a Mail virus Scanner (was Re: test)

[Randal, Phil]

I absolutely agree.  We need:

MailScanner (and supporting Perl modules)
ClamAV

and as part of the spamassassin package (or as addons)

pyzor
DCC
Razor2

ClamAV and MailScanner were protecting us against the latest virus 6 hours
before McAfee had their 4319 DAT files out.

Cheers,

Phil
---------------------------------------------
Phil Randal
Network Engineer
Herefordshire Council
Hereford, UK 

> -----Original Message-----
> From: fedora-test-list-admin at redhat.com
> [mailto:fedora-test-list-admin at redhat.com]On Behalf Of shrek-m at gmx.de
> Sent: 28 January 2004 11:05
> To: fedora-test-list at redhat.com
> Subject: a Mail virus Scanner (was Re: test)
> 
> 
> Dennis Gilmore wrote:
> 
> >>though it is a good indication that we need something like 
> mailscanner or 
> >>amavais in Fedora somewhere. 
> >>    
> >>
> 
> my experiences:
> 
> http://www.amavis.org/
>   i tried it  ~2 years agoo, i wasn´t impressed and removed it.
>  
> 
> http://mailscanner.info
>   i tried it ~1/2 year agoo, i was impressed.
>   easy to install, upgrade, configure, ...
> 
> ./install.sh
>   [no problems]
> # chkconfig sendmail off
> # service sendmail stop
> # chkconfig MailScanner on
> # service MailScanner start
> 
> # upgrade_MailScanner_conf
> 
> # rpm -q mailscanner
> mailscanner-4.26.5-1
> 
> # rpm -q --changelog mailscanner | grep  redhat
> * Fr Jul 19 2002 Richard Keech <rkeech at redhat.com>
> 
> 
> # grep ^[a-zA-Z] /etc/MailScanner/MailScanner.conf
> [......]
> 
> 
> eg.
> 
> # grep ^[a-zA-Z] /etc/MailScanner/MailScanner.conf | grep -i virus
> Virus Scanning = yes
> Virus Scanners = sophos
> Virus Scanner Timeout = 300
> Silent Viruses = HTML-IFrame All-Viruses
> Still Deliver Silent Viruses = yes
> Deleted Virus Message Report = %report-dir%/deleted.virus.message.txt
> Stored Virus Message Report = %report-dir%/stored.virus.message.txt
> Sender Virus Report = %report-dir%/sender.virus.report.txt
> Notify Senders Of Viruses = no
> Virus Modify Subject = yes
> Virus Subject Text = {Virus?}
> Notice Signature = -- \nMailScanner\nEmail Virus 
> Scanner\nwww.mailscanner.info
> Virus Scanner Definitions = %etc-dir%/virus.scanners.conf
> 
> $ grep ^[a-zA-Z] /etc/MailScanner/MailScanner.conf | grep -i spam
> Spam Header = X-%org-name%-MailScanner-SpamCheck:
> Spam Score Header = X-%org-name%-MailScanner-SpamScore:
> Spam Score Character = s
> SpamScore Number Instead Of Stars = no
> Detailed Spam Report = yes
> Include Scores In SpamAssassin Report = yes
> Spam Modify Subject = yes
> Spam Subject Text = {Spam?}
> High Scoring Spam Modify Subject = yes
> High Scoring Spam Subject Text = {Spam?}
> Spam List Definitions = %etc-dir%/spam.lists.conf
> Spam Checks = yes
> Spam List = ORDB-RBL Infinite-Monkeys # MAPS-RBL+ costs money (except 
> .ac.uk)
> Spam Domain List =
> Spam Lists To Reach High Score = 5
> Spam List Timeout = 10
> Max Spam List Timeouts = 7
> Is Definitely Not Spam = %rules-dir%/spam.whitelist.rules
> Is Definitely Spam = no
> Definite Spam Is High Scoring = no
> Use SpamAssassin = yes
> Max SpamAssassin Size = 90000
> Required SpamAssassin Score = 5
> High SpamAssassin Score = 20
> SpamAssassin Auto Whitelist = no
> SpamAssassin Prefs File = %etc-dir%/spam.assassin.prefs.conf
> SpamAssassin Timeout = 40
> Max SpamAssassin Timeouts = 20
> Check SpamAssassin If On Spam List = yes
> Always Include SpamAssassin Report = yes
> Spam Score = yes
> Spam Actions = deliver
> High Scoring Spam Actions = deliver
> Non Spam Actions = deliver
> Sender Spam Report = %report-dir%/sender.spam.report.txt
> Sender Spam List Report = %report-dir%/sender.spam.rbl.report.txt
> Sender SpamAssassin Report = %report-dir%/sender.spam.sa.report.txt
> Inline Spam Warning = %report-dir%/inline.spam.warning.txt
> Recipient Spam Report = %report-dir%/recipient.spam.report.txt
> Log Spam = no
> Log Non Spam = no
> SpamAssassin User State Dir =
> SpamAssassin Install Prefix =
> SpamAssassin Site Rules Dir = /etc/mail/spamassassin
> SpamAssassin Local Rules Dir =
> SpamAssassin Default Rules Dir =
> Debug SpamAssassin = no
> 
> -- 
> shrek-m
> 
> 
> -- 
> fedora-test-list mailing list
> fedora-test-list at redhat.com
> http://www.redhat.com/mailman/listinfo/fedora-test-list
>