Virus Scanning Options?

Previous Topic Next Topic
 
classic Classic list List threaded Threaded
8 messages Options
Reply | Threaded
Open this post in threaded view
|

Virus Scanning Options?

Ken Post
Hi All-

I've been a happy administrator of ASSP 1.0.9 running
on a Windows 2000 server for a while now for a small
school.  I finally might have the time to update, and
I really want to, mostly for the anti-virus
functionality.

I'm a bit discouraged by many of the posts here about
clam av and the hashes not being updated any more.  Is
there an alternative?

I know antivirus isn't a priority, but has there been
any exploration of using a module like ClamAV::Client,
File::Scan::ClamAV, or Mail::ClamAV to scan some kind
of temporary file?  It would be an expensive
operation, but might be workable.  I envision having
ASSP invoke the external module's scanning funciton
only if an attachment is found in a message.  I have
no idea if it's possible to scan a scalar using these
modules or if a temp file would need to be saved.  I
don't have the programming skills necessary to explore
any of this.

Any other suggestions for a SINGLE box, windows 2000
server, running ASSP and IPlanet Messaging Server?  I
might be able to add a low end linux box to the mix if
that would make a difference.

Thanks
Ken


__________________________________________________
Do You Yahoo!?
Tired of spam?  Yahoo! Mail has the best spam protection around
http://mail.yahoo.com 


-------------------------------------------------------
This SF.net email is sponsored by: Splunk Inc. Do you grep through log files
for problems?  Stop!  Download the new AJAX search engine that makes
searching your log files as easy as surfing the  web.  DOWNLOAD SPLUNK!
http://ads.osdn.com/?ad_id=7637&alloc_id=16865&op=click
_______________________________________________
Assp-user mailing list
[hidden email]
https://lists.sourceforge.net/lists/listinfo/assp-user
Reply | Threaded
Open this post in threaded view
|

Re: Virus Scanning Options?

Jeff Buehler
Try:

Freebsd or Linux (I prefer FreeBSD)

ASSP -> CLAMSmtp (this does complete virus scanning including archives,
etc.) -> MTA (mailer - I use XMail, but Postfix, QMail, or many others
will work).
Using that you can drop Win 2000 completely.  If you need file sharing
services, or print services, or even some Active Directory stuff, you
can use Samba (with Open-LDAP, if necessary for AD).
That's my suggestion!

If you want to stick with Win 2000 (for some reason - I don't know
anything about IPlanet), there *might* be a port of CLAMSmtp to Windows.

Jeff

Ken Post wrote:

>Hi All-
>
>I've been a happy administrator of ASSP 1.0.9 running
>on a Windows 2000 server for a while now for a small
>school.  I finally might have the time to update, and
>I really want to, mostly for the anti-virus
>functionality.
>
>I'm a bit discouraged by many of the posts here about
>clam av and the hashes not being updated any more.  Is
>there an alternative?
>
>I know antivirus isn't a priority, but has there been
>any exploration of using a module like ClamAV::Client,
>File::Scan::ClamAV, or Mail::ClamAV to scan some kind
>of temporary file?  It would be an expensive
>operation, but might be workable.  I envision having
>ASSP invoke the external module's scanning funciton
>only if an attachment is found in a message.  I have
>no idea if it's possible to scan a scalar using these
>modules or if a temp file would need to be saved.  I
>don't have the programming skills necessary to explore
>any of this.
>
>Any other suggestions for a SINGLE box, windows 2000
>server, running ASSP and IPlanet Messaging Server?  I
>might be able to add a low end linux box to the mix if
>that would make a difference.
>
>Thanks
>Ken
>
>
>__________________________________________________
>Do You Yahoo!?
>Tired of spam?  Yahoo! Mail has the best spam protection around
>http://mail.yahoo.com 
>
>
>-------------------------------------------------------
>This SF.net email is sponsored by: Splunk Inc. Do you grep through log files
>for problems?  Stop!  Download the new AJAX search engine that makes
>searching your log files as easy as surfing the  web.  DOWNLOAD SPLUNK!
>http://ads.osdn.com/?ad_id=7637&alloc_id=16865&op=click
>_______________________________________________
>Assp-user mailing list
>[hidden email]
>https://lists.sourceforge.net/lists/listinfo/assp-user
>
>  
>



-------------------------------------------------------
This SF.net email is sponsored by: Splunk Inc. Do you grep through log files
for problems?  Stop!  Download the new AJAX search engine that makes
searching your log files as easy as surfing the  web.  DOWNLOAD SPLUNK!
http://ads.osdn.com/?ad_id=7637&alloc_id=16865&op=click
_______________________________________________
Assp-user mailing list
[hidden email]
https://lists.sourceforge.net/lists/listinfo/assp-user
Reply | Threaded
Open this post in threaded view
|

Re: Virus Scanning Options?

Ken Post
Thanks for the quick reply Jeff!

I guess I could setup CLAMSmtp on a separate box and
leave the windows machine as is...

Off topic question about XMail- does it have an IMAP
server built in?

--- Jeff Buehler <[hidden email]> wrote:

> Try:
>
> Freebsd or Linux (I prefer FreeBSD)
>
> ASSP -> CLAMSmtp (this does complete virus scanning
> including archives,
> etc.) -> MTA (mailer - I use XMail, but Postfix,
> QMail, or many others
> will work).
> Using that you can drop Win 2000 completely.  If you
> need file sharing
> services, or print services, or even some Active
> Directory stuff, you
> can use Samba (with Open-LDAP, if necessary for AD).
> That's my suggestion!
>
> If you want to stick with Win 2000 (for some reason
> - I don't know
> anything about IPlanet), there *might* be a port of
> CLAMSmtp to Windows.
>
> Jeff
>
> Ken Post wrote:
>
> >Hi All-
> >
> >I've been a happy administrator of ASSP 1.0.9
> running
> >on a Windows 2000 server for a while now for a
> small
> >school.  I finally might have the time to update,
> and
> >I really want to, mostly for the anti-virus
> >functionality.
> >
> >I'm a bit discouraged by many of the posts here
> about
> >clam av and the hashes not being updated any more.
> Is
> >there an alternative?
> >
> >I know antivirus isn't a priority, but has there
> been
> >any exploration of using a module like
> ClamAV::Client,
> >File::Scan::ClamAV, or Mail::ClamAV to scan some
> kind
> >of temporary file?  It would be an expensive
> >operation, but might be workable.  I envision
> having
> >ASSP invoke the external module's scanning funciton
> >only if an attachment is found in a message.  I
> have
> >no idea if it's possible to scan a scalar using
> these
> >modules or if a temp file would need to be saved.
> I
> >don't have the programming skills necessary to
> explore
> >any of this.
> >
> >Any other suggestions for a SINGLE box, windows
> 2000
> >server, running ASSP and IPlanet Messaging Server?
> I
> >might be able to add a low end linux box to the mix
> if
> >that would make a difference.
> >
> >Thanks
> >Ken
> >
> >
> >__________________________________________________
> >Do You Yahoo!?
> >Tired of spam?  Yahoo! Mail has the best spam
> protection around
> >http://mail.yahoo.com 
> >
> >
>
>-------------------------------------------------------
> >This SF.net email is sponsored by: Splunk Inc. Do
> you grep through log files
> >for problems?  Stop!  Download the new AJAX search
> engine that makes
> >searching your log files as easy as surfing the
> web.  DOWNLOAD SPLUNK!
>
>http://ads.osdn.com/?ad_id=7637&alloc_id=16865&op=click
> >_______________________________________________
> >Assp-user mailing list
> >[hidden email]
>
>https://lists.sourceforge.net/lists/listinfo/assp-user
> >
> >  
> >
>
>
>
>
-------------------------------------------------------
> This SF.net email is sponsored by: Splunk Inc. Do
> you grep through log files
> for problems?  Stop!  Download the new AJAX search
> engine that makes
> searching your log files as easy as surfing the
> web.  DOWNLOAD SPLUNK!
>
http://ads.osdn.com/?ad_id=7637&alloc_id=16865&op=click
> _______________________________________________
> Assp-user mailing list
> [hidden email]
>
https://lists.sourceforge.net/lists/listinfo/assp-user
>


