From owner-freebsd-security Fri Jan 19 5:24:35 2001 Delivered-To: freebsd-security@freebsd.org Received: from jamus.xpert.com (jamus.xpert.com [199.203.132.17]) by hub.freebsd.org (Postfix) with ESMTP id A572437B400 for ; Fri, 19 Jan 2001 05:24:13 -0800 (PST) Received: from roman (helo=localhost) by jamus.xpert.com with local-esmtp (Exim 3.12 #5) id 14JbWX-0003kI-00; Fri, 19 Jan 2001 15:24:13 +0200 Date: Fri, 19 Jan 2001 15:24:13 +0200 (IST) From: Roman Shterenzon To: Len Conrad Cc: Subject: Re: Anti-Virus for SMTP In-Reply-To: <5.0.2.1.0.20010119070958.01ce3230@mail.Go2France.com> Message-ID: MIME-Version: 1.0 Content-Type: TEXT/PLAIN; charset=US-ASCII Sender: owner-freebsd-security@FreeBSD.ORG Precedence: bulk X-Loop: FreeBSD.org On Fri, 19 Jan 2001, Len Conrad wrote: > > >>Amavis is fine if you're prepared to take a serious performance hit. If > >>your server is already groaning under its load, forget it. It works very > >>well though, even with McAfee (probably the last AV I'd use if the amavis > >>port didn't default to it). > > > >It is a bit harsh CPU wise, but it seems to work reliably and NAI > >does provide regular updates. Which combo are you using on FreeBSD ? > > Avamis-PERL is being daemonized to remove the hit of loading up PERL > for every msg. > > Daemonizing PERL with SpeedyCGI does not work with Amavis since > SpeedyCGI does not pass required results from the AV scanner to > Amavis. The SpeedyCGI developer agrees to make changes but they are > substantial and will take time. A daemonized Avamis will be ready > before SpeedCGI is fixed, but there is no date for it. > > I use Amavis-PERL-10 with Kaspersky and postfix and it works > well. My IMGate group is trying put together a script, vs a FreeBSD > port, that installs all of the numerous cast members (compressors, > PERL modules, Kaspersky stufff) since the recent Amavis port for > FreeBSD doesn't support postfix and apparently won't for some time. It might, if one supplies me enough information for implementing it. In the docs supplied with amavis-perl, it says that relay scanning may be performed only on postfix-current, and I'm not aware of its stability. --Roman Shterenzon, UNIX System Administrator and Consultant [ Xpert UNIX Systems Ltd., Herzlia, Israel. Tel: +972-9-9522361 ] To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-security" in the body of the message