Hi Lars, Bill... I am currently using Kaspersky with qmail. I have found
that there are some issues (strange ones actually... like connetions
being left in the CLOSE_WAIT state forever), each with a qmail-smtp and
a fixcrio process open/running for each one. I have not pinned this down
yet. And occasionally killing off qmail-smtp and fixcrio processes to
free up my available tcpserver-allocated inbound smtp connections is not
my idea of properly administrating a mail server. :( I wish I had a
solution for this. (without changing to postfix yet)

Kaspersky tech support appears to be stumped since I have not heard back
from them regarding this issue even after I have sent them some packet
traces from Ethereal displaying the smtp conversations in question.

The other much more minor issue I am still having with Kaspersky
(version 3.5.x build 136) is that the 'report' it sends to the admin,
and to the sender of an infected email is improperly reporting the
"infected file/virus" information. It simply is showing the file name
without listing the virus that was caught. Sometimes it is the other
weay around, with no consistancy. This is with the 136 build. With
earlier builds this report worked fine, but there were other issues.

The report issue is minor incomparison to the first issue above.

On a good note though, Kaspersky is FAST, and it DOES appear to catch
EVERYTHING that gets thrown at it, including the lastest MAJISTR
worm/virus that just came out, so that is why I am keeping it around a
bit longer.

Also, Kaspersky cost us about $500 USD for the Linux Server version. Not
too bad I guess.

Why am I writing ALL this info here rather than the Qmail support
mailing list?

First, I think that hearing about other peoples' experiences with
specific softweare may help Bill Bradford in his virus sofware search. I
feel that with the type of users that many of us have to deal with on
our networks, antivirus software at the gateways is absolutely essential.

Second, I was really hoping that someone in here might have some
solution to my connections being left in the "CLOSE_WAIT" state forever,
Because -- Third, this topic came up on the qmail list only a few weeks
ago and many of the people over there are arrogant, non-helpful, and
down-right mean to just about anyone that asks a simple question. Asking
a question in the qmail support list is like closing your eyes, lighting
a stick of dynomite and holding it in your hands for as long as you
think you can, and then releasing it at the last moment. lol!

So far, this list appears to understand what the word "support" means in
"support mailing list" :)

Anyway, Good Luck Bill Bradford, with both your search for antiirus
software, and in your fight against this continual flow of garbage that
we call viruses/worms/trojans... :)

Lars Hecking wrote:
> Bill Bradford writes:
>
>>Can anyone recommend a good low-cost antivirus scanning solution to
>>use with amavis? I've currently got RAV working in evaluation mode,
>>but would like to find something cheaper if possible..
>>
>
> If you don't figure in your own labour, the costs for your AV solution
> are mainly determined by the licensing fee for the AV engine.
>
> I hear that Kaspersky AVP is one of the cheaper engines out there,
> so you'd want to look at postfix+K AVP+avpcheck.
>
> Other AV engines may come cheaper if you qualify for academic pricing.
> I believe that my current setup with postfix+amavisd+Sophos+Sophie is
> both reliable and cost efficient.
>
> -
> To unsubscribe, send mail to majordomopostfix.org with content
> (not subject): unsubscribe postfix-users
>
>
>
>

-- 
-------------
Bill Arlofski
Unix Systems Administrator
The Hotchkiss School
waahotchkiss.org
860-435-3140
The more I want to get something done,
the less I call it work. -- Richard Bach, "Illusions"
-
To unsubscribe, send mail to majordomopostfix.org with content
(not subject): unsubscribe postfix-users

• Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]