Amavis and ClamAV and YARA

Per-Erik Persson pegpe at kth.se
Fri Feb 26 21:28:00 CET 2016


I ran YARArules via some software I dont remember the name of on extracted JavaScripts from quarantined files and got some hits.
But the only AV I use is clamav+sanesecurity so probably any other AVengine would have given better numbers.

But after Oliviers tests I understand that perhaps it is time to actually pay for an AV or just block all .js files.


More information about the amavis-users mailing list