Re: [Snort-users] Block

--=-3Ya+KZvtlQjz4VbdtzSL
Content-Type: text/plain
Content-Transfer-Encoding: quoted-printable

On Mon, 2004-02-16 at 16:23, Paul Schmehl wrote:
> I would like to add a caution to this. If you are going to use clamav, d=
o=20
> not depend on it as your only gateway defense. Use it as part of a more=20
> complete strategy. Recent testing by an authoritative source shows that=20
> clamav only catches about 50% of the in-the-wild viruses. (This is reall=
y=20
> off topic for snort, so if you want to discuss the details, email me off=20
> list.)



Uhm, I'm not sure about that, Paul. I've heard from folks that caught
new viruses with Clamav before Norton got it. Matter the fact, just
recently there was a posting somewhere (I'm sure you've seen that since
you are on most lists) that showed that clamav had a signature for it
first.

I have nothing but pleasant experience with clamav. I can't believe how
well it works for being OpenSource.

Cheers,
Frank


--=-3Ya+KZvtlQjz4VbdtzSL
Content-Type: application/pgp-signature; name=signature.asc
Content-Description: This is a digitally signed message part

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.2.4 (FreeBSD)

iD8DBQBAMUhYJjGc5ftAw8wRAs9QAJ42yK4m15J8+JPwttuNOd xsCAhCWgCgqorq
bbe86OB/QdYByHlaQ5sAfrI=
=AFO4
-----END PGP SIGNATURE-----

--=-3Ya+KZvtlQjz4VbdtzSL--



-------------------------------------------------------
SF.Net is sponsored by: Speed Start Your Linux Apps Now.
Build and deploy apps & Web services for Linux with
a free DVD software kit from IBM. Click Now!
http://ads.osdn.com/?ad_id=1356&alloc_id=3438&op=click
_______________________________________________
Snort-users mailing list
Snort-users@lists.sourceforge.net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/...fo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.p...st=snort-users