Second AV Scanner Suggestions

Julian Field MailScanner at ecs.soton.ac.uk
Mon Sep 24 19:24:43 IST 2007



Kevin Miller wrote:
> Johnny Stork wrote:
>   
>> Thanks to everyone that has responded. I went with BitDefender.
>>
>> Now how can I confirm it is actually being used? I updated "Virus
>> Scanners = clamd bitdefender" but how do I know its being used?
>>
>> Dimitri Yioulos wrote:
>>     
>
> Send yourself the eicar test pattern.  Both clam and bitdefender should
> tag it...
>   
That's effectively what "MailScanner --lint" does. It contains a copy of 
a fake email message with the Eicar test pattern in it, suitably encoded 
so that no scanner will ever find it hidden in the MailScanner code, so 
you can perform a real test while still ensuring that MailScanner itself 
won't get caught by any virus scanners.

Apparently, Amavis (I think that's what it was) used to try to do this, 
but didn't hide the Eicar copy well enough and it triggered virus 
scanners making it impossible to download and install on many sites. 
Talk about shooting yourself in the foot! :-)

Jules

-- 
Julian Field MEng CITP
www.MailScanner.info
Buy the MailScanner book at www.MailScanner.info/store

MailScanner customisation, or any advanced system administration help?
Contact me at Jules at Jules.FM

PGP footprint: EE81 D763 3DB0 0BFD E1DC 7222 11F6 5947 1415 B654
For all your IT requirements visit www.transtec.co.uk


-- 
This message has been scanned for viruses and
dangerous content by MailScanner, and is
believed to be clean.
For all your IT requirements visit www.transtec.co.uk



More information about the MailScanner mailing list