List Info

Thread: Suggestions on AV?




Suggestions on AV?
user name
2007-07-26 17:06:02
Hi,

We';re using Maia here with ClamAV and haven't had any problems, but the "suits" have recently become concerned that our AV solution isn't something we're paying lots of money for.  Can anyone recommend for or against any of the various commercial filters that work with Maia/Amavisd?  There's an awful lot of them mentioned in the config files and I don't really know how to rate them.

Thanks for any insights
-Aaron


Re: Suggestions on AV?
country flaguser name
United States
2007-07-26 17:11:28
I can tell you that I've been running ClamAV here as well,
backed up by a second machine that scans all e-mail running
McAfee enterprise stuff.  In 5 months, I haven't had a
single virus picked up by our McAfee box.....   I've been
VERY impressed with ClamAV, and at this point wouldn't
hesitate to run it as the single virus scanner if I had to.

-- 

---------------------------------------------------
Steve Utick
Infrastructure Center Supervisor
Lewis & Clark County
316 N. Park - Room 211
Helena, MT  59623
---------------------------------------------------


>>> On 7/26/2007 at 4:06 PM, in message
<e44ad6640707261506n29e3f0k11b87b702e107906mail.gmail.com>, "Aaron Wolfe"
<aawolfegmail.com> wrote:
> Hi,
> 
> We're using Maia here with ClamAV and haven't had any
problems, but the
> "suits" have recently become concerned that
our AV solution isn't something
> we're paying lots of money for.  Can anyone recommend
for or against any of
> the various commercial filters that work with
Maia/Amavisd?  There's an
> awful lot of them mentioned in the config files and I
don't really know how
> to rate them.
> 
> Thanks for any insights
> -Aaron


_______________________________________________
Maia-users mailing list
Maia-usersrenaissoft.com
http://www.renaissoft.com/mailman/listinfo/maia-users

  
Re: Suggestions on AV?
country flaguser name
United States
2007-07-26 19:53:50
Aaron Wolfe wrote:
> Hi,
> 
> We're using Maia here with ClamAV and haven't had any
problems, but the 
> "suits" have recently become concerned that
our AV solution isn't 
> something we're paying lots of money for.  Can anyone
recommend for or 
> against any of the various commercial filters that work
with 
> Maia/Amavisd?  There's an awful lot of them mentioned
in the config 
> files and I don't really know how to rate them.

Just because it's free doesn't mean it's of lower quality
than the 
commercial products.  In this case, I would argue that
ClamAV is 
superior to many of the commercial products.

Some of the comments in this blog may be helpful:

ht
tp://blogs.securiteam.com/index.php/archives/329

There are others out there too.  There's no reason (other
than computing 
resources) why you couldn't use two virus scanners (clamav
and a 
commercial one).

I check for new signatures ever couple hours with Clamav and
have seen 
the virus signature file updated more frequently than some
of the 
commercial products.  That in itself doesn't mean it's
necessarily 
better than the commercial products, but it has just worked
for me as well.

Darrick
-- 
Darrick Hartman
DJH Solutions, LLC
http://www.djhsolutions.c
om
_______________________________________________
Maia-users mailing list
Maia-usersrenaissoft.com
http://www.renaissoft.com/mailman/listinfo/maia-users

Re: Suggestions on AV?
user name
2007-07-26 20:38:36


On 7/26/07, Darrick Hartman (lists) < dhartmandjhsolutions.com">dhartmandjhsolutions.com> wrote:
Aaron Wolfe wrote:
>; Hi,
>
&gt; We're using Maia here with ClamAV and haven't had any problems, but the
> "suits" have recently become concerned that our AV solution isn't
> something we're paying lots of money for.  Can anyone recommend for or
> against any of the various commercial filters that work with
> Maia/Amavisd? &nbsp;There&#39;s an awful lot of them mentioned in the config
>; files and I don't really know how to rate them.

Just because it's free doesn't mean it's of lower quality than the
commercial products.&nbsp; In this case, I would argue that ClamAV is
superior to many of the commercial products.

This sounds a lot like the conversation I had with my boss shortly before I made my original post

 

Some of the comments in this blog may be helpful:

http://blogs.securiteam.com/index.php/archives/329

There are others out there too.  There's no reason (other than computing
resources) why you couldn';t use two virus scanners (clamav and a
commercial one).

I check for new signatures ever couple hours with Clamav and have seen
the virus signature file updated more frequently than some of the
commercial products.&nbsp; That in itself doesn't mean it's necessarily
better than the commercial products, but it has just worked for me as well.


If I am forced to purchase a commercial scanner (which seems likely), I certainly will be adding it to clamav, not replacing what's worked perfectly for so long. ; I also intend to report on the (highly probable) situation that our commercial virus scanner has detected absolutely nothing when it comes time to renew it next year. ;

I appreciate and agree with all the pro clamav talk, but assuming I will have to also have a commercial scanner, I'd still love to hear about any experiences people have had with them and Maia.

-Aaron

Darrick
--
Darrick Hartman
DJH Solutions, LLC
http://www.djhsolutions.com

Re: Suggestions on AV?
country flaguser name
United States
2007-07-26 22:50:21
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1


On Jul 26, 2007, at 8:38 PM, Aaron Wolfe wrote:
>
> I appreciate and agree with all the pro clamav talk,
but assuming I  
> will have to also have a commercial scanner, I'd still
love to hear  
> about any experiences people have had with them and
Maia.
>


I think the general consensus is that we have had generally
bad luck  
with all the other AV software... ;)

The last time I had a second AV was with trophie or sophie,
but  
that's all that I remember.   They worked, but they never
got any  
viruses to catch.  Well, except for one that one of them
generated a   
false positive on  (IIRC).  I don't even know if they still
are  
functional.

