AW: [Mimedefang] Nod32 integration on Mimedefang

Martin Bene martin.bene at icomedias.com
Sun Jan 29 04:55:32 EST 2006


Hi Giovanni,

> Today I wrote a simple patch to mimedefang.pl to run nod32 
> antivirus on my Linux box.
> I don't know if someone did the same, but I can't find 
> anything similar on the web

> I use sendmail with libmilter, mimedefang2.54 and the last version of 
> nod32 (the eval version) for Linux (downloaded from home page)
> 
> I installed nod32 in /opt directory and I made a sym link 
> /opt/nod32 to 
> /opt/nod32-1.04-1_101 dir

Just a few comments on this since I tried looking into nod32 just a few
days ago:

Looking at the website, I'd expect version 2.51 to be most current, not
1.0.4? On the other hand, trial versions for linux don't seem to be
freely available any longer.

The manual for 2.5 does list a feature that would make nod32 interesting
for use in scanning email: there's now a scanner daemon and commandline
client for the daemon (/usr/sbin/nod32d, /usr/bin/nod32cli).

While on the topic: what other scanners work with a daemon/commandline
system? I'd expect these to be able to handle significantly higher
volumes of mail compared to "stand-alone" commandline scanners. 

Some datapoints I've got so far:
* Clamav has a daemon (and a fairly extensive history of security
problems) 
* kaspersky version 4 had a daemon/client config that worked quite well.
* kaspersky 5 daemon client was so broken that I stoped using it
(commandline client didn't scan archives, didn't scan mailbox format and
returned result codes based just on the last file scanned, disregarding
previous results) - has this been fixed since?
* f-prot seems to have a supported daemon - haven't tried that yet.

Info on other scanners that you're happy with are apreciated :-)

Thanks, Martin




More information about the MIMEDefang mailing list