On Freitag 13 Juni 2008, Freddie Cash wrote: > On Fri, Jun 13, 2008 at 9:21 PM, Eggert Ehmke <[EMAIL PROTECTED]> wrote: > > Since I installed ClamAV on my mail server, I did not get one single mail > > with virus attached. Other spam mail is filtered out by DSpam. When I > > send some test mail to my own address and attach some test virus, it is > > detected by ClamAV. Is this the expected behaviour? I would have expected > > to get some real viruses sooner or later. So I get the impression that > > real attacks are not so frequently as expected, or am I just lucky? > > How many messages are being processed per day? For how many accounts? > And what percentage of those accounts are Windows stations? > > The higher those numbers, the higher the likelihood you'll see > infected messages reach your mail server. > > We process around 2.3 millions messages a month, with about 1.7 > million of those blocked as spam at the SMTP level, about 300,000 are > blocked as spam by amavis/spamassassin/dspam, another 50,000 or so are > tagged as possible spam but still delivered, and maybe 20,000 are > blocked as infected. The rest go through. > > So they're still out there. :)
Thanks for all your answers. This is a small server with just some 100 mails per day, we serve some internal club mails. 75% is sorted out by postfix rules, most spam is filtered out by dspam. So I guess this is just too small to expect lot of virus mails. Eggert _______________________________________________ Help us build a comprehensive ClamAV guide: visit http://wiki.clamav.net http://www.clamav.net/support/ml
