Hosting Provided By

Re: Clamav+phishing

From: McDonald, Dan <Dan.McDonald(at)austinenergy.com>
Date: Thu Jul 03 2008 - 09:04:55 EDT

On Thu, 2008-07-03 at 13:46 +0100, Sujit Acharyya-Choudhury wrote:
> Dear All,
> We are using clamAV 0.93.1 as our virus checker on SLES9 using exim as
> MTA. It catches lot of virus+phishing. However, lot of phishing
> mails are recently getting through.

Are you using the SANESECURITY signatures in addition to the official ones? This week I caught 89 phish using the Sanesecurity signatures, 3 using MSRBL, and 11 with the official ones. Low numbers, to be sure, but greylisting kills off most of them to begin with.

-- 
Daniel J McDonald, CCIE #2495, CISSP #78281, CNX
Austin Energy
http://www.austinenergy.com

application/pgp-signature attachment: This is a digitally signed message part

Received on Thu Jul 3 09:06:23 2008

This message: [ Message body ]
Next message: Karsten Bräckelmann: "Re: Can you help me with this filter"
Previous message: Duane Hill: "Re: Clamav+phishing"
In reply to: Sujit Acharyya-Choudhury: "Clamav+phishing"

Contemporary messages sorted: [ By Date ] [ By Thread ] [ By Subject ] [ By Author ] [ By messages with attachments ]

This archive was generated by hypermail 2.1.8 : Tue Sep 02 2008 - 21:43:51 EDT