[NTLUG:Discuss] Anti-Virus/Anti-Spamming for Sendmail on Linux

Darin Smith darin_ext at darinsmith.net
Sat Jan 25 17:37:18 CST 2003


I've always liked F-Prot.  They ported their DOS version (still
maintained) into a Linux version.  Free for casual (home) users, I think
about $300 per server seat for commercial use.

It's very easy to keep the sig files up to date by calling a script they
provide from a cron job nightly.  It detects and cleans over 40,000
Windows virii/worms, 170+ Unix/Linux virii/worms, 20,000+ macro viruses,
as well as PHP and Perl viruses and worms.

Its heuristics-based scanning is good, and looks for "virus-like"
stuff.  So far, it has identified a php file in PostNuke's installer as
"potentially containing a virus" but doesn't do anything unless it knows
it is actually a virus.  I just have it drop a report into /var/log for
me each night.

I doesn't do "real-time email protection" though.  I could envision
setting up procmail to use it to do such a thing though.

As for spam, you might also look at: www.spambouncer.org

--Darin

On Sat, 2003-01-25 at 16:45, Chris Cox wrote:
> JR Newsletters wrote:
> ..snip...
> > 
> > I wasn't talking about the Spam filtering programs, I was talking about 
> > the antivirus programs available for a mail server.  I only found 2 
> > antivirus programs that did not cost, but only 1 whose virus definitions 
> > are free.  Anti-virus programs/updates are big business.  Wasn't the OP 
> > asking about anti-virus programs for mail servers too?
> 
> Sorry... yes... anti-spam was mentioned as well.
> 
> My two cents... (probably from under the couch cushions) is that
> you pretty much have to leave Windows anti-virus to the
> Windows solutions (e.g. McAfee, Symantec).
> 
> With that said... might want to look at http://www.milter.org/
> and you'll see Tamiz on the front page right now... and some
> other useful info.  Haven't tried any.... but looks promising.
> 
> > 
> > I also found that even though you buy an anti-virus program, you're 
> > still stuck with customizing scripts or making 2 instances of sendmail 
> > run to use it on the mail server.  Anybody else know differently?  Who, 
> > where, and when?  Thanks.
> 
> I'm pretty sure there always have to be some customization work...
> I guess the trick is finding one where the defaults are very close
> to how you want it to operate.
> 
> 
> _______________________________________________
> https://ntlug.org/mailman/listinfo/discuss





More information about the Discuss mailing list