Recommendation for "antivirus" software (MTA is qmail)

Cody Baker cody at wilkshire.net
Tue Jan 27 12:17:56 PST 2004


We use qmail-scanner with clam scan for 4000+ email accounts.  It works
well, and it's place in the qmail delivery system makes it very scalable.
We originally started out with qmail running on the main mail server.  Due
to increased load we've dropped in a qmail/qmail-scanner based host which
proxies mail using SMTP-route to our mail server.  The other advantage about
qmail scanner is that because it runs in the before qmail-queue, any mail
rejected by the host is instantly denied.  It's a very flexible system and I
recommend.  If you do use it, I would recommend not using it's MIME header
features they can cause some false positives.

It can be found at http://qmail-scanner.sourceforge.net

If you need any help with it, give me an email at cody at wilkshire.net, I'd be
more than willing to give some pointers.

Thank you,

Cody


----- Original Message ----- 
From: "W.D.McKinney" <dee at akwireless.net>
To: <freebsd-isp at freebsd.org>
Sent: Tuesday, January 27, 2004 1:49 PM
Subject: Re: Recommendation for "antivirus" software (MTA is qmail)


> On Tue, 2004-01-27 at 09:18, David Wolfskill wrote:
> > My boss, who persists in using a M$-based desktop, wants me to install
> > an "antivirus solution" on our mail server.  In fairness, he also wants
> > to reduce the expose to (and from) our customers (many of whom also run
> > such systems).
> >
> > The MTA we currently use is qmail on a system running FreeBSD 4.8.
> > As far as I can tell, that is for its ease of integration with
> > vpopmail.  As far as this message is concerned, I am being agnostic
> > with respect to the choice of qmail for the MTA; it was made prior
> > to the start of my tenure here, and I am unwilling to make a change
> > if I believe that the result will not be worth the effort and
> > disruption.
> >
> > A small bit of background:  my employer is a nascent ISP, with a fair
> > amount of emphasis on use of wireless (well, radio) technology.
> >
> > It would be useful to be able to also get some spam-avoidance capability
> > along with this.  That said, several of our salient resources are
limited.
> >
> > A quick look around the Web shows some plausible-looking contenders;
> > what I seek are real-life experiences with these (or similar) products,
> > or other aspects that may not be immediately obvious from reading the
> > promotional material on the Web sites:
> >
> > * qmail-scanner, clamav, and spamassassin
> >
http://clamav.elektrapro.com/doc/FreeBSD-HowTo/qmail-scanner-how-to.html
> >
> > * Dr.Web for UNIX systems
> >   http://www.dials.ru/english/dsav_toolkit/drwebunix.htm
> >   [Also at http://www.advancedforce.com/antivirus/av_unixms.html ?]
> >
> > * RAV AntiVirus
> >   http://www.ravantivirus.com/pages/isp.php
> >
> > * Vexira Antivirus for Mail servers FreeBSD edition
> >   http://www.ti.com.pl/antivirus.php?s=vexira&d=products&w=details&pid=8
> >
> > * AntiVir
> >   http://www.hbedv.com/
> >
> > * Sophos PureMessage
> >   http://www.sophos.com/products/pm/
> >
> > Each of the above (save the first) appears to be a commercial product.
> > We are open -- in principle -- to any solution, whether free or fee.
> >
> > Thanks! (in advance)
>
>
> Here you go.
> OK, we are a qmail house also. We run clamav frontwards and backwards on
> the MTA. We also filter with a Barracuda Networks Anti-Spam/Anti-Virus
> Firewall as the primary MX for all domains. This is a highly effective
> Spam/Virus stopping engine and has reduced the CPU cycles and writes to
> HD's by 50% on our MTA's.  Barracuda is inexpensive also.
>
> Cheers,
> Dee
>
>
>
>
>
>
>
>
>
>
>
>
>
>
> -- 
> W.D.McKinney (Dee)
> Alaska Wireless Systems
> http://www.akwireless.net
> (907)349-4308 Office
> (907)349-2226 Fax
>
>
> _______________________________________________
> freebsd-isp at freebsd.org mailing list
> http://lists.freebsd.org/mailman/listinfo/freebsd-isp
> To unsubscribe, send any mail to "freebsd-isp-unsubscribe at freebsd.org"
>



More information about the freebsd-isp mailing list