From owner-freebsd-isp Fri Feb 21 11:42:12 2003 Delivered-To: freebsd-isp@freebsd.org Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125]) by hub.freebsd.org (Postfix) with ESMTP id D219237B401 for ; Fri, 21 Feb 2003 11:42:10 -0800 (PST) Received: from smtp.distributel.net (cns2.distributel.NET [66.38.181.21]) by mx1.FreeBSD.org (Postfix) with ESMTP id 3442C43FB1 for ; Fri, 21 Feb 2003 11:42:10 -0800 (PST) (envelope-from paul@colba.net) Received: from colba.net (nat.MTL.distributel.NET [66.38.181.24]) by smtp.distributel.net (8.12.6/8.12.6) with ESMTP id h1LJg9cd009191; Fri, 21 Feb 2003 14:42:09 -0500 (EST) Message-ID: <3E568425.8414E1EC@colba.net> Date: Fri, 21 Feb 2003 14:55:17 -0500 From: Paul Khavkine X-Mailer: Mozilla 4.79 [en] (X11; U; Linux 2.4.2 i386) X-Accept-Language: en MIME-Version: 1.0 To: David Raistrick Cc: freebsd-isp@FreeBSD.ORG Subject: Re: Antivirus for Sendmail References: Content-Type: text/plain; charset=us-ascii Content-Transfer-Encoding: 7bit Sender: owner-freebsd-isp@FreeBSD.ORG Precedence: bulk List-ID: List-Archive: (Web Archive) List-Help: (List Instructions) List-Subscribe: List-Unsubscribe: X-Loop: FreeBSD.org David. Thanx for a very informative reply. David Raistrick wrote: > > I'm looking at following products: > > F-PROT > > I use the linux f-prot binary daily. It's never given me a problem in my > qmail-scanner setup. > I have also heard good things from other people about it. > > > AVP > > I tried both freebsd and linux versions of AVP's scanners as of late 2001 > early 2002. I worked with their sendmail versions as well as their > qmail-queue replacement. I also used their kavscanner and attempted to > use kavdaemon. My overall impression was "very unstable" though at this > late date I don't have further specifics. It's very possible that they've > fixed some of the problems I encountered at the time. > > I've also worked with uvscan from mcaffe just a few months ago. (one of > the developers here in the office worked with it much more then I..he was > working with their sdk). When compared to fprot speed/utilisation was > generally the same. Some specific situations (sorry, I don't have any > notes on this) could cause extreme results (fprot can potentially take a > /very/ long time to scan...) with both. > Can't seem to find any info on NAI site about freebsd version. The only freebsd version i could find there was a beta of the engine. > > fprot has always had new updates available quickly....I update every > twelve hours. My current virus signatures is from feb19/15:34, macro > signatures from feb17/6:54 fprot 3.12a > > > Ease of updating > > Initially they had no formal process, so I wrote a shell script to do it > (a few versions ago..). Now they include a shell script to do the > updates. I haven't used it since it's written for bash...I felt no need > or desire to port it or install bash since my own script continued to do > the job fine for me. > > I was happy with fprot when it was free...and I'm still happy with it now > that it's not. > > ....david Thanx Paul To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-isp" in the body of the message