Re: Amavis and anti-virus engine ?

2016-02-24 Thread Patrick Ben Koetter
* Jakob Curdes : > > Am 24.02.2016 um 08:41 schrieb Patrick Ben Koetter: > >* Jakob Curdes : > >>Yes but for the general audience this does not help very much... > >There are quite a few vendors where you can buy a scanner based on SAVAPI > >like >

Re: Amavis and anti-virus engine ?

2016-02-24 Thread Jakob Curdes
Am 24.02.2016 um 08:41 schrieb Patrick Ben Koetter: * Jakob Curdes : Yes but for the general audience this does not help very much... There are quite a few vendors where you can buy a scanner based on SAVAPI like any other regular product. I think it just isn't well

Re: Amavis and anti-virus engine ?

2016-02-23 Thread Olivier Nicole
Per-Erik Persson writes: > Has anyone tried a recent clamav with YARA support and yara-rules available? But why not using yara as yet another anti-virus directly in Amavis? Best regards, Olivier --

Re: Amavis and anti-virus engine ?

2016-02-23 Thread Olivier Nicole
Hi, I am using Kaspersky (on FreeBSD) Olivier --

Re: Amavis and anti-virus engine ?

2016-02-23 Thread Jakob Curdes
Am 23.02.2016 um 19:58 schrieb Per-Erik Persson: Has anyone tried a recent clamav with YARA support and yara-rules available? I have just played around with yara but you need to be careful and read/understand each rule before dropping it into the clamav DB directory. There are rules that mark

Re: Amavis and anti-virus engine ?

2016-02-23 Thread Jakob Curdes
Yes but for the general audience this does not help very much... JC

Re: Amavis and anti-virus engine ?

2016-02-23 Thread Tom Hendrikx
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 On 23-02-16 21:26, Patrick Ben Koetter wrote: > * Jakob Curdes : >> As far as I know, Avira has also discontinued their linux >> product. > > The scan engine is still available to system integrators. We are > one of those and

Re: Amavis and anti-virus engine ?

2016-02-23 Thread Patrick Ben Koetter
* Jakob Curdes : > As far as I know, Avira has also discontinued their linux product. The scan engine is still available to system integrators. We are one of those and like the other integrators we add some magic sauce [tm] and wrap the engine into a product of our own. >

Re: Amavis and anti-virus engine ?

2016-02-23 Thread Jakob Curdes
As far as I know, Avira has also discontinued their linux product. We have augmented clamav with the sanesecurity signatures. I just read about the interesting YARA project and am looking into adding these rules also. Also we block .js and the old microsoft office formats. Up to now this

Re: Amavis and anti-virus engine ?

2016-02-23 Thread Per-Erik Persson
Has anyone tried a recent clamav with YARA support and yara-rules available?

Re: Amavis and anti-virus engine ?

2016-02-23 Thread Patrick Ben Koetter
* Olivier CALVANO : > what is the best antivirus engine for postfix/amavis ? > > Because with clamav, we have a big quantity of crypto locker into our mail. > We run on CentOS 7 Good engines, which we have used in the past and would recommend are: - Avira SAVAPI - avast! -