On Fri, Jun 13, 2008 at 9:21 PM, Eggert Ehmke <[EMAIL PROTECTED]> wrote: > Since I installed ClamAV on my mail server, I did not get one single mail with > virus attached. Other spam mail is filtered out by DSpam. When I send some > test mail to my own address and attach some test virus, it is detected by > ClamAV. Is this the expected behaviour? I would have expected to get some > real viruses sooner or later. So I get the impression that real attacks are > not so frequently as expected, or am I just lucky?
How many messages are being processed per day? For how many accounts? And what percentage of those accounts are Windows stations? The higher those numbers, the higher the likelihood you'll see infected messages reach your mail server. We process around 2.3 millions messages a month, with about 1.7 million of those blocked as spam at the SMTP level, about 300,000 are blocked as spam by amavis/spamassassin/dspam, another 50,000 or so are tagged as possible spam but still delivered, and maybe 20,000 are blocked as infected. The rest go through. So they're still out there. :) -- Freddie Cash [EMAIL PROTECTED] _______________________________________________ Help us build a comprehensive ClamAV guide: visit http://wiki.clamav.net http://www.clamav.net/support/ml
