[ctw] Re: Planning to move to ASSP
- From: Tom Shaw <tshaw@xxxxxxxx>
- To: ctw@xxxxxxxxxxxxx
- Date: Thu, 12 Mar 2009 19:48:16 -0400
At 10:27 AM +1100 3/13/09, Nicholas Orr wrote:
On 13/03/2009, at 7:02 AM, Tom Shaw wrote:
I love ASSP and that with ClamAV has been GREAT.
This is one thing I don't get : What are people scanning for virus
in? There is an option in ASSP to block attachments, so you're
automatically blocking all of the various executable file types.
What sorts of files are left that need to be virus scanned?
Nick,
Well, I have ClamAV check pdf's (new viruses there), jpegs (old
viruses there), and all compressed files, as well as attachments that
are not the usual subjects and shell scripting attacks,and unix
executables.
Additionally, I have clamav setup for phish detection and also use
winnow on steroids to identify numerous malware, phish and spam
emails via clamav.
Tom
--
Tom Shaw - Chief Engineer, OITC
<tshaw at oitc.com>, http://www.oitc.com/ local wx: http://www.oitc.com/weather
US Phone Numbers: 321-984-3714, 321-729-6258(fax),
321-258-2475(cell/voice mail,pager)
Text Paging: http://www.oitc.com/Pager/sendmessage.html
AIM/iChat: trshaw@xxxxxxx
Fish more and Live longer
Circle The Wagons
manage: //www.freelists.org/list/ctw
post: mailto:ctw@xxxxxxxxxxxxx
unsubscribe: mailto:ctw-request@xxxxxxxxxxxxx?subject=unsubscribe
search: //www.freelists.org/archives/ctw
faq: //www.freelists.org/wiki/the_faq
Other related posts:
