On 8/10/07, Pfost William B <William.Pfost (at) ci.irs (dot) gov [email concealed]> wrote:
> What I've noticed so far is that it does not appear to scan incoming
> email in real time like the Symantec product for Macs claims to do. It
> does seem to be able to find potentially harmful objects for the Windows
> world, which could be sent by a Mac.

I installed it on OS X Server a couple of years ago, and found it to
be both effective and relatively light in the load it imposed. The
standard at the site was Sophos, which was noticeably "heavy" on our older
Macs; considering that the only reason we were running antivirus was
to protect the Windows machines, that burden was widely* resented by
the Mac users.

*And properly so, in my opinion.

Test results posted this week say Clamav is one of only three products
that detected 100% of a suite of (known!) viruses. Given that these
were known threats, less than 100% performance seems unacceptable.

I currently run Clamav on my Linux servers by way of amavis-new, which
handles the automation issues, on both inbound and outbound mail.
Inbound, of course, to protect my
Windows-using clients; but outbound as well, to make sure that when
(not if...) one of those Windows-using clients gets infected, they do
not get my service blacklisted.

One possible negative is that Clamav exceeds its authority to the
extent of classifying "phish" as viruses; only recently has it been
possible to turn this off. Some of my peers were upset about it, as
they prefer to distinguish between "threats to machines" vs. "threats
to naive users."

[ reply ]