[ctw] Re: Planning to move to ASSP

  • From: Tom Shaw <tshaw@xxxxxxxx>
  • To: ctw@xxxxxxxxxxxxx
  • Date: Thu, 12 Mar 2009 21:08:22 -0400

Yes you can use it with ASSP directly but we have a new feed that iworks with clamav diectly that does much more in spam, phish and malware. As soon as I get the clamav install finished I'll layout instructions and you can just use you subscriptions with ASSP/ClamAV


Tom

At 7:58 PM -0500 3/12/09, webcatalog@xxxxxxx wrote:
Tom I've always used Winnow for rules with CA, does winnow still have a place, in the new ASSP?

On Mar 12, 2009, at 6:48 PM, Tom Shaw wrote:

At 10:27 AM +1100 3/13/09, Nicholas Orr wrote:
On 13/03/2009, at 7:02 AM, Tom Shaw wrote:

I love ASSP and that with ClamAV has been GREAT.

This is one thing I don't get : What are people scanning for virus in? There is an option in ASSP to block attachments, so you're automatically blocking all of the various executable file types. What sorts of files are left that need to be virus scanned?


Nick,

Well, I have ClamAV check pdf's (new viruses there), jpegs (old viruses there), and all compressed files, as well as attachments that are not the usual subjects and shell scripting attacks,and unix executables.

Additionally, I have clamav setup for phish detection and also use winnow on steroids to identify numerous malware, phish and spam emails via clamav.

Tom

--
Tom Shaw - Chief Engineer, OITC
<tshaw at oitc.com>, http://www.oitc.com/ local wx: http://www.oitc.com/weather US Phone Numbers: 321-984-3714, 321-729-6258(fax), 321-258-2475(cell/voice mail,pager)
Text Paging: http://www.oitc.com/Pager/sendmessage.html
AIM/iChat: trshaw@xxxxxxx

Fish more and Live longer
Circle The Wagons
manage: //www.freelists.org/list/ctw post: mailto:ctw@xxxxxxxxxxxxx
unsubscribe: mailto:ctw-request@xxxxxxxxxxxxx?subject=unsubscribe
search: //www.freelists.org/archives/ctw
faq: //www.freelists.org/wiki/the_faq

Circle The Wagons
manage: //www.freelists.org/list/ctwpost: mailto:ctw@xxxxxxxxxxxxx
unsubscribe: mailto:ctw-request@xxxxxxxxxxxxx?subject=unsubscribe
search: //www.freelists.org/archives/ctw
faq: //www.freelists.org/wiki/the_faq


--
Tom Shaw - Chief Engineer, OITC
<tshaw at oitc.com>, http://www.oitc.com/ local wx: http://www.oitc.com/weather
US Phone Numbers: 321-984-3714, 321-729-6258(fax), 321-258-2475(cell/voice mail,pager)
Text Paging: http://www.oitc.com/Pager/sendmessage.html
AIM/iChat: trshaw@xxxxxxx

Fish more and Live longer
Circle The Wagons
manage: //www.freelists.org/list/ctw post: mailto:ctw@xxxxxxxxxxxxx
unsubscribe: mailto:ctw-request@xxxxxxxxxxxxx?subject=unsubscribe
search: //www.freelists.org/archives/ctw
faq: //www.freelists.org/wiki/the_faq

Other related posts: