Checked out GreyListing and Sanesecurity. Both look like really cool tools.
However, we have been using SpamAssassin, ClamAV, with sendmail (Fedora Core 8), and zan.spamhaus.org RBL, which does most of the heavy work, of blocking incoming SPAM. I prefer this method since it is not at all resource intensive (it doesn't really need to parse the header or body, doing so only after the RBL oks the IP). With Graylisting, and sanesecurity, you would be doing a lot of processing that the RBL (should) already be blocking. So I would definitely implement RBL first (if not already there), before trying out the others. Again they are fantastic tools, if needed, but how much processor power are you going to through at every email, vs. the rare occasion that a SPAM email may get through before the RBL is updated? Shawn > Date: Tue, 20 Jul 2010 21:54:55 +0200 > From: moind...@unistra.fr > To: clamav.u...@seibercom.net > CC: clamav-users@lists.clamav.net > Subject: Re: [Clamav-users] Feedback on clamav + sanesecurity experience > > > >> Hi Everyone, > >> > >> We are currently using clamav (0.96.1), spamassassin (3.3.1), > >> greylisting (4.2.5) and sendmail (8.14.4) on our mailserver's cluster > >> (OS : freeBSD 8.0) at the University of Strasbourg. This antispam and > >> antivirus solution was quiet sure until last month. > >> We've been having intensive phishing's issues for one month and we are > >> considering using sanesecurity'signatures to improve the situation. > >> > >> We would appreciate any feedback on your experience using clamav with > >> sanesecurity. > >> > > Using the signatures provided by Sanesecurity would greatly enhance > > your AV/AS environment. There are scripts that automate the downloading > > and installation of these signature files also available on the > > Sanesecurity site. > > > > If you need further information feel free to contact me. > > > > > I will setup a test plateform and I'll let you know how it goes. > > Thanks > Laurence > > _______________________________________________ > Help us build a comprehensive ClamAV guide: visit http://wiki.clamav.net > http://www.clamav.net/support/ml _________________________________________________________________ Hotmail is redefining busy with tools for the New Busy. Get more from your inbox. http://www.windowslive.com/campaign/thenewbusy?ocid=PID28326::T:WLMTAGL:ON:WL:en-US:WM_HMP:042010_2 _______________________________________________ Help us build a comprehensive ClamAV guide: visit http://wiki.clamav.net http://www.clamav.net/support/ml
