I haven't been happy with CGP's anti-virus/anti-spam options (specifically a lack of ability to do "during the SMTP transaction" processing), so I tend to use a gateway approach.

1) On my production CGP machines, there is a group of sendmail boxes that sit in front of them handling all non-SMTP-AUTH traffic. These currently run mailscanner, but will shortly move to mimedefang (most likely). I will be setting up a rule in the near future that tells the CGP machines to send all messages which haven't been through the sendmail machines to the sendmail machines.

2) On one of my development boxes, CGP doesn't answer on port 25. It answers only to localhost on another port. Sendmail runs on port 25, with mimedefang, and then delivers mail to the CGP port on localhost.


In both cases, SMTP-AUTH traffic currently goes directly to the CGP process. One of the other "near future" goals is to get STMP-AUTH set up on the sendmail side, and then all SMTP traffic will go directly to the sendmail processes.

Using mimedefang lets me reject viruses and very-high-scoring-spam during the SMTP transaction ... so that I don't have to either:

a) violate RFC's by quietly deleting messages, nor
b) hold on to and try to bounce messages that are probably heading back to non-existent senders or forged senders.

Instead, my mail servers can just refuse to accept responsibility for messages whose content is inappropriate.


On May 1, 2006, at 13:37, Tracey Gates wrote:

Has anyone used or tried Panda for Linux?  If so, what is your feedback on the product?  We use it only on the client machines but haven't ran it on my email/web server.  To tell the truth, I'm a little scared to install it with running CommuniGate Pro, CGPSA, Spamassassin without having a test server to see the effects in case it screws something up.
 

Tracey Gates
Lead Developer
[EMAIL PROTECTED]


-----Original Message-----
From: Ricardo Oliveira [mailto:[EMAIL PROTECTED]
Sent: Monday, May 01, 2006 3:30 PM
To: users@spamassassin.apache.org
Subject: Re: Way OT: What do you use for anti-virus (Linux)

John,

I use sophos too, but I though I'd drop the note on a memory-and-performance-saver: Sophie is a deamon which received the messages, processos them and returns the result "infected" or "not infected" instead of forking a new sweep process for every incoming email.

This resulted in WAY lower memory and CPU usage in my email servers.
Regards,
Ricardo Oliveira

Reply via email to