Hey guys

Who has some experience with SMTP virusscanners for OpenBSD? Which one works
fine? Is there a free one? (prolly not )

--
Joris Kemperman

Joris Kemperman wrote:


> Who has some experience with SMTP virusscanners for OpenBSD? Which one
> works fine? Is there a free one? (prolly not )

clamav.sourceforge.net

-Nigel

--
Nigel Horne. Arranger, Composer, Typesetter.
NJH Music, Barnsley, UK. ICQ#20252325
njh@despammed.com http://www.bandsman.co.uk

On Sun, 24 Aug 2003 11:05:47 +0100, Nigel Horne wrote:

>> Who has some experience with SMTP virusscanners for OpenBSD? Which one
>> works fine? Is there a free one? (prolly not )
>
> clamav.sourceforge.net

This product seems not ro recognise Sobig.F. Would it be difficult to
add a signature?

- Marc

Marc Balmer wrote:

> This product seems not ro recognise Sobig.F. Would it be difficult to
> add a signature?

What signature date and version on ClamAV do you have? It recognises it on
my system.

To answer your question, signature additions are welcome and there is a
mailing address where you should send them. I forget where it is now, but
it's in the documentation somewhere.

> - Marc

-Nigel

--
Nigel Horne. Arranger, Composer, Typesetter.
NJH Music, Barnsley, UK. ICQ#20252325
njh@despammed.com http://www.bandsman.co.uk

On Sun, 24 Aug 2003 15:10:10 +0100, Nigel Horne wrote:

> Marc Balmer wrote:
>
>> This product seems not ro recognise Sobig.F. Would it be difficult to
>> add a signature?
>
> What signature date and version on ClamAV do you have? It recognises it on
> my system.

I found out today that Clamav detects Sobig.F and all other viruses if
and only an E-mail file starts with "From ". This is a defect in the
Software. The problem is, that clamav uses some weird magic strings,
MAIL_MAGIC_STR in this case, to recognize that a file is an e-Mail
message.

RFC compliant mail files do not start with "From " AFAIK, at least and
even if they do there should be a better and explicit way to tell clamav
to treat a file as email.

E.g. if your wite a sendmail milter ouy will write out the header and
message body to a temp file. Such a temp file will not start with
"From ".

- Marc

Marc Balmer wrote:
> On Sun, 24 Aug 2003 15:10:10 +0100, Nigel Horne wrote:
>
>
>>Marc Balmer wrote:
>>
>>
>>>This product seems not ro recognise Sobig.F. Would it be difficult to
>>>add a signature?
>>
>>What signature date and version on ClamAV do you have? It recognises it on
>>my system.
>
>
> I found out today that Clamav detects Sobig.F and all other viruses if
> and only an E-mail file starts with "From ". This is a defect in the
> Software. The problem is, that clamav uses some weird magic strings,
> MAIL_MAGIC_STR in this case, to recognize that a file is an e-Mail
> message.
>
> RFC compliant mail files do not start with "From " AFAIK, at least and
> even if they do there should be a better and explicit way to tell clamav
> to treat a file as email.
>
> E.g. if your wite a sendmail milter ouy will write out the header and
> message body to a temp file. Such a temp file will not start with
> "From ".

Try posting problem to comp.mail.sendmail, I'm sure someone there has a
workaround

MK

On Sun, 24 Aug 2003 11:44:40 +0300,
Condor <nobody@vcable.net> wrote:
> Joris Kemperman wrote:
>> Hey guys
>>
>> Who has some experience with SMTP virusscanners for OpenBSD? Which one works
>> fine? Is there a free one? (prolly not )
>>
>
> See this url: http://lawmonkey.org/anti-spam.html
>

Yes. Amavisd-new rocks as some antivirus (using command-line
scanners), attachment blocking & antispam solution.
As for virus-scanners, use the search facility on http://www.deadly.org
for a list of scanners.

Regards,

SL/
---
Stephane Lentz
Alcanet International, Internet Services

hi,

this works fine for me, but is a commercial solution:

http://www.virusbuster.hu/en/product...ld_for_smtp_en

m.

"Joris Kemperman" <jkemperman@home.nl> schrieb im Newsbeitrag
news:bi67d8$pkg$1@news3.tilbu1.nb.home.nl...
> Hey guys
>
> Who has some experience with SMTP virusscanners for OpenBSD? Which one
works
> fine? Is there a free one? (prolly not )
>
> --
> Joris Kemperman
>
>