antivirus options

[Jonathan Horne]

clamav is pretty good, but i am still seeing quite a few trojan attachments (in .zip) getting thru. is there another recommended alternative to use with/inlieu of clamav?



thanks,

jonathan

-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://lists.mailscanner.info/pipermail/mailscanner/attachments/20130806/93e2a628/attachment.html

[Kevin Miller]

I use f-secure as well as clamav on my mail gateways. If one doesn't get it the other may. I also use Sophos internally, so the files have been scanned three times by the time the user sees them.

I also disallow password protected archives, but have a rule file to allow trusted sites to protect a zip file for the few exceptions.

...Kevin
--
Kevin Miller
Network/email Administrator, CBJ MIS Dept.
155 South Seward Street
Juneau, Alaska 99801
Phone: [phone], Fax: [phone]
Registered Linux User No: 307357
From: mailscanner-bounces at lists.mailscanner.info [mailto:mailscanner-bounces at lists.mailscanner.info] On Behalf Of Jonathan Horne
Sent: Tuesday, August 06, 2013 9:01 AM
To: mailscanner at lists.mailscanner.info
Subject: antivirus options

clamav is pretty good, but i am still seeing quite a few trojan attachments (in .zip) getting thru. is there another recommended alternative to use with/inlieu of clamav?

thanks,
jonathan
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://lists.mailscanner.info/pipermail/mailscanner/attachments/20130806/aef9a132/attachment.html

[Jonathan Horne]

hi kevin, thanks for your reply. i was looking at sophos today, but i couldnt see a free opensource download. do you know if this is indeed free/opensource for linux?




From: Kevin_Miller at ci.juneau.ak.us
To: mailscanner at lists.mailscanner.info
Date: Tue, 6 Aug 2013 09:23:45 -0800
Subject: RE: antivirus options





I use f-secure as well as clamav on my mail gateways. If one doesn?t get it the other may. I also use Sophos internally, so the files have been scanned three times by the time the user sees them.

I also disallow password protected archives, but have a rule file to allow trusted sites to protect a zip file for the few exceptions.

...Kevin
--
Kevin Miller
Network/email Administrator, CBJ MIS Dept.
155 South Seward Street
Juneau, Alaska 99801
Phone: [phone], Fax: [phone]
Registered Linux User No: 307357


From: mailscanner-bounces at lists.mailscanner.info [mailto:mailscanner-bounces at lists.mailscanner.info] On Behalf Of Jonathan Horne
Sent: Tuesday, August 06, 2013 9:01 AM
To: mailscanner at lists.mailscanner.info
Subject: antivirus options


clamav is pretty good, but i am still seeing quite a few trojan attachments (in .zip) getting thru. is there another recommended alternative to use with/inlieu of clamav?

thanks,
jonathan
-- MailScanner mailing list mailscanner at lists.mailscanner.info http://lists.mailscanner.info/mailman/listinfo/mailscanner Before posting, read http://wiki.mailscanner.info/posting Support MailScanner development - buy the book off the website!
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://lists.mailscanner.info/pipermail/mailscanner/attachments/20130806/bb2e0850/attachment.html

[Kevin Miller]

I think clamav is the only free/opensource antivirus out there. We pay for Sophos and F-secure.

...Kevin
--
Kevin Miller
Network/email Administrator, CBJ MIS Dept.
155 South Seward Street
Juneau, Alaska 99801
Phone: [phone], Fax: [phone]
Registered Linux User No: 307357
From: mailscanner-bounces at lists.mailscanner.info [mailto:mailscanner-bounces at lists.mailscanner.info] On Behalf Of Jonathan Horne
Sent: Tuesday, August 06, 2013 10:07 AM
To: MailScanner discussion
Subject: RE: antivirus options

hi kevin, thanks for your reply. i was looking at sophos today, but i couldnt see a free opensource download. do you know if this is indeed free/opensource for linux?

________________________________
From: Kevin_Miller at ci.juneau.ak.us<mailto:Kevin_Miller at ci.juneau.ak.us>
To: mailscanner at lists.mailscanner.info<mailto:mailscanner at lists.mailscanner.info>
Date: Tue, 6 Aug 2013 09:23:45 -0800
Subject: RE: antivirus options
I use f-secure as well as clamav on my mail gateways. If one doesn't get it the other may. I also use Sophos internally, so the files have been scanned three times by the time the user sees them.

I also disallow password protected archives, but have a rule file to allow trusted sites to protect a zip file for the few exceptions.

...Kevin
--
Kevin Miller
Network/email Administrator, CBJ MIS Dept.
155 South Seward Street
Juneau, Alaska 99801
Phone: [phone], Fax: [phone]
Registered Linux User No: 307357
From: mailscanner-bounces at lists.mailscanner.info<mailto:mailscanner-bounces at lists.mailscanner.info> [mailto:mailscanner-bounces at lists.mailscanner.info] On Behalf Of Jonathan Horne
Sent: Tuesday, August 06, 2013 9:01 AM
To: mailscanner at lists.mailscanner.info<mailto:mailscanner at lists.mailscanner.info>
Subject: antivirus options

clamav is pretty good, but i am still seeing quite a few trojan attachments (in .zip) getting thru. is there another recommended alternative to use with/inlieu of clamav?

