From owner-freebsd-isp@FreeBSD.ORG Fri Sep 12 10:14:49 2003 Return-Path: Delivered-To: freebsd-isp@freebsd.org Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125]) by hub.freebsd.org (Postfix) with ESMTP id EAFDC16A4BF for ; Fri, 12 Sep 2003 10:14:49 -0700 (PDT) Received: from gray.impulse.net (gray.impulse.net [207.154.64.174]) by mx1.FreeBSD.org (Postfix) with ESMTP id 4C72243FA3 for ; Fri, 12 Sep 2003 10:14:49 -0700 (PDT) (envelope-from secabeen@pobox.com) Received: by gray.impulse.net (Postfix, from userid 1000) id 885663D7; Fri, 12 Sep 2003 10:14:48 -0700 (PDT) To: Marcus Reid References: <1062767877.8cbd42c952096@mail.encontacto.net> <20030912084659.GA53607@blazingdot.com> From: Ted Cabeen Date: Fri, 12 Sep 2003 10:14:48 -0700 In-Reply-To: <20030912084659.GA53607@blazingdot.com> (Marcus Reid's message of "Fri, 12 Sep 2003 01:46:59 -0700") Message-ID: <87pti6exo7.fsf@gray.impulse.net> User-Agent: Gnus/5.1001 (Gnus v5.10.1) XEmacs/21.4 (Portable Code, berkeley-unix) MIME-Version: 1.0 Content-Type: text/plain; charset=us-ascii cc: freebsd-isp@freebsd.org Subject: Re: Anti Virus for mail server X-BeenThere: freebsd-isp@freebsd.org X-Mailman-Version: 2.1.1 Precedence: list List-Id: Internet Services Providers List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 12 Sep 2003 17:14:50 -0000 Marcus Reid writes: > On Mon, Sep 08, 2003 at 05:15:21PM +0200, James Godwin wrote: >> Hi, >> >> There has been no need for Anti Virus on our mail servers as most of our >> clients are Mac users and our windows clients have anti virus installed on >> their machines. >> >> Keeping windows virus updated updated is a mission so I was wondering what >> the ideal Anti Virus app I should use for our Sendmail and Qmail servers? >> >> Any ideas would be much appreciated. > > To answer your question, I would check out Sophos antivirus running under > sophie. I have found it to be ~10x faster than f-prot (standalone, not the > daemonized scanner which may be faster) in an email content filter. The downside to Sophos is that it costs an arm and a leg, especially for mail server use. F-Prot used to charge on a per-server basis, although I've heard some mention that they may have changed their pricing for mail servers. Is f-prot really that slow? Back when we were running the command-line scanner version, it seemed blisteringly fast. I often had difficulty even finding it in the process table with mails coming in at a rate of 1 or 2 per second. We've since switched to the daemonized scanner, which is quite fast, especially with amavisd-new which knows how to interact with the scanner directly, saving at least one fork(). Even still, SpamAssassin processing is a least an order of magnitude slower than any virus scanning, so it isn't a huge deal either way. -- Ted Cabeen http://www.pobox.com/~secabeen ted@impulse.net Check Website or Keyserver for PGP/GPG Key BA0349D2 secabeen@pobox.com "I have taken all knowledge to be my province." -F. Bacon secabeen@cabeen.org "Human kind cannot bear very much reality."-T.S.Eliot cabeen@netcom.com