Re: [U2] AV feedback (was) Corrupted compiled code

2011-12-24 Thread Wols Lists

On 23/12/11 17:58, John Jenkins wrote:

I've seen some significant problems with Nod32 AV as well so I avoid it.
(There's a TechTip).

I've not really played with it (when I did it didn't have on access 
checking, though I think that's recently been added), but what about ClamAV?


It's a Freebie, so if it doesn't do what you want, you can always fix 
it so it does :-)


I ought to get it set up on my system, but iirc last time I tried it 
broke my email setup.


Cheers,
Wol
___
U2-Users mailing list
U2-Users@listserver.u2ug.org
http://listserver.u2ug.org/mailman/listinfo/u2-users


Re: [U2] AV feedback (was) Corrupted compiled code

2011-12-24 Thread John Jenkins
No experience of ClamAV - though the usual problems fall into two
categories:

1) AV Configuration
* don't scan U2 data files on open/read/write (you can scan executables OK)
* memory overheads - McAfee used to be a hog of the desktop scratchpad
workspace, though I haven't seen any issues for some time. We made some
changes and I suspect McAfee did as well.

2) Firewall configuration
* these can be very aggressive indeed - Kaspersky has given some folk grief
with push-out Domain policies that can suddenly lock down a system in
particular.
* Unix security products that lock down security for specific combinations
of user id, group, application or port. It took a long time to find out that
the service itself (not the port) was locked own for non-root users.

AV Products I have seen cause issues: 
* McAfee (as mentioned - though no issues for a long time).
* Nod32
* Panda
* Tivoli Access Manager - this does work just fine - you just need to be
careful about adding and removing files from TAM management only when the
database is stopped. Especially so if you use RFS as UniData will detect
external interference and stop the system to keep you safe.

(and AV / firewall software generally with inappropriate Domain policy
changes)

Products that have raised questions:
* Dynamic disk defragmentation tools (Disk Keeper comes to mind - though it
was a BETA version at the time). 
* Windows backup while the database is active (locks up files)


Regards  Seasons Greetings
Nadolig Llawen a Blwddyn Newydd Dda
С Рождеством Христовым

JayJay

-Original Message-
From: u2-users-boun...@listserver.u2ug.org
[mailto:u2-users-boun...@listserver.u2ug.org] On Behalf Of Wols Lists
Sent: 24 December 2011 22:35
To: u2-users@listserver.u2ug.org
Subject: Re: [U2] AV feedback (was) Corrupted compiled code

On 23/12/11 17:58, John Jenkins wrote:
 I've seen some significant problems with Nod32 AV as well so I avoid it.
 (There's a TechTip).

I've not really played with it (when I did it didn't have on access 
checking, though I think that's recently been added), but what about ClamAV?

It's a Freebie, so if it doesn't do what you want, you can always fix it
so it does :-)

I ought to get it set up on my system, but iirc last time I tried it broke
my email setup.

Cheers,
Wol
___
U2-Users mailing list
U2-Users@listserver.u2ug.org
http://listserver.u2ug.org/mailman/listinfo/u2-users


___
U2-Users mailing list
U2-Users@listserver.u2ug.org
http://listserver.u2ug.org/mailman/listinfo/u2-users


[U2] AV feedback (was) Corrupted compiled code

2011-12-23 Thread John Jenkins
I've seen some significant problems with Nod32 AV as well so I avoid it.
(There's a TechTip).

Regards

JayJay


___
U2-Users mailing list
U2-Users@listserver.u2ug.org
http://listserver.u2ug.org/mailman/listinfo/u2-users