David Morton
Maia Mailguard http://www.maiamailguard
.com
mortondadgrmm.net



-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.5 (Darwin)

iD4DBQFGqWt/Uy30ODPkzl0RAvvWAJQLQ+pY6pW9DGDwJ7zEDcf4EZDFAKDS
rDej
1/0zqQpAFBnorYds4eCm5A==
=TRSS
-----END PGP SIGNATURE-----
_______________________________________________
Maia-users mailing list
Maia-usersrenaissoft.com
http://www.renaissoft.com/mailman/listinfo/maia-users

Re: Suggestions on AV?
country flaguser name
Netherlands
2007-07-27 02:03:10

We are using mcaffee command line scanner besides clamav for about a year now, during that time mcaffee only picked up on 3 mails that were not picked up by clamav. Anyway to give you an answer, amavisd (Maia) really doesn̵7;t care even if you install 10 virus scanners. Ive heard good experiences with Mcaffee (my own to) and also Sophos.

 

Rgds

 


Van: maia-users-bouncesrenaissoft.com [mailto:maia-users-bouncesrenaissoft.com] Namens Aaron Wolfe
Verzonden: vrijdag 27 juli 2007 3:39
Aan: maia-usersrenaissoft.com
Onderwerp: Re: [Maia-users] Suggestions on AV?

 

 

On 7/26/07, Darrick Hartman (lists) < dhartmandjhsolutions.com">dhartmandjhsolutions.com> wrote:

Aaron Wolfe wrote:
&gt; Hi,
>
> We're using Maia here with ClamAV and haven't had any problems, but the
> "suits" have recently become concerned that our AV solution isn't
>; something we're paying lots of money for.  Can anyone recommend for or
> against any of the various commercial filters that work with
>; Maia/Amavisd? &nbsp;There's an awful lot of them mentioned in the config
> files and I don't really know how to rate them.

Just because it's free doesn't mean it's of lower quality than the
commercial products.&nbsp; In this case, I would argue that ClamAV is
superior to many of the commercial products.


This sounds a lot like the conversation I had with my boss shortly before I made my original post

&nbsp;

 

Some of the comments in this blog may be helpful:

http://blogs.securiteam.com/index.php/archives/329

There are others out there too.  There's no reason (other than computing
resources) why you couldn't use two virus scanners (clamav and a
commercial one).

I check for new signatures ever couple hours with Clamav and have seen
the virus signature file updated more frequently than some of the
commercial products.&nbsp; That in itself doesn't mean it's necessarily
better than the commercial products, but it has just worked for me as well.



If I am forced to purchase a commercial scanner (which seems likely), I certainly will be adding it to clamav, not replacing what's worked perfectly for so long. ; I also intend to report on the (highly probable) situation that our commercial virus scanner has detected absolutely nothing when it comes time to renew it next year. ;

I appreciate and agree with all the pro clamav talk, but assuming I will have to also have a commercial scanner, I'd still love to hear about any experiences people have had with them and Maia.

-Aaron

 

Darrick
--
Darrick Hartman
DJH Solutions, LLC
http://www.djhsolutions.com

 

Re: Suggestions on AV?
country flaguser name
United States
2007-07-27 09:08:11
On Thu, 2007-07-26 at 19:53 -0500, Darrick Hartman (lists)
wrote:
>  There's no reason (other than computing 
> resources) why you couldn't use two virus scanners
(clamav and a 
> commercial one).

I did that for a while, using f-prot (I think it's from
f-secure.com).
We stopped paying for F-PROT because it wasn't finding
anything that got
past ClamAV, and all our desktop PC's are required to have
virus
scanning software of their own.

--Greg



_______________________________________________
Maia-users mailing list
Maia-usersrenaissoft.com
http://www.renaissoft.com/mailman/listinfo/maia-users

Re: Suggestions on AV?
country flaguser name
Canada
2007-07-27 10:39:39
On July 26, 2007 03:06 pm Aaron Wolfe wrote:
> We're using Maia here with ClamAV and haven't had any
problems, but the
> "suits" have recently become concerned that
our AV solution isn't
> something we're paying lots of money for.  Can anyone
recommend for or
> against any of the various commercial filters that work
with
> Maia/Amavisd?  There's an awful lot of them mentioned
in the config
> files and I don't really know how to rate them.

We've used Kaspersly Labs AV 6.0 with great success.  Be
sure to just use 
the daemon scanner, though, not the full-blown mail proxy
setup.  Using 
the daemon kavd via amavisd.conf works a lot nicer than
trying to 
configure a separate SMTP daemon in front of your regular
SMTP daemon.

KAV 6.0 is very fast, updates regularly, and has caught one
or two things 
that ClamAV missed.  Not enough to warrant buying it
separately, IMO, but 
it came as part of our district-wide license, so figured I'd
use it.   

-- 
Freddie Cash, LPIC-2 CCNT CCLP      Network Support
Technician
School District 73                  (250) 377-HELP
[377-4357]
fcash-mlsd73.bc.ca
_______________________________________________
Maia-users mailing list
Maia-usersrenaissoft.com
http://www.renaissoft.com/mailman/listinfo/maia-users

[1-8]

about | contact  Other archives ( Real Estate discussion Medical topics )