documentation:avfilter avfilter_sig avfilter.conf

Yet another ClamAV filter for Courier-MTA


current--> v3.4 Thu 12 Jan 2017 16:01:51 [gpg signature] [announce] [rel.notes]
v3.3 Fri 09 Jan 2015 11:01:06 [gpg signature] [announce] [rel.notes]
v3.2 Wed 05 Nov 2014 17:11:31 [gpg signature] [announce] [rel.notes]
v3.1 Tue 02 Sep 2014 15:09:19 [gpg signature] [rel.notes]
v3.0 Sun 27 Jul 2014 09:07:49 [gpg signature] [announce]



There are some other outstanding ClamAV filters for Courier-MTA out there:

Those three projects started in 2003-2004, more or less in the order listed. At that time, avfilter v.1 used Sophos as a backend scanner. I thought an Open Source anti-virus package could not be workable, because of the total committment required to update virus signatures. My bad. In fact, distributing Sophos' include files had always been problematic, and then the whole interface was apparently discontinued in April 2014; avfilter v.2 is there if anyone feels like porting it. Meanwhile ClamAV, under the aegis of Cisco, is getting better and better. Eric Raymond's prophecies seem to be coming true...

Besides swapping backend engine, rewriting avfilter included a farewell to MIME parsing, a vestige of the time when scanners didn't know about email. Nowadays, scanners deal more and more with phishing, an arena disputed between anti-virus and anti-spam. Since ClamAV is an open product, organizations can build signature databases to target various kinds of malware. Sanesecurity do a good job at maintaining, distributing, and classifying some. The average rate of false positives is part of their classification. Avfilter can be configured so as to allow certain infected messages to pass, with an added header field spelling the name(s) of the malware detected therein. See the docs for details.



avfilter is free software: you can redistribute it and/or modify it under the terms of the GNU General Public Licence as published by the Free Software Foundation, either version 3 of the License, or (at your option) any later version.

avfilter is distributed in the hope that it will be useful, but WITHOUT ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public Licence for more details.

Copyright (C) 2014-2017 Alessandro Vesely