mailscanner-mrtg giving low virus results with new install
mailscanner at yeticomputers.com
Thu Mar 19 08:16:14 GMT 2009
Hugo van der Kooij wrote:
> -----BEGIN PGP SIGNED MESSAGE-----
> Hash: SHA1
> Gregory Machin wrote:
>> I have setup a new mail scanner using the latest “Version 4.74.16-1 for
>> RedHat, Fedora and Mandrake Linux (and other RPM-based Linux
>> distributions)” and “ClamAV 0.94.2 and SpamAssassin 3.2.5 installation
>> package.” . All seem to be well no errors in the log files. But when
>> comparing the number of viruses found on the new server, compared to
>> that on the old servers Also running MailScanner (updated to the latest
>> version) and an older version Clamav. There is a big difference in the
>> results on mailscanner-mrtg. The old server found 250 viruses yesterday
>> where as the new one only 9 .. and the trend is the same today. The
>> virus scans are being logged for the mails and coming back uninfected.
>> Updates are up to date.
> I guess either of these 2 statements is true.
> 1. You don't get virus messages that way as often as you think. So the
> stats are accurate.
> 2. Your other system is tagging spam as virus due to extra databases
> for ClamAV. Again the stats are accurate.
Another possibility is what happened to me several years ago when I
started using RBLs at the MTA level - viruses simply stopped getting far
enough to get counted. Is it possible that your new setup uses RBLs at
the MTA and the old one did not? Or /any/ method of dropping messages
at the MTA?
More information about the MailScanner