*decloaks* We (Loughborough University) use ClamAV on our inbound and outbound mail servers, in front of and after Office 365 mailboxes. It sits in the middle of a fairly complex set of moving parts - another AV product, DNS blacklists, file hash checks, local 'reputation', several anti-spam tools and a load of custom local config (we're an Exim shop so have almost infinite flexibility).
We have a number of 'unofficial' databases loaded - some Sanesecurity ones as others have mentioned - and some custom local stuff that doesn't fit into the other bits. Picking a random recent day, we had 135000 rejections, 6500 of which were from ClamAV. By comparison, we accepted & delivered 25000 messages to 66000 recipients (non-unique). I know we're not unique in this regard, and I'm thankful ClamAV exists for many reasons, not least its extensibility! Graeme ________________________________________ From: clamav-users <clamav-users-boun...@lists.clamav.net> on behalf of Joel Esler (jesler) via clamav-users <clamav-users@lists.clamav.net> Sent: 25 March 2019 19:36 To: ClamAV users ML Cc: Joel Esler (jesler); G.W. Haywood Subject: Re: [clamav-users] Are signatures for Windows only? Actually, from what we understand, ClamAV is mostly used to scan email. Sent from my iPhone > On Mar 25, 2019, at 12:22, G.W. Haywood via clamav-users > <clamav-users@lists.clamav.net> wrote: > > Although we share files with Windows platforms we really > only use ClamAV to scan mail. I guess we're as untypical of a ClamAV > user as you'll get. _______________________________________________ clamav-users mailing list clamav-users@lists.clamav.net https://lists.clamav.net/mailman/listinfo/clamav-users Help us build a comprehensive ClamAV guide: https://github.com/vrtadmin/clamav-faq http://www.clamav.net/contact.html#ml