Hi there, On Thu, 2 Mar 2017, Bowie Bailey wrote:
... Hate to say it, but you downloaded the wrong files. ...
At the risk of stating the obvious, I downloaded the links that the OP gave in his post. As I said, they're HTMLified garbage. As I also said, tools are available to deal easily with mail headers if they're causing problems. But, more importantly, this is all about ClamAV failing to find ONE malicious message sent via Hotmail. The discussion would make a lot more sense if (a) malicious messages didn't outnumber the other kind by a factor of something like twenty, and (b) ClamAV (even if it could reliably find the body in a Hotmail-delivered message) were not, as a virus scanner, next to useless. Incidentally other contributors to this list have made similar points, and one said fairly recently that ClamAV couldn't find water in the ocean although I think that's rather harsh. In case you're wondering, I use ClamAV because it can use the excellent signatures maintained by Steve Basford at Sanesecurity to fight spam. Without them I would have no use for ClamAV. I reject everything from Hotmail (and Yahoo, Comcast, RR, Gmail and a couple of dozen other fairly big 'free' email providers) because that is much more effective and much less demanding on CPU+RAM than trying to sift out the 0.5% of half-way genuine mail from those sources using a tool like ClamAV. Botnets are a much bigger source; my milters spot them within a few milliseconds of their establishing a connection, and tarpit them immediately - for anything up to a few years, it depends - without any help from ClamAV, which is incapable of detecting them. As a commercial provider the OP might not feel that he can afford the luxury of rejecting mail from all the freebie providers, and he quite likely has to rely on Spamhaus et al to drop botnet connections which is a bit hit and miss at the best of times, but in my view the world (or at least his customers) would be safer if he put his effort into something that's capable of yielding better results. Either way, despite the initial reaction, I don't want to see somebody go up a blind alley if a little thought will give far more reward with much less perspiration, wafer fabrication and electricity consumption. -- 73, Ged. _______________________________________________ clamav-users mailing list clamav-users@lists.clamav.net http://lists.clamav.net/cgi-bin/mailman/listinfo/clamav-users Help us build a comprehensive ClamAV guide: https://github.com/vrtadmin/clamav-faq http://www.clamav.net/contact.html#ml
