On Wed, 29 Nov 2006, Dennis Peterson wrote: > From: Dennis Peterson <[EMAIL PROTECTED]> > To: ClamAV users ML <clamav-users@lists.clamav.net> > Date: Wed, 29 Nov 2006 07:46:17 -0800 > Subject: Re: [Clamav-users] submit-to-publish time much too long for phishing > Reply-To: ClamAV users ML <clamav-users@lists.clamav.net> > > Adam Stephens wrote:
... > > I appreciate that people do this for free, and I don't know if > > that's a typical response time - but it's worrying enough that > > we're looking at running a commercial scanner in parallel to > > clamAV. > > This is absolutely a best practice. One should not rely entirely > on one tool for this critical function. We use ClamAV for real > time incoming and outgoing email scans and a second tool runs on > all Windows servers that scans file systems because viruses can > arrive in many ways. A third product runs on our customer facing > servers to ensure that content is clean. We're currently running both Sophos (via the sophie daemon) and ClamAV over incoming and outgoing email. Works a treat. We've occasionally looked at replacing Sophos with another commercial product. And then decided that Sophos was a better deal. Your mileage may vary etc and I'd suggest that a comparison of commercial product may veer off-topic for this list. The OP (Adam Stephens posting from a UK University) should note that Sophos is available at advantageous rates under a CHEST deal. > > Funnily enough, the main reason we want to keep ClamAV is the > > SaneSecurity phishing signatures - they're excellent. > > I agree - there has never been a false positive here, and the > detection rate is astonishing. Steve asked recently for samples > and I just don't have any to offer :) Managed to submit a new phishing scam today. That's after a lull three weeks. Think I'll award myself a gold star :-) I'll also strongly recommend the Stock and Image signatures that come in the scam.ndb database provided by Steve at SaneSecurity. We're currently rejecting hundreds, if not thousands, of copies of these pests each day. -- Dennis Davis, BUCS, University of Bath, Bath, BA2 7AY, UK [EMAIL PROTECTED] Phone: +44 1225 386101 _______________________________________________ Help us build a comprehensive ClamAV guide: visit http://wiki.clamav.net http://lurker.clamav.net/list/clamav-users.html
