Dilip M wrote:

[...]

>> Only improvement is Test # 12 was detected ?
>>
>> Where as all other Viruses,ie
>> Test # 19,21,23,25
>> came through :(

That is exactly what I'm getting with qmail-scanner-1.21 and clamav0.70-rc
(and the CVS version from 2004/03/25).

I think there was a discussion about these last four items a few weeks ago.
Some people complained that ClamAV is not a 'vulnerability/exploit' scanner,
but a virus scanner. This makes sense (and helps to avoid code bloat), but if
this is the concensus then I hope that qmail-scanner will soon address the
above 4 items internally, or that someone else will create a program
dedicated to this task. Exploit scanning may not belong in ClamAV,
but it needs to be addressed somewhere.


> After blocking 'com' extension i absorved that many of viruses from
> testvirus.org had 'com' extension!!
> 
> Better i block the 'com' extension itself,atleast reducing the load on
> CLAM :))

Which scanner are you using? qmail-scanner scans viruses FIRST, then blocks
extensions based on policy. This change was made between 1.20-rc2 and 1.20-rc3
if I remember correctly.

-- 
Jesse Guardiani, Systems Administrator
WingNET Internet Services,
P.O. Box 2605 // Cleveland, TN 37320-2605
423-559-LINK (v)  423-559-5145 (f)
http://www.wingnet.net




-------------------------------------------------------
This SF.Net email is sponsored by: IBM Linux Tutorials
Free Linux tutorial presented by Daniel Robbins, President and CEO of
GenToo technologies. Learn everything from fundamentals to system
administration.http://ads.osdn.com/?ad_id=1470&alloc_id=3638&op=click
_______________________________________________
Clamav-users mailing list
[EMAIL PROTECTED]
https://lists.sourceforge.net/lists/listinfo/clamav-users

Reply via email to