From owner-freebsd-questions@freebsd.org Wed Mar 23 03:12:40 2016 Return-Path: Delivered-To: freebsd-questions@mailman.ysv.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:1900:2254:206a::19:1]) by mailman.ysv.freebsd.org (Postfix) with ESMTP id F16E1AC9F16 for ; Wed, 23 Mar 2016 03:12:40 +0000 (UTC) (envelope-from Olivier.Nicole@cs.ait.ac.th) Received: from mailman.ysv.freebsd.org (unknown [127.0.1.3]) by mx1.freebsd.org (Postfix) with ESMTP id D85291C43 for ; Wed, 23 Mar 2016 03:12:40 +0000 (UTC) (envelope-from Olivier.Nicole@cs.ait.ac.th) Received: by mailman.ysv.freebsd.org (Postfix) id D7C1EAC9F15; Wed, 23 Mar 2016 03:12:40 +0000 (UTC) Delivered-To: questions@mailman.ysv.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:1900:2254:206a::19:1]) by mailman.ysv.freebsd.org (Postfix) with ESMTP id D772FAC9F14 for ; Wed, 23 Mar 2016 03:12:40 +0000 (UTC) (envelope-from Olivier.Nicole@cs.ait.ac.th) Received: from mail.cs.ait.ac.th (mail.cs.ait.ac.th [192.41.170.16]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (Client did not present a certificate) by mx1.freebsd.org (Postfix) with ESMTPS id 8EBCB1C42 for ; Wed, 23 Mar 2016 03:12:40 +0000 (UTC) (envelope-from Olivier.Nicole@cs.ait.ac.th) Received: from mail.cs.ait.ac.th (localhost [127.0.0.1]) by mail.cs.ait.ac.th (Postfix) with ESMTP id 82AC3D7882; Wed, 23 Mar 2016 10:12:37 +0700 (ICT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=cs.ait.ac.th; h= content-type:content-type:mime-version:message-id:date:date :in-reply-to:subject:subject:from:from:received:received :received; s=selector1; t=1458702756; x=1460517157; bh=WbalFCcPG CTGC0CH9RXaz7yMDwmnbQgJrDENMBv8X6o=; b=Ncnelct/YZ5r6GVMhqtzT+Rz9 3qNfxpPXjWZGT1puINRcjUgPJh+ImDZakDY7elh9JahXZihlk+x15SZUI66sYUe5 X34zbNAYo2mFSe2gEv2mY5KskAYy1PPp0gRnmhJE12Wf9Q5HMsFA4nqRv6Kk4QZ3 nZMcM9P5vVRz6joNrU= X-Virus-Scanned: amavisd-new at cs.ait.ac.th Received: from mail.cs.ait.ac.th ([127.0.0.1]) by mail.cs.ait.ac.th (mail.cs.ait.ac.th [127.0.0.1]) (amavisd-new, port 10026) with ESMTP id jLpONSZ52dYf; Wed, 23 Mar 2016 10:12:36 +0700 (ICT) Received: from banyan.cs.ait.ac.th (banyan.cs.ait.ac.th [192.41.170.5]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by mail.cs.ait.ac.th (Postfix) with ESMTPS id 4B1FCD7881; Wed, 23 Mar 2016 10:12:36 +0700 (ICT) Received: (from on@localhost) by banyan.cs.ait.ac.th (8.15.2/8.15.2/Submit) id u2N3CYig016410; Wed, 23 Mar 2016 10:12:34 +0700 (ICT) (envelope-from on@banyan.cs.ait.ac.th) From: Olivier Nicole To: galtsev@kicp.uchicago.edu Cc: questions@freebsd.org Subject: Re: Anti-virus for FreeBSD In-Reply-To: <19099.128.135.52.6.1458655269.squirrel@cosmo.uchicago.edu> (galtsev@kicp.uchicago.edu) Date: Wed, 23 Mar 2016 10:12:33 +0700 Message-ID: MIME-Version: 1.0 Content-Type: text/plain X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.21 Precedence: list List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 23 Mar 2016 03:12:41 -0000 Valeri, > Now, think about your users whose files, with potentially > confidential information will be accessible to proprietary code created > by/for one or the other intelligence agency (I don't distinguish here KGB, > CIA, MI-6, Siguranza,...) The files are accessible to anti-virus code created by a private company. So what? Do you really think they will scan the files to change their contents? - they will not be able to report any finding, because I have a tight policy on the mail server. - they will not be able to change the files because I run the anti-virus from amavis, amavis provides a copy of the files for virus checking and all cares about is a return status saying clean or infected, the files that have been checked are discarded. So, they can be KGB or whatever, as long as they do the job... Olivier