From owner-freebsd-isp Tue Oct 23 15:17: 7 2001 Delivered-To: freebsd-isp@freebsd.org Received: from workhorse.iMach.com (workhorse.iMach.com [206.127.77.89]) by hub.freebsd.org (Postfix) with ESMTP id D1CCC37B401 for ; Tue, 23 Oct 2001 15:16:57 -0700 (PDT) Received: from localhost (forrestc@localhost) by workhorse.iMach.com (8.9.3/8.9.3) with ESMTP id QAA23650; Tue, 23 Oct 2001 16:15:19 -0600 (MDT) Date: Tue, 23 Oct 2001 16:15:18 -0600 (MDT) From: "Forrest W. Christian" To: "John A. Hengstler" Cc: Dave VanAuken , freebsd-isp@FreeBSD.ORG Subject: RE: anti-virus for qmail based isp services In-Reply-To: Message-ID: MIME-Version: 1.0 Content-Type: TEXT/PLAIN; charset=US-ASCII Sender: owner-freebsd-isp@FreeBSD.ORG Precedence: bulk List-ID: List-Archive: (Web Archive) List-Help: (List Instructions) List-Subscribe: List-Unsubscribe: X-Loop: FreeBSD.org What I am using is as follows: 1) A copy of qqrbl, HEAVILY MODIFIED (and no, it isn't really in a state that I can give this out) which does multiple RBL lists, PLUS runs the virus scanner. Basically, it spits a complete copy of every email it recieves to the /tmp directory and runs the virus scanner on it. If the virus scanner returns a "has virus" result, it returns it to the sender, with some address de-mangling to handle magistr and the like. On the QQRBL side, it just adds headers for users to more easily match against for any RBL it finds. 2) Kaspersky antivirus (www.kaspersky.com). This runs on freebsd. This has two modes - basically a light and a heavy setting, although they call the settings different things. Essentially, the light setting does a once-over and the heavy setting recursively processeses the files. Unfortunately, the heavy setting takes lots of CPU to do its work. The Light setting appears to miss about 1 in 100 viruses. That said, there is no reason you couldn't use another virus checker. I DO NOT recommend the Kaspersky qmail product, at least unless they fixed the bugs (and they were aware of them and working on them.). On Tue, 23 Oct 2001, John A. Hengstler wrote: > Date: Tue, 23 Oct 2001 07:19:06 -0700 > From: John A. Hengstler > To: Dave VanAuken > Cc: freebsd-isp@FreeBSD.ORG > Subject: RE: anti-virus for qmail based isp services > > I am interested in this as well. > > John Hengstler > > -----Original Message----- > From: owner-freebsd-isp@FreeBSD.ORG > [mailto:owner-freebsd-isp@FreeBSD.ORG]On Behalf Of Dave VanAuken > Sent: Tuesday, October 23, 2001 4:15 AM > To: freebsd-isp@FreeBSD.ORG > Subject: anti-virus for qmail based isp services > > > currently have qmail/vpopmail/webmail/mysql... solution running on a 4.3 > box. > Looking to add in some server level anti-virus scanning as a value-add. > > recommendations on packages? have asked elsewhere and received Linux > recommendations, but looking for a robust FreeBSD native > solution(reliability is > an issue). > > insight, experiences, warnings, or recommendations appreciated > > Dave > > > To Unsubscribe: send mail to majordomo@FreeBSD.org > with "unsubscribe freebsd-isp" in the body of the message > > > To Unsubscribe: send mail to majordomo@FreeBSD.org > with "unsubscribe freebsd-isp" in the body of the message > - Forrest W. Christian (forrestc@imach.com) AC7DE ---------------------------------------------------------------------- The Innovation Machine Ltd. P.O. Box 5749 http://www.imach.com/ Helena, MT 59604 Home of PacketFlux Technogies and BackupDNS.com (406)-442-6648 ---------------------------------------------------------------------- Protect your personal freedoms - visit http://www.lp.org/ To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-isp" in the body of the message