MailScanner Antivirus

[David Jones]

Are you running Nod32 in daemon mode?  My batches average 4 to 6 seconds total and SA is most of that time.

________________________________
From: Nicola Piazzi <Nicola.Piazzi at gruppocomet.it>
Sent: Thursday, March 14, 2019 8:23 AM
To: 'Shawn Iverson'; MailScanner Discussion
Cc: David Jones
Subject: R: MailScanner Antivirus


Nod32 takes 4 secs of cpu, more than all spamassassin processes



Nicola Piazzi
CED - Sistemi
COMET s.p.a.
Via Michelino, 105 - 40127 Bologna – Italia
Tel.  +39 051.6079.293
Cell. +39 328.21.73.470
Web: www.comet.it<http://www.comet.it/>
[Nuova immagine bitmap]



Da: Shawn Iverson <iversons at rushville.k12.in.us>
Inviato: giovedì 14 marzo 2019 13:23
A: MailScanner Discussion <mailscanner at lists.mailscanner.info>
Cc: Nicola Piazzi <Nicola.Piazzi at gruppocomet.it>; David Jones <djones at ena.com>
Oggetto: Re: MailScanner Antivirus



Thanks Dave!



Also, if anyone has or can find virus scanners that support scanning using a daemon, please give me a heads up and I will try to integrate it.



On Thu, Mar 14, 2019 at 7:23 AM David Jones via MailScanner <mailscanner at lists.mailscanner.info<mailto:mailscanner at lists.mailscanner.info>> wrote:

When you run "MailScanner --lint" what do you see?



Mine shows this:



Found these virus scanners installed: clamd, esets



Use clamd for speed.  Nod32 Esets is also very fast and inexpensive.



I also recommend adding the clamav unofficial signatures to block more zero-day spam.  Here is my config along with the script that works from 8+ years ago that is not easy to find anymore:



clamav-unofficial-sigs.sh = https://pastebin.com/cSLYX8EJ

/etc/clamav-unofficial-sigs.conf = https://pastebin.com/LfGauaqZ



Hope this helps,

Dave



________________________________

From: MailScanner <mailscanner-bounces+djones=ena.com at lists.mailscanner.info<mailto:ena.com at lists.mailscanner.info>> on behalf of Nicola Piazzi <Nicola.Piazzi at gruppocomet.it<mailto:Nicola.Piazzi at gruppocomet.it>>
Sent: Thursday, March 14, 2019 3:22 AM
To: 'mailscanner at lists.mailscanner.info<mailto:mailscanner at lists.mailscanner.info>'
Subject: MailScanner Antivirus



Hi,

I know that there are 2 ways so scan messages for viruses from mailscanner

Using antivirus daemon and invoking antivirus program

Invoking an antivirus program takes from 5 to 15 seconds of cpu

If we consider that all other spamassassin functions takes 2 or 3 seconds each message adding an antivirus program can make a system hungry of resources

So at now only clamwin can be used , sophos have avi’s but no more work or instable



This is correct also 4 you ?



Nicola Piazzi
CED - Sistemi
COMET s.p.a.
Via Michelino, 105 - 40127 Bologna – Italia
Tel.  +39 051.6079.293
Cell. +39 328.21.73.470
Web: www.comet.it<http://www.comet.it/>
[Nuova immagine bitmap]




--
MailScanner mailing list
mailscanner at lists.mailscanner.info<mailto:mailscanner at lists.mailscanner.info>
http://lists.mailscanner.info/mailman/listinfo/mailscanner




--

Shawn Iverson, CETL

Director of Technology

Rush County Schools

765-932-3901 option 7

iversons at rushville.k12.in.us<mailto:iversons at rushville.k12.in.us>



[https://docs.google.com/uc?export=download&id=0Bw5iD0ToYvs_cy1OZFNIZ0drYVU&revid=0Bw5iD0ToYvs_UitIcHVIWkJVVTl2VGpxVUE0d0FQcHBIRXk4PQ][https://docs.google.com/uc?export=download&id=0Bw5iD0ToYvs_Zkh4eEs3R01yWXc&revid=0Bw5iD0ToYvs_QWpBK2Y2ajJtYjhOMDRFekZwK2xOamk5Q3Y0PQ]

[https://docs.google.com/uc?export=download&id=1aBrlQou4gjB04FY-twHN_0Dn3GHVNxqa&revid=0Bw5iD0ToYvs_RnQ0eDhHcm95WHBFdkNRbXhQRXpoYkR6SEEwPQ][Cybersecurity]
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.mailscanner.info/pipermail/mailscanner/attachments/20190314/17999f46/attachment.html>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: image001.png
Type: image/png
Size: 6129 bytes
Desc: image001.png
URL: <http://lists.mailscanner.info/pipermail/mailscanner/attachments/20190314/17999f46/attachment.png>