For spam filtering, at first we use xmail rbl check with only sbl-xbl.spamhaus.org base (the most accurate and complete, I think), with no rdns and checkmailerdomain activated on xmail because of too many badly configured servers and dns/rdns entries on the net ... so too many 'lost' connections for 'good' mails (we are an isp ...) and then Davide glst as second anti-spam filter, and at this time, this unique anti-spam solution removes 99% of spammers connections (and auto-sending viruses, so the av filter performance is less critical)
For av filtering I tried Fprot and Nai with success in association with avfilter from Dario (http://www.henry.it/xmail/) (use only with firter-in, filter-out) I tried Darios's 'AvFilterPd' with success too (avfilterpd for post-data) but no more available to download ...) But I didn't succesfully run clamc/clamd (win32 port) with it (need to change some code in avfilterpd to parse correctly the file name and parse the returned log and error codes) Another very good and complete solution is 'assp' transparent proxy (anti-virus ith clamav and anti-spam with bayans, spf, rbl checks, ... all in one) and as it's a transparent proxy no need to add any filters on xmail server side. I'm currently running it on some domains with success. Francis >-----Message d'origine----- >De : [EMAIL PROTECTED] >[mailto:[EMAIL PROTECTED] la part de Francesco Vertova >Envoye : mercredi 24 janvier 2007 19:03 >A : [email protected] >Objet : [xmail] Re: Advices > > >At 17.35 24/01/07, you wrote: > >>- does anyone knows an antivirus working fine with xmail (on >>Windows 2003 server) and working with xmail filters. > >I've been using F-PROT for DOS on both Win2K Pro and WinXP Pro and >works very well in a post-data filter. I've also tested ClamAV - >native Win32 port - on WinXP and should work. Both can check the mail >file directly with no need to set up temporary stuff for >unzipping/decoding etc. F-prot is ligthning fast, ClamAV needs to run >in daemon client mode (the standalone scanner takes 3/4 seconds to >scan a mail file, the daemon client 0.x secs, so you have no choice). > >Ciao, Francesco > >- >To unsubscribe from this list: send the line "unsubscribe xmail" in >the body of a message to [EMAIL PROTECTED] >For general help: send the line "help" in the body of a message to >[EMAIL PROTECTED] > - To unsubscribe from this list: send the line "unsubscribe xmail" in the body of a message to [EMAIL PROTECTED] For general help: send the line "help" in the body of a message to [EMAIL PROTECTED]
