Slashdot Mirror


Best Antivirus Options for a Mailserver?

CSIP asks: "I am setting up a small mailserver, with ~500 users, across 80 domains. I'm planning to use qmail-scanner and an antivirus scanner to block incoming viruses. I would prefer to use ClamAV, however I've read conflicting reports on its effectiveness. The commercial scanners appear to detect 99.X% however they are licensed per-user, which at 500+ users becomes quite the annual bill. What is everyone's experience with ClamAV? Are their other commercial scanners that allow you to license on a per-server basis?" The best indicator of quality for a virus scanner is the information in its virus database. How do ClamAV's virus definitions compare to commercial scanners, like McAfee's?

2 of 91 comments (clear)

  1. You'd be better off... by Ophidian+P.+Jones · · Score: 3, Informative

    Using a fuzzy checksum tool like DCC to block similarly worded messages. It will catch both spams and viruses.

    Most viruses spread so quickly that the AV tools' databases are inevitably out of date and ineffective.

  2. ClamAV vs. Commercial by OneFix+at+Work · · Score: 4, Informative

    There's a good post detailing the ClamAV vs. Commercial question...

    To paraphrase, ClamAV's database is generally at least a few days ahead of sophos and sometimes weeks...

    ClamAV was written from the ground-up to do mail scanning, so it should be better than commercial scanners that try to be everything to everyone...