On Thu, 18 Sep 2014 17:33:44 +0100 (BST) "G.W. Haywood" <[email protected]> wrote:
> In my opinion ClamAV is more or less useless for anything other than > the phishing signatures etc. for which I use it. Seconded. ClamAV has become almost completely useless since the Sourcefire and then Cicso acquisition. It's a fine engine, but signatures are awful. On our hosted anti-spam service, we outright block executables as well as executables contained within archive files like ZIP, ARJ, .tar.gz, etc. If you want to do this, see the "lsar" package that can scan many types of archives and extract filenames. It's packaged with Debian and home page is http://unarchiver.c3.cx/commandline Regards, David. _______________________________________________ NOTE: If there is a disclaimer or other legal boilerplate in the above message, it is NULL AND VOID. You may ignore it. Visit http://www.mimedefang.org and http://www.roaringpenguin.com MIMEDefang mailing list [email protected] http://lists.roaringpenguin.com/mailman/listinfo/mimedefang
