[Date Prev][Date Next] [Thread Prev][Thread Next] [Date Index] [Thread Index]

Re: Anti-Virus Scanner recommendations please



> How does one run it properly with Exim? I had it scanning my MailDir
> boxes, and Mutt didn't like it doing that.

Things will work better if you scan mail before delivering it to the maildir (or mbox).

If you can modify the Exim configuration on your mail server, then try the amavis-ng package from Debian/sarge, which a wraps most of the virus scanners that run natively on Linux.

I use the fsavp script because I prefer my virus scanner to work like SpamAssassin, it just inserts a header into messages that I can process with regular tools.


> Thanks for the valuable information, Darik.

Np. I'm currently maintaining mail servers that are running Exim and/or Courier, so feel free to ask more questions.


Stephen wrote:

On Wed, Nov 26, 2003 at 09:09:11PM -0800 or thereabouts, Darik Horn wrote:

Hi Darik,


ClamAV is the best virus scanner that is free software. On a Debian/woody computer, you should use a backport of a recent version like this:


How does one run it properly with Exim? I had it scanning my MailDir boxes, and
Mutt didn't like it doing that. After a scan, Mutt wouldn't be able to
give me an accurate readout of new messages. Seems Mutt thinks each
folder scanned, has already been accessed by Mutt.


http://www.backports.org/debian/dists/woody/clamav/

If you wish to purchase a commercial product, then I would recommend F-Secure Anti-Virus for Linux:

http://www.f-secure.com/estore/fsavlinuxwks.shtml

It behaves well on Debian systems, and updates have always been timely.

A demo is not available, but you can purchase a license online without having to make a deal with a commissioned sales droid. (They recently doubled the price of a license, however, so FSAV may not currently be the best value.)

I've written a lightweight wrapper that allows the workstation version of the FSAV scanner to be used as a pipe filter for mail scanning:

http://www.vanadac.com/~dajhorn/projects/fsavp/

I use maildrop, but it works with procmail too.


Thanks for the valuable information, Darik.





Reply to: