Delaying is enabled. My numbers are actually higher than stated becauce I forgot the secundary server.
The main reason the number of infested mails going through is so high is because of spamlovers and sendAllSpam. 94% of the virusmails are actually caught as spam, but passed on to either spamlovers of to a sendAllSpam account. These mails are scanned by ClamAV and found clean though. There are also a number of noProcessing accounts that might contribute. In addition, the virusscanner located after ASSP is not just looking for virusses but also HTML threads, email exploits and trojans and ofcouse does a better job of decompressing files. ClamAV signatures are by design not scanning for all kinds of virusses and threads so don't expect a comprehensive result. Here's a comprehensive test of ClamAV amoung others: http://www.av-comparatives.org/seiten/ergebnisse/2ndgrouptest.pdf Mvh. Ulrik Løye > -----Oprindelig meddelelse----- > Fra: [EMAIL PROTECTED] > [mailto:[EMAIL PROTECTED] På vegne af Kevin > Sendt: 22. august 2007 22:06 > Til: Questions and Answers for users of ASSP Anti-Spam SMTP Proxy > Emne: Re: [Assp-user] Virus filtering > > Ulrik Løye wrote: > > I would say no. I run ASSP with clamav (and for the past month also > > sanesecurity and msrbl signatures). Behind ASSP I have GFI > > MailSecurity; since new year GFI has found 5189 unique > infested mails. > > Are you not using delaying? > I haven't seen one virus hit my Exchange server since i > enabled that in ASSP. > > > Kevin > > -------------------------------------------------------------- > ----------- > This SF.net email is sponsored by: Splunk Inc. > Still grepping through log files to find problems? Stop. > Now Search log events and configuration files using AJAX and > a browser. > Download your FREE copy of Splunk now >> http://get.splunk.com/ > _______________________________________________ > Assp-user mailing list > [email protected] > https://lists.sourceforge.net/lists/listinfo/assp-user > ------------------------------------------------------------------------- This SF.net email is sponsored by: Splunk Inc. Still grepping through log files to find problems? Stop. Now Search log events and configuration files using AJAX and a browser. Download your FREE copy of Splunk now >> http://get.splunk.com/ _______________________________________________ Assp-user mailing list [email protected] https://lists.sourceforge.net/lists/listinfo/assp-user
