Amavis and anti-virus engine ?

[Tom Hendrikx]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256

On 23-02-16 21:26, Patrick Ben Koetter wrote:
> * Jakob Curdes <jc at info-systems.de>:
>> As far as I know, Avira has also discontinued their linux
>> product.
> 
> The scan engine is still available to system integrators. We are
> one of those and like the other integrators we add some magic sauce
> [tm] and wrap the engine into a product of our own.

The Avira Antivir product was indeed discontinued [1], but the SAVAPI
engine [2] is not. This is what Patrick is pointing at.

[1]
https://www.avira.com/en/support-for-home-knowledgebase-detail/kbid/1491
v
[2] https://www.avira.com/en/oem-antivirus


> 
> 
>> We have augmented clamav with the sanesecurity signatures. I just
>> read about the interesting YARA project and am looking into 
>> adding these rules also.
>> 
>> Also we block .js and the old microsoft office formats.
>> 
>> Up to now this seems to work quite well, we do not see anything 
>> relevant get through.
> 
> ACK
> 
> p at rick
> 
> 
>> On our customer's mail servers we partly run the kaspersky mail 
>> scanner which works very well.
>> 
>> HTH, Jakob
>> 
>> 
>> Am 23.02.2016 um 19:50 schrieb Patrick Ben Koetter:
>>> * Olivier CALVANO <o.calvano at gmail.com>:
>>>> what is the best antivirus engine for postfix/amavis ?
>>>> 
>>>> Because with clamav, we have a big quantity of crypto locker
>>>> into our mail. We run on CentOS 7
>>> Good engines, which we have used in the past and would
>>> recommend are:
>>> 
>>> - Avira SAVAPI - avast! - Sophos
>>> 
>>> Reasons we think they are good:
>>> 
>>> - Fast - Efficient - Low False-Positive rate - Low impact on
>>> system (they don't install a pletora of additional software) -
>>> Good support
>>> 
>>> We tested and used others as well, but to they were crappy,
>>> instable and/or the vendor left the UNIX market. Some didn't
>>> seem to be trustworthy enough to let them handle our customers
>>> data.
>>> 
>>> You might want to check http://www.av-comparatives.org/ for
>>> regular surveys.
>>> 
>>> p at rick
>>> 
>> 
> 

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v2
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=LTvD
-----END PGP SIGNATURE-----