[clamav-users] ClamAV reputation rating

[Epicon Elysium]

Thank you all for your response.

We're building a PaaS where everything runs on Linux. As part of the
security requirements, we have to deploy Antivirus as well. We chose ClamAV
in this case. One of the requirement in terms of Antivirus is that we
should enable reputation rating. The environment itself is pretty static
once deployed. There's no email traffic in/out. It's just application
traffic through WAF/ModSecurity. The files itself on the OS level are
pretty static. So the ClamAV is used to scan the filesystem. So basically,
I think it's just reputation rating on the files if any.

If it doesn't have it, is there any plugins/tools that can be used to
achieve that? I haven't checked that PolicyD yet.

Many thanks,
Ray




On Mon, Jun 24, 2019 at 11:21 PM Simon Hobson <linux at thehobsons.co.uk>
wrote:

> Epicon Elysium via clamav-users <epicon.elysium at gmail.com> wrote:
>
> > Does ClamAV support in enabling the reputation rating? Seems I couldn't
> find any info when searching for it. There's nothing mentioned in the
> config file as well.
>
> AIUI no, it doesn't have anything for that.
> However, a very common setup is use AMaViS to scan mail, with ClamAV as
> just one of the tools it uses - the other tools can include things like
> reputation rating (eg sender real-time blacklists and so on).
> You might also want to have a look at PolicyD (aka Cluebringer) which
> brings other tools to the party - such as greylisting and quotas.
>
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.clamav.net/pipermail/clamav-users/attachments/20190627/9f1a73fd/attachment.htm>