Hi,

If anyone is interested this is how I use ClamAV.

My mailserver is running Trustix Secure Linux with Postfix 2.1 as MTA.
Incoming emails with attachments including .doc/.jpg are filtered into ClamAV
by Amavis-new. If the message contains a virus (which is all too often true)
it is quarantined on the server and a message is sent to 'postmaster'. 

The spoofed sender does not receive any notification and neither does the
recipient. I keep the emails just in case a contact has sent a legitimate but
infected email. That way we can retrieve it.

Here is a list of recent activity for interest...

Viruses stopped Yesterday: Thu Dec  2
     29 Worm.SomeFool.P
     22 Worm.SomeFool.Gen-1
     14 Worm.Mydoom.M
      8 Worm.SomeFool.Gen-2
      8 Worm.Sober.I
      5 Worm.SomeFool.Z
      4 Worm.SomeFool.Q
      1 Worm.Wurmark.A
      1 Worm.SomeFool.AB
      1 Worm.SomeFool.AA-2
--------
     93
 
Viruses stopped this month (Dec)
 
     80 Worm.SomeFool.P
     51 Worm.SomeFool.Gen-1
     19 Worm.SomeFool.Gen-2
     17 Worm.Mydoom.M
     12 Worm.Sober.I
     10 Worm.SomeFool.Z
     10 Worm.SomeFool.X
      8 Worm.SomeFool.Q
      2 Worm.SomeFool.AB
      2 Worm.SomeFool.AA-2
      1 Worm.Wurmark.A
      1 Worm.Bagle.Y
      1 Worm.Bagle.AU
--------
    214
 
Viruses stopped last month (Nov)
 
    874 Worm.SomeFool.P
    550 Worm.SomeFool.Gen-1
    256 Worm.SomeFool.Gen-2
    245 Worm.Sober.I
    220 Worm.SomeFool.Z
    129 Worm.SomeFool.Q
     89 Worm.Mydoom.M
     53 Worm.Bagle.AT
     50 Worm.Bagle.AU
     22 Worm.SomeFool.X
     20 Worm.Bagle.Z
     19 Worm.SomeFool.AB
     17 Worm.Zafi.B
      8 Worm.Bagle.Gen-vbs
      8 Worm.Bagle.AC
      6 Worm.Mabutu.A-unp
      5 Worm.Mydoom.T
      4 Worm.BugBear.B
      4 Worm.Bagle.Gen-zippwd
      1 Worm.Mydoom.I
      1 Worm.Klez.H
      1 Worm.Bagle.AG
      1 W95.Hybris.PI.003
--------
   2583

Best wishes,

Ian Lewis

-----Original Message-----
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] 
Sent: 02 December 2004 17:00
To: [EMAIL PROTECTED]
Subject: clamav-users Digest, Vol 4, Issue 5


Send clamav-users mailing list submissions to
        [EMAIL PROTECTED]

To subscribe or unsubscribe via the World Wide Web, visit
        http://lists.clamav.net/cgi-bin/mailman/listinfo/clamav-users
or, via email, send a message with subject or body 'help' to
        [EMAIL PROTECTED]

You can reach the person managing the list at
        [EMAIL PROTECTED]

When replying, please edit your Subject line so it is more specific
than "Re: Contents of clamav-users digest..."


clamav-users mailing list
[EMAIL PROTECTED]
http://lists.clamav.net/cgi-bin/mailman/listinfo/clamav-users


End of clamav-users Digest, Vol 4, Issue 5
******************************************

---
Outgoing mail is certified Virus Free.
Checked by AVG anti-virus system (http://www.grisoft.com).
Version: 6.0.803 / Virus Database: 546 - Release Date: 30/11/2004
 
_______________________________________________
http://lists.clamav.net/cgi-bin/mailman/listinfo/clamav-users

Reply via email to