Supported Antivirus Consideration & Question

Request and discuss new features you would like to have.
Post Reply
nicola.piazzi
Posts: 232
Joined: 23 Apr 2015 09:45

Supported Antivirus Consideration & Question

Post by nicola.piazzi » 10 Jan 2019 09:18

I worked to find supported antivirus that can be used with EFA MailScanner and found that we have these 3 products

1 Clam that is included
2 Sophos 4 Linux that is free
3 Esets that have little fee about 100$ year

Clam is invoked using daemon that already have patterns in memory, so it doesnt use relevant cpu to scan messages
Sophos uses about 7 secs of cpu to load patterns for each message to scan
Esets uses about 4 secs of cpu to load patterns for each message to scan

So I found that using only Clam machine is very reactive and able to process tons of messages / day

Now it will be useful to find a daemon mode like Clam to have preloaded pattern for other AV

Sophos seems to be impossible, perhaps this can be done by sophossavi that seems no more working (32 bit arch)
Esets can be dome using esets_cli instead esets_scan, but it isnt support by MailScanner wrappers.

Another way can be to scan ONLY messages that have attachments, but I havent found a directive to do this
Someone have an idea about this ?

henk
Posts: 227
Joined: 14 Dec 2015 22:16
Location: Netherlands
Contact:

Re: Supported Antivirus Consideration & Question

Post by henk » 10 Jan 2019 11:28

Hi Nicola,

let's hope Shawn can manage to spend time to work on the new EFA/Mailwatch/MailsScanner, as it's a hell of off a job and there must be somesort of balance between EFA, work, sleep, eat, family.
Take a look at the near future: https://github.com/MailScanner/v5/tree/ ... er/wrapper

P.S.
I temporarily disabled Sophos, since it's disfunctional since Dec 2018, and you mentioned AVG had the same issue.

User avatar
shawniverson
Posts: 2658
Joined: 13 Jan 2014 23:30
Location: Rushville, Indiana, USA
Contact:

Re: Supported Antivirus Consideration & Question

Post by shawniverson » 12 Jan 2019 01:52

henk wrote:
10 Jan 2019 11:28
Hi Nicola,

let's hope Shawn can manage to spend time to work on the new EFA/Mailwatch/MailsScanner, as it's a hell of off a job and there must be somesort of balance between EFA, work, sleep, eat, family.
Balance? :lol: :lol: :lol: :lol:
Version eFa 4.0.0 RC1 now available in testing repo. Come join us in advancing eFa!

Post Reply