: Found decoder for .rar  at 
/usr/bin/unrar
...
Apr  5 18:21:35 mailgw1 amavis[1064531]: Found decoder for .exe  at 
/usr/bin/unrar; /usr/bin/unarj
...

I did a test sending an email to myself (from an external account I use) 
with the 7z attachment.

It was decoded successfully; the virus was NOT detected (even though we 
use sanesecurity and more), but the file was banned, because we ban exe 
files.

(Yes, it seems we ban exe files even in compressed archives, after all; 
my volatile memory...)

I reported the virus file at: https://www.clamav.net/reports/malware

...So, having resolved RAR archives scanning (which was very important 
indeed), we reach back to the initial question about better AV protection...

I might go for a second AV scanner, perhaps bitdefender as Benny 
Pedersen just suggested. (Thank you!)

If there is any documentation to integrate it with amavis as a second 
scanner, please send a link or directions!

Cheers,
Nick