thanks,
jonathan

-- MailScanner mailing list mailscanner at lists.mailscanner.info<mailto:mailscanner at lists.mailscanner.info> http://lists.mailscanner.info/mailman/listinfo/mailscanner Before posting, read http://wiki.mailscanner.info/posting Support MailScanner development - buy the book off the website!
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://lists.mailscanner.info/pipermail/mailscanner/attachments/20130806/2ce39943/attachment.html

[Mogens Melander]

What about:
http://download.avgfree.com/filedir/inst/avg2013flx-r3115-a6155.i386.tar.gz

On Tue, August 6, 2013 20:25, Kevin Miller wrote:
> I think clamav is the only free/opensource antivirus out there. We pay
> for Sophos and F-secure.
>
> ...Kevin
> --
> Kevin Miller

> Sent: Tuesday, August 06, 2013 10:07 AM
> To: MailScanner discussion
> Subject: RE: antivirus options
>
> hi kevin, thanks for your reply. i was looking at sophos today, but i
> couldnt see a free opensource download. do you know if this is indeed
> free/opensource for linux?
>
> ________________________________
> From: Kevin_Miller at ci.juneau.ak.us<mailto:Kevin_Miller at ci.juneau.ak.us>
> To:
> mailscanner at lists.mailscanner.info<mailto:mailscanner at lists.mailscanner.info>
> Date: Tue, 6 Aug 2013 09:23:45 -0800
> Subject: RE: antivirus options
> I use f-secure as well as clamav on my mail gateways. If one doesn't get
> it the other may. I also use Sophos internally, so the files have been
> scanned three times by the time the user sees them.
>
> I also disallow password protected archives, but have a rule file to allow
> trusted sites to protect a zip file for the few exceptions.
>
> ...Kevin
> --
> Kevin Miller
> Network/email Administrator, CBJ MIS Dept.
> 155 South Seward Street
> Juneau, Alaska 99801
> Phone: [phone], Fax: [phone]
> Registered Linux User No: 307357
> From:
> mailscanner-bounces at lists.mailscanner.info<mailto:mailscanner-bounces at lists.mailscanner.info>
> [mailto:mailscanner-bounces at lists.mailscanner.info] On Behalf Of Jonathan
> Horne
> Sent: Tuesday, August 06, 2013 9:01 AM
> To:
> mailscanner at lists.mailscanner.info<mailto:mailscanner at lists.mailscanner.info>
> Subject: antivirus options
>
> clamav is pretty good, but i am still seeing quite a few trojan
> attachments (in .zip) getting thru. is there another recommended
> alternative to use with/inlieu of clamav?
>
> thanks,
> jonathan
>


--
Mogens Melander
[phone]

--
This message has been scanned for viruses and
dangerous content by MailScanner, and is
believed to be clean.

[Christopher M. Bailey]

Hi Kevin,

I've been using AVG along with ClamAV for years and never had a major issue,
I still get the occasional nasty sneak through, but that's just the nature
of the beast.

Cheers,
Chris

From: Jonathan Horne
Sent: Wednesday, August 7, 2013 4:06 AM
To: MailScanner discussion
Subject: RE: antivirus options

hi kevin, thanks for your reply. i was looking at sophos today, but i
couldnt see a free opensource download. do you know if this is indeed
free/opensource for linux?


From: Kevin_Miller at ci.juneau.ak.us
To: mailscanner at lists.mailscanner.info
Date: Tue, 6 Aug 2013 09:23:45 -0800
Subject: RE: antivirus options



I use f-secure as well as clamav on my mail gateways. If one doesn?t get it
the other may. I also use Sophos internally, so the files have been scanned
three times by the time the user sees them.



I also disallow password protected archives, but have a rule file to allow
trusted sites to protect a zip file for the few exceptions.



...Kevin
--
Kevin Miller
Network/email Administrator, CBJ MIS Dept.
155 South Seward Street
Juneau, Alaska 99801
Phone: [phone], Fax: [phone]
Registered Linux User No: 307357



From: mailscanner-bounces at lists.mailscanner.info
[mailto:mailscanner-bounces at lists.mailscanner.info] On Behalf Of Jonathan
Horne
Sent: Tuesday, August 06, 2013 9:01 AM
To: mailscanner at lists.mailscanner.info
Subject: antivirus options







clamav is pretty good, but i am still seeing quite a few trojan attachments
(in .zip) getting thru. is there another recommended alternative to use
with/inlieu of clamav?

thanks,
jonathan


-- MailScanner mailing list mailscanner at lists.mailscanner.info
http://lists.mailscanner.info/mailman/listinfo/mailscanner Before posting,
read http://wiki.mailscanner.info/posting Support MailScanner development -
buy the book off the website!

--
MailScanner mailing list
mailscanner at lists.mailscanner.info
http://lists.mailscanner.info/mailman/listinfo/mailscanner

Before posting, read http://wiki.mailscanner.info/posting

Support MailScanner development - buy the book off the website!

[Steve Basford]

> clamav is pretty good, but i am still seeing quite a few trojan
> attachments (in .zip) getting thru. is there another recommended
> alternative to use with/inlieu of clamav?


Hi,

Not sure if you've added in Sanesecurity sigs to ClamAV...

If you are having malware issues... add in:

phish.ndb, rogue.hdb

For double extensions in zips/rars/7z use: foxhole_generic.cdb

More signature info here:

http://sanesecurity.com/usage/signatures/

Download scripts here:

http://sanesecurity.com/usage/linux-scripts/

Cheers,

Steve
Sanesecurity