[isp-tech] Re: Antivirus on UNIX question

[Len Conrad <LConrad@...]

> > No!  Imagine an ILOVEYOU storm.  Would you want to inform your recipient,
> > 1000 times/day, that you blocked a virus to him?  only admin and sender are
> > informed.
>
> Ever have any experiences with false positives?
no with infections.

>  We have a lot of business
> customers, and I would hate to have angry customers because we were dumping
> their word document with all kinds of fancy macros. If you inform the sender,
> how did you handle Klez, with the forged From: headers?
forged @sender.domain is a problem in all cases.

> You said you use Kapersky. I have heard some bad things about support
none

> and documentation
not too bad.

> , as well as configuration. Ever have any problems?
no, I set it up and forget it.

> Do you do
> virus scanning for everyone, or make it opt-in/opt-out?
At our shop, it's for everyone.

At ISP's where I set it up, the fbsd/postfix/AV dedicated box is between 
the MX boxes and the mailbox server.  So the MX boxes can route incoming 
mail per-domain to either the AV box or directly to the mailbox 
server.  Some ISP's make AV scanning an $option.

I'm not agitating for Kasperksy at all, just relating my experience.  There 
are plenty of good ones around.   $$$ can be a big factor.

Len