__________________________________________________
Do You Yahoo!?
Tired of spam?  Yahoo! Mail has the best spam protection around
http://mail.yahoo.com 


-------------------------------------------------------
This SF.net email is sponsored by: Splunk Inc. Do you grep through log files
for problems?  Stop!  Download the new AJAX search engine that makes
searching your log files as easy as surfing the  web.  DOWNLOAD SPLUNK!
http://ads.osdn.com/?ad_id=7637&alloc_id=16865&op=click
_______________________________________________
Assp-user mailing list
[hidden email]
https://lists.sourceforge.net/lists/listinfo/assp-user
Reply | Threaded
Open this post in threaded view
|

RE: Virus Scanning Options?

Lars Troen
In reply to this post by Ken Post
>
> Off topic question about XMail- does it have an IMAP server built in?
>
No. But have a look at this thread:
http://www.nabble.com/RE%3A-SMTP-Server--t566751.html

Lars


-------------------------------------------------------
This SF.net email is sponsored by: Splunk Inc. Do you grep through log files
for problems?  Stop!  Download the new AJAX search engine that makes
searching your log files as easy as surfing the  web.  DOWNLOAD SPLUNK!
<a href="http://ads.osdn.com/?ad_idv37&alloc_id865&op=click">http://ads.osdn.com/?ad_idv37&alloc_id865&op=click
_______________________________________________
Assp-user mailing list
[hidden email]
https://lists.sourceforge.net/lists/listinfo/assp-user
Reply | Threaded
Open this post in threaded view
|

Re: Virus Scanning Options?

Jeff Buehler
In reply to this post by Ken Post
Hi Ken -

Sorry - I missed this post somehow.  No, XMail does not presently
support IMAP, but I think it has been on the "to do" list for Davide for
quite some time.  If you need IMAP, Dovecot looks pretty good (again,
not Windows, I don't think).

Jeff

Ken Post wrote:

