R: MailScanner Antivirus

Thu Mar 14 13:23:57 UTC 2019

Nod32 takes 4 secs of cpu, more than all spamassassin processes

Nicola Piazzi
CED - Sistemi
COMET s.p.a.
Via Michelino, 105 - 40127 Bologna – Italia
Tel.  +39 051.6079.293
Cell. +39 328.21.73.470
Web: www.comet.it<http://www.comet.it/>
[Nuova immagine bitmap]

Da: Shawn Iverson <iversons at rushville.k12.in.us>
Inviato: giovedì 14 marzo 2019 13:23
A: MailScanner Discussion <mailscanner at lists.mailscanner.info>
Cc: Nicola Piazzi <Nicola.Piazzi at gruppocomet.it>; David Jones <djones at ena.com>
Oggetto: Re: MailScanner Antivirus

Thanks Dave!

Also, if anyone has or can find virus scanners that support scanning using a daemon, please give me a heads up and I will try to integrate it.

On Thu, Mar 14, 2019 at 7:23 AM David Jones via MailScanner <mailscanner at lists.mailscanner.info<mailto:mailscanner at lists.mailscanner.info>> wrote:
When you run "MailScanner --lint" what do you see?

Mine shows this:

Found these virus scanners installed: clamd, esets

Use clamd for speed.  Nod32 Esets is also very fast and inexpensive.

I also recommend adding the clamav unofficial signatures to block more zero-day spam.  Here is my config along with the script that works from 8+ years ago that is not easy to find anymore:

clamav-unofficial-sigs.sh = https://pastebin.com/cSLYX8EJ
/etc/clamav-unofficial-sigs.conf = https://pastebin.com/LfGauaqZ

Hope this helps,
Dave

________________________________
From: MailScanner <mailscanner-bounces+djones=ena.com at lists.mailscanner.info<mailto:ena.com at lists.mailscanner.info>> on behalf of Nicola Piazzi <Nicola.Piazzi at gruppocomet.it<mailto:Nicola.Piazzi at gruppocomet.it>>
Sent: Thursday, March 14, 2019 3:22 AM
To: 'mailscanner at lists.mailscanner.info<mailto:mailscanner at lists.mailscanner.info>'
Subject: MailScanner Antivirus

Hi,

I know that there are 2 ways so scan messages for viruses from mailscanner

Using antivirus daemon and invoking antivirus program

Invoking an antivirus program takes from 5 to 15 seconds of cpu

If we consider that all other spamassassin functions takes 2 or 3 seconds each message adding an antivirus program can make a system hungry of resources

So at now only clamwin can be used , sophos have avi’s but no more work or instable

This is correct also 4 you ?

Nicola Piazzi
CED - Sistemi
COMET s.p.a.
Via Michelino, 105 - 40127 Bologna – Italia
Tel.  +39 051.6079.293
Cell. +39 328.21.73.470
Web: www.comet.it<http://www.comet.it/>
[Nuova immagine bitmap]

--
MailScanner mailing list
mailscanner at lists.mailscanner.info<mailto:mailscanner at lists.mailscanner.info>
http://lists.mailscanner.info/mailman/listinfo/mailscanner

--
Shawn Iverson, CETL
Director of Technology
Rush County Schools
765-932-3901 option 7
iversons at rushville.k12.in.us<mailto:iversons at rushville.k12.in.us>

[https://docs.google.com/uc?export=download&id=0Bw5iD0ToYvs_cy1OZFNIZ0drYVU&revid=0Bw5iD0ToYvs_UitIcHVIWkJVVTl2VGpxVUE0d0FQcHBIRXk4PQ][https://docs.google.com/uc?export=download&id=0Bw5iD0ToYvs_Zkh4eEs3R01yWXc&revid=0Bw5iD0ToYvs_QWpBK2Y2ajJtYjhOMDRFekZwK2xOamk5Q3Y0PQ]
[https://docs.google.com/uc?export=download&id=1aBrlQou4gjB04FY-twHN_0Dn3GHVNxqa&revid=0Bw5iD0ToYvs_RnQ0eDhHcm95WHBFdkNRbXhQRXpoYkR6SEEwPQ][Cybersecurity]
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.mailscanner.info/pipermail/mailscanner/attachments/20190314/06c3e436/attachment.html>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: image001.png
Type: image/png
Size: 6129 bytes
Desc: image001.png
URL: <http://lists.mailscanner.info/pipermail/mailscanner/attachments/20190314/06c3e436/attachment.png>