[prev in list] [next in list] [prev in thread] [next in thread] 

List:       qmail-scanner-general
Subject:    Re: [Qmail-scanner-general]
From:       "Arno Slatius" <arno () slatius ! nl>
Date:       2009-02-17 9:00:50
Message-ID: 002701c990de$3afc1bf0$b0f453d0$ () nl
[Download RAW message or body]

Hello again,

RC2 installs perfectly. One last change though; Line 1789 in
qmail-scanner-queue.template should probably change to
	open(FP,"$fpscan_binary --version|")||die "failed to call
$fpscan_binary --version - $!";

Calling it with '\?', as is was, does work. But that actually starts the
scanner on a path which it can't find. It does show it's version but I'm not
sure that you can depend on it to keep doing that.

I respect the design choice on starting Clamav first. I like the argument
for it and I actually left it that way for the time being to see how Clamav
performs.

Then a last note on Thomas Charvats email;  
I agree that the scanning time for F-prot is quite a bit more than Clamav.
For me F-prot averages 93 times slower than Clamav over the last year
(averages from cacti graphs). But on the other hand Spamasssassin is even
worse being 2.5 times as slow as F-Prot and ~230 times slower than Clamav. I
haven't had any issues with it getting stuck but my servers aren't that high
volume.

I would be interested in statistics on other scanners though if anyone would
like to share them. Perhaps Jason would like to share some of his statistics
on the (echo 'First M. Last'; cat SYSDEF) outputs on what scanners are
popular??

Cheers,
Arno Slatius



-----Original Message-----
From: Jason Haar [mailto:Jason.Haar@trimble.co.nz] 
Sent: maandag 16 februari 2009 23:20
To: qmail-scanner-general@lists.sourceforge.net
Subject: Re: [Qmail-scanner-general] [Qmail-scanner-announce]
qmail-scanner-2.06-rc1 (new f-prot support)

Arno Slatius wrote:
> Hi,
>
> First of all, two enthusiastic thumbs up for including support for F-Prot
6.
> I installed the new scanner on a backup MX for now. I do have some issues
> which are fixable:
>
> The installer keeps 'detecting' the binary vars incorrect. I end up with
> this:
>     my $fpscand_binary='/usr/local/sbin/fpscan';
>     my $fpscan_binary='';
>
>   

OK - fixed.

> To me however this is not logical: I'd like the scanner which I paid good
> money for to be called first. Basically I want to know whether or not it
is
> still worth it's money; ClamAV should not catch anything anymore if the
> first called F-Prot scanner is doing its work properly.
> So the question realy is; is it possible for the installer to maintain the
> order in which the scanners are listed in the --scanner var or will I have
> to continue to edit output @scanner_array after each install?
>   
Hah! Unfortunately you've hit a design decision I made. I designed it to
always put clamAV is front for exactly the same reason as yours - but in
reverse. I wanted to know how many viruses clamAV missed compared with
the commercial scanners. If it was  <10%, then it implies we are paying
a lot of money for AVs that aren't as good as a free product :-)
However, I'll see what I can do in the next release (2.07).

I have uploaded qmail-scanner-2.06-rc2 with the fixed fpscan detection.
Can you let me know if that fixes F-prot support?



-- 
Cheers

Jason Haar
Information Security Manager, Trimble Navigation Ltd.
Phone: +64 3 9635 377 Fax: +64 3 9635 417
PGP Fingerprint: 7A2E 0407 C9A6 CAF6 2B9F 8422 C063 5EBB FE1D 66D1


----------------------------------------------------------------------------
--
Open Source Business Conference (OSBC), March 24-25, 2009, San Francisco, CA
-OSBC tackles the biggest issue in open source: Open Sourcing the Enterprise
-Strategies to boost innovation and cut costs with open source participation
-Receive a $600 discount off the registration fee with the source code: SFAD
http://p.sf.net/sfu/XcvMzF8H
_______________________________________________
Qmail-scanner-general mailing list
Qmail-scanner-general@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/qmail-scanner-general


------------------------------------------------------------------------------
Open Source Business Conference (OSBC), March 24-25, 2009, San Francisco, CA
-OSBC tackles the biggest issue in open source: Open Sourcing the Enterprise
-Strategies to boost innovation and cut costs with open source participation
-Receive a $600 discount off the registration fee with the source code: SFAD
http://p.sf.net/sfu/XcvMzF8H
_______________________________________________
Qmail-scanner-general mailing list
Qmail-scanner-general@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/qmail-scanner-general
[prev in list] [next in list] [prev in thread] [next in thread]