>Thanks for the quick reply Jeff!
>
>I guess I could setup CLAMSmtp on a separate box and
>leave the windows machine as is...
>
>Off topic question about XMail- does it have an IMAP
>server built in?
>
>--- Jeff Buehler <[hidden email]> wrote:
>
>  
>
>>Try:
>>
>>Freebsd or Linux (I prefer FreeBSD)
>>
>>ASSP -> CLAMSmtp (this does complete virus scanning
>>including archives,
>>etc.) -> MTA (mailer - I use XMail, but Postfix,
>>QMail, or many others
>>will work).
>>Using that you can drop Win 2000 completely.  If you
>>need file sharing
>>services, or print services, or even some Active
>>Directory stuff, you
>>can use Samba (with Open-LDAP, if necessary for AD).
>>That's my suggestion!
>>
>>If you want to stick with Win 2000 (for some reason
>>- I don't know
>>anything about IPlanet), there *might* be a port of
>>CLAMSmtp to Windows.
>>
>>Jeff
>>
>>Ken Post wrote:
>>
>>    
>>
>>>Hi All-
>>>
>>>I've been a happy administrator of ASSP 1.0.9
>>>      
>>>
>>running
>>    
>>
>>>on a Windows 2000 server for a while now for a
>>>      
>>>
>>small
>>    
>>
>>>school.  I finally might have the time to update,
>>>      
>>>
>>and
>>    
>>
>>>I really want to, mostly for the anti-virus
>>>functionality.
>>>
>>>I'm a bit discouraged by many of the posts here
>>>      
>>>
>>about
>>    
>>
>>>clam av and the hashes not being updated any more.
>>>      
>>>
>>Is
>>    
>>
>>>there an alternative?
>>>
>>>I know antivirus isn't a priority, but has there
>>>      
>>>
>>been
>>    
>>
>>>any exploration of using a module like
>>>      
>>>
>>ClamAV::Client,
>>    
>>
>>>File::Scan::ClamAV, or Mail::ClamAV to scan some
>>>      
>>>
>>kind
>>    
>>
>>>of temporary file?  It would be an expensive
>>>operation, but might be workable.  I envision
>>>      
>>>
>>having
>>    
>>
>>>ASSP invoke the external module's scanning funciton
>>>only if an attachment is found in a message.  I
>>>      
>>>
>>have
>>    
>>
>>>no idea if it's possible to scan a scalar using
>>>      
>>>
>>these
>>    
>>
>>>modules or if a temp file would need to be saved.
>>>      
>>>
>>I
>>    
>>
>>>don't have the programming skills necessary to
>>>      
>>>
>>explore
>>    
>>
>>>any of this.
>>>
>>>Any other suggestions for a SINGLE box, windows
>>>      
>>>
>>2000
>>    
>>
>>>server, running ASSP and IPlanet Messaging Server?
>>>      
>>>
>>I
>>    
>>
>>>might be able to add a low end linux box to the mix
>>>      
>>>
>>if
>>    
>>
>>>that would make a difference.
>>>
>>>Thanks
>>>Ken
>>>
>>>
>>>__________________________________________________
>>>Do You Yahoo!?
>>>Tired of spam?  Yahoo! Mail has the best spam
>>>      
>>>
>>protection around
>>    
>>
>>>http://mail.yahoo.com 
>>>
>>>
>>>      
>>>
>>-------------------------------------------------------
>>    
>>
>>>This SF.net email is sponsored by: Splunk Inc. Do
>>>      
>>>
>>you grep through log files
>>    
>>
>>>for problems?  Stop!  Download the new AJAX search
>>>      
>>>
>>engine that makes
>>    
>>
>>>searching your log files as easy as surfing the
>>>      
>>>
>>web.  DOWNLOAD SPLUNK!
>>
>>http://ads.osdn.com/?ad_id=7637&alloc_id=16865&op=click
>>    
>>
>>>_______________________________________________
>>>Assp-user mailing list
>>>[hidden email]
>>>      
>>>
>>https://lists.sourceforge.net/lists/listinfo/assp-user
>>    
>>
>>>
>>>
>>>      
>>>
>>
>>
>>    
>>
>-------------------------------------------------------
>  
>
>>This SF.net email is sponsored by: Splunk Inc. Do
>>you grep through log files
>>for problems?  Stop!  Download the new AJAX search
>>engine that makes
>>searching your log files as easy as surfing the
>>web.  DOWNLOAD SPLUNK!
>>
>>    
>>
>http://ads.osdn.com/?ad_id=7637&alloc_id=16865&op=click
>  
>
>>_______________________________________________
>>Assp-user mailing list
>>[hidden email]
>>
>>    
>>
>https://lists.sourceforge.net/lists/listinfo/assp-user
>  
>
>
>
>__________________________________________________
>Do You Yahoo!?
>Tired of spam?  Yahoo! Mail has the best spam protection around
>http://mail.yahoo.com 
>
>
>-------------------------------------------------------
>This SF.net email is sponsored by: Splunk Inc. Do you grep through log files
>for problems?  Stop!  Download the new AJAX search engine that makes
>searching your log files as easy as surfing the  web.  DOWNLOAD SPLUNK!
>http://ads.osdn.com/?ad_id=7637&alloc_id=16865&op=click
>_______________________________________________
>Assp-user mailing list
>[hidden email]
>https://lists.sourceforge.net/lists/listinfo/assp-user
>
>  
>



-------------------------------------------------------
This SF.net email is sponsored by: Splunk Inc. Do you grep through log files
for problems?  Stop!  Download the new AJAX search engine that makes
searching your log files as easy as surfing the  web.  DOWNLOAD SPLUNK!
http://ads.osdn.com/?ad_id=7637&alloc_id=16865&op=click
_______________________________________________
Assp-user mailing list
[hidden email]
https://lists.sourceforge.net/lists/listinfo/assp-user
Reply | Threaded
Open this post in threaded view
|

Re: Virus Scanning Options?

Ced Paine
In reply to this post by Ken Post
Is anyone else still using John Hanna's tuned.db, or is that also now
out-of-date? Its timestamp is still regularly updated on the assp site.

