From owner-freebsd-security Tue Mar 13 10: 1: 8 2001 Delivered-To: freebsd-security@freebsd.org Received: from vbook.express.ru (vbook.express.ru [212.24.37.106]) by hub.freebsd.org (Postfix) with ESMTP id 1C3FF37B718 for ; Tue, 13 Mar 2001 10:01:01 -0800 (PST) (envelope-from vova@vbook.express.ru) Received: (from vova@localhost) by vbook.express.ru (8.9.3/8.9.3) id VAA27600; Tue, 13 Mar 2001 21:00:51 +0300 (MSK) (envelope-from vova) From: "Vladimir B. Grebenschikov" MIME-Version: 1.0 Content-Type: text/plain; charset=us-ascii Content-Transfer-Encoding: 7bit Message-ID: <15022.24659.260945.39477@vbook.express.ru> Date: Tue, 13 Mar 2001 21:00:51 +0300 (MSK) To: Scott Campbell Cc: James Wyatt , Will Mitayai Keeso Rowe , Subject: Re: Virus Scanning Software for FreeBSD In-Reply-To: References: X-Mailer: VM 6.72 under 21.1 (patch 12) "Channel Islands" XEmacs Lucid Sender: owner-freebsd-security@FreeBSD.ORG Precedence: bulk X-Loop: FreeBSD.org Scott Campbell writes: > On Mon, 12 Mar 2001, James Wyatt wrote: > > > I have an eval copy of a product that looks promising: Sohpos antivirus. > > > > http://www.sophos.com/products/antivirus/savunix.html > > > > You can use the SAVI (API for virus checking) to scan email according to > > the description at: > > > > http://www.sophos.com/products/antivirus/savi/ > > > > Their licensing looks fair and the sales person assigned to me has been > > politely helpful and not overly insistant. Everything I've looked at so > > far looks great, but the customer that wanted it has had delays and now > > wants to wait for FreeBSD 4.3-RELEASE to install things on their server. > > > > Updates are monthly CDs and urgent updates are available as downloads. > > > > Our intent is to have it go after SMTP, HTTP, and FTP if we can and to > > scan the Samba partitions for file infections. It handles uSoft Office > > products like Word(tm) docs and such. > > > > Best of all, they support FreeBSD so we should support them, right? - Jy@ > > > > I can't say enough good things about the Sophos product. We originally > got it in April '99 and have been successfully stopping viruses ever > since. It is running on our mail server (currently FreeBSD v4.2R, was > 3.0Snap until March 1) and is still available in aout and elf versions. > They have also added archive scanning inside numerous archive types. At > the time it was the only major company to have a FreeBSD version (NAI was > reported to have one but I couldn't track it down). I wrote my own > script, instead of using Amavis, to work with Sendmail to virus scan. > Another thing that I've set up is an automatic ide (virus identity) > download from Sophos. You can ask for automatic email notification when > they have written a new ide for a new virus (or variant). When that > email arrives the new ide file is fetched and put into the sweep (their > virus checking program) directory and used next time it is run (I batch > my email scanning). Service and support questions have always been > answered quickly and professionally. > > We also use it on all our Win95/98/Me/NT machines - they update themselves > from a central server that is upgraded manually each month when the CD > arrives. There are avp software ftp://downloads1.kaspersky-labs.com/products/avp_unix/freebsd/ Info about product you can get from: http://www.avp.ru/ Product have possibility to run in daemon mode (checks files sent via unix domain socket) > Scott E. Campbell -- TSB Russian Express, Moscow Vladimir B. Grebenschikov, vova@express.ru To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-security" in the body of the message