> Bret Miller wrote: > >> Perhaps more a clamav question, but does anyone use the additional > >> definitions for clam from SaneSecurity and are they helpful > >> in the Spam Wars? > > > > You're in luck! I just installed them yesterday. Had been > meaning to for > > a while, but things have been too busy to get the script written to > > update them. So, in less than 24 hours, hit over 1800 spam messages > > here-- about 1/3 of our spam volume. > > > > I've been told that 3rd party clamav signatures can make clamav > unstable, because they seem to not be as well tested as the clamav > signatures. You end up with more than a few cases of "error in 3rd > party signature file causes clamav to choke and not run". > > > Which is all to say: watch the results of your updates closely. >
Warning noted. ClamAV has been crashing often enough, at least on the Windows platform, due to ClamAV's own "very well tested" signatures. Still, the benefit here is worth the risk. I've seen paid-for antivirus have similar issues with crashing and false positives too, so it's not just the free software community that has these problems. As always, YMMV. Please test thoroughly before you throw something at your live server. Bret