Ced


[hidden email] on Friday, December 16, 2005 at 6:48 PM
-0500 wrote:

>Hi All-
>
>I've been a happy administrator of ASSP 1.0.9 running
>on a Windows 2000 server for a while now for a small
>school.  I finally might have the time to update, and
>I really want to, mostly for the anti-virus
>functionality.
>
>I'm a bit discouraged by many of the posts here about
>clam av and the hashes not being updated any more.  Is
>there an alternative?
>
>I know antivirus isn't a priority, but has there been
>any exploration of using a module like ClamAV::Client,
>File::Scan::ClamAV, or Mail::ClamAV to scan some kind
>of temporary file?  It would be an expensive
>operation, but might be workable.  I envision having
>ASSP invoke the external module's scanning funciton
>only if an attachment is found in a message.  I have
>no idea if it's possible to scan a scalar using these
>modules or if a temp file would need to be saved.  I
>don't have the programming skills necessary to explore
>any of this.
>
>Any other suggestions for a SINGLE box, windows 2000
>server, running ASSP and IPlanet Messaging Server?  I
>might be able to add a low end linux box to the mix if
>that would make a difference.
>
>Thanks
>Ken
>
>
>__________________________________________________
>Do You Yahoo!?
>Tired of spam?  Yahoo! Mail has the best spam protection around
>http://mail.yahoo.com 
>
>
>-------------------------------------------------------
>This SF.net email is sponsored by: Splunk Inc. Do you grep through log
>files
>for problems?  Stop!  Download the new AJAX search engine that makes
>searching your log files as easy as surfing the  web.  DOWNLOAD SPLUNK!
>http://ads.osdn.com/?ad_id=7637&alloc_id=16865&op=click
>_______________________________________________
>Assp-user mailing list
>[hidden email]
>https://lists.sourceforge.net/lists/listinfo/assp-user




-------------------------------------------------------
This SF.net email is sponsored by: Splunk Inc. Do you grep through log files
for problems?  Stop!  Download the new AJAX search engine that makes
searching your log files as easy as surfing the  web.  DOWNLOAD SPLUNK!
http://ads.osdn.com/?ad_id=7637&alloc_id=16865&op=click
_______________________________________________
Assp-user mailing list
[hidden email]
https://lists.sourceforge.net/lists/listinfo/assp-user
Reply | Threaded
Open this post in threaded view
|

RE: Virus Scanning Options?

Ged West
In reply to this post by Ken Post
Yes I use it I assumed it was still being updated. I have not heard
otherwise.

-----Original Message-----
From: [hidden email]
[mailto:[hidden email]] On Behalf Of Ced Paine
Sent: Friday, December 23, 2005 9:56 AM
To: [hidden email]
Cc: [hidden email]
Subject: Re: [Assp-user] Virus Scanning Options?

Is anyone else still using John Hanna's tuned.db, or is that also now
out-of-date? Its timestamp is still regularly updated on the assp site.

Ced


[hidden email] on Friday, December 16, 2005 at 6:48 PM
-0500 wrote:
>Hi All-
>
>I've been a happy administrator of ASSP 1.0.9 running on a Windows 2000

>server for a while now for a small school.  I finally might have the
>time to update, and I really want to, mostly for the anti-virus
>functionality.
>
>I'm a bit discouraged by many of the posts here about clam av and the
>hashes not being updated any more.  Is there an alternative?
>
>I know antivirus isn't a priority, but has there been any exploration
>of using a module like ClamAV::Client, File::Scan::ClamAV, or
>Mail::ClamAV to scan some kind of temporary file?  It would be an
>expensive operation, but might be workable.  I envision having ASSP
>invoke the external module's scanning funciton only if an attachment is

>found in a message.  I have no idea if it's possible to scan a scalar
>using these modules or if a temp file would need to be saved.  I don't
>have the programming skills necessary to explore any of this.
>
>Any other suggestions for a SINGLE box, windows 2000 server, running
>ASSP and IPlanet Messaging Server?  I might be able to add a low end
>linux box to the mix if that would make a difference.
>
>Thanks
>Ken
>
>
>__________________________________________________
>Do You Yahoo!?
>Tired of spam?  Yahoo! Mail has the best spam protection around
>http://mail.yahoo.com
>
>
>-------------------------------------------------------
>This SF.net email is sponsored by: Splunk Inc. Do you grep through log
>files for problems?  Stop!  Download the new AJAX search engine that
>makes searching your log files as easy as surfing the  web.  DOWNLOAD
>SPLUNK!
>http://ads.osdn.com/?ad_id=7637&alloc_id=16865&op=click
>_______________________________________________
>Assp-user mailing list
>[hidden email]
>https://lists.sourceforge.net/lists/listinfo/assp-user




