Amavis and anti-virus engine ?

[Patrick Ben Koetter]

* Jakob Curdes <jc at info-systems.de>:
> As far as I know, Avira has also discontinued their linux product.

The scan engine is still available to system integrators. We are one of those
and like the other integrators we add some magic sauce [tm] and wrap the
engine into a product of our own.


> We have augmented clamav with the sanesecurity signatures.
> I just read about the interesting YARA project and am looking into
> adding these rules also.
> 
> Also we block .js and the old microsoft office formats.
> 
> Up to now this seems to work quite well, we do not see anything
> relevant get through.

ACK

p at rick


> On our customer's mail servers we partly run the kaspersky mail
> scanner which works very well.
> 
> HTH, Jakob
> 
> 
> Am 23.02.2016 um 19:50 schrieb Patrick Ben Koetter:
> >* Olivier CALVANO <o.calvano at gmail.com>:
> >>what is the best antivirus engine for postfix/amavis ?
> >>
> >>Because with clamav, we have a big quantity of crypto locker into our mail.
> >>We run on CentOS 7
> >Good engines, which we have used in the past and would recommend are:
> >
> >- Avira SAVAPI
> >- avast!
> >- Sophos
> >
> >Reasons we think they are good:
> >
> >- Fast
> >- Efficient
> >- Low False-Positive rate
> >- Low impact on system (they don't install a pletora of additional software)
> >- Good support
> >
> >We tested and used others as well, but to they were crappy, instable and/or
> >the vendor left the UNIX market. Some didn't seem to be trustworthy enough to
> >let them handle our customers data.
> >
> >You might want to check http://www.av-comparatives.org/ for regular surveys.
> >
> >p at rick
> >
> 

-- 
[*] sys4 AG
 
https://sys4.de, +49 (89) 30 90 46 64
Franziskanerstraße 15, 81669 München
 
Sitz der Gesellschaft: München, Amtsgericht München: HRB 199263
Vorstand: Patrick Ben Koetter, Marc Schiffbauer
Aufsichtsratsvorsitzender: Florian Kirstein