On Monday 16 February 2004 10:27, Spam wrote: > I have installed ClamAV friday and have it successfully tagging viruses > e-mail with a header, but am wondering how people have actually stoped the > message that has a virus attached. > > It seems to me like the easiest way would be to just not devilver any mail > that has a header saying it has a virus. Although this would work I would > rather send the recipient of the letter a message saying that someone tried > to send them a message, but it had a virus so it was stopped. I am curious > to know how some of you have this setup. Any input would be appreciated. > > I am currently running clamav via procmail.
There are a few good open-source virus scanners out there for *nix, mostly written in perl. Mailscanner (http://www.mailscanner.info) is a good one that integrates really well with sendmail. Amavis (http://www.amavis.org) is another that works great with many MTA's (most notably Postfix). These are both full-fledged virus scanners that can use ClamAV and run with the MTA to tag/quarantine/block/filter viruses and spam (usually with Spamassassin). Both Mailscanner and Amavis have configuration options that will send notifications to the sender/recipient and/or an administrator. A procmail recipe could do the same, you may want to check out the procmail defanger (http://www.impsec.org/email-tools/procmail-security.html) -- -- Matt K. Best <[EMAIL PROTECTED]> ------------------------------------------------------- SF.Net is sponsored by: Speed Start Your Linux Apps Now. Build and deploy apps & Web services for Linux with a free DVD software kit from IBM. Click Now! http://ads.osdn.com/?ad_id=1356&alloc_id=3438&op=click _______________________________________________ Clamav-users mailing list [EMAIL PROTECTED] https://lists.sourceforge.net/lists/listinfo/clamav-users
