Final action is up to you, but generally you'll deny any mail that's detected as having a virus. | ClamAV An Introduction SANOV VI IP Services Workshop July 20, 2005 Thimphu, Bhutan Hervey Allen What is it? From Clam AntiVirus is a GPL anti-virus toolkit for UNIX. The main purpose of this software is the integration with mail servers (attachment scanning). The package provides a flexible and scalable multi-threaded daemon, a command line scanner, and a tool for automatic updating via Internet. The programs are based on a shared library distributed with the Clam AntiVirus package, which you can use with your own software. Most importantly, the virus database is kept up to date . ClamAV – Key Features Based on: Command-line scanner Multi-threaded daemon milter interface for sendmail Database updater with support for digital signatures Virus scanner C library On-access scanning (Linux and FreeBSD) Detection of over 35000 viruses, worms and trojans Built-in support for RAR (), Zip, Gzip, Bzip2, Tar, MS OLE2, MS | ClamAV An Introduction SANOV VI IP Services Workshop July 20, 2005 Thimphu, Bhutan Hervey Allen What is it? From Clam AntiVirus is a GPL anti-virus toolkit for UNIX. The main purpose of this software is the integration with mail servers (attachment scanning). The package provides a flexible and scalable multi-threaded daemon, a command line scanner, and a tool for automatic updating via Internet. The programs are based on a shared library distributed with the Clam AntiVirus package, which you can use with your own software. Most importantly, the virus database is kept up to date . ClamAV – Key Features Based on: Command-line scanner Multi-threaded daemon milter interface for sendmail Database updater with support for digital signatures Virus scanner C library On-access scanning (Linux and FreeBSD) Detection of over 35000 viruses, worms and trojans Built-in support for RAR (), Zip, Gzip, Bzip2, Tar, MS OLE2, MS Cabinet files, MS CHM (Compressed HTML) Built-in support for mbox, Maildir and raw mail files ClamAV quick facts Virus database is updated (average) multiple times per week. End-users can submit samples directly: Will detect phishing as malware if you wish. freshclam daemon runs to keep virus definition up-to-date. ClamAV mailing list available: Supported platforms OSes Linux Solaris FreeBSD OpenBSD NetBSD AIX Mac OS X Cygwin B20 Hardware Intel Alpha Sparc Cobalt MIPS boxes PowerPC RISC 6000 Where does it fit with Exim? Check for viruses after you've done: Blacklists Whitelists Content-based solution (like SpamAssassin) Final action is up to you, but generally you'll deny any mail that's detected as having a virus. You'll do this in the acl_check_data ACL in the Exim configure file. More resources ClamAV online specimen scanner: ClamAV main site: The ClamAV FAQ: The AmaViS (A Mail Virus Scanner) Project. An alternative to ClamAV:
