Sanesecurity is back online

[Julian Field]

On 22/1/09 17:03, Mark Nienberg wrote:
> Julian Field wrote:
>> Why not just use both? Anyone know where sanesecurity are getting 
>> their data from?
>> I am now using both and will continue to do so until I hear a good 
>> reason not to :-)
>>
>> Jules
>>
>
> From the changes page at http://www.sanesecurity.com/clamav/changes.pdf
>
> spear.ndb: email spears/phishing, converted from
> http://code.google.com/p/antiphishing-email-reply/
Can't argue with that. :-)
However, it is doing no harm and they are still working on the download 
script anyway, so hopefully it will become trivial to knock out the 
spear.ndb file from the download. On my systems, as I run clamd through 
BarricadeMX, it actually costs me less resources to have spear.ndb in 
place to knock out some mail so that SpamAssassin doesn't have to 
process the message at all. But it's not as good for my stats, so I'll 
pay for the extra load ;-)

Jules

-- 
Julian Field MEng CITP CEng
www.MailScanner.info
Buy the MailScanner book at www.MailScanner.info/store

MailScanner customisation, or any advanced system administration help?
Contact me at Jules at Jules.FM

PGP footprint: EE81 D763 3DB0 0BFD E1DC 7222 11F6 5947 1415 B654
PGP public key: http://www.jules.fm/julesfm.asc


-- 
This message has been scanned for viruses and
dangerous content by MailScanner, and is
believed to be clean.