-------------------------------------------------------
This SF.net email is sponsored by: Splunk Inc. Do you grep through log
files for problems?  Stop!  Download the new AJAX search engine that
makes searching your log files as easy as surfing the  web.  DOWNLOAD
SPLUNK!
http://ads.osdn.com/?ad_id=7637&alloc_id=16865&op=click
_______________________________________________
Assp-user mailing list
[hidden email]
https://lists.sourceforge.net/lists/listinfo/assp-user


-------------------------------------------------------
This SF.net email is sponsored by: Splunk Inc. Do you grep through log files
for problems?  Stop!  Download the new AJAX search engine that makes
searching your log files as easy as surfing the  web.  DOWNLOAD SPLUNK!
<a href="http://ads.osdn.com/?ad_idv37&alloc_id865&op=click">http://ads.osdn.com/?ad_idv37&alloc_id865&op=click
_______________________________________________
Assp-user mailing list
[hidden email]
https://lists.sourceforge.net/lists/listinfo/assp-user
Reply | Threaded
Open this post in threaded view
|

RE: Virus Scanning Options?

Brian Neufeld
Still using it the tuned.db here, too.

A while back I had asked what kind of pruning he was doing to the master
db files so that those of us who wanted could perform that step locally
on known-good direct-from-clam DBs.  Unfortunately, this request was not
fruitful.

~Brian

> -----Original Message-----
> From: [hidden email]
> [mailto:[hidden email]] On Behalf Of Ged West
> Sent: Friday, December 23, 2005 10:30 AM
> To: [hidden email]
> Subject: RE: [Assp-user] Virus Scanning Options?
>
>
> Yes I use it I assumed it was still being updated. I have not
> heard otherwise.
>
> -----Original Message-----
> From: [hidden email]
> [mailto:[hidden email]] On Behalf Of Ced Paine
> Sent: Friday, December 23, 2005 9:56 AM
> To: [hidden email]
> Cc: [hidden email]
> Subject: Re: [Assp-user] Virus Scanning Options?
>
> Is anyone else still using John Hanna's tuned.db, or is that
> also now out-of-date? Its timestamp is still regularly
> updated on the assp site.
>
> Ced
>
>
> [hidden email] on Friday, December 16, 2005
> at 6:48 PM -0500 wrote:
> >Hi All-
> >
> >I've been a happy administrator of ASSP 1.0.9 running on a
> Windows 2000
>
> >server for a while now for a small school.  I finally might have the
> >time to update, and I really want to, mostly for the anti-virus
> >functionality.
> >
> >I'm a bit discouraged by many of the posts here about clam av and the
> >hashes not being updated any more.  Is there an alternative?
> >
> >I know antivirus isn't a priority, but has there been any exploration
> >of using a module like ClamAV::Client, File::Scan::ClamAV, or
> >Mail::ClamAV to scan some kind of temporary file?  It would be an
> >expensive operation, but might be workable.  I envision having ASSP
> >invoke the external module's scanning funciton only if an
> attachment is
>
> >found in a message.  I have no idea if it's possible to scan a scalar
> >using these modules or if a temp file would need to be
> saved.  I don't
> >have the programming skills necessary to explore any of this.
> >
> >Any other suggestions for a SINGLE box, windows 2000 server, running
> >ASSP and IPlanet Messaging Server?  I might be able to add a low end
> >linux box to the mix if that would make a difference.
> >
> >Thanks
> >Ken
> >


-------------------------------------------------------
This SF.net email is sponsored by: Splunk Inc. Do you grep through log files
for problems?  Stop!  Download the new AJAX search engine that makes
searching your log files as easy as surfing the  web.  DOWNLOAD SPLUNK!
<a href="http://ads.osdn.com/?ad_idv37&alloc_id865&op=click">http://ads.osdn.com/?ad_idv37&alloc_id865&op=click
_______________________________________________
Assp-user mailing list
[hidden email]
https://lists.sourceforge.net/lists/listinfo/assp-user