Re: [Clamav-users] Feedback on clamav + sanesecurity experience

2010-07-21 Thread G.W. Haywood
Hi there, On Wed, 21 Jul 2010 Laurence MOINDROT wrote: > I will setup a test platform ... If greylisting, RBLs, ClamAV and phishing signatures don't do it then you might try Sendmail's greetpause. It works well for me. I also use a multi-line response to the initial connection which bamboozles

Re: [Clamav-users] Feedback on clamav + sanesecurity experience

2010-07-21 Thread Robert Schetterer
Am 20.07.2010 20:35, schrieb Laurence MOINDROT: > Hi Everyone, > > We are currently using clamav (0.96.1), spamassassin (3.3.1), > greylisting (4.2.5) and sendmail (8.14.4) on our mailserver's cluster > (OS : freeBSD 8.0) at the University of Strasbourg. This antispam and > antivirus solution was

Re: [Clamav-users] Feedback on clamav + sanesecurity experience

2010-07-21 Thread Bowie Bailey
On 7/20/2010 7:12 PM, Shawn Bakhtiar wrote: > > Checked out GreyListing and Sanesecurity. Both look like really cool tools. > > However, we have been using SpamAssassin, ClamAV, with sendmail (Fedora Core > 8), and zan.spamhaus.org RBL, which does most of the heavy work, of blocking > incoming S

Re: [Clamav-users] Feedback on clamav + sanesecurity experience

2010-07-21 Thread Leonardo Rodrigues
Em 20/07/2010 15:35, Laurence MOINDROT escreveu: Hi Everyone, We are currently using clamav (0.96.1), spamassassin (3.3.1), greylisting (4.2.5) and sendmail (8.14.4) on our mailserver's cluster (OS : freeBSD 8.0) at the University of Strasbourg. This antispam and antivirus solution was quiet

Re: [Clamav-users] Feedback on clamav + sanesecurity experience

2010-07-21 Thread Eric Rostetter
Quoting Noel Jones : I've been using the sanesecurity lists since shortly after they became publicly available. I've found them to be safe and very effective. I've also been using them from the start. There were, early on, a couple false positives that sanesecurity fixed quickly. I recent

Re: [Clamav-users] Feedback on clamav + sanesecurity experience

2010-07-21 Thread Steve Basford
Eric Rostetter wrote: I recently had a false positive also (a base64 encoded pdf string that happened to match on a certain drug name). But, the FP rate is probable about 1 per year, so all in all not bad at all if you either reject them or quarantine them (as opposed to tossing them in the bi