On Saturday 05 July 2003 2:32 pm, Peter Bonivart wrote:

> I let MailScanner handle the mail. It uses ClamAV as a simple file
> scanner and doesn't seem to cause any problems there. You can also use
> SpamAssassin as an addition to the attachment filtering built into
> MailScanner. Nothing has to be changed in your Sendmail configuration.
> Pretty complete I would say.
>
> http://www.sng.ecs.soton.ac.uk/mailscanner/

I agree - MailScanner does an excellent job, and uses ClamAV in a very simple 
and clean manner.

MailScanner also has the useful facility that it can very easily support 
multiple anti-virus engines (about 14 at present), which makes it a good tool 
for catching new viruses which ClamAV doesn't know about in order to create 
signatures for them.

In fact (thinking out loud) I reckon it would be a pretty simple job to 
create a procmail recipe to generate signatures automatically...

1. tell MailScanner to quarantine viruses, and send a notification to a 
username which has a procmail filter

2. procmail filter looks at notification for the string 'ClamAV'.   If 
present, ignore rest of message (since Clam knows about the virus)

3. otherwise parse out the offending attachment's name, run the signature 
generating tool on it, and mail the resulting signature to the 'new viruses' 
mailing list...

Hmmmm.....?

Antony.

-- 

Documentation is like sex:
when it's good, it's very very good;
when it's bad, it's still better than nothing.

---------------------------------------------------------------------
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]


Reply via email to