[clamav-users] Are signatures for Windows only?

Graeme Fowler G.E.Fowler at lboro.ac.uk
Tue Mar 26 04:28:25 EDT 2019


Have emailed you off-list.

Graeme


________________________________________
From: Joel Esler (jesler) <jesler at cisco.com>
Sent: 25 March 2019 22:08
To: ClamAV users ML
Cc: Graeme Fowler
Subject: Re: [clamav-users] Are signatures for Windows only?

That’s super interesting.  I’d be interested in what the 6500 signatures were.  Just for a real world “what are you seeing” conversation.

Sent from my  iPad

> On Mar 25, 2019, at 18:07, Graeme Fowler via clamav-users <clamav-users at lists.clamav.net> wrote:
>
> *decloaks*
>
> We (Loughborough University) use ClamAV on our inbound and outbound mail servers, in front of and after Office 365 mailboxes. It sits in the middle of a fairly complex set of moving parts - another AV product, DNS blacklists, file hash checks, local 'reputation', several anti-spam tools and a load of custom local config (we're an Exim shop so have almost infinite flexibility).
>
> We have a number of 'unofficial' databases loaded - some Sanesecurity ones as others have mentioned - and some custom local stuff that doesn't fit into the other bits.
>
> Picking a random recent day, we had 135000 rejections, 6500 of which were from ClamAV. By comparison, we accepted & delivered 25000 messages to 66000 recipients (non-unique).
>
> I know we're not unique in this regard, and I'm thankful ClamAV exists for many reasons, not least its extensibility!
>
> Graeme
>
> ________________________________________
> From: clamav-users <clamav-users-bounces at lists.clamav.net> on behalf of Joel Esler (jesler) via clamav-users <clamav-users at lists.clamav.net>
> Sent: 25 March 2019 19:36
> To: ClamAV users ML
> Cc: Joel Esler (jesler); G.W. Haywood
> Subject: Re: [clamav-users] Are signatures for Windows only?
>
> Actually, from what we understand, ClamAV is mostly used to scan email.
>
> Sent from my  iPhone
>
>> On Mar 25, 2019, at 12:22, G.W. Haywood via clamav-users <clamav-users at lists.clamav.net> wrote:
>>
>> Although we share files with Windows platforms we really
>> only use ClamAV to scan mail.  I guess we're as untypical of a ClamAV
>> user as you'll get.
>
> _______________________________________________
>
> clamav-users mailing list
> clamav-users at lists.clamav.net
> https://lists.clamav.net/mailman/listinfo/clamav-users
>
>
> Help us build a comprehensive ClamAV guide:
> https://github.com/vrtadmin/clamav-faq
>
> http://www.clamav.net/contact.html#ml


More information about the clamav-users mailing list