Dilip M wrote: [...]
>> Only improvement is Test # 12 was detected ? >> >> Where as all other Viruses,ie >> Test # 19,21,23,25 >> came through :( That is exactly what I'm getting with qmail-scanner-1.21 and clamav0.70-rc (and the CVS version from 2004/03/25). I think there was a discussion about these last four items a few weeks ago. Some people complained that ClamAV is not a 'vulnerability/exploit' scanner, but a virus scanner. This makes sense (and helps to avoid code bloat), but if this is the concensus then I hope that qmail-scanner will soon address the above 4 items internally, or that someone else will create a program dedicated to this task. Exploit scanning may not belong in ClamAV, but it needs to be addressed somewhere. > After blocking 'com' extension i absorved that many of viruses from > testvirus.org had 'com' extension!! > > Better i block the 'com' extension itself,atleast reducing the load on > CLAM :)) Which scanner are you using? qmail-scanner scans viruses FIRST, then blocks extensions based on policy. This change was made between 1.20-rc2 and 1.20-rc3 if I remember correctly. -- Jesse Guardiani, Systems Administrator WingNET Internet Services, P.O. Box 2605 // Cleveland, TN 37320-2605 423-559-LINK (v) 423-559-5145 (f) http://www.wingnet.net ------------------------------------------------------- This SF.Net email is sponsored by: IBM Linux Tutorials Free Linux tutorial presented by Daniel Robbins, President and CEO of GenToo technologies. Learn everything from fundamentals to system administration.http://ads.osdn.com/?ad_id=1470&alloc_id=3638&op=click _______________________________________________ Clamav-users mailing list [EMAIL PROTECTED] https://lists.sourceforge.net/lists/listinfo/clamav-users