On Fri, May 05, 2000 at 10:19:53AM +0200, Rainer Link wrote:
> "Benjamin de los Angeles Jr." wrote:
> >
> > Can you sight pros/cons of using your antivirus software compared to
> > AmaVis?
> > > [I used it's perlscanner interface to match on the attachment filename while
> > > waiting for the Antivirus vendors to come up with an "official" fix :-)]
> > > See http://www.geocities.com/jhaar/scan4virus/
>
> Well, I think you refer to AMaViS-Perl? AMaViS-Perl does not require any
> qmail patch(es) and supports more antivirus software.
Well, nor does scan4virus. You could just move the real qmail-queue to
another location, call the scan4virus script ("antivirus-qmail-queue.pl")
qmail-queue and change the "real" qmail-queue path and name in that
script...
> scan4virus provides a "generic filter/scanner" to filter out eMails with
> a specific attachment name - which in case of "I love you" is a good
> thing, but it's very easy to change the file name (or the subject line),
> according to BugTraq this has happend.
Yes, but scan4virus also interfaces to all known(?) virus scanners out
there, if they're installed. And for such quick fixes as were needed in
this case, the attachment name fix was the most effective. I now stop all
.vbs files. Can't see why someone would send one of these.
> Well, scan4virus is specific to qmail, whereas AMaViS supports sendmail
> & postfix, too (the shell script version supports exim, too).
Oh, I'm sure scan4virus can be hacked into sendmail.cf if you'd want
that...
-Johan
--
Johan Almqvist
